$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft File: A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft (raw, json) Hash identifier: UmGVLZNYDPAuT6oTfeVBSmoDXfoJu58jsJpYLyFPVLA= Subject key identifier: 41:F3:60:7D:4F:D1:9C:74:CB:27:16:CA:E7:DA:60:C1:D4:FD:9C:C7 Authority key identifier: A4:A2:5F:57:89:56:A8:EF:A9:E8:FD:F8:A1:80:F6:32:B7:69:36:10 Certificate issuer: /CN=A4A25F578956A8EFA9E8FDF8A180F632B7693610 Certificate serial: 6D5B896D3930061EBEF9ACF5D14CA381FE81B4F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A25F578956A8EFA9E8FDF8A180F632B7693610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 18:11:07 +0000 Manifest this update: Tue 16 Jun 2026 18:06:07 +0000 Manifest next update: Wed 17 Jun 2026 21:28:07 +0000 Files and hashes: 1: A4A25F578956A8EFA9E8FDF8A180F632B7693610.crl (hash: BIRT4gSZ+pwk2XLJuMuz/W15OXXkGQs2hdbqx8EERhI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.crl rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A25F578956A8EFA9E8FDF8A180F632B7693610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5b:89:6d:39:30:06:1e:be:f9:ac:f5:d1:4c:a3:81:fe:81:b4:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A25F578956A8EFA9E8FDF8A180F632B7693610 Validity Not Before: Jun 16 18:06:07 2026 GMT Not After : Jun 17 21:28:07 2026 GMT Subject: CN=41F3607D4FD19C74CB2716CAE7DA60C1D4FD9CC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:47:61:69:6a:c8:e8:2c:d1:bb:8b:75:f2:dd: 06:eb:73:9d:05:98:d5:3d:d9:17:3b:19:db:2b:7c: 1c:c6:73:d3:b2:ee:8e:f3:ad:bb:00:99:be:bf:51: b0:19:7a:5a:97:17:7a:9e:96:32:77:37:ee:e6:ce: a8:99:22:29:b0:81:32:ed:ec:12:01:83:e8:d2:ed: d4:49:55:3b:7e:f5:0a:87:50:5e:56:8a:80:98:a9: 2d:20:8e:fb:12:42:da:68:01:6e:61:ba:ac:9f:a5: 1d:af:98:de:4f:45:ef:02:3b:af:8b:ae:f6:ca:3f: 47:5e:b4:f5:18:18:5b:74:72:ff:27:24:c8:7f:47: 9f:5c:b6:15:4e:b4:10:5d:6a:af:42:42:69:e4:be: d1:95:3f:00:f7:2d:81:ed:b2:70:d1:b2:fe:bb:8c: e7:10:40:08:45:82:e3:d1:f3:9a:f4:5d:05:33:60: 86:ae:64:80:70:8e:e7:73:d6:85:ec:33:eb:38:05: 43:6c:34:3b:6a:77:ce:c4:c5:0f:b0:a2:6e:8c:a4: a5:57:37:f5:7f:67:13:04:2b:cd:27:d1:08:5e:8f: 6a:c2:c8:2a:4a:3c:af:2a:84:2d:97:bb:cd:f5:60: 70:5d:bc:53:d3:03:64:68:84:fb:03:3b:da:f3:40: d9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F3:60:7D:4F:D1:9C:74:CB:27:16:CA:E7:DA:60:C1:D4:FD:9C:C7 X509v3 Authority Key Identifier: keyid:A4:A2:5F:57:89:56:A8:EF:A9:E8:FD:F8:A1:80:F6:32:B7:69:36:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A25F578956A8EFA9E8FDF8A180F632B7693610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1c:f7:70:55:aa:6f:fb:de:bb:df:27:39:cf:a4:f4:f6:15: 