$ rpki-client -vvf rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft File: D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft (raw, json) Hash identifier: k1y3s1u2AkZGv5TQUVYUyxUqnjAYD7OvEoh8MCxfFHI= Subject key identifier: A8:9A:8F:90:74:ED:4D:37:D2:37:54:E7:AB:DB:EF:CA:41:48:D0:63 Authority key identifier: D5:A9:D1:A5:8E:3E:E4:57:41:AF:FD:59:7F:03:CB:F6:34:91:22:3C Certificate issuer: /CN=D5A9D1A58E3EE45741AFFD597F03CBF63491223C Certificate serial: 6A708FA4DD298B46CCFB995F655BC82B1C994154 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 13:27:12 +0000 Manifest this update: Fri 19 Jun 2026 13:22:12 +0000 Manifest next update: Sat 20 Jun 2026 15:23:12 +0000 Files and hashes: 1: D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl (hash: wnjRdmyyEGqvbW2odXqWrPY6IZ3FxMkUvhoIFLcfYAg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 15:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:70:8f:a4:dd:29:8b:46:cc:fb:99:5f:65:5b:c8:2b:1c:99:41:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5A9D1A58E3EE45741AFFD597F03CBF63491223C Validity Not Before: Jun 19 13:22:12 2026 GMT Not After : Jun 20 15:23:12 2026 GMT Subject: CN=A89A8F9074ED4D37D23754E7ABDBEFCA4148D063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:18:db:a2:c2:5c:bb:d9:33:c1:ef:8d:e6:73: f6:8c:35:da:5f:66:51:80:b7:8b:a9:24:90:37:f3: 2e:0f:7d:00:e0:c4:5f:6a:3c:9c:d4:13:da:2c:22: 09:7e:69:42:3f:50:79:65:57:c6:8e:52:6e:cd:cc: 29:fc:32:3c:94:46:dd:d3:63:00:df:27:15:74:41: 83:18:9e:45:34:b2:73:95:de:7c:b2:b9:2d:3e:c8: 9f:fc:45:cd:ca:20:13:4b:28:1f:b5:27:15:93:fe: ed:82:72:a5:ff:e7:32:f6:9e:f5:be:ee:13:b6:b7: 08:47:0d:25:ce:df:68:f9:1f:cd:19:ed:c1:b1:11: d5:23:7f:cc:9d:99:ef:24:3a:47:6a:c6:71:18:4d: fc:34:41:b4:d4:53:15:83:7b:11:27:90:b8:3d:7d: c7:e5:3a:96:3b:08:f7:3b:46:2c:f2:7b:d7:bb:a9: eb:74:77:ee:20:36:11:1a:ab:70:92:51:39:72:3e: a6:4d:54:ba:9c:f0:38:d1:37:0e:03:01:82:0c:d2: 42:35:31:39:56:ae:a4:c6:22:fe:95:99:05:f9:ad: 39:db:44:cf:9c:b6:3b:64:db:87:fa:32:de:2c:ab: f0:8c:f5:26:05:05:65:4d:a5:27:71:24:76:c9:7a: 76:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9A:8F:90:74:ED:4D:37:D2:37:54:E7:AB:DB:EF:CA:41:48:D0:63 X509v3 Authority Key Identifier: keyid:D5:A9:D1:A5:8E:3E:E4:57:41:AF:FD:59:7F:03:CB:F6:34:91:22:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:fa:45:c1:84:35:00:00:ab:6c:f8:15:7a:2c:c5:4a:6d:08: