$ rpki-client -vvf rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft File: 673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft (raw, json) Hash identifier: ytRY71/McDot3aSlosZRdMQex6IxhqqM+1MVAz/R9s4= Subject key identifier: 6A:2E:97:A1:67:D7:07:FE:9B:C9:75:B2:37:B4:A1:8F:8C:F4:4D:EC Authority key identifier: 67:3A:5D:51:1F:DC:C0:A4:98:DE:9E:34:28:D3:5C:44:EB:25:AF:BB Certificate issuer: /CN=673A5D511FDCC0A498DE9E3428D35C44EB25AFBB Certificate serial: 10AFB40A043F00279BCA5F76A6B0A09719D1CE2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft Manifest number: 40 Signing time: Sat 20 Jun 2026 00:05:02 +0000 Manifest this update: Sat 20 Jun 2026 00:00:02 +0000 Manifest next update: Sun 21 Jun 2026 01:24:02 +0000 Files and hashes: 1: 673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl (hash: 4IHPYHSI4Bn1mM8QHEY13IK8b4ZFaicOt1FoYwIitFo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 01:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:af:b4:0a:04:3f:00:27:9b:ca:5f:76:a6:b0:a0:97:19:d1:ce:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673A5D511FDCC0A498DE9E3428D35C44EB25AFBB Validity Not Before: Jun 20 00:00:02 2026 GMT Not After : Jun 21 01:24:02 2026 GMT Subject: CN=6A2E97A167D707FE9BC975B237B4A18F8CF44DEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ca:14:5d:4b:a1:90:34:43:c5:71:2e:4f:cc: 70:7a:ef:f4:dd:f7:11:47:10:f8:84:b1:a8:55:ba: 7b:92:3e:03:14:cc:dc:59:90:f2:35:1e:ab:60:cc: d7:59:5c:b9:0c:08:82:a7:94:41:d9:1d:c7:7a:df: e1:6f:80:09:a0:b4:60:51:9a:86:fc:5d:d6:e7:3a: a6:7b:e5:15:5b:c6:43:a3:c6:0e:80:f5:6e:b9:5c: 6d:d6:aa:2a:f3:41:4e:35:73:b3:e8:4d:32:12:26: b4:fc:f3:42:c9:31:28:52:29:d4:42:8f:61:70:6b: 02:6f:bb:e0:d0:d1:dc:9d:1a:a0:50:1c:17:7e:d4: 00:a5:83:c9:38:d0:9d:0f:e0:a1:53:b2:ea:de:b3: 09:89:fd:b3:f3:7e:0e:31:56:7e:8e:8c:18:05:45: 31:e1:2c:ee:70:b8:ef:ca:d8:e7:00:f0:f9:45:5c: 7b:7d:65:59:a4:54:b3:8e:ae:cf:b3:35:ff:a8:c5: 44:13:dd:ae:ad:fa:29:cc:41:eb:ae:f7:33:00:b6: 2f:cf:6d:2d:47:f6:2b:04:e1:8d:eb:87:8a:3f:7f: d0:f6:1d:eb:76:3d:f3:41:f2:e4:fc:c9:5d:14:96: f1:fa:d4:89:e5:4a:9b:73:ec:a6:41:e6:d8:9a:33: 53:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2E:97:A1:67:D7:07:FE:9B:C9:75:B2:37:B4:A1:8F:8C:F4:4D:EC X509v3 Authority Key Identifier: keyid:67:3A:5D:51:1F:DC:C0:A4:98:DE:9E:34:28:D3:5C:44:EB:25:AF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:87:4a:ac:89:a3:af:49:da:dd:5c:5d:2c:1d:fd:df:21:e8: 