$ rpki-client -vvf rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft File: D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft (raw, json) Hash identifier: SCh789Z+B1YococVCPfYDoKvp4+G/AIIdZtV2ZLjyM4= Subject key identifier: ED:94:15:86:DF:38:E7:53:FF:4B:1E:FC:13:51:5B:72:4F:86:B7:CA Authority key identifier: D6:C0:95:71:57:A1:ED:A2:4F:0D:EF:F6:D0:FE:F2:81:37:C1:97:DC Certificate issuer: /CN=D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC Certificate serial: 0D0FCFACFED1E30D6F755B0E5784BA14EADCD1BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:19:19 +0000 Manifest this update: Wed 17 Jun 2026 05:14:19 +0000 Manifest next update: Thu 18 Jun 2026 08:06:19 +0000 Files and hashes: 1: D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl (hash: B8EiPg1BN6P8cMAvI1nU3PNMLEpMsFdG5L9gWGgNKDA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0f:cf:ac:fe:d1:e3:0d:6f:75:5b:0e:57:84:ba:14:ea:dc:d1:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC Validity Not Before: Jun 17 05:14:19 2026 GMT Not After : Jun 18 08:06:19 2026 GMT Subject: CN=ED941586DF38E753FF4B1EFC13515B724F86B7CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:4c:2e:b8:ce:ee:22:bf:e3:d3:f6:3c:be: 6c:95:43:9a:6f:c7:09:97:26:1f:f9:ed:f9:f7:0b: e7:74:28:34:a5:c0:ef:b0:2f:32:cc:0a:94:52:fa: b6:79:eb:40:68:17:82:51:21:bd:58:02:96:a0:93: 8b:9e:7a:32:80:27:d9:aa:4e:e6:6d:0a:cb:6b:4c: 9b:0f:6b:4e:9c:3a:48:fb:61:d4:68:8f:5d:d4:54: 35:64:a5:04:05:a8:d9:a2:b0:21:2f:04:82:b2:38: fd:44:eb:ce:24:71:f9:3b:c9:fb:2b:8a:1b:00:4f: c9:cd:d9:bb:78:72:d1:df:2e:25:2f:4f:a9:06:9f: f9:fd:b3:9c:84:cd:73:f2:ee:1b:e3:f8:77:4f:ae: 40:7e:cf:05:cc:40:d3:43:ee:d9:29:4a:a6:e0:88: e5:96:91:73:e3:62:dc:05:06:27:37:6d:1b:45:23: 2b:33:69:49:75:7b:9d:2a:96:b2:4d:31:fd:51:71: 14:88:4d:a6:44:a7:16:06:45:f4:cb:ef:95:96:9e: 47:e0:f0:a1:5b:8d:1b:27:98:e6:2e:0c:6e:9a:17: 79:ce:49:52:35:dc:c1:35:1a:ac:db:56:71:d9:8f: 50:7e:15:9b:df:59:7e:00:f1:c8:61:ea:8f:60:78: 31:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:94:15:86:DF:38:E7:53:FF:4B:1E:FC:13:51:5B:72:4F:86:B7:CA X509v3 Authority Key Identifier: keyid:D6:C0:95:71:57:A1:ED:A2:4F:0D:EF:F6:D0:FE:F2:81:37:C1:97:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:07:17:60:46:04:12:12:56:8f:c3:0f:13:f2:cd:d3:28:04: 44:f6:98:ff:7b:db:ae:4d:04:43:84:7d:ce:b7:d7:15:dc:e6: d1:55:e0:49:22:5e:bf:64:96:4f:c0:76:67:e4:f2:10:d6:50: 79:05:4a:00:b4:89:ac:d2:97:71:80:9b:fe:1b:bf:d2:65:0d: 9b:8c:6a:f5:44:b2:3b:23:ca:2c:90:d4:c1:f1:64:d6:8e:71: 1e:5b:cb:2c:55:e1:0f:19:1b:ef:24:54:dd:ab:f1:db:bf:be: 78:30:1d:b4:70:d3:8b:ba:a6:59:45:37:d8:30:18:07:1f:cf: 94:5d:9e:c2:c0:14:50:2a:98:4d:3b:c8:f8:d2:60:73:f3:f3: 98:37:28:dc:6d:d9:35:48:3e:78:85:8d:33:bc:c1:be:f7:37: 20:c0:57:b6:9b:9e:3d:8d:be:ab:f2:fd:1f:c1:27:25:b9:d0: 39:ed:1a:a1:a4:48:35:82:07:e1:f0:d6:c5:f1:f1:d1:cc:9c: 0e:6c:0c:ac:d0:c7:10:d6:f3:5f:cb:7b:fc:63:73:bf:58:7f: d6:57:79:94:2b:02:72:8a:50:32:95:b2:3b:b2:81:40:57:78: 59:95:13:e9:a0:90:12:07:6d:32:0d:7e:34:8b:71:c7:8d:8a: d1:10:64:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQ/PrP7R4w1vdVsOV4S6FOrc0bwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMDk1NzE1N0ExRURBMjRGMERFRkY2RDBGRUYyODEz N0MxOTdEQzAeFw0yNjA2MTcwNTE0MTlaFw0yNjA2MTgwODA2MTlaMDMxMTAvBgNV BAMTKEVEOTQxNTg2REYzOEU3NTNGRjRCMUVGQzEzNTE1QjcyNEY4NkI3Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zkwuuM7uIr/j0/Y8vmyVQ5pv xwmXJh/57fn3C+d0KDSlwO+wLzLMCpRS+rZ560BoF4JRIb1YApagk4ueejKAJ9mq TuZtCstrTJsPa06cOkj7YdRoj13UVDVkpQQFqNmisCEvBIKyOP1E684kcfk7yfsr ihsAT8nN2bt4ctHfLiUvT6kGn/n9s5yEzXPy7hvj+HdPrkB+zwXMQNND7tkpSqbg iOWWkXPjYtwFBic3bRtFIyszaUl1e50qlrJNMf1RcRSITaZEpxYGRfTL75WWnkfg 8KFbjRsnmOYuDG6aF3nOSVI13ME1GqzbVnHZj1B+FZvfWX4A8chh6o9geDF3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7ZQVht8451P/Sx78E1Fbck+Gt8owHwYDVR0j BBgwFoAU1sCVcVeh7aJPDe/20P7ygTfBl9wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQzOTE2OTgtMDhlYy00NzkwLWExODQtOTIyODUyZmE0ZDBhLzAvRDZDMDk1NzE1 N0ExRURBMjRGMERFRkY2RDBGRUYyODEzN0MxOTdEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkMwOTU3MTU3QTFFREEyNEYwREVGRjZEMEZFRjI4MTM3QzE5 N0RDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvRDZDMDk1NzE1N0ExRURBMjRGMERFRkY2RDBGRUYy ODEzN0MxOTdEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQHF2BGBBISVo/DDxPyzdMoBET2mP97265N BEOEfc631xXc5tFV4EkiXr9klk/Admfk8hDWUHkFSgC0iazSl3GAm/4bv9JlDZuM avVEsjsjyiyQ1MHxZNaOcR5byyxV4Q8ZG+8kVN2r8du/vngwHbRw04u6pllFN9gw GAcfz5RdnsLAFFAqmE07yPjSYHPz85g3KNxt2TVIPniFjTO8wb73NyDAV7abnj2N vqvy/R/BJyW50DntGqGkSDWCB+Hw1sXx8dHMnA5sDKzQxxDW81/Le/xjc79Yf9ZX eZQrAnKKUDKVsjuygUBXeFmVE+mgkBIHbTINfjSLcceNitEQZOU= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:26 2026 by rpki-client