$ rpki-client -vvf rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft File: 609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft (raw, json) Hash identifier: o4HowFa7J0NJ3hk40cfi8dSCNgPCw5nX4WYvZQrV7Qo= Subject key identifier: E0:C6:7F:D5:26:4A:3C:5A:FD:D7:74:9A:43:7E:F3:05:FB:DB:09:1D Authority key identifier: 60:94:29:AB:5B:0A:4F:C2:EF:4C:1B:8E:2F:40:BF:C5:20:51:40:A2 Certificate issuer: /CN=609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2 Certificate serial: 349FF658A84F57CF028384F5D67A390491029944 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:13:56 +0000 Manifest this update: Tue 16 Jun 2026 16:08:56 +0000 Manifest next update: Wed 17 Jun 2026 19:46:56 +0000 Files and hashes: 1: 609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl (hash: YLZg4/ugdhTZsZDB1qPIRekqU2yRtXHLBqTukFCSssQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:9f:f6:58:a8:4f:57:cf:02:83:84:f5:d6:7a:39:04:91:02:99:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2 Validity Not Before: Jun 16 16:08:56 2026 GMT Not After : Jun 17 19:46:56 2026 GMT Subject: CN=E0C67FD5264A3C5AFDD7749A437EF305FBDB091D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:86:33:15:8c:db:84:53:94:b9:74:06:52:5a: d5:d0:f2:f8:b0:84:fb:b3:6d:14:94:90:b1:12:e5: 0e:78:0e:50:40:32:43:5f:81:0a:4b:14:ac:9e:b3: 11:1d:bb:a7:02:d4:fd:96:68:26:c6:15:85:2c:ed: a4:63:ee:17:a8:85:18:2c:c1:f4:b5:de:a0:8b:a9: a1:1f:23:bf:41:06:b2:f2:d7:d0:23:a2:d7:13:c1: 81:e6:34:82:3b:f6:96:32:93:bf:ba:f8:bd:a7:fb: 95:a0:f8:67:1a:20:25:7d:7a:ca:f8:f4:80:2d:e8: 49:41:ab:24:02:8e:af:4e:41:22:08:42:bd:03:06: c6:4e:d0:17:41:57:0f:60:17:42:0e:ca:50:9d:57: 48:48:b3:d7:b2:34:78:6e:5d:ca:ac:84:c5:74:35: 8f:b1:68:c2:2d:13:85:43:c7:9e:59:ce:78:fc:f9: e7:62:d7:dc:70:14:fd:19:16:e3:54:66:54:4a:72: 64:6b:21:52:ac:e4:c1:45:a9:aa:d4:f0:23:ff:f0: 2a:64:a7:26:88:d2:2d:24:7c:6e:16:3a:82:72:78: 2f:f7:36:56:92:a6:9a:aa:2e:32:2e:c7:c1:44:73: 93:80:4a:78:16:e3:3e:c2:89:cc:b6:b7:f2:fe:17: ce:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C6:7F:D5:26:4A:3C:5A:FD:D7:74:9A:43:7E:F3:05:FB:DB:09:1D X509v3 Authority Key Identifier: keyid:60:94:29:AB:5B:0A:4F:C2:EF:4C:1B:8E:2F:40:BF:C5:20:51:40:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a2:de:d1:f8:aa:bd:94:74:23:fe:06:86:46:b3:a4:b9:ac: 47:89:ff:7f:64:72:06:fc:21:7f:a7:03:34:ce:3b:f4:16:71: 