$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft File: 583609807E4BA80D0B54C99C333B7590A6907BD4.mft (raw, json) Hash identifier: HsTmFDWMO8BUJhRu/Cd4eXK8uIhhDzEEIk6y2vdmxPE= Subject key identifier: 56:B1:7B:CA:62:9C:0E:FC:55:E2:2B:9F:24:03:8A:73:DC:9A:30:A0 Authority key identifier: 58:36:09:80:7E:4B:A8:0D:0B:54:C9:9C:33:3B:75:90:A6:90:7B:D4 Certificate issuer: /CN=583609807E4BA80D0B54C99C333B7590A6907BD4 Certificate serial: 5A2448AA414BFB764779D32F0A455066C1711D74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:22:34 +0000 Manifest this update: Tue 16 Jun 2026 19:17:34 +0000 Manifest next update: Wed 17 Jun 2026 20:40:34 +0000 Files and hashes: 1: 583609807E4BA80D0B54C99C333B7590A6907BD4.crl (hash: R6F9U1fXZGMFyhQCpUKASZLj8sF5ZHhPA1SKDxELZtc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.crl rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:24:48:aa:41:4b:fb:76:47:79:d3:2f:0a:45:50:66:c1:71:1d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583609807E4BA80D0B54C99C333B7590A6907BD4 Validity Not Before: Jun 16 19:17:34 2026 GMT Not After : Jun 17 20:40:34 2026 GMT Subject: CN=56B17BCA629C0EFC55E22B9F24038A73DC9A30A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2a:d6:51:44:ab:dd:f8:23:a4:9f:af:06:da: 6b:a3:5e:16:fb:90:25:36:20:e2:cf:c3:31:d0:c7: 45:ae:2e:1d:d5:09:ff:51:cc:6c:d4:14:25:c8:31: 25:9e:aa:37:da:ba:75:7b:cf:65:88:44:c4:4d:f6: 32:1a:a5:23:d9:df:31:20:f1:91:e2:8c:7e:ab:a6: 9b:b9:59:74:e6:30:c2:ac:62:21:f0:de:dd:6c:20: 4b:23:d0:16:d7:75:eb:41:3c:17:57:fd:e8:1d:55: bd:25:b9:69:6e:f1:b9:71:d1:ff:34:d1:b6:26:bd: aa:d8:f7:69:bb:3c:b0:14:72:03:df:3a:95:31:33: d7:75:cb:4b:6c:c0:15:6b:50:fb:cd:d8:63:0c:42: 3c:ca:53:18:84:2e:16:44:16:1a:d9:d0:6d:46:39: fc:e3:9c:94:95:da:f4:39:d8:4d:b7:85:fe:80:5d: 6e:e0:80:ec:af:88:58:66:25:8d:f4:31:5b:07:f0: a8:c5:0a:ea:bc:f2:56:23:58:2e:d9:fe:03:28:7b: 65:4d:6f:53:82:20:95:48:c1:f3:2b:ab:7a:1b:3f: 40:3d:2d:6e:05:71:7b:7e:01:25:e0:9c:83:bc:b0: 53:86:ee:13:93:43:6c:c4:39:b1:d9:ee:d8:1c:ad: ae:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B1:7B:CA:62:9C:0E:FC:55:E2:2B:9F:24:03:8A:73:DC:9A:30:A0 X509v3 Authority Key Identifier: keyid:58:36:09:80:7E:4B:A8:0D:0B:54:C9:9C:33:3B:75:90:A6:90:7B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:3d:e7:64:14:8d:0f:96:d0:65:13:a2:42:3c:82:ce:b1:34: ce:f2:fb:17:23:4a:35:12:66:27:3c:a5:3a:3f:00:90:89:0b: 