$ rpki-client -vvf rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft File: D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft (raw, json) Hash identifier: 1k4ZkbL8+u/wLaGQHU6LLbSQ7BB7x/NirFcsd4ysjZM= Subject key identifier: BE:95:EA:AD:FC:86:8A:6C:DF:BC:06:F5:F5:C0:58:62:8C:AE:D0:B1 Authority key identifier: D4:1E:F4:7F:23:FE:51:C0:A3:8F:09:E4:EB:23:30:83:B3:00:FA:F6 Certificate issuer: /CN=D41EF47F23FE51C0A38F09E4EB233083B300FAF6 Certificate serial: 2044554B0148428E70160A65E9BA685F7CA183C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 19:24:24 +0000 Manifest this update: Fri 19 Jun 2026 19:19:24 +0000 Manifest next update: Sat 20 Jun 2026 21:37:24 +0000 Files and hashes: 1: D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl (hash: SGbJzmeJ7FgKYco3J6iFafPVQwjsc5KYngmi2Z52mYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 21:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:44:55:4b:01:48:42:8e:70:16:0a:65:e9:ba:68:5f:7c:a1:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D41EF47F23FE51C0A38F09E4EB233083B300FAF6 Validity Not Before: Jun 19 19:19:24 2026 GMT Not After : Jun 20 21:37:24 2026 GMT Subject: CN=BE95EAADFC868A6CDFBC06F5F5C058628CAED0B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1a:08:a6:43:1c:93:fa:3c:d9:ed:47:19:62: 6a:eb:d5:c9:39:72:f0:bd:f3:7a:39:92:45:e2:57: 5b:a6:91:65:38:fb:03:a3:d4:e1:70:30:36:e3:e1: d1:9a:54:85:3d:8c:6d:23:30:57:5b:a9:3e:2e:a3: e1:a7:ab:75:7b:9e:8d:af:d9:29:a6:a4:5c:8f:a9: ac:d9:43:28:f3:9d:f1:d2:4a:b1:99:8e:bd:26:7d: 30:7b:e3:d2:89:d4:04:ae:34:49:df:3d:2e:c5:df: a4:de:44:4a:14:6b:bf:db:73:e9:04:55:54:33:b6: 72:91:3d:d4:bc:e6:d2:57:bf:98:84:d3:f5:75:af: 39:b8:07:93:47:95:bc:be:81:e8:df:77:bf:7e:79: f2:6b:df:83:13:0b:73:ca:e8:75:32:d0:e9:34:ca: 88:9f:d1:35:58:ae:aa:75:99:0a:c6:89:5e:15:c0: bb:af:f6:76:b0:11:8e:c8:3a:cb:fe:b2:fb:43:80: 31:15:68:21:86:4e:ed:26:71:fc:a0:47:82:63:84: 7e:7d:c4:df:f8:af:8a:35:3e:3b:34:e5:15:c3:c8: 36:db:62:cb:59:db:68:7d:f7:5e:89:06:71:fa:de: 21:d0:a5:a4:8e:d6:77:e0:62:6a:9f:80:15:f0:2a: 11:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:95:EA:AD:FC:86:8A:6C:DF:BC:06:F5:F5:C0:58:62:8C:AE:D0:B1 X509v3 Authority Key Identifier: keyid:D4:1E:F4:7F:23:FE:51:C0:A3:8F:09:E4:EB:23:30:83:B3:00:FA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:54:9f:18:07:26:67:5d:93:80:a2:ef:eb:c0:08:1b:4f:0f: aa:43:ae:54:a4:bd:79:4e:0e:5c:f1:7c:f1:d4:95:72:5c:12: