$ rpki-client -vvf rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft File: 948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft (raw, json) Hash identifier: kgwkBED30Z52R3UfFgIFGvW0zvI6Czlcfgw7M7Iy61M= Subject key identifier: 99:62:44:99:D3:DD:48:82:52:00:D7:A5:5B:73:44:E6:08:51:77:1E Authority key identifier: 94:8F:13:CF:2E:54:E1:FC:CA:51:DE:BB:CA:0D:1E:2C:33:E5:14:DC Certificate issuer: /CN=948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC Certificate serial: 7CF09EBAD2EA16E08D46E92B47A7A1B88DF943EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 06:56:16 +0000 Manifest this update: Wed 17 Jun 2026 06:51:16 +0000 Manifest next update: Thu 18 Jun 2026 10:20:16 +0000 Files and hashes: 1: 948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.crl (hash: TkB22VIk5Y9td65M+7zhwfWKRRCywUY6Rr7XOgdFwbc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.crl rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f0:9e:ba:d2:ea:16:e0:8d:46:e9:2b:47:a7:a1:b8:8d:f9:43:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC Validity Not Before: Jun 17 06:51:16 2026 GMT Not After : Jun 18 10:20:16 2026 GMT Subject: CN=99624499D3DD48825200D7A55B7344E60851771E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d7:1e:95:05:b0:11:ea:64:2a:f1:da:29:21: 1f:d7:88:1b:4c:70:d0:ea:2f:e3:2e:3a:d6:fc:1f: 13:92:39:97:5a:38:e1:78:1a:24:49:cf:13:8a:2c: 68:e5:25:5d:3b:dd:58:df:79:e9:10:82:16:df:91: 99:98:97:07:f6:d4:77:8b:76:db:19:91:51:76:e3: 91:c1:aa:89:bc:c8:73:18:b9:e5:e2:59:3e:c2:2e: 63:d5:89:37:51:99:3f:19:71:23:19:78:0c:34:26: 1f:ec:cd:40:8e:aa:90:48:e9:ba:3b:f4:9c:21:66: 3b:5f:6f:42:b6:30:cb:47:b3:74:9c:04:da:ff:06: 5c:7b:c2:03:83:c2:d9:13:c7:5e:11:5e:7d:31:86: d3:cb:59:9f:26:7f:70:69:96:f6:7a:96:bb:49:93: df:50:91:e0:13:af:20:9e:28:af:95:b7:b6:40:f4: 47:91:a7:0d:49:08:3b:b7:be:43:e1:30:ca:8a:bb: 45:75:98:cc:fe:d1:a9:fe:ac:e0:19:91:ee:1c:30: 3b:c6:04:39:e8:0b:32:d4:76:67:c1:89:0b:1d:cd: 26:65:b7:67:2c:b0:dd:a5:96:fa:72:af:11:9d:e2: e5:cd:d9:fa:96:2c:c1:79:fe:98:65:79:1e:50:da: 97:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:62:44:99:D3:DD:48:82:52:00:D7:A5:5B:73:44:E6:08:51:77:1E X509v3 Authority Key Identifier: keyid:94:8F:13:CF:2E:54:E1:FC:CA:51:DE:BB:CA:0D:1E:2C:33:E5:14:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:24:c3:c3:91:72:88:f8:c7:dd:03:be:0c:0b:a6:ef:19:98: a8:ae:33:94:be:82:a7:55:30:0f:e1:4a:09:29:43:e9:8d:78: 