$ rpki-client -vvf rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft File: E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft (raw, json) Hash identifier: b6OLK/3RiMCDoStP3FLAQpXN84p9PmPnYvq8H+o1LZo= Subject key identifier: 34:15:F6:E9:5A:2C:C7:89:43:75:C0:F7:90:40:4D:64:DE:E1:C7:1F Authority key identifier: E0:63:3F:E9:AA:4E:1B:B8:C1:4C:B8:76:4B:6A:FA:38:FD:0C:A7:88 Certificate issuer: /CN=E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788 Certificate serial: 3F1D9A12B349AD6ECAFFAD7C187A13B7CBD0D773 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 19:19:19 +0000 Manifest this update: Fri 19 Jun 2026 19:14:19 +0000 Manifest next update: Sat 20 Jun 2026 20:21:19 +0000 Files and hashes: 1: E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.crl (hash: felT8wTkY2kPZ6qvTOLf+MLgEPEBJWwfCaNFu6+Do5Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.crl rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1d:9a:12:b3:49:ad:6e:ca:ff:ad:7c:18:7a:13:b7:cb:d0:d7:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788 Validity Not Before: Jun 19 19:14:19 2026 GMT Not After : Jun 20 20:21:19 2026 GMT Subject: CN=3415F6E95A2CC7894375C0F790404D64DEE1C71F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:20:26:e0:03:ed:de:0e:89:15:b0:a2:40:a4: e6:f7:7b:26:88:0c:3c:23:43:5a:18:c0:df:dc:c1: 18:3b:1a:67:bd:c4:a4:6a:da:7e:86:ef:5c:5e:e8: 4c:6f:64:2b:58:dd:24:be:d8:4f:39:33:d9:9c:41: ab:73:11:45:ca:7b:ad:6e:0b:2f:e8:4b:29:20:a9: 79:43:fd:79:08:79:0d:fa:37:83:1c:4c:f3:9b:3d: 1e:a3:c6:25:49:bd:4d:b1:66:76:71:bb:d7:05:3b: a9:04:ec:9c:48:72:e7:77:b5:dc:68:2e:f5:3b:c3: b8:fa:80:fb:0c:7f:51:0b:11:a1:d2:f9:ab:59:03: ee:d2:77:32:13:8b:37:21:f7:1d:88:12:ad:fd:4d: 45:c2:66:47:f5:7a:5d:59:7e:fb:92:6c:ce:76:1b: 12:9b:60:bc:b6:81:72:bb:9a:86:55:7b:e3:1e:c9: 95:82:0a:8b:5b:9b:32:65:8f:0e:7e:f0:90:08:5f: eb:85:ef:2e:41:a9:cf:32:f8:d9:3d:fe:44:90:9b: 2f:30:10:1b:62:26:1c:1e:6d:44:a0:e9:14:c4:2a: ab:d4:60:4a:84:4e:70:41:af:8d:63:a6:3b:80:f3: 31:27:84:5b:15:fb:1d:15:ce:72:5a:23:14:f6:15: 31:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:15:F6:E9:5A:2C:C7:89:43:75:C0:F7:90:40:4D:64:DE:E1:C7:1F X509v3 Authority Key Identifier: keyid:E0:63:3F:E9:AA:4E:1B:B8:C1:4C:B8:76:4B:6A:FA:38:FD:0C:A7:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:14:e1:c9:59:94:b8:48:04:e2:35:e7:ef:39:44:49:b0:65: 6e:1e:61:b9:66:78:e7:fa:b9:f9:74:cc:05:32:11:ea:9b:87: 