$ rpki-client -vvf rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft File: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft (raw, json) Hash identifier: hyaSG2Fvi/KXQlpW0epnAtcE1gG4gWHzrorXqbPqzo8= Subject key identifier: 6C:95:39:7C:98:97:1B:D3:21:A2:EF:BA:68:F5:BE:30:E8:B1:F1:B7 Authority key identifier: DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E Certificate issuer: /CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Certificate serial: 28749F4599D523C4617C825F9C624F636C6FE3CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 04:12:01 +0000 Manifest this update: Thu 18 Jun 2026 04:07:01 +0000 Manifest next update: Fri 19 Jun 2026 04:20:01 +0000 Files and hashes: 1: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl (hash: nH1lycIXi86zvqyqJft1/W4Cu8w9hLRhGECj9A4s+MA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 04:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:74:9f:45:99:d5:23:c4:61:7c:82:5f:9c:62:4f:63:6c:6f:e3:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Validity Not Before: Jun 18 04:07:01 2026 GMT Not After : Jun 19 04:20:01 2026 GMT Subject: CN=6C95397C98971BD321A2EFBA68F5BE30E8B1F1B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7b:10:7e:89:98:a1:e4:48:83:93:69:54:a4: c9:0e:fc:89:33:c1:e4:76:84:71:7e:a4:38:09:49: 14:57:0e:a7:d4:35:d6:2a:7f:0c:22:04:c0:65:bf: 03:1f:05:a9:98:85:f0:9f:fe:5c:c6:35:91:ca:ae: 49:e7:0b:8d:0f:42:e4:2f:5f:a0:b3:f7:01:25:21: 60:42:7d:2c:5d:f5:24:42:00:96:23:77:8f:d6:8a: bf:16:0a:c1:4d:55:b3:9b:3e:93:8a:b7:eb:da:db: cc:c6:54:e6:c7:a1:94:46:d3:9c:62:35:a7:c9:d8: a5:df:d1:a7:db:e7:16:51:f7:5e:e9:93:c8:05:db: 64:e3:8f:d4:5b:f3:90:16:48:7f:9f:fc:99:47:5f: 68:e7:dd:56:0b:00:e9:86:04:26:dd:75:c1:22:65: 33:38:80:3d:00:43:8f:c6:37:17:50:20:e1:65:3a: c6:1b:0f:d1:77:1b:10:9c:89:39:a1:a0:80:b0:cf: 9f:8f:2f:41:9a:2b:1c:53:e1:49:13:57:17:1b:df: 99:22:ea:5b:66:50:07:5c:06:cc:e5:61:d0:5c:09: d6:c7:42:5b:e2:07:d0:79:5d:2e:39:2a:2a:ee:ae: 62:dc:08:1d:39:ef:c8:d2:aa:36:61:9b:5f:1e:f5: 6a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:95:39:7C:98:97:1B:D3:21:A2:EF:BA:68:F5:BE:30:E8:B1:F1:B7 X509v3 Authority Key Identifier: keyid:DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:e9:f9:97:d8:b8:8f:27:70:d1:21:f2:65:1e:af:32:08:7c: 7a:5a:de:e9:45:4a:c5:5c:0f:0f:f3:70:de:a1:e2:29:7a:ab: 2a:01:3d:28:0b:b2:ed:b0:aa:41:2e:fa:0c:1c:5a:bd:3a:85: 7e:36:8e:97:83:af:05:6b:01:fc:93:6a:2c:f6:4c:87:f0:3c: 44:a8:ac:d5:ea:9f:1a:26:06:bb:b5:d5:0f:20:fe:47:5d:f0: 83:da:42:4d:98:6b:6e:0b:ed:7a:e3:5e:19:ec:44:ae:7c:db: 05:67:e4:a9:4b:47:fa:ba:4e:04:31:aa:05:fb:90:fc:b6:51: 42:b7:f2:9f:47:1f:37:7b:74:24:f7:58:4b:0d:aa:b9:d1:80: 06:5a:b7:c4:2e:03:8a:63:b3:6f:5c:2b:51:27:3a:44:de:99: b4:76:84:dd:b7:33:19:9f:79:76:61:11:44:32:f2:95:6e:90: 6b:ad:65:cd:45:6b:7b:42:32:d2:81:a7:63:fa:30:8c:12:bd: 0c:34:ea:e6:1f:10:3b:ae:d6:a7:38:3c:25:e4:bb:79:c3:fd: 6a:6a:c8:72:7f:08:a3:0c:d1:59:e3:12:d3:40:89:d5:eb:db: f2:cc:6c:d2:40:b4:dc:d0:c9:1c:f6:2c:7f:c0:cb:6f:bb:80: 4f:1e:d7:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKHSfRZnVI8RhfIJfnGJPY2xv480wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2NkJC OEY5MkEzRTAeFw0yNjA2MTgwNDA3MDFaFw0yNjA2MTkwNDIwMDFaMDMxMTAvBgNV BAMTKDZDOTUzOTdDOTg5NzFCRDMyMUEyRUZCQTY4RjVCRTMwRThCMUYxQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiexB+iZih5EiDk2lUpMkO/Ikz weR2hHF+pDgJSRRXDqfUNdYqfwwiBMBlvwMfBamYhfCf/lzGNZHKrknnC40PQuQv X6Cz9wElIWBCfSxd9SRCAJYjd4/Wir8WCsFNVbObPpOKt+va28zGVObHoZRG05xi NafJ2KXf0afb5xZR917pk8gF22Tjj9Rb85AWSH+f/JlHX2jn3VYLAOmGBCbddcEi ZTM4gD0AQ4/GNxdQIOFlOsYbD9F3GxCciTmhoICwz5+PL0GaKxxT4UkTVxcb35ki 6ltmUAdcBszlYdBcCdbHQlviB9B5XS45KirurmLcCB0578jSqjZhm18e9WqBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbJU5fJiXG9Mhou+6aPW+MOix8bcwHwYDVR0j BBgwFoAU29WY4bt0l4Ld5jk9Q7gGa7j5Kj4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjIzOGU1NmUtZWRhNS00MDVhLWFiYmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFC Qjc0OTc4MkRERTYzOTNENDNCODA2NkJCOEY5MkEzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQkQ1OThFMUJCNzQ5NzgyRERFNjM5M0Q0M0I4MDY2QkI4Rjky QTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjIzOGU1NmUtZWRhNS00MDVhLWFi YmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2 NkJCOEY5MkEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHp+ZfYuI8ncNEh8mUerzIIfHpa3ulFSsVc Dw/zcN6h4il6qyoBPSgLsu2wqkEu+gwcWr06hX42jpeDrwVrAfyTaiz2TIfwPESo rNXqnxomBru11Q8g/kdd8IPaQk2Ya24L7XrjXhnsRK582wVn5KlLR/q6TgQxqgX7 kPy2UUK38p9HHzd7dCT3WEsNqrnRgAZat8QuA4pjs29cK1EnOkTembR2hN23Mxmf eXZhEUQy8pVukGutZc1Fa3tCMtKBp2P6MIwSvQw06uYfEDuu1qc4PCXku3nD/Wpq yHJ/CKMM0VnjEtNAidXr2/LMbNJAtNzQyRz2LH/Ay2+7gE8e1wI= -----END CERTIFICATE-----Generated at Thu Jun 18 17:06:55 2026 by rpki-client