8a:18:23:57:f7:64:d5:61:48:e1:a2:83:6e:74:59:31:9c:d5: 38:cc:a3:be:16:f3:b0:fd:40:ef:4f:90:c2:41:1c:df:08:c4: 47:f6:a5:47:32:38:0a:f2:bc:c3:78:6c:b6:68:4d:68:3a:45: 93:2c:6f:09:03:9a:7d:47:99:ce:d0:54:51:11:68:fd:8e:dc: cf:10:3c:10:13:82:aa:a3:99:04:52:5e:75:8b:c2:3e:c5:08: c9:e1:02:c6:b8:09:72:e9:47:81:de:cf:d7:31:54:40:b6:50: ad:27:70:22:89:f7:e4:bf:d3:e0:6f:4c:1c:b3:2c:ab:b3:fb: b9:39:c6:0a:cc:fd:e1:56:dd:a5:d1:15:fe:5d:21:19:35:f4: 54:c1:03:34:d9:e7:ea:16:20:20:69:3c:e7:0b:e0:92:e1:f7: 29:5a:7e:74:bc:18:49:ef:7e:17:35:08:c7:e5:58:08:1b:59: f6:70:ae:f5:45:e0:6a:98:01:b9:5f:5e:ae:03:0d:5d:b1:d3: 80:ba:2d:d2:36:99:40:cd:f4:89:b9:21:5e:8c:64:1b:dd:ed: 73:a4:a3:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWiRIqkFL+3ZHedMvCkVQZsFxHXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgzNjA5ODA3RTRCQTgwRDBCNTRDOTlDMzMzQjc1OTBB NjkwN0JENDAeFw0yNjA2MTYxOTE3MzRaFw0yNjA2MTcyMDQwMzRaMDMxMTAvBgNV BAMTKDU2QjE3QkNBNjI5QzBFRkM1NUUyMkI5RjI0MDM4QTczREM5QTMwQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLKtZRRKvd+COkn68G2mujXhb7 kCU2IOLPwzHQx0WuLh3VCf9RzGzUFCXIMSWeqjfaunV7z2WIRMRN9jIapSPZ3zEg 8ZHijH6rppu5WXTmMMKsYiHw3t1sIEsj0BbXdetBPBdX/egdVb0luWlu8blx0f80 0bYmvarY92m7PLAUcgPfOpUxM9d1y0tswBVrUPvN2GMMQjzKUxiELhZEFhrZ0G1G OfzjnJSV2vQ52E23hf6AXW7ggOyviFhmJY30MVsH8KjFCuq88lYjWC7Z/gMoe2VN b1OCIJVIwfMrq3obP0A9LW4FcXt+ASXgnIO8sFOG7hOTQ2zEObHZ7tgcra77AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVrF7ymKcDvxV4iufJAOKc9yaMKAwHwYDVR0j BBgwFoAUWDYJgH5LqA0LVMmcMzt1kKaQe9QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NjMjJjMmUtYWNhNy00MmYyLTliOGEtOGRhN2Q0ZTJiYTAwLzAvNTgzNjA5ODA3 RTRCQTgwRDBCNTRDOTlDMzMzQjc1OTBBNjkwN0JENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODM2MDk4MDdFNEJBODBEMEI1NEM5OUMzMzNCNzU5MEE2OTA3 QkQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvNTgzNjA5ODA3RTRCQTgwRDBCNTRDOTlDMzMzQjc1 OTBBNjkwN0JENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGU952QUjQ+W0GUTokI8gs6xNM7y+xcjSjUS Zic8pTo/AJCJC4oYI1f3ZNVhSOGig250WTGc1TjMo74W87D9QO9PkMJBHN8IxEf2 pUcyOAryvMN4bLZoTWg6RZMsbwkDmn1Hmc7QVFERaP2O3M8QPBATgqqjmQRSXnWL wj7FCMnhAsa4CXLpR4Hez9cxVEC2UK0ncCKJ9+S/0+BvTByzLKuz+7k5xgrM/eFW 3aXRFf5dIRk19FTBAzTZ5+oWICBpPOcL4JLh9ylafnS8GEnvfhc1CMflWAgbWfZw rvVF4GqYAblfXq4DDV2x04C6LdI2mUDN9Im5IV6MZBvd7XOko2A= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:25 2026 by rpki-client