3d:76:fa:bf:61:f4:09:58:33:2a:12:e5:9d:6f:cd:d5:c5:ef: ca:6a:2d:a2:7b:ac:56:8c:e2:af:6f:73:bd:4a:7d:e5:e0:74: dc:2b:fd:02:05:f6:75:ac:e3:20:0f:cc:a7:91:73:58:42:5b: 93:20:62:bc:0f:9c:80:c9:de:a7:4f:ee:6c:d2:a0:4f:e8:4a: 69:a6:9e:47:59:bb:a6:2b:bf:bc:33:3c:18:be:97:de:a2:ea: 10:26:0d:c6:45:88:fc:81:4c:b2:e2:f0:bb:4e:8c:01:6f:cc: 6c:5d:55:c6:9f:89:58:64:2e:e8:3d:86:8b:9e:59:72:ce:6c: d7:2a:c8:9a:dc:15:e2:39:17:11:dd:17:4f:90:8c:28:6b:f5: c0:e1:2a:4f:a7:fc:f5:0e:0c:9d:4b:4c:52:ae:ca:b1:b7:f3: f0:a3:ea:92:88:6c:54:cf:2a:25:a1:b2:79:54:b1:18:9d:d6: 49:ba:99:c4:6c:a2:33:1f:96:87:74:df:73:77:65:9a:e5:dc: 5b:6a:c2:3d:34:cf:a5:a8:aa:30:64:55:d7:28:56:a6:b3:ff: c9:7f:dc:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPx2aErNJrW7K/618GHoTt8vQ13MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA2MzNGRTlBQTRFMUJCOEMxNENCODc2NEI2QUZBMzhG RDBDQTc4ODAeFw0yNjA2MTkxOTE0MTlaFw0yNjA2MjAyMDIxMTlaMDMxMTAvBgNV BAMTKDM0MTVGNkU5NUEyQ0M3ODk0Mzc1QzBGNzkwNDA0RDY0REVFMUM3MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChICbgA+3eDokVsKJApOb3eyaI DDwjQ1oYwN/cwRg7Gme9xKRq2n6G71xe6ExvZCtY3SS+2E85M9mcQatzEUXKe61u Cy/oSykgqXlD/XkIeQ36N4McTPObPR6jxiVJvU2xZnZxu9cFO6kE7JxIcud3tdxo LvU7w7j6gPsMf1ELEaHS+atZA+7SdzITizch9x2IEq39TUXCZkf1el1ZfvuSbM52 GxKbYLy2gXK7moZVe+MeyZWCCotbmzJljw5+8JAIX+uF7y5Bqc8y+Nk9/kSQmy8w EBtiJhwebUSg6RTEKqvUYEqETnBBr41jpjuA8zEnhFsV+x0VznJaIxT2FTE1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNBX26Vosx4lDdcD3kEBNZN7hxx8wHwYDVR0j BBgwFoAU4GM/6apOG7jBTLh2S2r6OP0Mp4gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWYyYjE3ODYtMTgzMy00ZDBhLWExMzktNDY0NDMzMzkzZDc4LzAvRTA2MzNGRTlB QTRFMUJCOEMxNENCODc2NEI2QUZBMzhGRDBDQTc4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDYzM0ZFOUFBNEUxQkI4QzE0Q0I4NzY0QjZBRkEzOEZEMENB Nzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvRTA2MzNGRTlBQTRFMUJCOEMxNENCODc2NEI2QUZB MzhGRDBDQTc4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsU4clZlLhIBOI15+85REmwZW4eYblmeOf6 ufl0zAUyEeqbhz12+r9h9AlYMyoS5Z1vzdXF78pqLaJ7rFaM4q9vc71KfeXgdNwr /QIF9nWs4yAPzKeRc1hCW5MgYrwPnIDJ3qdP7mzSoE/oSmmmnkdZu6Yrv7wzPBi+ l96i6hAmDcZFiPyBTLLi8LtOjAFvzGxdVcafiVhkLug9houeWXLObNcqyJrcFeI5 FxHdF0+QjChr9cDhKk+n/PUODJ1LTFKuyrG38/Cj6pKIbFTPKiWhsnlUsRid1km6 mcRsojMflod033N3ZZrl3Ftqwj00z6WoqjBkVdcoVqaz/8l/3CE= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:56 2026 by rpki-client