$ rpki-client -vvf rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft File: 11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft (raw, json) Hash identifier: 3YQz8BRzl+v40RdWaxlehAof/0AsG+pRiSHbmHVGfVU= Subject key identifier: DF:6E:21:C6:AA:16:B5:44:B3:E0:26:AF:B6:6A:D5:44:FA:5E:1D:28 Authority key identifier: 11:16:76:03:08:2A:A6:8E:C7:45:8A:AA:D6:1E:FC:5B:0B:3B:ED:03 Certificate issuer: /CN=11167603082AA68EC7458AAAD61EFC5B0B3BED03 Certificate serial: 5CAC8F3BC1D0EB8FA313751191D2E9A3005A4D4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11167603082AA68EC7458AAAD61EFC5B0B3BED03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:27:36 +0000 Manifest this update: Tue 16 Jun 2026 19:22:36 +0000 Manifest next update: Wed 17 Jun 2026 20:01:36 +0000 Files and hashes: 1: 11167603082AA68EC7458AAAD61EFC5B0B3BED03.crl (hash: fE661UzHCc4To5pqfAzsQ3OPRiMGOQJvrT6DW3tq/Q4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.crl rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11167603082AA68EC7458AAAD61EFC5B0B3BED03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ac:8f:3b:c1:d0:eb:8f:a3:13:75:11:91:d2:e9:a3:00:5a:4d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11167603082AA68EC7458AAAD61EFC5B0B3BED03 Validity Not Before: Jun 16 19:22:36 2026 GMT Not After : Jun 17 20:01:36 2026 GMT Subject: CN=DF6E21C6AA16B544B3E026AFB66AD544FA5E1D28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c9:85:2a:1b:0b:8d:b1:f8:c5:17:f4:13:6c: e6:ff:eb:ed:23:c8:1e:43:04:e1:c4:6f:80:55:c9: 19:24:98:62:55:b3:67:4b:62:b2:e1:28:93:53:1d: aa:83:e0:f3:0f:27:93:e6:86:ef:57:ea:49:6d:8d: 97:1e:72:94:d9:dc:66:c3:3b:24:34:2a:69:08:71: c7:c0:f2:4f:9b:51:ba:f1:e0:68:51:9f:33:90:ab: c1:aa:20:95:3e:33:f5:dc:59:15:80:4e:3f:5a:42: 1a:66:71:32:0b:9c:26:86:9c:b5:ed:f2:e4:ec:e1: 3a:8c:d6:da:ae:9b:c0:cf:d5:7e:78:a4:88:2a:a0: 54:f0:8f:e0:6f:6b:ac:aa:c3:ab:64:b3:e7:c2:b4: c8:36:ec:9f:a8:38:64:7d:d6:b9:e8:01:ce:cf:b9: 29:b4:29:f4:1b:bd:65:61:96:e8:8f:76:db:67:bf: a7:aa:c9:83:22:4b:45:60:b5:6a:9d:1a:61:56:64: d1:d3:bd:5d:f1:83:ed:9f:de:19:6b:fb:30:12:da: 9a:99:c0:b0:40:a9:df:0a:69:bc:8b:0a:32:e9:fc: 1a:4b:31:c7:81:87:28:1a:fe:51:3e:a7:d1:2a:3e: 22:13:90:fb:25:29:cc:b3:51:2d:83:5d:01:97:51: 34:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6E:21:C6:AA:16:B5:44:B3:E0:26:AF:B6:6A:D5:44:FA:5E:1D:28 X509v3 Authority Key Identifier: