$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft File: 101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft (raw, json) Hash identifier: Sd/ERWb/4vo1/Gv1Kq25sYgzTDXb/5B2pOdgVniuwSo= Subject key identifier: 24:86:22:24:F0:E6:FB:6D:B5:49:BD:F8:45:58:B2:1A:9A:B6:A9:43 Authority key identifier: 10:1F:B7:84:02:0D:5C:A6:B8:B0:A4:2E:7A:29:97:4D:B0:41:EF:88 Certificate issuer: /CN=101FB784020D5CA6B8B0A42E7A29974DB041EF88 Certificate serial: 128EFEC08F84C35D331AEC035E03AF4D40604527 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 06:10:23 +0000 Manifest this update: Wed 17 Jun 2026 06:05:23 +0000 Manifest next update: Thu 18 Jun 2026 06:14:23 +0000 Files and hashes: 1: 101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl (hash: SryiE+RV/09z1cn9LKSDDnKkF6VYl5ZV92OmyLLoiI0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:8e:fe:c0:8f:84:c3:5d:33:1a:ec:03:5e:03:af:4d:40:60:45:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101FB784020D5CA6B8B0A42E7A29974DB041EF88 Validity Not Before: Jun 17 06:05:23 2026 GMT Not After : Jun 18 06:14:23 2026 GMT Subject: CN=24862224F0E6FB6DB549BDF84558B21A9AB6A943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9f:d2:16:da:38:44:29:3b:ea:08:17:a6:02: a1:e1:0f:41:ef:fe:7d:b4:87:f1:4e:5a:0d:69:ac: 0d:33:27:a4:c0:b3:30:0d:71:ee:b0:76:e4:06:56: 48:69:89:4f:0d:1d:f2:21:65:34:d2:76:1d:a3:9d: 45:de:ed:ce:db:c5:2c:82:20:77:8d:c3:b3:5d:25: ba:31:b2:d7:35:95:52:fd:75:ce:ce:dc:61:db:7b: d9:c9:1d:66:ca:04:b3:99:70:01:e2:00:cf:3c:c9: 5e:93:36:09:ff:2f:9d:0d:bb:92:75:63:90:50:03: d3:05:a6:ab:29:72:73:69:f0:48:d6:1b:0b:9e:6e: f1:57:95:aa:7c:d1:3b:a5:a1:c3:7e:35:5e:40:56: d8:72:e0:dc:a5:d9:af:e2:9d:35:52:e3:35:a4:2f: 27:78:9a:2c:b7:27:4e:22:15:42:a9:0a:0a:e6:e3: a1:e6:c8:c2:a8:c3:58:34:6f:f6:a3:49:0a:3a:3f: f3:01:52:81:b0:c8:dc:4b:58:c6:73:b3:87:05:cc: e2:2e:d1:38:37:e5:81:70:34:20:9c:72:71:01:91: f7:4f:3a:7f:2a:61:c9:d0:d2:63:b7:6e:46:00:c5: ce:75:2d:cb:55:c1:5d:5b:38:1b:81:cd:b9:0a:7c: c9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:86:22:24:F0:E6:FB:6D:B5:49:BD:F8:45:58:B2:1A:9A:B6:A9:43 X509v3 Authority Key Identifier: keyid:10:1F:B7:84:02:0D:5C:A6:B8:B0:A4:2E:7A:29:97:4D:B0:41:EF:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d6:1b:c8:4a:ce:d5:28:1d:d3:6e:60:e9:cf:99:88:83:00: 01:a9:de:99:0e:6c:21:c7:51:f2:53:34:f5:a5:98:ee:1f:b9: 