70:7a:00:9e:e5:23:5a:40:a3:ec:08:d6:bc:c8:46:f0:7f:1d: 51:27:7f:39:3f:27:d5:93:dc:55:f1:59:89:ed:c7:20:db:60: 4c:f5:06:1b:7a:e8:1b:31:e4:03:1b:de:f6:a7:4e:68:be:e4: dc:0d:ab:03:67:a1:f3:65:d0:a7:99:d5:9f:0a:91:5c:8d:37: 74:0f:79:07:3f:3a:d1:f8:35:b4:e5:ee:32:5e:79:30:c9:a7: a4:93:ed:ad:ef:8b:82:89:ac:51:71:34:96:25:40:90:d9:2b: e1:fb:2d:53:f3:88:f8:4d:1b:88:9f:40:6d:6b:af:9c:09:c7: 2f:e9:99:5d:50:27:1d:01:c2:f0:14:8d:4e:05:70:1e:a8:ab: c4:41:79:6e:b5:17:82:9a:e9:5b:90:15:c7:dc:82:0d:11:42: 49:6d:bb:04:7a:33:2b:03:17:8f:9b:37:57:f5:f9:6c:9f:1c: 3e:38:90:1b:93:ab:35:01:93:f4:de:e6:85:c9:b0:14:ee:c1: 22:ae:dc:03:7c:94:81:dd:aa:eb:c7:fd:ee:ec:b5:be:b8:20: b9:fe:5e:d7:6c:6d:39:07:72:24:82:bb:f6:a3:84:aa:d7:09: a0:87:9b:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbVuJbTkwBh6++az10Uyjgf6BtPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMjVGNTc4OTU2QThFRkE5RThGREY4QTE4MEY2MzJC NzY5MzYxMDAeFw0yNjA2MTYxODA2MDdaFw0yNjA2MTcyMTI4MDdaMDMxMTAvBgNV BAMTKDQxRjM2MDdENEZEMTlDNzRDQjI3MTZDQUU3REE2MEMxRDRGRDlDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVR2FpasjoLNG7i3Xy3Qbrc50F mNU92Rc7GdsrfBzGc9Oy7o7zrbsAmb6/UbAZelqXF3qeljJ3N+7mzqiZIimwgTLt 7BIBg+jS7dRJVTt+9QqHUF5WioCYqS0gjvsSQtpoAW5huqyfpR2vmN5PRe8CO6+L rvbKP0detPUYGFt0cv8nJMh/R59cthVOtBBdaq9CQmnkvtGVPwD3LYHtsnDRsv67 jOcQQAhFguPR85r0XQUzYIauZIBwjudz1oXsM+s4BUNsNDtqd87ExQ+wom6MpKVX N/V/ZxMEK80n0Qhej2rCyCpKPK8qhC2Xu831YHBdvFPTA2RohPsDO9rzQNmrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQfNgfU/RnHTLJxbK59pgwdT9nMcwHwYDVR0j BBgwFoAUpKJfV4lWqO+p6P34oYD2MrdpNhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U4ZmRlYjAtMzUxMy00ZjNkLTkyNTktODJiOWQxOWEzNTU2LzAvQTRBMjVGNTc4 OTU2QThFRkE5RThGREY4QTE4MEY2MzJCNzY5MzYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNEEyNUY1Nzg5NTZBOEVGQTlFOEZERjhBMTgwRjYzMkI3Njkz NjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvQTRBMjVGNTc4OTU2QThFRkE5RThGREY4QTE4MEY2 MzJCNzY5MzYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoc93BVqm/73rvfJznPpPT2FXB6AJ7lI1pA o+wI1rzIRvB/HVEnfzk/J9WT3FXxWYntxyDbYEz1Bht66Bsx5AMb3vanTmi+5NwN qwNnofNl0KeZ1Z8KkVyNN3QPeQc/OtH4NbTl7jJeeTDJp6ST7a3vi4KJrFFxNJYl QJDZK+H7LVPziPhNG4ifQG1rr5wJxy/pmV1QJx0BwvAUjU4FcB6oq8RBeW61F4Ka 6VuQFcfcgg0RQkltuwR6MysDF4+bN1f1+WyfHD44kBuTqzUBk/Te5oXJsBTuwSKu 3AN8lIHdquvH/e7stb64ILn+XtdsbTkHciSCu/ajhKrXCaCHm2Y= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:46 2026 by rpki-client