d2:43:ce:da:ac:59:cf:1b:1c:a1:d2:33:a0:26:b7:63:41:ef: d4:5d:f9:2f:ba:f8:ee:2c:6d:4f:f6:b3:6b:38:b2:cd:51:f0: 3c:4b:5e:26:89:04:f3:a8:ef:4a:5a:ba:48:0f:82:5e:a3:8f: d5:ab:c4:e4:a1:34:9e:1b:7d:f2:02:64:cf:ea:09:38:13:bb: 66:26:d9:50:61:b7:aa:46:49:b3:71:d1:96:e4:a6:e9:6c:af: 20:b0:8a:e7:0e:5c:00:38:0c:20:06:45:57:88:52:9f:e2:f7: cf:ca:ee:44:29:9c:7d:85:e8:1c:a4:55:1f:51:bf:98:f7:e5: 66:4c:6b:a7:89:93:f2:11:3d:01:e3:99:25:72:0d:67:ed:86: 96:0b:84:04:56:f5:8b:63:0c:c0:a1:37:66:bc:f9:f5:9e:d1: 2b:68:62:61:99:1d:d7:f5:aa:ed:3f:6f:9a:87:21:c0:c3:f4: 1c:4f:8a:89:6e:a2:35:97:0a:69:12:9f:33:42:3a:01:b9:14: 15:dd:64:53:45:3b:40:33:8f:ff:3e:48:f5:e2:ce:2d:85:12: 5f:6b:d0:b7:d6:6f:c9:7b:23:6c:bd:75:76:1b:aa:7d:7f:2e: 50:f2:34:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUanCPpN0pi0bM+5lfZVvIKxyZQVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVBOUQxQTU4RTNFRTQ1NzQxQUZGRDU5N0YwM0NCRjYz NDkxMjIzQzAeFw0yNjA2MTkxMzIyMTJaFw0yNjA2MjAxNTIzMTJaMDMxMTAvBgNV BAMTKEE4OUE4RjkwNzRFRDREMzdEMjM3NTRFN0FCREJFRkNBNDE0OEQwNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiGNuiwly72TPB743mc/aMNdpf ZlGAt4upJJA38y4PfQDgxF9qPJzUE9osIgl+aUI/UHllV8aOUm7NzCn8MjyURt3T YwDfJxV0QYMYnkU0snOV3nyyuS0+yJ/8Rc3KIBNLKB+1JxWT/u2CcqX/5zL2nvW+ 7hO2twhHDSXO32j5H80Z7cGxEdUjf8ydme8kOkdqxnEYTfw0QbTUUxWDexEnkLg9 fcflOpY7CPc7Rizye9e7qet0d+4gNhEaq3CSUTlyPqZNVLqc8DjRNw4DAYIM0kI1 MTlWrqTGIv6VmQX5rTnbRM+ctjtk24f6Mt4sq/CM9SYFBWVNpSdxJHbJenbBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqJqPkHTtTTfSN1Tnq9vvykFI0GMwHwYDVR0j BBgwFoAU1anRpY4+5FdBr/1ZfwPL9jSRIjwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIxNjQ2YmUtM2Q2YS00MjU3LWI3N2MtYjMzYzEwZjM1ZDMyLzAvRDVBOUQxQTU4 RTNFRTQ1NzQxQUZGRDU5N0YwM0NCRjYzNDkxMjIzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUE5RDFBNThFM0VFNDU3NDFBRkZENTk3RjAzQ0JGNjM0OTEy MjNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvRDVBOUQxQTU4RTNFRTQ1NzQxQUZGRDU5N0YwM0NC RjYzNDkxMjIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADH6RcGENQAAq2z4FXosxUptCNJDztqsWc8b HKHSM6Amt2NB79Rd+S+6+O4sbU/2s2s4ss1R8DxLXiaJBPOo70paukgPgl6jj9Wr xOShNJ4bffICZM/qCTgTu2Ym2VBht6pGSbNx0ZbkpulsryCwiucOXAA4DCAGRVeI Up/i98/K7kQpnH2F6BykVR9Rv5j35WZMa6eJk/IRPQHjmSVyDWfthpYLhARW9Ytj DMChN2a8+fWe0StoYmGZHdf1qu0/b5qHIcDD9BxPioluojWXCmkSnzNCOgG5FBXd ZFNFO0Azj/8+SPXizi2FEl9r0LfWb8l7I2y9dXYbqn1/LlDyNEA= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:11 2026 by rpki-client