48:75:c0:bd:7b:51:f8:f0:c2:cc:7b:9b:aa:17:53:19:33:ac: 76:c5:d5:4e:00:c5:fe:3a:95:b8:f2:2a:ea:8c:bf:c1:a4:d0: ef:10:0a:4c:53:2e:85:90:b3:8c:e2:31:18:c4:3c:64:17:b0: cb:04:78:f3:6d:50:ef:24:ca:09:68:28:d7:f6:44:fa:b5:9a: d6:c7:8d:eb:07:eb:0f:3d:52:3f:29:ec:82:cf:09:09:bc:de: 4b:4b:82:d8:19:02:ef:7c:08:a0:74:d3:f9:c8:56:9e:bb:9e: 76:6b:f8:0a:93:eb:5a:de:1c:a4:a8:83:17:15:45:94:78:7d: 12:d5:c3:b9:99:18:28:56:8d:cb:02:e6:d0:8e:25:ce:69:12: d3:02:63:b9:38:be:91:71:9a:13:bf:39:75:e8:98:fc:5d:85: c1:00:5d:1e:21:41:fe:67:7c:d7:bc:06:20:62:14:4b:cb:25: 25:eb:91:b8:f6:68:e5:f0:64:74:dc:f6:fd:bb:a6:59:d3:fe: 32:28:90:16:d0:2b:50:e3:dc:8f:0c:8d:d0:f4:65:93:ff:b4: 81:a2:28:9d:e5:4b:91:57:0f:53:9f:6c:3e:16:be:db:57:39: 17:65:a6:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEK+0CgQ/ACebyl92prCglxnRziswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjczQTVENTExRkRDQzBBNDk4REU5RTM0MjhEMzVDNDRF QjI1QUZCQjAeFw0yNjA2MjAwMDAwMDJaFw0yNjA2MjEwMTI0MDJaMDMxMTAvBgNV BAMTKDZBMkU5N0ExNjdENzA3RkU5QkM5NzVCMjM3QjRBMThGOENGNDRERUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZyhRdS6GQNEPFcS5PzHB67/Td 9xFHEPiEsahVunuSPgMUzNxZkPI1HqtgzNdZXLkMCIKnlEHZHcd63+FvgAmgtGBR mob8XdbnOqZ75RVbxkOjxg6A9W65XG3WqirzQU41c7PoTTISJrT880LJMShSKdRC j2FwawJvu+DQ0dydGqBQHBd+1AClg8k40J0P4KFTsureswmJ/bPzfg4xVn6OjBgF RTHhLO5wuO/K2OcA8PlFXHt9ZVmkVLOOrs+zNf+oxUQT3a6t+inMQeuu9zMAti/P bS1H9isE4Y3rh4o/f9D2Het2PfNB8uT8yV0UlvH61InlSptz7KZB5tiaM1O5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUai6XoWfXB/6byXWyN7Shj4z0TewwHwYDVR0j BBgwFoAUZzpdUR/cwKSY3p40KNNcROslr7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjUwNGU0YzctN2EyZC00ZDY2LThmYjQtMjA1NTY1Nzg3ZjI0LzAvNjczQTVENTEx RkRDQzBBNDk4REU5RTM0MjhEMzVDNDRFQjI1QUZCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzNBNUQ1MTFGRENDMEE0OThERTlFMzQyOEQzNUM0NEVCMjVB RkJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvNjczQTVENTExRkRDQzBBNDk4REU5RTM0MjhEMzVD NDRFQjI1QUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyHSqyJo69J2t1cXSwd/d8h6Eh1wL17Ufjw wsx7m6oXUxkzrHbF1U4Axf46lbjyKuqMv8Gk0O8QCkxTLoWQs4ziMRjEPGQXsMsE ePNtUO8kygloKNf2RPq1mtbHjesH6w89Uj8p7ILPCQm83ktLgtgZAu98CKB00/nI Vp67nnZr+AqT61reHKSogxcVRZR4fRLVw7mZGChWjcsC5tCOJc5pEtMCY7k4vpFx mhO/OXXomPxdhcEAXR4hQf5nfNe8BiBiFEvLJSXrkbj2aOXwZHTc9v27plnT/jIo kBbQK1Dj3I8MjdD0ZZP/tIGiKJ3lS5FXD1OfbD4WvttXORdlpvI= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:47 2026 by rpki-client