2b:9f:78:77:d8:a6:99:35:1f:8c:02:98:da:cf:20:a0:88:54: 7e:04:af:27:81:e2:5b:b6:55:fa:76:b2:a3:b3:e8:8a:5d:83: 30:bc:e2:9e:04:33:1d:a4:ee:e1:8c:b3:55:a5:15:e2:82:b0: ba:ca:5f:e5:8c:ba:09:4c:be:c0:26:62:bb:37:1d:82:4d:a2: 99:3d:a8:99:7f:a6:3e:c9:46:91:2f:be:62:03:42:db:33:d8: 9b:5b:65:e5:c2:2a:b2:9e:c3:8d:89:ae:b1:be:94:70:22:b0: 19:f5:98:09:2e:1f:75:db:eb:1d:74:5d:00:05:8c:51:91:0f: 70:94:ba:fa:77:b6:61:11:db:18:08:ce:06:9c:0f:67:55:08: cc:07:2c:8f:1a:7c:00:4b:bf:48:92:95:2d:a6:31:f0:00:5e: 8f:df:c0:71:ba:a0:1b:1f:99:b0:3c:c2:1f:df:51:bf:6c:4e: d7:dc:a3:6c:11:3c:b1:6e:25:22:9a:3a:f4:f6:72:2c:da:ea: 09:ff:4d:b6:66:3c:96:89:3f:26:64:aa:c0:24:a6:8c:40:df: 63:44:ad:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNJ/2WKhPV88Cg4T11no5BJECmUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA5NDI5QUI1QjBBNEZDMkVGNEMxQjhFMkY0MEJGQzUy MDUxNDBBMjAeFw0yNjA2MTYxNjA4NTZaFw0yNjA2MTcxOTQ2NTZaMDMxMTAvBgNV BAMTKEUwQzY3RkQ1MjY0QTNDNUFGREQ3NzQ5QTQzN0VGMzA1RkJEQjA5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhjMVjNuEU5S5dAZSWtXQ8viw hPuzbRSUkLES5Q54DlBAMkNfgQpLFKyesxEdu6cC1P2WaCbGFYUs7aRj7heohRgs wfS13qCLqaEfI79BBrLy19AjotcTwYHmNII79pYyk7+6+L2n+5Wg+GcaICV9esr4 9IAt6ElBqyQCjq9OQSIIQr0DBsZO0BdBVw9gF0IOylCdV0hIs9eyNHhuXcqshMV0 NY+xaMItE4VDx55Zznj8+edi19xwFP0ZFuNUZlRKcmRrIVKs5MFFqarU8CP/8Cpk pyaI0i0kfG4WOoJyeC/3NlaSppqqLjIux8FEc5OASngW4z7Cicy2t/L+F87PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4MZ/1SZKPFr913SaQ37zBfvbCR0wHwYDVR0j BBgwFoAUYJQpq1sKT8LvTBuOL0C/xSBRQKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAzOTYzODgtMmQ2Yi00NzZlLTk2M2QtMWNjMzgxMzc0YjFjLzEvNjA5NDI5QUI1 QjBBNEZDMkVGNEMxQjhFMkY0MEJGQzUyMDUxNDBBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MDk0MjlBQjVCMEE0RkMyRUY0QzFCOEUyRjQwQkZDNTIwNTE0 MEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvNjA5NDI5QUI1QjBBNEZDMkVGNEMxQjhFMkY0MEJG QzUyMDUxNDBBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABii3tH4qr2UdCP+BoZGs6S5rEeJ/39kcgb8 IX+nAzTOO/QWcSufeHfYppk1H4wCmNrPIKCIVH4EryeB4lu2Vfp2sqOz6IpdgzC8 4p4EMx2k7uGMs1WlFeKCsLrKX+WMuglMvsAmYrs3HYJNopk9qJl/pj7JRpEvvmID Qtsz2JtbZeXCKrKew42JrrG+lHAisBn1mAkuH3Xb6x10XQAFjFGRD3CUuvp3tmER 2xgIzgacD2dVCMwHLI8afABLv0iSlS2mMfAAXo/fwHG6oBsfmbA8wh/fUb9sTtfc o2wRPLFuJSKaOvT2ciza6gn/TbZmPJaJPyZkqsAkpoxA32NErZY= -----END CERTIFICATE-----Generated at Wed Jun 17 09:44:04 2026 by rpki-client