$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft File: D76923298A332CDB03F66375CE7D78C12CF624A8.mft (raw, json) Hash identifier: ONZ0QPb1lwuswbjFfHVyRSkswmSK2YIEJlJOL9VQX6g= Subject key identifier: 56:1D:B7:F2:BF:01:3D:1A:3F:E8:80:CA:DF:CB:D2:11:66:F8:E4:9C Authority key identifier: D7:69:23:29:8A:33:2C:DB:03:F6:63:75:CE:7D:78:C1:2C:F6:24:A8 Certificate issuer: /CN=D76923298A332CDB03F66375CE7D78C12CF624A8 Certificate serial: 03A1D41E81C03DE97E184BD5EB99A70584B2FC59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D76923298A332CDB03F66375CE7D78C12CF624A8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 20:46:00 +0000 Manifest this update: Fri 19 Jun 2026 20:41:00 +0000 Manifest next update: Sat 20 Jun 2026 22:43:00 +0000 Files and hashes: 1: D76923298A332CDB03F66375CE7D78C12CF624A8.crl (hash: 0y+clXIwtzvPV3XeT5j5dAL9S+EW5hpfGnxureK/PdA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.crl rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D76923298A332CDB03F66375CE7D78C12CF624A8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a1:d4:1e:81:c0:3d:e9:7e:18:4b:d5:eb:99:a7:05:84:b2:fc:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76923298A332CDB03F66375CE7D78C12CF624A8 Validity Not Before: Jun 19 20:41:00 2026 GMT Not After : Jun 20 22:43:00 2026 GMT Subject: CN=561DB7F2BF013D1A3FE880CADFCBD21166F8E49C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:44:45:fe:44:24:6b:ff:55:cd:ca:b0:78:fb: a4:23:c7:7b:df:39:a1:ae:9f:14:a2:4a:62:1c:34: e5:1e:9c:73:ad:b9:eb:67:c0:45:a8:5c:2a:1d:89: 6b:9c:d7:fd:39:ba:e4:fb:36:07:d0:ac:d1:82:47: 45:b5:65:46:1f:a0:6e:49:42:b1:e5:dc:5d:50:6b: 32:4b:df:f8:0b:f4:c8:97:92:a7:80:cf:13:ba:60: 17:36:20:ef:25:0d:4f:a0:d0:3d:08:16:1a:3f:49: 5f:a5:09:bb:92:6e:d3:57:30:7b:40:ff:97:69:85: c7:78:cf:c5:66:84:63:1a:73:48:fd:43:d3:14:07: fb:cc:a4:67:9f:fd:20:c3:6d:16:06:12:c4:ce:af: 09:b1:83:00:25:04:af:28:5a:19:54:02:ff:34:6a: 37:55:39:fb:52:10:c6:77:49:fa:c4:26:90:65:1f: 3c:7e:1d:56:ad:0d:ad:e9:13:4a:65:23:cc:63:64: 1b:42:de:ea:42:11:c7:6d:bd:61:62:07:d3:67:2d: a3:8a:6d:7b:e9:97:85:4e:50:9f:ed:f0:c5:36:68: d3:6a:12:36:69:a4:3b:af:eb:a0:03:08:a6:89:b6: c8:55:ec:a6:25:bf:dd:6d:c7:c5:af:52:df:c8:24: d9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1D:B7:F2:BF:01:3D:1A:3F:E8:80:CA:DF:CB:D2:11:66:F8:E4:9C X509v3 Authority Key Identifier: keyid:D7:69:23:29:8A:33:2C:DB:03:F6:63:75:CE:7D:78:C1:2C:F6:24:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D76923298A332CDB03F66375CE7D78C12CF624A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:1c:5b:12:08:b8:3f:75:bc:3d:43:e0:d5:f6:07:50:66:00: 