$ rpki-client -vvf rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.mft File: 4C2533216EFE900E826FB212E41459F4DC754554.mft (raw, json) Hash identifier: Qp+LYm145W+nzpQ4Vq5c+s/QyS9oX4IqJIk5SgkrMKM= Subject key identifier: 32:0B:F9:11:AD:8E:38:27:BB:6F:5F:0F:22:62:0D:2F:3A:50:19:FF Authority key identifier: 4C:25:33:21:6E:FE:90:0E:82:6F:B2:12:E4:14:59:F4:DC:75:45:54 Certificate issuer: /CN=4C2533216EFE900E826FB212E41459F4DC754554 Certificate serial: 60C725122720AA636BB95E9315A958D1D38CB012 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C2533216EFE900E826FB212E41459F4DC754554.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 03:06:30 +0000 Manifest this update: Wed 17 Jun 2026 03:01:30 +0000 Manifest next update: Thu 18 Jun 2026 06:00:30 +0000 Files and hashes: 1: 4C2533216EFE900E826FB212E41459F4DC754554.crl (hash: rthdeh3adW0AY+Zxyh9Z03ygoYtSqlvFtz52UBLen2s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.crl rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C2533216EFE900E826FB212E41459F4DC754554.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c7:25:12:27:20:aa:63:6b:b9:5e:93:15:a9:58:d1:d3:8c:b0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C2533216EFE900E826FB212E41459F4DC754554 Validity Not Before: Jun 17 03:01:30 2026 GMT Not After : Jun 18 06:00:30 2026 GMT Subject: CN=320BF911AD8E3827BB6F5F0F22620D2F3A5019FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:52:8f:42:69:d3:e7:bf:75:f4:f4:56:fb: dd:0b:da:a1:16:a1:fc:af:1b:a1:54:da:c7:d9:f1: b0:6f:58:46:e4:3c:de:be:ce:a8:1d:a1:59:84:f9: c1:39:ab:34:c7:5d:73:7a:16:52:d5:c2:6c:4f:a3: bb:0c:f2:33:f0:bb:e0:e5:53:d7:8e:d8:5c:76:b7: 10:ce:44:ac:35:07:02:31:c2:1b:d4:cf:1d:af:2d: 6e:1f:ff:3a:57:4e:d2:91:cb:ea:b9:fe:bb:06:ea: 15:69:f8:2c:d8:75:b7:d8:0f:ba:ec:cf:f1:6b:d4: f3:48:ab:17:6c:11:49:f3:1e:c3:79:10:12:fb:52: 73:47:34:45:21:08:cd:1e:ff:42:d5:00:f7:3a:50: 30:26:5c:96:0d:2a:e9:ed:c2:ca:83:75:ee:76:21: b0:49:50:f3:f4:3a:52:04:0d:67:6b:bf:ea:01:77: 73:93:f2:d3:76:42:43:39:47:bd:c0:80:6b:38:17: 34:26:d0:e4:b3:40:04:f9:7d:11:fa:3b:6e:82:7f: a3:3c:20:8c:90:37:29:d1:46:33:1b:35:d5:74:08: 8d:a0:cf:eb:cf:e3:58:34:4a:03:b7:29:78:62:ec: 67:1e:0e:4a:dc:8c:3d:3d:01:d3:39:72:8b:67:e8: 91:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0B:F9:11:AD:8E:38:27:BB:6F:5F:0F:22:62:0D:2F:3A:50:19:FF X509v3 Authority Key Identifier: keyid:4C:25:33:21:6E:FE:90:0E:82:6F:B2:12:E4:14:59:F4:DC:75:45:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C2533216EFE900E826FB212E41459F4DC754554.