$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft File: 6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft (raw, json) Hash identifier: wg/3IkBQKsJ2SzH0Uzg3LLST9DqRKs2ypAx7la8TwOs= Subject key identifier: 87:88:BE:8D:6B:BC:92:B0:39:89:AE:2A:91:F9:D5:6F:A3:1B:B6:14 Authority key identifier: 61:77:E9:D3:DB:AB:63:EF:6C:BB:43:6C:90:6D:5C:5F:75:35:56:FE Certificate issuer: /CN=6177E9D3DBAB63EF6CBB436C906D5C5F753556FE Certificate serial: 7031879F41E64496FB50291271DF2760CDF08DFE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 01:01:00 +0000 Manifest this update: Sat 20 Jun 2026 00:56:00 +0000 Manifest next update: Sun 21 Jun 2026 03:06:00 +0000 Files and hashes: 1: 6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.crl (hash: 2y/grDRCLBX9bvy+1IcYZC8KPBlHs4tcGGsyGY+/ru0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.crl rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:31:87:9f:41:e6:44:96:fb:50:29:12:71:df:27:60:cd:f0:8d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6177E9D3DBAB63EF6CBB436C906D5C5F753556FE Validity Not Before: Jun 20 00:56:00 2026 GMT Not After : Jun 21 03:06:00 2026 GMT Subject: CN=8788BE8D6BBC92B03989AE2A91F9D56FA31BB614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ce:da:45:c8:16:b0:d3:c8:b3:a3:a2:ae:b4: f8:35:37:9d:87:93:e2:90:55:07:ea:92:34:94:d7: 1e:0d:14:e6:64:30:ea:ca:9c:b4:83:a5:d9:bc:7e: 6c:2a:59:bd:50:33:08:01:36:3e:f5:11:9b:76:8c: 83:64:67:a2:be:f5:24:a9:f3:d6:30:70:58:87:ea: cc:8b:34:0b:42:2a:5c:f1:64:3b:f5:68:34:36:d2: 67:87:a6:88:c4:c8:cb:4d:6c:33:9f:c7:ed:69:05: 8a:17:22:6a:ac:01:9a:60:ba:77:31:54:02:1a:35: 91:b4:47:95:0b:9d:01:bd:5b:89:04:2f:1a:cd:18: 26:f9:9f:db:53:6b:10:8f:47:5d:e0:49:3e:a4:a5: 03:ab:93:65:cd:90:9b:dd:22:5c:98:bc:2c:cd:dc: f7:c9:5c:d7:69:99:ac:be:2c:2f:3e:85:ee:9a:bf: a2:28:c6:37:c4:90:a4:af:54:f5:de:2f:62:a9:93: d2:7b:4b:55:59:8f:b2:84:a7:bc:3c:1d:03:a6:5c: bc:2c:c5:1f:74:0a:1d:43:f9:01:e8:ec:95:06:f3: 8a:40:c2:14:51:4f:42:d5:b7:64:b7:f2:62:e2:2e: b9:b7:24:02:a9:bd:85:87:b7:b7:65:ff:56:2e:b6: 3c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:88:BE:8D:6B:BC:92:B0:39:89:AE:2A:91:F9:D5:6F:A3:1B:B6:14 X509v3 Authority Key Identifier: keyid:61:77:E9:D3:DB:AB:63:EF:6C:BB:43:6C:90:6D:5C:5F:75:35:56:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:37:ed:34:8d:0e:7f:88:2e:1e:73:8e:5f:68:51:6c:f8:56: 4c:ff:b8:13:5e:f6:18:3a:39:09:6e:80:17:13:22:bf:ff:9a: 