$ rpki-client -vvf rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft File: B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft (raw, json) Hash identifier: XrFy5HmbwRy3MHnhQVWq07trRxhd8xg1E5A8JUulNCM= Subject key identifier: 5E:70:5C:09:4B:EE:48:D7:DD:DE:24:46:D5:51:87:B5:9E:A9:27:D8 Authority key identifier: B9:8F:D4:89:14:B4:89:C7:84:7A:7A:27:E5:3C:7F:16:03:BE:EA:D2 Certificate issuer: /CN=B98FD48914B489C7847A7A27E53C7F1603BEEAD2 Certificate serial: 58120CA9D68787548DD20ABAFE9D9AA64F28E0A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 17:01:18 +0000 Manifest this update: Fri 19 Jun 2026 16:56:18 +0000 Manifest next update: Sat 20 Jun 2026 19:56:18 +0000 Files and hashes: 1: B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl (hash: 4eqyIoxFNsC+1eOd77vFRYzYjO224X0OB1qq3wqeRHo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:12:0c:a9:d6:87:87:54:8d:d2:0a:ba:fe:9d:9a:a6:4f:28:e0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B98FD48914B489C7847A7A27E53C7F1603BEEAD2 Validity Not Before: Jun 19 16:56:18 2026 GMT Not After : Jun 20 19:56:18 2026 GMT Subject: CN=5E705C094BEE48D7DDDE2446D55187B59EA927D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5b:0b:90:f8:7d:25:ad:e6:a9:a5:0a:84:3d: fd:ab:2c:d1:72:0a:f5:e4:01:4f:47:65:1c:51:a5: ea:e7:e8:54:81:f3:d3:b9:86:19:9a:c4:41:9b:0f: bd:b7:7b:2b:64:87:15:d4:2c:86:93:6e:b6:9a:c1: f2:6b:18:42:ea:42:13:b7:3d:28:5a:5e:00:80:4b: 0e:c8:cf:8e:80:49:19:87:88:dd:f2:54:8a:75:23: c9:c5:44:b5:b3:6e:ed:e5:b9:a2:2b:17:7e:37:e4: b9:64:bd:2a:92:22:d6:f4:87:fb:df:95:31:0b:d3: 5e:a4:b4:f4:7c:ca:6e:78:d2:4b:24:f2:fe:4d:c0: b9:a4:51:41:47:de:90:d8:5c:b5:18:d4:27:6a:29: 1b:6e:31:75:9e:31:ad:1d:77:29:46:51:fc:20:20: 80:c4:25:dd:d9:98:75:86:36:95:cd:96:f3:a8:46: 7c:b1:b3:c3:32:db:95:01:90:e5:77:7a:58:65:79: cf:1e:5a:a6:e2:14:9c:1f:64:f5:f6:07:f2:a7:fc: 9a:9b:ad:42:b1:6a:ac:04:44:10:01:80:f3:6e:bf: 0b:05:f6:ce:8b:7a:ed:3f:1b:24:6b:18:4d:bd:ec: c1:e5:b5:0e:b9:b2:e9:8e:fc:ca:5c:35:80:e9:f1: 0f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:70:5C:09:4B:EE:48:D7:DD:DE:24:46:D5:51:87:B5:9E:A9:27:D8 X509v3 Authority Key Identifier: keyid:B9:8F:D4:89:14:B4:89:C7:84:7A:7A:27:E5:3C:7F:16:03:BE:EA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:6a:1e:7f:a5:91:1b:2e:35:91:2c:7b:22:88:f2:c8:aa:18: db:ca:e6:60:21:c2:5f:3c:07:ca:6d:1c:7b:b8:77:19:48:e3: 