$ rpki-client -vvf rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft File: 271068E54464101C4BF23BC5A4339C1CA88116CD.mft (raw, json) Hash identifier: zqaJKV/mAKjTKHaS+NdlKQQAZN/ChpWNbgxD90LxLlM= Subject key identifier: 68:8D:9A:90:FB:51:44:7B:78:49:50:A6:2B:F9:CE:75:08:FF:AC:32 Authority key identifier: 27:10:68:E5:44:64:10:1C:4B:F2:3B:C5:A4:33:9C:1C:A8:81:16:CD Certificate issuer: /CN=271068E54464101C4BF23BC5A4339C1CA88116CD Certificate serial: 2EC69B22307D1DF188C368AD77CD0F25AE0F6211 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/271068E54464101C4BF23BC5A4339C1CA88116CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 16:56:07 +0000 Manifest this update: Fri 19 Jun 2026 16:51:07 +0000 Manifest next update: Sat 20 Jun 2026 20:09:07 +0000 Files and hashes: 1: 271068E54464101C4BF23BC5A4339C1CA88116CD.crl (hash: KLE1Cfl4P+2mX/ONYcwntDQN8qaNLo+u3aL38CWQkB0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.crl rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/271068E54464101C4BF23BC5A4339C1CA88116CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c6:9b:22:30:7d:1d:f1:88:c3:68:ad:77:cd:0f:25:ae:0f:62:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=271068E54464101C4BF23BC5A4339C1CA88116CD Validity Not Before: Jun 19 16:51:07 2026 GMT Not After : Jun 20 20:09:07 2026 GMT Subject: CN=688D9A90FB51447B784950A62BF9CE7508FFAC32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c8:f2:9c:98:b9:e8:33:f3:7e:5c:ff:3a:4a: 52:c8:04:92:52:e5:cf:5e:13:95:e1:48:d3:8b:e6: 84:af:b4:e5:d0:cb:64:98:a7:7f:cb:cb:46:0a:ce: 01:97:23:8a:c2:9d:6b:1c:bb:5f:77:e6:e4:05:fd: 9e:32:df:c4:d3:0f:74:7a:ab:07:ff:db:54:9f:66: 65:ef:66:c5:bc:94:88:03:60:ac:90:4f:95:02:ea: f9:2f:4a:5f:44:d1:87:a6:1c:e2:de:16:68:01:93: 7d:e1:02:3b:07:9a:21:89:c9:62:36:9f:92:20:12: 2b:14:27:28:3e:35:b6:47:4a:d7:db:2e:7c:84:61: 2f:a3:dd:e9:f6:db:d8:9e:6f:a5:4e:6a:fb:32:d0: 7b:cc:61:2c:a2:a2:f3:25:1c:46:32:8e:8b:c1:e3: 57:a4:94:15:0f:c8:85:da:8f:bc:9b:66:4f:41:a4: 7b:ae:5d:ea:70:09:aa:1f:44:d2:db:7b:aa:cf:b6: 02:4d:91:64:ae:d0:36:84:96:be:42:c8:21:4b:01: 71:3b:da:03:57:4a:25:a1:03:97:4d:f2:67:32:bf: 6d:91:79:f8:2a:54:a8:c2:91:74:c6:0a:d8:bc:1f: a2:1d:7b:09:7e:48:3d:6c:ec:0b:5e:f9:3c:f6:98: b8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8D:9A:90:FB:51:44:7B:78:49:50:A6:2B:F9:CE:75:08:FF:AC:32 X509v3 Authority Key Identifier: keyid:27:10:68:E5:44:64:10:1C:4B:F2:3B:C5:A4:33:9C:1C:A8:81:16:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/271068E54464101C4BF23BC5A4339C1CA88116CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f0:01:23:fa:57:33:f2:05:b1:7a:14:58:7b:d6:6c:43:f1: 