c1:91:10:8f:e8:6b:e6:22:e9:5b:e7:97:12:84:28:f3:d0:7c: 19:a2:07:ee:0b:c0:f3:99:8a:3d:23:a1:f4:fe:d3:f8:b1:2e: 3f:8f:62:80:ad:25:30:fb:fd:d6:38:75:5e:42:ec:7c:b7:73: 54:8f:86:57:27:fe:bb:af:62:75:1c:6b:44:77:0b:fd:e2:dc: e4:50:4c:ef:71:72:b6:50:a4:7d:aa:3a:7d:14:ea:86:91:18: b0:5c:1c:aa:a0:45:df:c5:bc:be:d9:9d:35:cc:79:9d:56:de: 33:e7:f8:42:64:f0:35:7c:f1:d5:c3:e6:e5:4b:68:89:0c:6a: 1e:96:0a:89:aa:68:83:fd:e9:cd:02:28:c3:fb:6d:f0:b5:e2: c9:77:e2:db:45:ad:3b:39:5a:0c:bb:8f:80:01:10:8a:40:cf: d8:5f:31:f7:f6:cb:f8:0a:e5:16:f7:3a:75:69:3e:56:ab:30: e0:c4:7a:35:1b:fa:e9:c8:00:93:83:e6:d5:85:d6:e4:ca:8e: b3:3e:ca:d1:f4:1b:5b:c2:f3:5f:b5:13:29:45:53:85:d5:a2: a2:22:3d:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIERVSwFIQo5wFgpl6bpoX3yhg8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQxRUY0N0YyM0ZFNTFDMEEzOEYwOUU0RUIyMzMwODNC MzAwRkFGNjAeFw0yNjA2MTkxOTE5MjRaFw0yNjA2MjAyMTM3MjRaMDMxMTAvBgNV BAMTKEJFOTVFQUFERkM4NjhBNkNERkJDMDZGNUY1QzA1ODYyOENBRUQwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyGgimQxyT+jzZ7UcZYmrr1ck5 cvC983o5kkXiV1umkWU4+wOj1OFwMDbj4dGaVIU9jG0jMFdbqT4uo+Gnq3V7no2v 2SmmpFyPqazZQyjznfHSSrGZjr0mfTB749KJ1ASuNEnfPS7F36TeREoUa7/bc+kE VVQztnKRPdS85tJXv5iE0/V1rzm4B5NHlby+gejfd79+efJr34MTC3PK6HUy0Ok0 yoif0TVYrqp1mQrGiV4VwLuv9nawEY7IOsv+svtDgDEVaCGGTu0mcfygR4JjhH59 xN/4r4o1Pjs05RXDyDbbYstZ22h9916JBnH63iHQpaSO1nfgYmqfgBXwKhFPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvpXqrfyGimzfvAb19cBYYoyu0LEwHwYDVR0j BBgwFoAU1B70fyP+UcCjjwnk6yMwg7MA+vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg1NDc3Y2UtMDcxNy00N2MwLTg3NjYtOGI5YmVjMGMwODZjLzAvRDQxRUY0N0Yy M0ZFNTFDMEEzOEYwOUU0RUIyMzMwODNCMzAwRkFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENDFFRjQ3RjIzRkU1MUMwQTM4RjA5RTRFQjIzMzA4M0IzMDBG QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg1NDc3Y2UtMDcxNy00N2MwLTg3 NjYtOGI5YmVjMGMwODZjLzAvRDQxRUY0N0YyM0ZFNTFDMEEzOEYwOUU0RUIyMzMw ODNCMzAwRkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdUnxgHJmddk4Ci7+vACBtPD6pDrlSkvXlO DlzxfPHUlXJcEsGREI/oa+Yi6VvnlxKEKPPQfBmiB+4LwPOZij0jofT+0/ixLj+P YoCtJTD7/dY4dV5C7Hy3c1SPhlcn/ruvYnUca0R3C/3i3ORQTO9xcrZQpH2qOn0U 6oaRGLBcHKqgRd/FvL7ZnTXMeZ1W3jPn+EJk8DV88dXD5uVLaIkMah6WComqaIP9 6c0CKMP7bfC14sl34ttFrTs5Wgy7j4ABEIpAz9hfMff2y/gK5Rb3OnVpPlarMODE ejUb+unIAJOD5tWF1uTKjrM+ytH0G1vC81+1EylFU4XVoqIiPfI= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:09 2026 by rpki-client