24:cc:5a:c5:41:b5:25:61:c5:64:78:d2:64:46:71:29:d8:d7: 53:48:1e:8f:57:67:e3:75:8d:35:5a:c5:86:46:f5:f6:9e:73: 01:97:14:75:88:e0:d0:7d:70:f5:06:1c:3e:c0:21:8d:72:ab: 12:3e:b3:da:6c:08:e6:51:f9:ef:ac:60:26:c0:13:61:bc:f2: 89:2d:d6:72:b9:22:b4:d1:c1:f5:d6:56:2f:98:69:22:c8:ac: 4d:df:f9:2e:45:28:be:bf:f8:49:a6:ce:9a:5d:46:af:2a:ef: ee:3e:c8:61:42:ba:e5:20:12:5a:be:16:4e:14:3e:11:a0:13: 20:d1:13:b2:c9:b7:f9:e1:45:b2:9b:50:3a:95:7a:81:44:2d: 4b:6f:b1:75:60:5e:5a:ba:a2:d4:9a:5c:85:6e:13:29:2d:bd: 7f:0b:58:eb:cf:1e:fd:31:6e:16:74:5f:7d:e2:f4:66:21:9a: 66:22:1e:63:6f:7a:91:1f:23:3f:19:b0:41:de:c9:0d:fe:06: 45:6c:98:2a:f2:c0:2e:79:8f:ea:55:bc:10:b4:e5:39:4e:ea: 50:2e:e8:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfPCeutLqFuCNRukrR6ehuI35Q+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ4RjEzQ0YyRTU0RTFGQ0NBNTFERUJCQ0EwRDFFMkMz M0U1MTREQzAeFw0yNjA2MTcwNjUxMTZaFw0yNjA2MTgxMDIwMTZaMDMxMTAvBgNV BAMTKDk5NjI0NDk5RDNERDQ4ODI1MjAwRDdBNTVCNzM0NEU2MDg1MTc3MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf1x6VBbAR6mQq8dopIR/XiBtM cNDqL+MuOtb8HxOSOZdaOOF4GiRJzxOKLGjlJV073VjfeekQghbfkZmYlwf21HeL dtsZkVF245HBqom8yHMYueXiWT7CLmPViTdRmT8ZcSMZeAw0Jh/szUCOqpBI6bo7 9JwhZjtfb0K2MMtHs3ScBNr/Blx7wgODwtkTx14RXn0xhtPLWZ8mf3BplvZ6lrtJ k99QkeATryCeKK+Vt7ZA9EeRpw1JCDu3vkPhMMqKu0V1mMz+0an+rOAZke4cMDvG BDnoCzLUdmfBiQsdzSZlt2cssN2llvpyrxGd4uXN2fqWLMF5/phleR5Q2peJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmWJEmdPdSIJSANelW3NE5ghRdx4wHwYDVR0j BBgwFoAUlI8Tzy5U4fzKUd67yg0eLDPlFNwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmViMDY1NjktMGEyYi00YjFiLTliMGQtZDk1ZDA4YTM0YTc2LzAvOTQ4RjEzQ0Yy RTU0RTFGQ0NBNTFERUJCQ0EwRDFFMkMzM0U1MTREQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NDhGMTNDRjJFNTRFMUZDQ0E1MURFQkJDQTBEMUUyQzMzRTUx NERDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmViMDY1NjktMGEyYi00YjFiLTli MGQtZDk1ZDA4YTM0YTc2LzAvOTQ4RjEzQ0YyRTU0RTFGQ0NBNTFERUJCQ0EwRDFF MkMzM0U1MTREQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwkw8ORcoj4x90DvgwLpu8ZmKiuM5S+gqdV MA/hSgkpQ+mNeCTMWsVBtSVhxWR40mRGcSnY11NIHo9XZ+N1jTVaxYZG9faecwGX FHWI4NB9cPUGHD7AIY1yqxI+s9psCOZR+e+sYCbAE2G88okt1nK5IrTRwfXWVi+Y aSLIrE3f+S5FKL6/+EmmzppdRq8q7+4+yGFCuuUgElq+Fk4UPhGgEyDRE7LJt/nh RbKbUDqVeoFELUtvsXVgXlq6otSaXIVuEyktvX8LWOvPHv0xbhZ0X33i9GYhmmYi HmNvepEfIz8ZsEHeyQ3+BkVsmCrywC55j+pVvBC05TlO6lAu6MA= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:13 2026 by rpki-client