12:a6:90:dc:9a:12:f8:8e:66:69:1f:22:35:87:6a:b7:5d:8c: c3:44:79:31:cb:a1:10:d6:a8:f1:18:07:19:6f:39:32:b5:a1: f0:b8:5f:81:19:97:82:99:82:ce:ef:c2:86:f7:e2:fc:bf:9e: b9:0f:79:88:b5:02:03:d9:d2:62:03:f5:b5:fb:76:f4:1e:7c: ed:7c:4f:81:c1:c1:ad:4a:2a:69:51:dd:d9:76:7c:69:ff:51: 78:63:b0:70:f0:62:57:f9:ac:e1:e7:b0:01:e7:db:2e:5f:09: 21:16:43:fd:2f:c3:90:cc:3d:d5:7b:d2:74:1e:d4:38:b1:97: 1d:f7:37:af:91:3d:80:c2:df:67:eb:12:3a:18:31:fd:58:10: 55:cd:64:ce:82:ab:6d:b2:66:23:b0:f1:de:68:16:82:f1:1d: 38:12:1b:05:f2:e5:98:a5:c8:52:dd:d0:0c:fd:d3:db:3a:ed: 08:b2:18:c7:26:8a:b0:16:28:bc:74:cd:b1:d5:b0:ef:9a:a9: f8:fe:7e:8b:d8:b1:5d:b9:60:ca:aa:24:ae:82:1e:fb:36:8b: 59:65:e9:6a:a6:ee:81:9f:3d:3e:45:df:2f:d7:0e:30:7f:00: 9b:ab:a0:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULsabIjB9HfGIw2itd80PJa4PYhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjcxMDY4RTU0NDY0MTAxQzRCRjIzQkM1QTQzMzlDMUNB ODgxMTZDRDAeFw0yNjA2MTkxNjUxMDdaFw0yNjA2MjAyMDA5MDdaMDMxMTAvBgNV BAMTKDY4OEQ5QTkwRkI1MTQ0N0I3ODQ5NTBBNjJCRjlDRTc1MDhGRkFDMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMyPKcmLnoM/N+XP86SlLIBJJS 5c9eE5XhSNOL5oSvtOXQy2SYp3/Ly0YKzgGXI4rCnWscu1935uQF/Z4y38TTD3R6 qwf/21SfZmXvZsW8lIgDYKyQT5UC6vkvSl9E0YemHOLeFmgBk33hAjsHmiGJyWI2 n5IgEisUJyg+NbZHStfbLnyEYS+j3en229ieb6VOavsy0HvMYSyiovMlHEYyjovB 41eklBUPyIXaj7ybZk9BpHuuXepwCaofRNLbe6rPtgJNkWSu0DaElr5CyCFLAXE7 2gNXSiWhA5dN8mcyv22RefgqVKjCkXTGCti8H6Idewl+SD1s7Ate+Tz2mLgVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaI2akPtRRHt4SVCmK/nOdQj/rDIwHwYDVR0j BBgwFoAUJxBo5URkEBxL8jvFpDOcHKiBFs0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjZjN2U1YjEtNTE5ZC00NTZjLWIzYjYtNzU1Nzk0NzAyNjY0LzAvMjcxMDY4RTU0 NDY0MTAxQzRCRjIzQkM1QTQzMzlDMUNBODgxMTZDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNzEwNjhFNTQ0NjQxMDFDNEJGMjNCQzVBNDMzOUMxQ0E4ODEx NkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjZjN2U1YjEtNTE5ZC00NTZjLWIz YjYtNzU1Nzk0NzAyNjY0LzAvMjcxMDY4RTU0NDY0MTAxQzRCRjIzQkM1QTQzMzlD MUNBODgxMTZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjwASP6VzPyBbF6FFh71mxD8RKmkNyaEviO ZmkfIjWHarddjMNEeTHLoRDWqPEYBxlvOTK1ofC4X4EZl4KZgs7vwob34vy/nrkP eYi1AgPZ0mID9bX7dvQefO18T4HBwa1KKmlR3dl2fGn/UXhjsHDwYlf5rOHnsAHn 2y5fCSEWQ/0vw5DMPdV70nQe1Dixlx33N6+RPYDC32frEjoYMf1YEFXNZM6Cq22y ZiOw8d5oFoLxHTgSGwXy5ZilyFLd0Az909s67QiyGMcmirAWKLx0zbHVsO+aqfj+ fovYsV25YMqqJK6CHvs2i1ll6Wqm7oGfPT5F3y/XDjB/AJuroK4= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:11 2026 by rpki-client