$ rpki-client -vvf rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft File: F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft (raw, json) Hash identifier: yHj+zTyz8KTQRgNr1hMMHpNrKvTHSJfNLqFUFGGvTU4= Subject key identifier: 18:E9:EE:53:17:6A:3D:31:84:73:FD:DF:D2:D1:2F:C2:FD:99:65:FE Authority key identifier: F9:24:9C:1E:EF:E9:97:F0:6F:AA:23:23:D2:AE:07:EF:03:61:0D:DB Certificate issuer: /CN=F9249C1EEFE997F06FAA2323D2AE07EF03610DDB Certificate serial: 64A72D3E357552E90CDC7D27D4E7F8D9BEDE54C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 12:46:22 +0000 Manifest this update: Fri 19 Jun 2026 12:41:22 +0000 Manifest next update: Sat 20 Jun 2026 14:47:22 +0000 Files and hashes: 1: F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.crl (hash: DkHSYF3pkfidCGBWyd2uzz+rjBNviE/fhhnPMARwr/U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.crl rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 14:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a7:2d:3e:35:75:52:e9:0c:dc:7d:27:d4:e7:f8:d9:be:de:54:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9249C1EEFE997F06FAA2323D2AE07EF03610DDB Validity Not Before: Jun 19 12:41:22 2026 GMT Not After : Jun 20 14:47:22 2026 GMT Subject: CN=18E9EE53176A3D318473FDDFD2D12FC2FD9965FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:43:30:ad:21:d4:b2:c8:d1:00:3a:f3:65:c2: 47:5c:e2:0f:f8:f6:4e:84:3c:4b:14:db:d7:6f:02: 6d:97:b6:d9:31:34:e3:30:a2:68:33:c4:ff:cf:12: 7a:84:82:43:79:0c:0d:1b:58:af:29:bc:6b:3e:6a: 39:13:1d:da:6b:c5:e9:e9:27:38:0b:dd:93:41:1d: 0d:e8:25:cd:a7:41:f7:19:ca:67:86:16:93:f6:34: 17:87:eb:8c:89:82:a7:52:5a:8d:f5:ef:b6:da:84: b8:66:33:f2:4e:c8:84:47:f0:32:6e:88:c5:6c:26: 86:b8:ad:da:52:40:59:53:21:a2:02:eb:60:9d:1e: ee:07:44:3d:61:36:21:95:00:55:a1:aa:0e:d4:c0: 4d:77:32:0d:e6:67:0a:51:49:eb:36:b4:90:22:9c: d5:39:05:51:d5:50:2b:e1:83:14:c7:1e:98:5d:f2: d2:c6:b9:eb:5c:39:55:eb:a0:c5:b5:61:09:44:fe: 40:e8:a4:44:39:dd:81:8a:57:af:46:34:75:65:47: ac:06:88:da:8e:27:73:f0:1c:11:5d:c1:79:bd:3e: c7:f6:20:06:95:bc:94:31:1b:f3:4c:52:28:20:03: ed:d0:96:cd:01:2f:33:6b:d9:1f:4d:66:4c:9c:18: a0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E9:EE:53:17:6A:3D:31:84:73:FD:DF:D2:D1:2F:C2:FD:99:65:FE X509v3 Authority Key Identifier: keyid:F9:24:9C:1E:EF:E9:97:F0:6F:AA:23:23:D2:AE:07:EF:03:61:0D:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:10:dd:15:5a:e5:13:57:bd:57:2a:68:7a:8b:4a:f8:0e:eb: f1:ad:ec:76:97:23:37:e7:4e:65:5e:a9:b4:dd:c3:d3:82:ef: 04:1d:4a:df:f0:38:de:17:c0:d3:03:5f:9a:0d:63:49:f5:80: d8:6b:60:cb:41:ad:77:59:0c:32:8c:87:10:ea:51:3a:b5:19: 66:19:c3:e1:19:ca:5f:91:97:d5:ee:09:1d:7e:25:e3:6e:a1: 2e:c4:18:63:1f:bf:c5:f2:15:98:d9:63:d0:fe:60:a0:06:e2: 71:10:d3:a5:2e:7d:ec:fe:34:cf:49:5e:9a:59:c8:ca:9a:7c: 3d:cb:6f:f8:66:d7:e7:f9:f3:47:56:59:b0:e6:ad:fd:cb:5b: 8e:49:d6:15:43:79:2b:98:67:5c:43:37:0f:2c:36:00:44:1f: 8c:8f:e5:29:85:c8:55:9e:77:de:ed:04:3d:c2:e7:53:8b:f4: 6d:f8:25:1f:fc:55:08:f5:b4:45:df:72:b7:06:df:16:e1:93: 9c:22:ed:51:9b:0f:9a:47:a0:dd:08:e4:57:ba:01:b5:da:5e: b6:ed:01:66:d8:84:61:a2:b0:a0:9f:2f:02:21:86:fa:77:44: d1:07:af:09:75:1d:a2:df:52:8c:9f:e3:a8:71:cb:f5:51:ae: 23:eb:06:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZKctPjV1UukM3H0n1Of42b7eVMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkyNDlDMUVFRkU5OTdGMDZGQUEyMzIzRDJBRTA3RUYw MzYxMEREQjAeFw0yNjA2MTkxMjQxMjJaFw0yNjA2MjAxNDQ3MjJaMDMxMTAvBgNV BAMTKDE4RTlFRTUzMTc2QTNEMzE4NDczRkRERkQyRDEyRkMyRkQ5OTY1RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUQzCtIdSyyNEAOvNlwkdc4g/4 9k6EPEsU29dvAm2XttkxNOMwomgzxP/PEnqEgkN5DA0bWK8pvGs+ajkTHdprxenp JzgL3ZNBHQ3oJc2nQfcZymeGFpP2NBeH64yJgqdSWo3177bahLhmM/JOyIRH8DJu iMVsJoa4rdpSQFlTIaIC62CdHu4HRD1hNiGVAFWhqg7UwE13Mg3mZwpRSes2tJAi nNU5BVHVUCvhgxTHHphd8tLGuetcOVXroMW1YQlE/kDopEQ53YGKV69GNHVlR6wG iNqOJ3PwHBFdwXm9Psf2IAaVvJQxG/NMUiggA+3Qls0BLzNr2R9NZkycGKBdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGOnuUxdqPTGEc/3f0tEvwv2ZZf4wHwYDVR0j BBgwFoAU+SScHu/pl/BvqiMj0q4H7wNhDdswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjc4Mzc2MmUtMmIyNi00Mzc0LWFlNjQtMGI2ZjA1NTIyMTFlLzAvRjkyNDlDMUVF RkU5OTdGMDZGQUEyMzIzRDJBRTA3RUYwMzYxMEREQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTI0OUMxRUVGRTk5N0YwNkZBQTIzMjNEMkFFMDdFRjAzNjEw RERCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjc4Mzc2MmUtMmIyNi00Mzc0LWFl NjQtMGI2ZjA1NTIyMTFlLzAvRjkyNDlDMUVFRkU5OTdGMDZGQUEyMzIzRDJBRTA3 RUYwMzYxMEREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0Q3RVa5RNXvVcqaHqLSvgO6/Gt7HaXIzfn TmVeqbTdw9OC7wQdSt/wON4XwNMDX5oNY0n1gNhrYMtBrXdZDDKMhxDqUTq1GWYZ w+EZyl+Rl9XuCR1+JeNuoS7EGGMfv8XyFZjZY9D+YKAG4nEQ06Uufez+NM9JXppZ yMqafD3Lb/hm1+f580dWWbDmrf3LW45J1hVDeSuYZ1xDNw8sNgBEH4yP5SmFyFWe d97tBD3C51OL9G34JR/8VQj1tEXfcrcG3xbhk5wi7VGbD5pHoN0I5Fe6AbXaXrbt AWbYhGGisKCfLwIhhvp3RNEHrwl1HaLfUoyf46hxy/VRriPrBq0= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:45 2026 by rpki-client