4c:56:06:66:d8:16:18:30:7f:aa:f8:cb:7f:5d:3b:56:22:aa: 84:7f:4c:ae:84:69:3c:8f:83:34:76:4d:d2:bd:ec:97:e2:8a: fc:5e:d3:a2:c5:44:05:97:bf:7a:0f:ee:d5:6d:98:5f:48:53: 97:1f:25:f3:c5:12:77:38:2c:16:f4:26:3b:d5:6a:dd:53:f5: a2:a1:a6:0f:21:03:79:12:02:08:21:c3:74:67:c5:26:91:04: aa:44:c1:da:d1:5a:fb:b6:aa:28:a6:4b:e3:e5:be:03:98:e3: 8f:53:84:2f:b2:e8:95:ae:58:3e:da:e0:23:f9:5e:c9:6c:ff: 2d:9d:58:9e:4a:b7:0b:7d:49:af:bc:5c:94:5e:25:b4:29:41: 9f:c3:76:55:62:27:80:87:84:f9:1f:d2:1e:2b:ae:24:ab:20: 3e:f7:bb:cf:ac:4c:39:43:c9:b0:7b:f6:cd:10:53:11:6f:55: 5e:d8:d8:27:c5:bc:1f:92:71:8a:29:72:36:f7:97:b5:f7:9c: 47:e6:c8:80:64:8d:65:12:b3:3e:1d:0a:39:8c:07:4c:34:a2: cf:7f:c1:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWBIMqdaHh1SN0gq6/p2apk8o4KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk4RkQ0ODkxNEI0ODlDNzg0N0E3QTI3RTUzQzdGMTYw M0JFRUFEMjAeFw0yNjA2MTkxNjU2MThaFw0yNjA2MjAxOTU2MThaMDMxMTAvBgNV BAMTKDVFNzA1QzA5NEJFRTQ4RDdERERFMjQ0NkQ1NTE4N0I1OUVBOTI3RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpWwuQ+H0lreappQqEPf2rLNFy CvXkAU9HZRxRpern6FSB89O5hhmaxEGbD723eytkhxXULIaTbraawfJrGELqQhO3 PShaXgCASw7Iz46ASRmHiN3yVIp1I8nFRLWzbu3luaIrF3435LlkvSqSItb0h/vf lTEL016ktPR8ym540ksk8v5NwLmkUUFH3pDYXLUY1CdqKRtuMXWeMa0ddylGUfwg IIDEJd3ZmHWGNpXNlvOoRnyxs8My25UBkOV3elhlec8eWqbiFJwfZPX2B/Kn/Jqb rUKxaqwERBABgPNuvwsF9s6Leu0/GyRrGE297MHltQ65sumO/MpcNYDp8Q9JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXnBcCUvuSNfd3iRG1VGHtZ6pJ9gwHwYDVR0j BBgwFoAUuY/UiRS0iceEenon5Tx/FgO+6tIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDVjMmM3MWMtNmFlNS00ZWE5LWI4NTAtNjMwMGUyZTFiYWRmLzAvQjk4RkQ0ODkx NEI0ODlDNzg0N0E3QTI3RTUzQzdGMTYwM0JFRUFEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COThGRDQ4OTE0QjQ4OUM3ODQ3QTdBMjdFNTNDN0YxNjAzQkVF QUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvQjk4RkQ0ODkxNEI0ODlDNzg0N0E3QTI3RTUzQzdG MTYwM0JFRUFEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVqHn+lkRsuNZEseyKI8siqGNvK5mAhwl88 B8ptHHu4dxlI40xWBmbYFhgwf6r4y39dO1YiqoR/TK6EaTyPgzR2TdK97Jfiivxe 06LFRAWXv3oP7tVtmF9IU5cfJfPFEnc4LBb0JjvVat1T9aKhpg8hA3kSAgghw3Rn xSaRBKpEwdrRWvu2qiimS+PlvgOY449ThC+y6JWuWD7a4CP5Xsls/y2dWJ5Ktwt9 Sa+8XJReJbQpQZ/DdlViJ4CHhPkf0h4rriSrID73u8+sTDlDybB79s0QUxFvVV7Y 2CfFvB+ScYopcjb3l7X3nEfmyIBkjWUSsz4dCjmMB0w0os9/waE= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:11 2026 by rpki-client