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:45:9d:aa:0b:e8:35:6f:87:4a:a9:87:4e:14:3c:5c:dd:b6: 67:e8:cd:c6:07:a3:20:18:43:0d:cc:cb:96:56:5e:62:9d:c5: fc:74:75:ff:c4:4d:f5:ff:9e:89:0f:41:b4:2a:83:f2:07:29: d3:0c:3d:9c:37:64:c2:31:4c:bf:be:fc:76:24:ca:a4:5d:15: ed:b6:1b:74:4c:29:38:bb:02:9a:e8:f4:70:a0:d3:f8:82:b0: 39:bb:da:21:f2:bd:58:ac:85:cf:a1:01:93:b8:06:b6:0f:0e: f0:c1:c8:5c:15:21:d2:40:4f:34:65:9e:55:ee:35:b9:d8:5a: cb:4b:69:ec:11:50:81:a0:85:c6:9a:3c:bc:44:90:3c:1a:31: d3:a7:33:92:bd:e2:de:13:34:54:9b:2e:5c:bd:68:46:1b:df: 40:24:65:12:78:cc:54:70:12:ae:c4:a1:a5:c3:a4:d5:3d:b3: f5:05:f3:30:92:59:89:85:4d:46:a0:6c:c7:e5:41:5a:db:37: 03:3a:33:65:c7:d8:a6:e6:37:34:a3:36:59:aa:9f:81:ff:59: b8:1c:e8:21:9f:17:7e:09:d5:c9:ac:17:d4:b8:b5:a2:ea:af: 82:9d:94:e8:0e:92:b7:ed:8e:08:86:74:90:49:d9:62:4a:52: 4e:5f:a1:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYMclEicgqmNruV6TFalY0dOMsBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMyNTMzMjE2RUZFOTAwRTgyNkZCMjEyRTQxNDU5RjRE Qzc1NDU1NDAeFw0yNjA2MTcwMzAxMzBaFw0yNjA2MTgwNjAwMzBaMDMxMTAvBgNV BAMTKDMyMEJGOTExQUQ4RTM4MjdCQjZGNUYwRjIyNjIwRDJGM0E1MDE5RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNzlKPQmnT57919PRW+90L2qEW ofyvG6FU2sfZ8bBvWEbkPN6+zqgdoVmE+cE5qzTHXXN6FlLVwmxPo7sM8jPwu+Dl U9eO2Fx2txDORKw1BwIxwhvUzx2vLW4f/zpXTtKRy+q5/rsG6hVp+CzYdbfYD7rs z/Fr1PNIqxdsEUnzHsN5EBL7UnNHNEUhCM0e/0LVAPc6UDAmXJYNKuntwsqDde52 IbBJUPP0OlIEDWdrv+oBd3OT8tN2QkM5R73AgGs4FzQm0OSzQAT5fRH6O26Cf6M8 IIyQNynRRjMbNdV0CI2gz+vP41g0SgO3KXhi7GceDkrcjD09AdM5cotn6JFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMgv5Ea2OOCe7b18PImINLzpQGf8wHwYDVR0j BBgwFoAUTCUzIW7+kA6Cb7IS5BRZ9Nx1RVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU2MGQyZGYtNjVmZi00M2E4LWE5ODMtMzMyMGNmOWZkMjkyLzAvNEMyNTMzMjE2 RUZFOTAwRTgyNkZCMjEyRTQxNDU5RjREQzc1NDU1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzI1MzMyMTZFRkU5MDBFODI2RkIyMTJFNDE0NTlGNERDNzU0 NTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU2MGQyZGYtNjVmZi00M2E4LWE5 ODMtMzMyMGNmOWZkMjkyLzAvNEMyNTMzMjE2RUZFOTAwRTgyNkZCMjEyRTQxNDU5 RjREQzc1NDU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlFnaoL6DVvh0qph04UPFzdtmfozcYHoyAY Qw3My5ZWXmKdxfx0df/ETfX/nokPQbQqg/IHKdMMPZw3ZMIxTL++/HYkyqRdFe22 G3RMKTi7Apro9HCg0/iCsDm72iHyvVishc+hAZO4BrYPDvDByFwVIdJATzRlnlXu NbnYWstLaewRUIGghcaaPLxEkDwaMdOnM5K94t4TNFSbLly9aEYb30AkZRJ4zFRw Eq7EoaXDpNU9s/UF8zCSWYmFTUagbMflQVrbNwM6M2XH2KbmNzSjNlmqn4H/Wbgc 6CGfF34J1cmsF9S4taLqr4KdlOgOkrftjgiGdJBJ2WJKUk5foa4= -----END CERTIFICATE-----Generated at Wed Jun 17 12:52:25 2026 by rpki-client