$ rpki-client -vvf rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft File: 3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft (raw, json) Hash identifier: eHTSTk5xEdqQfliPNziBgjWVSaiYMlGG3veNNF4dx3g= Subject key identifier: 68:1F:74:DB:01:31:FA:A5:F3:BC:D0:2A:96:CE:10:37:57:AA:A5:D7 Authority key identifier: 31:26:FC:86:C5:B0:75:41:73:EA:2F:94:CC:A9:C8:F9:A4:11:62:C4 Certificate issuer: /CN=3126FC86C5B0754173EA2F94CCA9C8F9A41162C4 Certificate serial: 4C7FD1C00259DBFB2FBD154668BBBEC9349B36F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 21:47:16 +0000 Manifest this update: Fri 19 Jun 2026 21:42:16 +0000 Manifest next update: Sat 20 Jun 2026 22:06:16 +0000 Files and hashes: 1: 3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl (hash: vcQ6/d2KzK/hgeejpAe9OtO1NNviyCsOOeZi+wM3W5g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:7f:d1:c0:02:59:db:fb:2f:bd:15:46:68:bb:be:c9:34:9b:36:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3126FC86C5B0754173EA2F94CCA9C8F9A41162C4 Validity Not Before: Jun 19 21:42:16 2026 GMT Not After : Jun 20 22:06:16 2026 GMT Subject: CN=681F74DB0131FAA5F3BCD02A96CE103757AAA5D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f2:37:d9:1a:2d:a5:a6:0c:77:26:17:bb:6a: 2b:b1:b2:74:ca:45:3f:03:4c:43:60:8b:7b:37:b3: b0:cd:83:c4:8e:d3:24:80:d2:4b:b4:21:63:80:06: c8:8a:14:b4:ee:84:f1:71:5b:f6:87:2b:53:64:29: 2a:2a:77:d6:0c:fa:c4:74:d5:b5:88:bf:ac:98:4d: 5a:cd:ef:52:af:ba:ab:b8:43:45:b7:3c:e2:85:e9: f1:02:51:e6:f7:81:40:dd:b3:45:59:d5:25:f9:94: 6c:28:25:e8:ae:24:2e:75:f1:83:77:0d:04:26:81: 75:32:99:e5:7a:4b:32:04:4a:87:1d:3b:fe:f9:df: 37:c0:dd:0c:ca:7c:15:24:8c:a9:1b:49:af:a1:56: 06:df:b2:af:58:5b:e0:e9:54:4c:69:67:87:34:d0: 3f:a6:6f:9d:cc:1a:75:79:93:71:44:30:bc:42:71: 29:a5:2f:c4:21:45:8c:30:b2:57:8e:97:33:ca:12: b6:de:31:5a:5f:95:29:da:a1:6b:85:4a:8c:78:0a: d5:2b:df:da:98:19:30:a6:e5:b8:d4:96:79:b1:6b: 45:2e:6b:60:09:e2:a0:74:e9:2d:17:80:14:a2:44: 94:09:48:50:4d:4c:28:15:43:31:e6:64:aa:53:12: e4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1F:74:DB:01:31:FA:A5:F3:BC:D0:2A:96:CE:10:37:57:AA:A5:D7 X509v3 Authority Key Identifier: keyid:31:26:FC:86:C5:B0:75:41:73:EA:2F:94:CC:A9:C8:F9:A4:11:62:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ff:29:2a:c4:7f:b0:ed:ab:82:b9:ee:af:dc:cc:43:c1:5d: 32:75:83:e8:98:19:56:de:ca:96:83:a3:e0:a1:c3:db:13:8c: 