$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.mft File: 13605A136F0092B1019BDEF64A0199270705BFA5.mft (raw, json) Hash identifier: uTzGRAQdCnB+TK8js7eoVKkFp33OhCe8LQOm5XmIZsc= Subject key identifier: D8:34:DC:84:43:E0:44:13:59:94:CC:5E:D5:EE:3B:BD:C9:6C:BB:05 Authority key identifier: 13:60:5A:13:6F:00:92:B1:01:9B:DE:F6:4A:01:99:27:07:05:BF:A5 Certificate issuer: /CN=13605A136F0092B1019BDEF64A0199270705BFA5 Certificate serial: 7C607932284DF197DEE3BBBA3F643C580E9D6A47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13605A136F0092B1019BDEF64A0199270705BFA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 23:20:32 +0000 Manifest this update: Sun 14 Jun 2026 23:15:32 +0000 Manifest next update: Mon 15 Jun 2026 23:20:32 +0000 Files and hashes: 1: 13605A136F0092B1019BDEF64A0199270705BFA5.crl (hash: EUIhQAt6W61u+zQ0U+RAo1v2b7/JNU1ArEcuEBz39MY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.crl rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13605A136F0092B1019BDEF64A0199270705BFA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 23:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:60:79:32:28:4d:f1:97:de:e3:bb:ba:3f:64:3c:58:0e:9d:6a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13605A136F0092B1019BDEF64A0199270705BFA5 Validity Not Before: Jun 14 23:15:32 2026 GMT Not After : Jun 15 23:20:32 2026 GMT Subject: CN=D834DC8443E044135994CC5ED5EE3BBDC96CBB05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:f1:f3:62:42:65:82:3f:c1:db:f6:bc:41: 48:13:db:40:2c:5e:c8:9b:f2:6b:1a:4e:bb:84:45: d3:c1:e2:e8:52:35:1f:70:33:e2:67:4f:f7:a2:2c: 9d:4a:91:bc:0a:0e:36:69:2f:e4:cd:7d:67:b8:7e: 4a:76:84:c4:f0:60:47:41:8c:59:e1:8e:23:29:af: d2:d2:6e:f6:6b:f8:47:a7:87:07:2d:57:c1:ac:f3: 4b:12:2d:d5:5f:8e:14:e5:f4:65:69:34:83:94:a0: 8a:41:c6:25:03:d4:4a:94:5a:d7:f3:29:c2:65:85: 68:f5:0c:70:a7:02:b6:40:af:31:f5:29:b1:2e:ab: f8:d7:cb:92:f5:59:d2:4b:96:55:ad:06:c8:28:4b: d8:d8:f1:3e:df:22:71:6e:75:28:18:96:ce:38:e4: ab:fc:93:e2:0f:45:5e:86:8a:d8:5c:c5:a7:9e:79: 10:5e:a1:55:a2:d8:51:94:b0:cf:55:4a:79:c4:ca: c5:b7:31:80:b9:12:c0:c8:79:78:bf:90:74:a8:49: 1a:fa:47:7a:cc:84:14:43:91:25:d5:cd:52:0a:9e: dd:74:44:8f:eb:eb:fd:5e:0a:f5:86:1b:a9:84:08: 4e:89:9a:57:8b:ce:bf:02:e1:91:22:62:65:0e:ad: 0b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:34:DC:84:43:E0:44:13:59:94:CC:5E:D5:EE:3B:BD:C9:6C:BB:05 X509v3 Authority Key Identifier: keyid:13:60:5A:13:6F:00:92:B1:01:9B:DE:F6:4A:01:99:27:07:05:BF:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13605A136F0092B1019BDEF64A0199270705BFA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a1:9d:e1:85:5c:0d:ea:3e:13:42:c5:fc:71:d3:22:64:d0: 