3c:46:cc:60:55:49:c8:d1:15:41:2b:d3:f7:c4:86:89:0b:d1: 61:82:5a:63:df:b2:49:c4:bc:b5:df:9e:4b:ae:28:6c:c2:2d: 3e:02:a6:2d:69:12:fe:49:3b:0c:a4:63:b8:1d:1f:e6:8e:70: 18:b7:bd:f4:9d:1e:7a:eb:2f:6a:df:83:cf:83:dc:f6:a9:39: f7:9f:cb:8d:81:3d:5b:ca:bf:ba:f5:3a:a9:4f:af:49:e6:71: 1d:18:7e:7a:c4:9a:8f:cd:ff:5f:b5:70:30:80:20:90:13:dd: 0e:78:0f:2d:41:4e:43:6e:22:0d:78:be:2c:25:e7:fe:7d:f4: 17:72:9c:77:f2:41:e8:4c:f1:03:7d:dd:12:0b:7c:49:d4:5d: 4c:d8:ec:e4:38:ef:f1:ec:dd:81:b3:ec:64:c2:82:8a:0a:46: fe:0d:b2:9f:17:e5:43:be:09:a8:67:90:5d:78:6d:c0:46:07: e4:05:b6:4f:64:49:2f:5c:3d:1b:0e:a4:ee:48:a2:d5:9a:72: 6d:e1:a0:16:c5:53:d1:e6:3f:46:0f:f1:7b:55:7e:6b:4b:b5: 4a:40:d5:ed:1a:ba:b8:5b:86:e6:b2:a0:d0:82:1f:f9:9c:87: e4:61:93:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA6HUHoHAPel+GEvV65mnBYSy/FkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2OTIzMjk4QTMzMkNEQjAzRjY2Mzc1Q0U3RDc4QzEy Q0Y2MjRBODAeFw0yNjA2MTkyMDQxMDBaFw0yNjA2MjAyMjQzMDBaMDMxMTAvBgNV BAMTKDU2MURCN0YyQkYwMTNEMUEzRkU4ODBDQURGQ0JEMjExNjZGOEU0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxREX+RCRr/1XNyrB4+6Qjx3vf OaGunxSiSmIcNOUenHOtuetnwEWoXCodiWuc1/05uuT7NgfQrNGCR0W1ZUYfoG5J QrHl3F1QazJL3/gL9MiXkqeAzxO6YBc2IO8lDU+g0D0IFho/SV+lCbuSbtNXMHtA /5dphcd4z8VmhGMac0j9Q9MUB/vMpGef/SDDbRYGEsTOrwmxgwAlBK8oWhlUAv80 ajdVOftSEMZ3SfrEJpBlHzx+HVatDa3pE0plI8xjZBtC3upCEcdtvWFiB9NnLaOK bXvpl4VOUJ/t8MU2aNNqEjZppDuv66ADCKaJtshV7KYlv91tx8WvUt/IJNlXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVh238r8BPRo/6IDK38vSEWb45JwwHwYDVR0j BBgwFoAU12kjKYozLNsD9mN1zn14wSz2JKgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmMzBlMjctYjk1ZS00ZDc1LTk2OGQtNTM4ZmI3OTE4ODI5LzAvRDc2OTIzMjk4 QTMzMkNEQjAzRjY2Mzc1Q0U3RDc4QzEyQ0Y2MjRBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzY5MjMyOThBMzMyQ0RCMDNGNjYzNzVDRTdENzhDMTJDRjYy NEE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvRDc2OTIzMjk4QTMzMkNEQjAzRjY2Mzc1Q0U3RDc4 QzEyQ0Y2MjRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0cWxIIuD91vD1D4NX2B1BmADxGzGBVScjR FUEr0/fEhokL0WGCWmPfsknEvLXfnkuuKGzCLT4Cpi1pEv5JOwykY7gdH+aOcBi3 vfSdHnrrL2rfg8+D3PapOfefy42BPVvKv7r1OqlPr0nmcR0YfnrEmo/N/1+1cDCA IJAT3Q54Dy1BTkNuIg14viwl5/599BdynHfyQehM8QN93RILfEnUXUzY7OQ47/Hs 3YGz7GTCgooKRv4Nsp8X5UO+CahnkF14bcBGB+QFtk9kSS9cPRsOpO5IotWacm3h oBbFU9HmP0YP8XtVfmtLtUpA1e0aurhbhuayoNCCH/mch+RhkxY= -----END CERTIFICATE-----Generated at Sat Jun 20 08:50:43 2026 by rpki-client