$ rpki-client -vvf rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft File: 1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft (raw, json) Hash identifier: 5lxM0loGnwRzqU1IEMd80V2FJeGrN9LkrcThT9JNMk4= Subject key identifier: 61:69:94:7A:AF:B3:C1:D9:B3:92:11:DF:74:4C:3C:22:D7:36:24:A3 Authority key identifier: 1A:84:6D:C7:EE:A8:A9:0C:9D:5E:86:7F:6C:C5:2E:B5:A5:F5:1E:CA Certificate issuer: /CN=1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA Certificate serial: 19801104631B198DF97D1D6CCC510036D52A20D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 00:20:17 +0000 Manifest this update: Sat 20 Jun 2026 00:15:17 +0000 Manifest next update: Sun 21 Jun 2026 00:22:17 +0000 Files and hashes: 1: 1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl (hash: I/Ex2UVfFn+1MfGi5jpcXDza9jZc4WvXpFeD/FECHL4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:80:11:04:63:1b:19:8d:f9:7d:1d:6c:cc:51:00:36:d5:2a:20:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA Validity Not Before: Jun 20 00:15:17 2026 GMT Not After : Jun 21 00:22:17 2026 GMT Subject: CN=6169947AAFB3C1D9B39211DF744C3C22D73624A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cc:6a:b2:bb:fe:23:3e:5a:a2:75:e6:bc:d4: 68:97:a5:53:eb:bb:5e:4e:a9:08:0e:0f:bd:8e:6c: c1:fe:86:20:7b:87:ed:e8:26:7c:1b:7c:4b:f8:99: 2f:d6:36:66:0d:4a:e2:9d:c0:79:0b:54:b1:86:da: 51:6b:2b:3c:c2:e5:23:cf:99:6c:6b:ec:de:6d:80: 48:2f:db:ef:5d:88:a4:f9:31:b0:18:55:a6:aa:ed: 71:8a:66:b2:bf:90:3c:5b:df:eb:ce:0e:78:1c:57: 70:2b:04:17:42:7e:53:bc:85:de:25:d3:48:56:be: cb:cf:ac:01:c8:40:43:a1:2c:f5:72:8c:13:8e:01: 10:92:06:19:10:18:4a:74:c2:af:c0:ac:a8:7c:90: b2:5e:6c:1b:20:96:e7:7e:e2:78:de:14:b0:08:b2: c7:de:2a:8e:9e:5e:d3:4b:84:b2:74:72:be:ff:45: 5d:0f:01:45:11:73:98:0c:05:17:aa:0b:7d:62:f7: a4:49:dc:30:b4:b3:ea:51:a6:9a:6e:b7:08:6f:46: 80:5b:dc:bd:e9:80:45:80:7b:eb:65:93:f1:4d:ed: 17:29:49:33:75:4e:74:11:f0:21:8b:0f:58:29:3b: e7:79:4e:a4:0f:55:76:70:55:a8:90:8a:38:cf:a4: 3c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:69:94:7A:AF:B3:C1:D9:B3:92:11:DF:74:4C:3C:22:D7:36:24:A3 X509v3 Authority Key Identifier: keyid:1A:84:6D:C7:EE:A8:A9:0C:9D:5E:86:7F:6C:C5:2E:B5:A5:F5:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:4a:9b:2e:00:c7:b1:e2:96:bb:7c:29:6f:ed:78:f0:78:b1: ce:0c:1c:22:c0:d7:e8:9e:34:9c:78:06:c3:2c:c9:20:c8:b0: b8:2f:12:38:6f:c4:08:74:c1:07:8e:31:9f:76:19:65:7d:a7: 5b:50:c1:c8:f8:1c:cf:13:06:99:a8:9c:61:54:07:91:9d:49: 66:b9:de:1a:0b:ab:e6:83:44:4d:41:9d:9b:a6:a6:20:2d:25: b5:99:f0:a5:4a:15:3f:0a:97:6a:da:bc:41:2a:74:f8:83:57: 8e:d1:40:f3:73:8f:e0:fa:0f:7f:5d:4d:2a:71:e6:1d:2f:1d: 18:8b:6c:91:4e:72:37:e9:0c:65:fb:d2:64:f6:72:df:9a:ae: 09:ea:9c:bc:08:56:87:6d:3e:48:93:d2:8d:d7:d8:da:6f:b4: 0d:74:2a:1d:ab:53:fd:03:9e:0b:fe:07:34:20:3c:be:9f:1c: 28:f2:de:8c:8c:3f:ce:a8:c4:0e:79:bb:c2:46:12:bb:5b:89: 71:82:44:e2:75:ea:db:b8:c1:97:73:7b:09:80:e0:da:6d:8d: 38:90:7f:28:1f:82:2c:8c:f8:05:2a:c9:42:48:12:5e:02:65: e2:8e:fe:f0:0e:12:a7:53:bf:8a:2b:ac:8d:3c:cf:4f:b8:bd: 65:89:0a:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGYARBGMbGY35fR1szFEANtUqINYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4NDZEQzdFRUE4QTkwQzlENUU4NjdGNkNDNTJFQjVB NUY1MUVDQTAeFw0yNjA2MjAwMDE1MTdaFw0yNjA2MjEwMDIyMTdaMDMxMTAvBgNV BAMTKDYxNjk5NDdBQUZCM0MxRDlCMzkyMTFERjc0NEMzQzIyRDczNjI0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEzGqyu/4jPlqidea81GiXpVPr u15OqQgOD72ObMH+hiB7h+3oJnwbfEv4mS/WNmYNSuKdwHkLVLGG2lFrKzzC5SPP mWxr7N5tgEgv2+9diKT5MbAYVaaq7XGKZrK/kDxb3+vODngcV3ArBBdCflO8hd4l 00hWvsvPrAHIQEOhLPVyjBOOARCSBhkQGEp0wq/ArKh8kLJebBsglud+4njeFLAI ssfeKo6eXtNLhLJ0cr7/RV0PAUURc5gMBReqC31i96RJ3DC0s+pRppputwhvRoBb 3L3pgEWAe+tlk/FN7RcpSTN1TnQR8CGLD1gpO+d5TqQPVXZwVaiQijjPpDzJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYWmUeq+zwdmzkhHfdEw8Itc2JKMwHwYDVR0j BBgwFoAUGoRtx+6oqQydXoZ/bMUutaX1HsowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk2NWRkMzktNDhkMC00NTc4LThmZTUtNjZkOTUzMzg0ZTUwLzAvMUE4NDZEQzdF RUE4QTkwQzlENUU4NjdGNkNDNTJFQjVBNUY1MUVDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTg0NkRDN0VFQThBOTBDOUQ1RTg2N0Y2Q0M1MkVCNUE1RjUx RUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvMUE4NDZEQzdFRUE4QTkwQzlENUU4NjdGNkNDNTJF QjVBNUY1MUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5Kmy4Ax7Hilrt8KW/tePB4sc4MHCLA1+ie NJx4BsMsySDIsLgvEjhvxAh0wQeOMZ92GWV9p1tQwcj4HM8TBpmonGFUB5GdSWa5 3hoLq+aDRE1BnZumpiAtJbWZ8KVKFT8Kl2ravEEqdPiDV47RQPNzj+D6D39dTSpx 5h0vHRiLbJFOcjfpDGX70mT2ct+argnqnLwIVodtPkiT0o3X2NpvtA10Kh2rU/0D ngv+BzQgPL6fHCjy3oyMP86oxA55u8JGErtbiXGCROJ16tu4wZdzewmA4NptjTiQ fygfgiyM+AUqyUJIEl4CZeKO/vAOEqdTv4orrI08z0+4vWWJCg8= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:40 2026 by rpki-client