34:f1:1c:cc:5b:f6:8a:c2:19:55:97:61:4a:a4:5c:f1:3f:fb: fb:a3:9f:ce:ce:bc:d9:55:27:f9:36:dc:1b:c4:12:c1:1d:c6: 69:6f:0f:81:f4:09:6d:bd:74:4d:dc:7e:f0:5d:de:4b:3d:8e: 22:87:5a:25:56:77:03:3f:36:45:45:e2:bf:60:da:bd:77:ba: fb:a5:47:df:64:66:c8:a2:78:c6:a1:3e:ba:5c:c9:04:f1:a3: 56:05:6c:18:d0:e0:1e:98:71:93:59:14:9b:c3:b7:bd:86:f9: 61:17:26:14:31:c7:e4:89:be:eb:a0:e9:11:f6:ea:71:dc:ed: 6a:f3:b2:07:06:c6:ea:10:b6:29:c1:a2:59:cc:bc:42:7d:4d: 45:00:79:e8:d8:c6:9c:79:23:ee:3e:fe:ab:d0:98:ce:11:a3: e0:ac:15:51:87:12:66:61:68:ca:dd:5a:5c:c4:11:2a:15:44: bd:d7:e8:a6:c8:f9:fb:1e:f7:da:c4:93:e0:cb:62:f6:35:b8: 64:5a:f9:ef:98:44:51:6e:5d:bd:22:f2:61:7d:f9:7d:e5:5b: 2e:f2:87:32:5f:79:9f:5a:a6:31:6b:8d:dd:ef:96:98:e6:43: 47:80:70:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfGB5MihN8Zfe47u6P2Q8WA6dakcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM2MDVBMTM2RjAwOTJCMTAxOUJERUY2NEEwMTk5Mjcw NzA1QkZBNTAeFw0yNjA2MTQyMzE1MzJaFw0yNjA2MTUyMzIwMzJaMDMxMTAvBgNV BAMTKEQ4MzREQzg0NDNFMDQ0MTM1OTk0Q0M1RUQ1RUUzQkJEQzk2Q0JCMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3W/HzYkJlgj/B2/a8QUgT20As Xsib8msaTruERdPB4uhSNR9wM+JnT/eiLJ1KkbwKDjZpL+TNfWe4fkp2hMTwYEdB jFnhjiMpr9LSbvZr+EenhwctV8Gs80sSLdVfjhTl9GVpNIOUoIpBxiUD1EqUWtfz KcJlhWj1DHCnArZArzH1KbEuq/jXy5L1WdJLllWtBsgoS9jY8T7fInFudSgYls44 5Kv8k+IPRV6GithcxaeeeRBeoVWi2FGUsM9VSnnEysW3MYC5EsDIeXi/kHSoSRr6 R3rMhBRDkSXVzVIKnt10RI/r6/1eCvWGG6mECE6JmleLzr8C4ZEiYmUOrQuzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2DTchEPgRBNZlMxe1e47vclsuwUwHwYDVR0j BBgwFoAUE2BaE28AkrEBm972SgGZJwcFv6UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMyNjc4MjUtNTFhZi00NTZkLWI0NWEtYWU5M2M1ZjI3MGVlLzAvMTM2MDVBMTM2 RjAwOTJCMTAxOUJERUY2NEEwMTk5MjcwNzA1QkZBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzYwNUExMzZGMDA5MkIxMDE5QkRFRjY0QTAxOTkyNzA3MDVC RkE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMyNjc4MjUtNTFhZi00NTZkLWI0 NWEtYWU5M2M1ZjI3MGVlLzAvMTM2MDVBMTM2RjAwOTJCMTAxOUJERUY2NEEwMTk5 MjcwNzA1QkZBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWhneGFXA3qPhNCxfxx0yJk0DTxHMxb9orC GVWXYUqkXPE/+/ujn87OvNlVJ/k23BvEEsEdxmlvD4H0CW29dE3cfvBd3ks9jiKH WiVWdwM/NkVF4r9g2r13uvulR99kZsiieMahPrpcyQTxo1YFbBjQ4B6YcZNZFJvD t72G+WEXJhQxx+SJvuug6RH26nHc7WrzsgcGxuoQtinBolnMvEJ9TUUAeejYxpx5 I+4+/qvQmM4Ro+CsFVGHEmZhaMrdWlzEESoVRL3X6KbI+fse99rEk+DLYvY1uGRa +e+YRFFuXb0i8mF9+X3lWy7yhzJfeZ9apjFrjd3vlpjmQ0eAcOg= -----END CERTIFICATE-----Generated at Mon Jun 15 14:15:43 2026 by rpki-client