0d:bf:75:7f:2a:e7:14:ba:ba:66:1d:b3:1c:76:59:ae:92:24: d5:82:eb:cd:71:95:7e:e2:45:ba:53:eb:d9:a0:7f:ce:00:36: dd:0f:fd:36:4e:ec:e6:78:62:bf:4e:16:98:79:7d:db:b4:60: e6:b3:35:65:1b:03:04:0d:6a:49:2b:94:fa:df:5b:87:3b:b3: 74:34:56:d6:42:ae:ba:69:6f:a2:3d:c0:43:2c:94:e0:0d:70: d3:e3:d1:1e:81:a0:34:c0:eb:2f:7f:87:88:de:e0:00:69:d3: 77:33:b9:d7:95:8d:50:ee:7f:de:42:60:65:ef:c4:2c:be:e0: a9:2b:b4:e5:d7:32:53:d1:7f:b2:af:ad:3f:af:9c:72:77:37: 6e:f7:e8:d8:23:e3:a9:10:80:98:48:b3:f2:86:78:fe:4b:0a: f0:8f:60:73:b8:cd:06:d4:dc:ae:04:94:39:9b:89:ee:42:4a: ff:ce:23:3a:15:73:4f:24:34:d5:13:ce:c5:33:cf:0c:be:1c: 99:15:54:dd:58:0e:5a:c8:1b:70:ab:8d:33:9e:6d:e6:5e:19: 6c:5d:a2:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTH/RwAJZ2/svvRVGaLu+yTSbNvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyNkZDODZDNUIwNzU0MTczRUEyRjk0Q0NBOUM4RjlB NDExNjJDNDAeFw0yNjA2MTkyMTQyMTZaFw0yNjA2MjAyMjA2MTZaMDMxMTAvBgNV BAMTKDY4MUY3NERCMDEzMUZBQTVGM0JDRDAyQTk2Q0UxMDM3NTdBQUE1RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC38jfZGi2lpgx3Jhe7aiuxsnTK RT8DTENgi3s3s7DNg8SO0ySA0ku0IWOABsiKFLTuhPFxW/aHK1NkKSoqd9YM+sR0 1bWIv6yYTVrN71Kvuqu4Q0W3POKF6fECUeb3gUDds0VZ1SX5lGwoJeiuJC518YN3 DQQmgXUymeV6SzIESocdO/753zfA3QzKfBUkjKkbSa+hVgbfsq9YW+DpVExpZ4c0 0D+mb53MGnV5k3FEMLxCcSmlL8QhRYwwsleOlzPKErbeMVpflSnaoWuFSox4CtUr 39qYGTCm5bjUlnmxa0Uua2AJ4qB06S0XgBSiRJQJSFBNTCgVQzHmZKpTEuRfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaB902wEx+qXzvNAqls4QN1eqpdcwHwYDVR0j BBgwFoAUMSb8hsWwdUFz6i+UzKnI+aQRYsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTliODE1MmUtYWE4Ni00ZDhhLTgxZGEtZTcxMDg2YjI5NTZjLzEvMzEyNkZDODZD NUIwNzU0MTczRUEyRjk0Q0NBOUM4RjlBNDExNjJDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMTI2RkM4NkM1QjA3NTQxNzNFQTJGOTRDQ0E5QzhGOUE0MTE2 MkM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzEvMzEyNkZDODZDNUIwNzU0MTczRUEyRjk0Q0NBOUM4 RjlBNDExNjJDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIL/KSrEf7Dtq4K57q/czEPBXTJ1g+iYGVbe ypaDo+Chw9sTjA2/dX8q5xS6umYdsxx2Wa6SJNWC681xlX7iRbpT69mgf84ANt0P /TZO7OZ4Yr9OFph5fdu0YOazNWUbAwQNakkrlPrfW4c7s3Q0VtZCrrppb6I9wEMs lOANcNPj0R6BoDTA6y9/h4je4ABp03czudeVjVDuf95CYGXvxCy+4KkrtOXXMlPR f7KvrT+vnHJ3N2736Ngj46kQgJhIs/KGeP5LCvCPYHO4zQbU3K4ElDmbie5CSv/O IzoVc08kNNUTzsUzzwy+HJkVVN1YDlrIG3CrjTOebeZeGWxdouA= -----END CERTIFICATE-----Generated at Sat Jun 20 09:15:33 2026 by rpki-client