2d:0e:45:45:d3:ac:82:ba:10:ba:1d:3c:f5:db:5e:8c:ae:7d: 14:88:3a:4a:b6:41:e6:0d:df:aa:25:f0:1e:03:bd:43:7d:a3: 21:76:e9:7b:38:e6:f6:9f:29:a6:b4:55:88:b3:ba:6c:78:62: ca:f6:3f:43:bd:c4:cb:b3:7e:7a:f7:91:4b:d4:c3:d1:c1:d3: 61:af:30:20:2a:31:e8:14:57:6b:f4:04:25:e7:10:d2:a9:27: f2:34:11:71:8f:62:42:21:a9:37:d0:f6:2a:af:5d:26:33:fb: 72:63:2d:d7:ab:ca:f1:b3:81:5d:48:5b:37:5d:13:70:79:2b: 98:eb:79:dc:9a:3e:f3:9a:20:dd:bd:e8:64:ca:35:68:f8:60: 1c:5c:21:bc:8e:f8:e9:37:da:4e:a1:3d:5a:8c:fe:ec:29:73: 83:91:b7:6b:10:12:3b:b4:92:cb:8a:b9:d7:c1:17:6f:ce:84: 0e:a2:d2:4b:4a:29:ee:61:93:3d:68:d3:79:e9:3a:54:9e:08: 28:86:09:bb:f9:99:dd:69:75:b9:ff:bd:69:17:81:36:22:6b: f3:5d:75:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEo7+wI+Ew10zGuwDXgOvTUBgRScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAxRkI3ODQwMjBENUNBNkI4QjBBNDJFN0EyOTk3NERC MDQxRUY4ODAeFw0yNjA2MTcwNjA1MjNaFw0yNjA2MTgwNjE0MjNaMDMxMTAvBgNV BAMTKDI0ODYyMjI0RjBFNkZCNkRCNTQ5QkRGODQ1NThCMjFBOUFCNkE5NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJn9IW2jhEKTvqCBemAqHhD0Hv /n20h/FOWg1prA0zJ6TAszANce6wduQGVkhpiU8NHfIhZTTSdh2jnUXe7c7bxSyC IHeNw7NdJboxstc1lVL9dc7O3GHbe9nJHWbKBLOZcAHiAM88yV6TNgn/L50Nu5J1 Y5BQA9MFpqspcnNp8EjWGwuebvFXlap80TulocN+NV5AVthy4Nyl2a/inTVS4zWk Lyd4miy3J04iFUKpCgrm46HmyMKow1g0b/ajSQo6P/MBUoGwyNxLWMZzs4cFzOIu 0Tg35YFwNCCccnEBkfdPOn8qYcnQ0mO3bkYAxc51LctVwV1bOBuBzbkKfMmtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJIYiJPDm+221Sb34RViyGpq2qUMwHwYDVR0j BBgwFoAUEB+3hAINXKa4sKQueimXTbBB74gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2ExNGJmZjItNDc4OS00MDE3LThmYWMtYmE1ZjYyM2U3ZWJjLzAvMTAxRkI3ODQw MjBENUNBNkI4QjBBNDJFN0EyOTk3NERCMDQxRUY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDFGQjc4NDAyMEQ1Q0E2QjhCMEE0MkU3QTI5OTc0REIwNDFF Rjg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2ExNGJmZjItNDc4OS00MDE3LThm YWMtYmE1ZjYyM2U3ZWJjLzAvMTAxRkI3ODQwMjBENUNBNkI4QjBBNDJFN0EyOTk3 NERCMDQxRUY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3WG8hKztUoHdNuYOnPmYiDAAGp3pkObCHH UfJTNPWlmO4fuS0ORUXTrIK6ELodPPXbXoyufRSIOkq2QeYN36ol8B4DvUN9oyF2 6Xs45vafKaa0VYizumx4Ysr2P0O9xMuzfnr3kUvUw9HB02GvMCAqMegUV2v0BCXn ENKpJ/I0EXGPYkIhqTfQ9iqvXSYz+3JjLderyvGzgV1IWzddE3B5K5jredyaPvOa IN296GTKNWj4YBxcIbyO+Ok32k6hPVqM/uwpc4ORt2sQEju0ksuKudfBF2/OhA6i 0ktKKe5hkz1o03npOlSeCCiGCbv5md1pdbn/vWkXgTYia/NddQw= -----END CERTIFICATE-----Generated at Wed Jun 17 12:42:24 2026 by rpki-client