$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft File: 5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft (raw, json) Hash identifier: IsiRYJLP+QLI0FOlpxXqxEBm6Srpc57fobF1pZduMJU= Subject key identifier: 6D:C2:52:73:5F:15:35:0D:FF:09:E2:72:EB:BC:A3:A9:EA:D2:2E:31 Authority key identifier: 5A:A9:4F:74:20:AA:22:63:29:E6:9A:E8:CD:2E:C0:CE:60:D8:77:6A Certificate issuer: /CN=5AA94F7420AA226329E69AE8CD2EC0CE60D8776A Certificate serial: 04B18D3C09AA9A7AAEF53FBB108B60659F95F048 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 19:34:35 +0000 Manifest this update: Fri 19 Jun 2026 19:29:35 +0000 Manifest next update: Sat 20 Jun 2026 22:16:35 +0000 Files and hashes: 1: 5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl (hash: gKB4xIe22IoE0mYHUrCqgd4j7lD3QZX0JhfcqiWhFvM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b1:8d:3c:09:aa:9a:7a:ae:f5:3f:bb:10:8b:60:65:9f:95:f0:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AA94F7420AA226329E69AE8CD2EC0CE60D8776A Validity Not Before: Jun 19 19:29:35 2026 GMT Not After : Jun 20 22:16:35 2026 GMT Subject: CN=6DC252735F15350DFF09E272EBBCA3A9EAD22E31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d4:cc:98:ac:ac:3c:12:90:8c:00:b5:36:8c: db:a0:d4:6a:6f:b3:0f:91:a0:6c:f0:8f:0c:51:a5: 44:93:23:bf:e5:cf:fc:e3:58:8f:82:e5:57:2a:14: 15:5a:2d:6e:2d:7c:df:dd:ae:b5:38:6b:4c:6e:ef: d1:13:d0:4c:99:ea:90:c7:73:a8:30:cc:59:2e:8c: 56:f4:c4:db:86:99:20:a7:67:6c:70:bd:23:bd:c2: fb:f3:16:1b:87:0f:27:0a:23:69:bf:4d:0d:fc:f6: e3:43:e4:dc:6b:12:33:f0:f6:11:56:4a:2a:90:83: 0c:8e:13:3d:1d:00:3b:bb:3b:71:19:81:52:0f:9d: b7:e1:d8:35:66:b1:ab:ba:e5:8e:49:47:a2:2d:c6: bd:8c:8d:21:20:b6:be:cf:35:0d:45:92:2a:20:20: 11:11:6a:ef:4a:8e:53:82:32:07:df:de:6c:62:67: 8c:d8:d1:16:fd:82:1b:28:0e:e5:e8:73:92:62:a5: 69:1c:5b:87:da:30:23:d8:b1:e2:01:cf:25:a0:4f: 16:e6:00:b4:41:83:13:55:f9:72:58:81:07:3c:8d: 0a:91:dd:d2:8c:1a:8a:84:7e:10:c7:e4:2a:c4:f1: 57:bb:b7:c0:2c:34:f3:fd:c4:98:a9:a3:04:18:31: 0c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C2:52:73:5F:15:35:0D:FF:09:E2:72:EB:BC:A3:A9:EA:D2:2E:31 X509v3 Authority Key Identifier: keyid:5A:A9:4F:74:20:AA:22:63:29:E6:9A:E8:CD:2E:C0:CE:60:D8:77:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ef:e3:ec:b3:03:ce:07:9a:a7:e5:4b:62:a6:7e:4a:5b:1f: 03:3f:8f:d9:ee:75:5a:ee:cd:f3:29:47:1d:35:aa:4c:02:c7: 3d:15:8d:4c:ed:77:e2:ca:72:63:11:a0:02:8c:ba:05:10:fd: 