$ rpki-client -vvf rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft File: C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft (raw, json) Hash identifier: GSTanZq7Pyj2Lcmz0niHrKk7F64d7DWp2XwKKRBPLL0= Subject key identifier: 2B:D2:CC:19:56:1A:82:D4:8F:5F:B4:01:EB:FC:F8:66:EB:95:B3:E9 Authority key identifier: C7:DE:60:25:CC:D5:68:B7:25:D1:5D:1F:9F:FA:30:08:9F:8A:DA:01 Certificate issuer: /CN=C7DE6025CCD568B725D15D1F9FFA30089F8ADA01 Certificate serial: 4155F2A02822B732097C933B067312D3C4B67564 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft Manifest number: 40 Signing time: Sat 20 Jun 2026 05:41:41 +0000 Manifest this update: Sat 20 Jun 2026 05:36:41 +0000 Manifest next update: Sun 21 Jun 2026 06:47:41 +0000 Files and hashes: 1: C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.crl (hash: SDCTPUC8We0Z9g5js7KX1XuLPRKW4puq+IoHzE2GLNc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.crl rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:55:f2:a0:28:22:b7:32:09:7c:93:3b:06:73:12:d3:c4:b6:75:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7DE6025CCD568B725D15D1F9FFA30089F8ADA01 Validity Not Before: Jun 20 05:36:41 2026 GMT Not After : Jun 21 06:47:41 2026 GMT Subject: CN=2BD2CC19561A82D48F5FB401EBFCF866EB95B3E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2c:15:d5:c8:04:74:1b:50:a5:5c:8f:cf:32: 62:81:20:09:f6:66:46:4a:d5:ed:8e:03:24:50:5b: 6e:26:a2:05:c0:eb:a0:9d:35:d4:16:81:b8:3a:5d: 81:5a:cf:9b:8d:93:bb:98:40:41:f5:e1:9d:63:7e: 3a:f4:77:4b:e6:dc:d4:44:8a:06:ab:68:d2:34:e6: 7c:26:e8:b5:15:2e:2b:f0:6d:ee:24:97:ff:8b:78: 17:2c:d6:b5:e7:b7:d3:0d:74:5d:68:0f:32:9a:fb: e1:da:43:42:35:d6:f2:5c:b1:7b:64:44:26:56:35: e0:2d:db:74:40:17:64:f4:cd:c5:b0:13:39:78:b4: 45:4c:88:fc:52:87:9c:08:98:71:1c:88:a8:0f:1e: 45:0a:94:05:c3:2e:06:38:f6:0a:46:8b:c8:4a:ad: 90:dd:4d:78:2d:42:65:3f:e9:73:87:f4:53:37:e9: 9b:76:ab:24:37:fa:6b:10:61:02:37:f3:84:46:69: a2:a5:da:0a:5e:ee:30:9b:42:3f:7f:16:1c:34:50: cc:92:f8:49:ba:f8:6b:fd:08:72:0e:fa:90:78:2b: 70:39:3c:ee:45:e7:aa:98:7d:29:f6:a9:02:bf:2f: 5e:21:4e:c0:95:92:fd:f1:ea:4c:ed:ba:da:a8:b3: 8c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D2:CC:19:56:1A:82:D4:8F:5F:B4:01:EB:FC:F8:66:EB:95:B3:E9 X509v3 Authority Key Identifier: keyid:C7:DE:60:25:CC:D5:68:B7:25:D1:5D:1F:9F:FA:30:08:9F:8A:DA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:20:03:fa:3a:0a:f1:1c:5f:4a:e0:be:71:2b:06:65:c9:73: cf:7f:75:20:a9:8c:31:51:a8:ce:97:3f:81:a1:2e:00:9c:40: a4:0b:c8:d6:2b:74:a3:d6:85:40:cb:76:59:d4:31:87:50:7b: ba:37:52:5b:b2:65:07:2c:40:a1:50:58:bd:11:cf:44:6e:51: 7e:27:da:cb:31:b0:62:75:5e:49:ef:9f:5a:1c:b2:02:1f:a7: b7:2f:3d:3e:7d:e7:bb:d0:51:29:19:89:57:fd:6f:57:e5:6b: fd:2a:28:4b:62:02:09:89:6f:c0:07:b0:1f:62:8b:cb:ac:1a: 27:ae:a3:cf:bd:18:00:39:2c:6f:8a:5e:1d:cc:9a:99:0e:1c: 34:62:e4:89:d7:4e:1a:ac:48:7f:81:65:f3:ac:83:d1:eb:5a: c6:97:a3:1a:ea:26:38:cb:99:12:b9:64:9b:8c:ab:4c:d8:5f: 9c:09:9a:a4:28:b8:8b:99:f3:c5:41:aa:59:25:3e:5d:9a:f9: 5b:2b:3d:82:47:51:8b:a0:29:55:e5:2c:6a:4c:b7:0a:31:3f: 06:54:9f:93:d7:68:45:63:df:52:8f:fc:cc:63:24:83:2e:26: ca:ce:cf:61:b9:cf:78:32:c2:55:14:b1:a5:9e:80:fe:15:76: 09:d8:16:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQVXyoCgitzIJfJM7BnMS08S2dWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdERTYwMjVDQ0Q1NjhCNzI1RDE1RDFGOUZGQTMwMDg5 RjhBREEwMTAeFw0yNjA2MjAwNTM2NDFaFw0yNjA2MjEwNjQ3NDFaMDMxMTAvBgNV BAMTKDJCRDJDQzE5NTYxQTgyRDQ4RjVGQjQwMUVCRkNGODY2RUI5NUIzRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkLBXVyAR0G1ClXI/PMmKBIAn2 ZkZK1e2OAyRQW24mogXA66CdNdQWgbg6XYFaz5uNk7uYQEH14Z1jfjr0d0vm3NRE igaraNI05nwm6LUVLivwbe4kl/+LeBcs1rXnt9MNdF1oDzKa++HaQ0I11vJcsXtk RCZWNeAt23RAF2T0zcWwEzl4tEVMiPxSh5wImHEciKgPHkUKlAXDLgY49gpGi8hK rZDdTXgtQmU/6XOH9FM36Zt2qyQ3+msQYQI384RGaaKl2gpe7jCbQj9/Fhw0UMyS +Em6+Gv9CHIO+pB4K3A5PO5F56qYfSn2qQK/L14hTsCVkv3x6kztutqos4wRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK9LMGVYagtSPX7QB6/z4ZuuVs+kwHwYDVR0j BBgwFoAUx95gJczVaLcl0V0fn/owCJ+K2gEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0MGY2NzItNzZkNC00MTU4LWFlZGYtNmRmMGFmMjlmMzViLzAvQzdERTYwMjVD Q0Q1NjhCNzI1RDE1RDFGOUZGQTMwMDg5RjhBREEwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0RFNjAyNUNDRDU2OEI3MjVEMTVEMUY5RkZBMzAwODlGOEFE QTAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvQzdERTYwMjVDQ0Q1NjhCNzI1RDE1RDFGOUZGQTMw MDg5RjhBREEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHggA/o6CvEcX0rgvnErBmXJc89/dSCpjDFR qM6XP4GhLgCcQKQLyNYrdKPWhUDLdlnUMYdQe7o3UluyZQcsQKFQWL0Rz0RuUX4n 2ssxsGJ1Xknvn1ocsgIfp7cvPT5957vQUSkZiVf9b1fla/0qKEtiAgmJb8AHsB9i i8usGieuo8+9GAA5LG+KXh3MmpkOHDRi5InXThqsSH+BZfOsg9HrWsaXoxrqJjjL mRK5ZJuMq0zYX5wJmqQouIuZ88VBqlklPl2a+VsrPYJHUYugKVXlLGpMtwoxPwZU n5PXaEVj31KP/MxjJIMuJsrOz2G5z3gywlUUsaWegP4VdgnYFk8= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:24 2026 by rpki-client