$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft File: 040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft (raw, json) Hash identifier: D2Uvv7V7MI/dvxHtWxm2MnmY99vzTeRdq3xLEAEPEF4= Subject key identifier: F1:70:B1:43:6D:61:C5:4C:F1:95:97:10:BB:6D:43:CE:EE:9C:32:53 Authority key identifier: 04:0C:9F:4B:86:EC:13:FE:0F:91:FD:76:BB:0F:F8:E3:A6:40:28:65 Certificate issuer: /CN=040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865 Certificate serial: 48EE42C13228660C76698579A0BE4C155A0CA34D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 20:34:03 +0000 Manifest this update: Tue 16 Jun 2026 20:29:03 +0000 Manifest next update: Wed 17 Jun 2026 21:41:03 +0000 Files and hashes: 1: 040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl (hash: CwVFQGdRnlcLvJuS8b55nopf7bNkPXdPQ26m83CCq+Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ee:42:c1:32:28:66:0c:76:69:85:79:a0:be:4c:15:5a:0c:a3:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865 Validity Not Before: Jun 16 20:29:03 2026 GMT Not After : Jun 17 21:41:03 2026 GMT Subject: CN=F170B1436D61C54CF1959710BB6D43CEEE9C3253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:27:05:ac:26:77:27:fb:66:78:1f:ec:d9:16: f0:1f:46:a1:3b:96:3e:5c:50:d6:4a:6d:8e:d6:5c: c7:0c:fd:d6:74:56:b0:f5:0a:94:45:20:46:fc:e4: 7e:bf:ef:7c:8a:87:4f:a2:7f:d7:06:72:9e:8c:15: cc:a4:47:3d:bb:0c:79:ef:3f:6b:34:d4:5e:59:c9: 1f:44:83:aa:de:42:a5:ae:87:e5:12:9d:bc:f1:23: 6d:f9:9a:5e:34:d2:74:18:f2:b2:de:50:24:ff:82: 54:59:37:60:d9:25:ea:38:f4:50:ef:6d:ce:9a:58: 25:93:93:3f:1a:8c:16:d5:06:fd:41:e5:8d:94:4e: 4d:ad:20:ee:52:2d:00:55:17:1d:1f:fa:85:6e:39: 68:3f:27:32:ec:e5:f0:14:98:9d:0f:2f:0e:b2:13: e6:99:b3:fd:d4:0d:c5:10:b3:23:0b:9d:cd:60:6b: e1:3d:af:fa:86:48:d9:bf:ab:95:cd:1f:04:df:4b: 15:e3:5d:e0:72:d5:90:03:e3:22:b0:eb:c7:8b:b0: d5:09:5b:b6:c5:ae:eb:7c:bf:8b:22:46:e3:f3:f3: 5b:fa:b7:d5:da:c4:b3:33:cb:26:8a:40:d0:06:17: 3e:32:8d:e5:76:52:b3:ac:92:81:53:1c:90:d8:b6: 5a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:70:B1:43:6D:61:C5:4C:F1:95:97:10:BB:6D:43:CE:EE:9C:32:53 X509v3 Authority Key Identifier: keyid:04:0C:9F:4B:86:EC:13:FE:0F:91:FD:76:BB:0F:F8:E3:A6:40:28:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9a:c0:32:63:c8:8a:39:bd:a3:04:14:e0:42:2a:4f:b6:59: ef:5a:e3:91:03:a7:ae:ec:8a:88:a1:d2:58:f8:2f:4d:6d:4f: fd:6f:8f:a5:f1:65:f0:72:bd:56:5a:e0:b7:5f:37:16:4b:15: c7:54:6a:45:86:f5:15:52:b6:de:1c:d8:16:9e:5c:6c:28:6e: c8:d8:e8:dc:e1:69:32:72:85:f9:e5:b8:5e:5b:e5:f9:d0:be: 07:52:2f:e0:95:c9:d8:74:b2:55:55:b2:98:23:3f:47:ff:59: 44:eb:68:14:0f:99:da:43:21:8c:2b:b5:41:0f:dd:9c:ab:c3: f1:5e:bd:33:60:6e:b2:eb:c2:26:37:b6:88:a3:59:e8:23:b3: 32:87:6f:e9:9a:91:4c:c9:02:b7:86:cc:47:30:df:9d:80:8a: 30:6e:9d:f8:5d:bc:53:a2:3b:d1:09:7f:9f:73:c4:b8:2c:be: e8:b8:86:35:50:f8:37:d3:04:c4:8e:75:7b:4b:ec:c6:2a:6d: f1:91:39:1b:b4:98:1a:51:99:8c:59:19:2d:5d:c7:4c:6c:5d: ee:8f:f5:9b:a4:62:ba:ad:4a:fb:ea:d1:04:5f:68:9b:59:22: 65:b2:e6:d5:df:36:5a:f1:75:e0:73:bb:19:2b:7a:eb:74:7d: e5:fe:32:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSO5CwTIoZgx2aYV5oL5MFVoMo00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQwQzlGNEI4NkVDMTNGRTBGOTFGRDc2QkIwRkY4RTNB NjQwMjg2NTAeFw0yNjA2MTYyMDI5MDNaFw0yNjA2MTcyMTQxMDNaMDMxMTAvBgNV BAMTKEYxNzBCMTQzNkQ2MUM1NENGMTk1OTcxMEJCNkQ0M0NFRUU5QzMyNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNJwWsJncn+2Z4H+zZFvAfRqE7 lj5cUNZKbY7WXMcM/dZ0VrD1CpRFIEb85H6/73yKh0+if9cGcp6MFcykRz27DHnv P2s01F5ZyR9Eg6reQqWuh+USnbzxI235ml400nQY8rLeUCT/glRZN2DZJeo49FDv bc6aWCWTkz8ajBbVBv1B5Y2UTk2tIO5SLQBVFx0f+oVuOWg/JzLs5fAUmJ0PLw6y E+aZs/3UDcUQsyMLnc1ga+E9r/qGSNm/q5XNHwTfSxXjXeBy1ZAD4yKw68eLsNUJ W7bFrut8v4siRuPz81v6t9XaxLMzyyaKQNAGFz4yjeV2UrOskoFTHJDYtlp3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8XCxQ21hxUzxlZcQu21Dzu6cMlMwHwYDVR0j BBgwFoAUBAyfS4bsE/4Pkf12uw/446ZAKGUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2MTBjOGQtYTkzNS00NGMzLTg5MzUtYjYzYjQ4ZjgzM2YwLzAvMDQwQzlGNEI4 NkVDMTNGRTBGOTFGRDc2QkIwRkY4RTNBNjQwMjg2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDBDOUY0Qjg2RUMxM0ZFMEY5MUZENzZCQjBGRjhFM0E2NDAy ODY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMDQwQzlGNEI4NkVDMTNGRTBGOTFGRDc2QkIwRkY4 RTNBNjQwMjg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqawDJjyIo5vaMEFOBCKk+2We9a45EDp67s ioih0lj4L01tT/1vj6XxZfByvVZa4LdfNxZLFcdUakWG9RVStt4c2BaeXGwobsjY 6NzhaTJyhfnluF5b5fnQvgdSL+CVydh0slVVspgjP0f/WUTraBQPmdpDIYwrtUEP 3Zyrw/FevTNgbrLrwiY3toijWegjszKHb+makUzJAreGzEcw352AijBunfhdvFOi O9EJf59zxLgsvui4hjVQ+DfTBMSOdXtL7MYqbfGRORu0mBpRmYxZGS1dx0xsXe6P 9ZukYrqtSvvq0QRfaJtZImWy5tXfNlrxdeBzuxkreut0feX+MoU= -----END CERTIFICATE-----Generated at Wed Jun 17 10:43:45 2026 by rpki-client