$ rpki-client -vvf rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft File: F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft (raw, json) Hash identifier: 2G8xIDVv3HEAKt3pg8yAZUqP2N3/SiFVJZqzPyUqHdQ= Subject key identifier: EA:08:F7:DB:59:42:52:6D:6B:9E:3F:F1:5F:5C:67:36:F0:73:C2:E6 Authority key identifier: F9:3D:8D:85:31:B3:FF:BA:EB:6D:F1:A9:06:96:10:EC:29:EC:2F:93 Certificate issuer: /CN=F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93 Certificate serial: 12CEC08813C31D0E853149699387244C1AF79A0D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 16:15:16 +0000 Manifest this update: Fri 19 Jun 2026 16:10:16 +0000 Manifest next update: Sat 20 Jun 2026 18:35:16 +0000 Files and hashes: 1: F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.crl (hash: C0Ciax15qFi/fgYJmo/z5tyaoVauXlvDq6iGlXKNY3g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.crl rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ce:c0:88:13:c3:1d:0e:85:31:49:69:93:87:24:4c:1a:f7:9a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93 Validity Not Before: Jun 19 16:10:16 2026 GMT Not After : Jun 20 18:35:16 2026 GMT Subject: CN=EA08F7DB5942526D6B9E3FF15F5C6736F073C2E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:26:31:e1:40:02:4f:4c:30:56:c8:15:60: 1c:e0:3a:dd:57:14:6a:ca:01:cc:c1:a3:49:fd:d8: 27:86:64:ec:77:47:52:b2:fa:f2:6c:ea:82:46:9e: 2a:ad:51:a0:5d:17:cf:11:a4:9a:20:7c:d1:2d:84: b1:51:ef:c3:72:20:9f:9b:9a:e2:89:66:24:a9:ee: 54:7c:31:08:ab:63:dd:82:dd:79:44:0c:64:d9:1d: d6:76:47:39:c1:26:0f:8e:6a:38:66:2a:2c:63:42: 29:5f:1c:d3:bb:88:7c:0a:2c:19:43:e1:a4:67:8f: e2:c7:86:38:90:ff:ac:83:6a:f1:5a:36:cf:27:8c: 8c:c4:c1:35:a3:2b:6c:65:45:11:cf:f3:15:39:31: 25:22:0b:19:6f:5a:26:ce:3e:97:74:81:5c:05:3e: f6:e9:02:52:2b:11:62:4b:ce:d1:84:43:a3:22:5c: be:b3:82:8a:11:e0:a3:36:71:70:c8:6a:1e:4c:37: cc:77:30:98:21:47:3d:68:71:9c:ec:78:7b:02:7a: d9:5e:3b:5a:b4:b7:d2:f5:bf:eb:f4:ca:a0:96:7f: 5f:5f:c0:f8:87:45:40:4a:d5:08:2e:76:b5:b1:e0: b0:fe:c8:50:f9:52:4f:1f:7a:15:72:cc:d6:49:6e: 1c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:08:F7:DB:59:42:52:6D:6B:9E:3F:F1:5F:5C:67:36:F0:73:C2:E6 X509v3 Authority Key Identifier: keyid:F9:3D:8D:85:31:B3:FF:BA:EB:6D:F1:A9:06:96:10:EC:29:EC:2F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:16:64:de:6d:2c:97:ba:1c:d3:a2:1f:96:a4:24:8c:af:57: 6a:80:76:0c:1d:bb:d1:5f:72:96:6a:7e:e1:f3:e2:34:8f:6c: 