3e:1a:11:6e:df:30:6f:91:2a:ba:d9:90:36:37:df:f1:3f:64: 88:4b:a9:f9:71:bc:fa:6c:4f:00:09:41:7f:00:1c:75:0c:80: 20:29:1d:56:1a:49:de:2d:13:5d:0b:50:59:e5:ed:cd:7f:d2: 88:e6:77:c0:9b:4f:85:ce:71:0e:50:84:d4:b6:e3:d7:bd:e0: fb:f4:1f:b7:b6:eb:fa:26:f1:39:34:89:a3:b7:3e:80:64:1f: e0:02:1b:67:e1:9f:1c:ec:ee:2c:1a:1b:31:b1:c7:78:8f:22: c2:5f:ae:ea:96:3f:2d:10:e2:fb:b7:0d:84:88:10:4f:1e:16: 4c:30:f6:f4:97:e3:bf:26:8f:43:40:7b:19:3a:94:04:b5:96: 3d:5b:0d:0b:c7:a7:45:1a:86:93:fb:2d:01:6b:83:37:34:6f: cf:bc:47:93:65:2e:78:9a:bb:a3:1a:13:3b:c0:e1:2c:e2:9c: 37:f3:6e:34:f4:1f:cb:06:d4:00:fb:80:53:58:8e:15:d0:9e: 84:ef:53:bd:d2:03:ca:e8:c0:43:3f:cb:aa:cb:05:9f:2b:e5: 52:50:6c:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcDGHn0HmRJb7UCkScd8nYM3wjf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE3N0U5RDNEQkFCNjNFRjZDQkI0MzZDOTA2RDVDNUY3 NTM1NTZGRTAeFw0yNjA2MjAwMDU2MDBaFw0yNjA2MjEwMzA2MDBaMDMxMTAvBgNV BAMTKDg3ODhCRThENkJCQzkyQjAzOTg5QUUyQTkxRjlENTZGQTMxQkI2MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ztpFyBaw08izo6KutPg1N52H k+KQVQfqkjSU1x4NFOZkMOrKnLSDpdm8fmwqWb1QMwgBNj71EZt2jINkZ6K+9SSp 89YwcFiH6syLNAtCKlzxZDv1aDQ20meHpojEyMtNbDOfx+1pBYoXImqsAZpguncx VAIaNZG0R5ULnQG9W4kELxrNGCb5n9tTaxCPR13gST6kpQOrk2XNkJvdIlyYvCzN 3PfJXNdpmay+LC8+he6av6IoxjfEkKSvVPXeL2Kpk9J7S1VZj7KEp7w8HQOmXLws xR90Ch1D+QHo7JUG84pAwhRRT0LVt2S38mLiLrm3JAKpvYWHt7dl/1YutjxDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh4i+jWu8krA5ia4qkfnVb6MbthQwHwYDVR0j BBgwFoAUYXfp09urY+9su0NskG1cX3U1Vv4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmI5ODUxYjEtNWE2ZC00ZTc1LTlmZmYtYzAzYTljNDljZjY5LzAvNjE3N0U5RDNE QkFCNjNFRjZDQkI0MzZDOTA2RDVDNUY3NTM1NTZGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MTc3RTlEM0RCQUI2M0VGNkNCQjQzNkM5MDZENUM1Rjc1MzU1 NkZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvNjE3N0U5RDNEQkFCNjNFRjZDQkI0MzZDOTA2RDVD NUY3NTM1NTZGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFY37TSNDn+ILh5zjl9oUWz4Vkz/uBNe9hg6 OQlugBcTIr//mj4aEW7fMG+RKrrZkDY33/E/ZIhLqflxvPpsTwAJQX8AHHUMgCAp HVYaSd4tE10LUFnl7c1/0ojmd8CbT4XOcQ5QhNS249e94Pv0H7e26/om8Tk0iaO3 PoBkH+ACG2fhnxzs7iwaGzGxx3iPIsJfruqWPy0Q4vu3DYSIEE8eFkww9vSX478m j0NAexk6lAS1lj1bDQvHp0UahpP7LQFrgzc0b8+8R5NlLniau6MaEzvA4SzinDfz bjT0H8sG1AD7gFNYjhXQnoTvU73SA8rowEM/y6rLBZ8r5VJQbCU= -----END CERTIFICATE-----Generated at Sat Jun 20 08:58:16 2026 by rpki-client