2b:94:97:7a:7d:10:94:43:15:b2:5e:ec:08:19:c0:11:ab:0a: d6:dc:0b:20:01:c9:11:0c:f1:fa:93:f0:2c:8b:b7:18:41:d3: 14:66:08:24:10:c5:2c:a1:9b:d6:d4:ec:ae:38:05:fd:60:cf: 0e:0f:8b:6f:77:05:2a:d6:3c:62:cd:ff:9b:0e:99:4c:4f:ee: 6e:b1:d5:3f:45:b7:65:18:8e:50:de:f3:17:42:af:fb:9c:90: 06:21:45:33:9a:8b:a0:5d:ce:6b:f2:fe:48:89:6e:16:e2:a5: 93:3b:d5:0c:38:b4:16:9e:4b:c7:5c:81:d5:a5:ea:ba:13:99: ad:04:53:10:e6:0a:9f:36:44:57:b6:9c:70:e7:4f:d2:c5:66: 42:29:9c:21:18:ca:54:0f:d2:2d:89:f8:e4:96:0f:e1:13:7b: 20:de:c1:eb:b6:c4:be:68:3e:71:25:85:c9:ed:31:52:5a:af: d8:3f:f0:ee:ba:10:c1:17:a9:cb:29:86:44:8d:7c:9a:44:e8: a3:09:20:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLGNPAmqmnqu9T+7EItgZZ+V8EgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFBOTRGNzQyMEFBMjI2MzI5RTY5QUU4Q0QyRUMwQ0U2 MEQ4Nzc2QTAeFw0yNjA2MTkxOTI5MzVaFw0yNjA2MjAyMjE2MzVaMDMxMTAvBgNV BAMTKDZEQzI1MjczNUYxNTM1MERGRjA5RTI3MkVCQkNBM0E5RUFEMjJFMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51MyYrKw8EpCMALU2jNug1Gpv sw+RoGzwjwxRpUSTI7/lz/zjWI+C5VcqFBVaLW4tfN/drrU4a0xu79ET0EyZ6pDH c6gwzFkujFb0xNuGmSCnZ2xwvSO9wvvzFhuHDycKI2m/TQ389uND5NxrEjPw9hFW SiqQgwyOEz0dADu7O3EZgVIPnbfh2DVmsau65Y5JR6Itxr2MjSEgtr7PNQ1Fkiog IBERau9KjlOCMgff3mxiZ4zY0Rb9ghsoDuXoc5JipWkcW4faMCPYseIBzyWgTxbm ALRBgxNV+XJYgQc8jQqR3dKMGoqEfhDH5CrE8Ve7t8AsNPP9xJipowQYMQwBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbcJSc18VNQ3/CeJy67yjqerSLjEwHwYDVR0j BBgwFoAUWqlPdCCqImMp5prozS7AzmDYd2owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ1MDA4YTAtMGFjMy00OThlLThjYmYtZjMxMTJiOTFiZGY0LzAvNUFBOTRGNzQy MEFBMjI2MzI5RTY5QUU4Q0QyRUMwQ0U2MEQ4Nzc2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUE5NEY3NDIwQUEyMjYzMjlFNjlBRThDRDJFQzBDRTYwRDg3 NzZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ1MDA4YTAtMGFjMy00OThlLThj YmYtZjMxMTJiOTFiZGY0LzAvNUFBOTRGNzQyMEFBMjI2MzI5RTY5QUU4Q0QyRUMw Q0U2MEQ4Nzc2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfv4+yzA84HmqflS2KmfkpbHwM/j9nudVru zfMpRx01qkwCxz0VjUztd+LKcmMRoAKMugUQ/SuUl3p9EJRDFbJe7AgZwBGrCtbc CyAByREM8fqT8CyLtxhB0xRmCCQQxSyhm9bU7K44Bf1gzw4Pi293BSrWPGLN/5sO mUxP7m6x1T9Ft2UYjlDe8xdCr/uckAYhRTOai6Bdzmvy/kiJbhbipZM71Qw4tBae S8dcgdWl6roTma0EUxDmCp82RFe2nHDnT9LFZkIpnCEYylQP0i2J+OSWD+ETeyDe weu2xL5oPnElhcntMVJar9g/8O66EMEXqcsphkSNfJpE6KMJIEs= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:24 2026 by rpki-client