98:1b:78:fd:c3:3c:58:be:18:0d:0b:ff:5e:db:ca:30:fa:2e: 3b:5d:8c:83:a8:6a:c7:b1:dd:ab:31:64:b3:91:33:db:a2:db: c5:56:73:3f:98:68:b8:68:c6:df:90:92:a3:00:98:dd:24:77: 14:1c:89:73:be:b6:08:0e:a0:29:39:91:85:ea:8c:20:c4:09: ae:ea:83:4e:1a:80:5b:0c:f5:75:57:fd:8b:f7:ce:08:02:47: 0b:43:83:0c:dc:6f:c4:19:88:df:30:3e:61:3c:20:03:79:82: 35:d4:79:28:c4:45:5e:93:f2:e1:4e:a2:e7:90:f6:13:9f:00: ae:14:ee:be:78:f4:d7:e2:3e:e6:71:30:92:70:49:c3:c6:52: 2e:00:6b:b8:d4:9a:d0:3c:dd:18:a1:90:61:bc:b5:4d:73:b0: ef:a8:6c:95:66:aa:10:08:e1:0c:52:09:a7:58:d8:5b:25:a5: 94:92:84:f2:fe:6f:24:02:81:bd:85:9b:24:9e:fd:61:50:e5: 32:84:f8:6a:90:f6:52:0c:f9:b6:34:61:b1:31:63:49:4f:4c: 4a:b7:e4:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEs7AiBPDHQ6FMUlpk4ckTBr3mg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkzRDhEODUzMUIzRkZCQUVCNkRGMUE5MDY5NjEwRUMy OUVDMkY5MzAeFw0yNjA2MTkxNjEwMTZaFw0yNjA2MjAxODM1MTZaMDMxMTAvBgNV BAMTKEVBMDhGN0RCNTk0MjUyNkQ2QjlFM0ZGMTVGNUM2NzM2RjA3M0MyRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv+SYx4UACT0wwVsgVYBzgOt1X FGrKAczBo0n92CeGZOx3R1Ky+vJs6oJGniqtUaBdF88RpJogfNEthLFR78NyIJ+b muKJZiSp7lR8MQirY92C3XlEDGTZHdZ2RznBJg+OajhmKixjQilfHNO7iHwKLBlD 4aRnj+LHhjiQ/6yDavFaNs8njIzEwTWjK2xlRRHP8xU5MSUiCxlvWibOPpd0gVwF PvbpAlIrEWJLztGEQ6MiXL6zgooR4KM2cXDIah5MN8x3MJghRz1ocZzseHsCetle O1q0t9L1v+v0yqCWf19fwPiHRUBK1QgudrWx4LD+yFD5Uk8fehVyzNZJbhwvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6gj321lCUm1rnj/xX1xnNvBzwuYwHwYDVR0j BBgwFoAU+T2NhTGz/7rrbfGpBpYQ7CnsL5MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTJlOTZiZjMtZDAyMS00ZDg0LTkwZDUtYzI0NTU4YWE0OTVmLzAvRjkzRDhEODUz MUIzRkZCQUVCNkRGMUE5MDY5NjEwRUMyOUVDMkY5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTNEOEQ4NTMxQjNGRkJBRUI2REYxQTkwNjk2MTBFQzI5RUMy RjkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTJlOTZiZjMtZDAyMS00ZDg0LTkw ZDUtYzI0NTU4YWE0OTVmLzAvRjkzRDhEODUzMUIzRkZCQUVCNkRGMUE5MDY5NjEw RUMyOUVDMkY5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4WZN5tLJe6HNOiH5akJIyvV2qAdgwdu9Ff cpZqfuHz4jSPbJgbeP3DPFi+GA0L/17byjD6LjtdjIOoasex3asxZLORM9ui28VW cz+YaLhoxt+QkqMAmN0kdxQciXO+tggOoCk5kYXqjCDECa7qg04agFsM9XVX/Yv3 zggCRwtDgwzcb8QZiN8wPmE8IAN5gjXUeSjERV6T8uFOoueQ9hOfAK4U7r549Nfi PuZxMJJwScPGUi4Aa7jUmtA83RihkGG8tU1zsO+obJVmqhAI4QxSCadY2FslpZSS hPL+byQCgb2FmySe/WFQ5TKE+GqQ9lIM+bY0YbExY0lPTEq35B0= -----END CERTIFICATE-----Generated at Sat Jun 20 08:56:29 2026 by rpki-client