keyid:11:16:76:03:08:2A:A6:8E:C7:45:8A:AA:D6:1E:FC:5B:0B:3B:ED:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11167603082AA68EC7458AAAD61EFC5B0B3BED03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a5:5a:29:7d:5c:1e:aa:00:8a:b6:b9:0e:70:2d:02:c3:c8: 65:0b:23:78:50:63:2d:da:9c:b4:3c:15:45:63:0b:bd:66:0f: 01:97:23:a2:a3:f4:0c:c4:fa:81:b1:ed:e9:ab:c2:f4:ea:c4: cd:32:81:c1:3b:3e:d1:f6:0d:cf:d5:f3:62:ad:50:e1:ca:74: 64:f8:05:14:14:5f:b7:97:b2:20:e1:88:b5:32:51:81:16:1a: 96:42:41:b1:3c:5a:4f:be:46:38:e7:aa:71:1b:b4:40:ce:0d: 41:ff:b1:bb:b5:68:33:49:10:ff:03:8d:7c:3f:2f:23:67:92: d3:ad:52:0e:aa:f5:90:36:8f:82:6b:f7:e4:bb:74:b1:43:b5: f4:20:c6:84:e1:83:0a:a5:ff:33:49:44:69:7e:46:6d:66:9b: f2:6b:fc:5b:22:43:0f:c9:d8:a1:18:21:37:a8:82:dc:d4:07: 87:13:5b:dc:0f:91:76:41:c7:2a:58:56:36:f0:93:42:20:0a: 53:d5:e2:74:e2:ab:a8:04:34:ad:24:78:93:86:a3:7b:76:49: 34:ba:00:de:ca:63:a9:50:6d:6e:b2:1a:4d:dc:16:1f:13:dc: 57:f5:1e:ed:3f:fe:df:38:30:ac:43:5d:58:01:f1:21:1f:9d: 02:e4:bd:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXKyPO8HQ64+jE3URkdLpowBaTUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTExNjc2MDMwODJBQTY4RUM3NDU4QUFBRDYxRUZDNUIw QjNCRUQwMzAeFw0yNjA2MTYxOTIyMzZaFw0yNjA2MTcyMDAxMzZaMDMxMTAvBgNV BAMTKERGNkUyMUM2QUExNkI1NDRCM0UwMjZBRkI2NkFENTQ0RkE1RTFEMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNyYUqGwuNsfjFF/QTbOb/6+0j yB5DBOHEb4BVyRkkmGJVs2dLYrLhKJNTHaqD4PMPJ5Pmhu9X6kltjZcecpTZ3GbD OyQ0KmkIccfA8k+bUbrx4GhRnzOQq8GqIJU+M/XcWRWATj9aQhpmcTILnCaGnLXt 8uTs4TqM1tqum8DP1X54pIgqoFTwj+Bva6yqw6tks+fCtMg27J+oOGR91rnoAc7P uSm0KfQbvWVhluiPdttnv6eqyYMiS0VgtWqdGmFWZNHTvV3xg+2f3hlr+zAS2pqZ wLBAqd8KabyLCjLp/BpLMceBhyga/lE+p9EqPiITkPslKcyzUS2DXQGXUTR3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU324hxqoWtUSz4CavtmrVRPpeHSgwHwYDVR0j BBgwFoAUERZ2Awgqpo7HRYqq1h78Wws77QMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQ3NjVmMDYtYjRjOS00N2MxLWFkOWEtMDYxMmM3YzAyZDFjLzAvMTExNjc2MDMw ODJBQTY4RUM3NDU4QUFBRDYxRUZDNUIwQjNCRUQwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTE2NzYwMzA4MkFBNjhFQzc0NThBQUFENjFFRkM1QjBCM0JF RDAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQ3NjVmMDYtYjRjOS00N2MxLWFk OWEtMDYxMmM3YzAyZDFjLzAvMTExNjc2MDMwODJBQTY4RUM3NDU4QUFBRDYxRUZD NUIwQjNCRUQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6lWil9XB6qAIq2uQ5wLQLDyGULI3hQYy3a nLQ8FUVjC71mDwGXI6Kj9AzE+oGx7emrwvTqxM0ygcE7PtH2Dc/V82KtUOHKdGT4 BRQUX7eXsiDhiLUyUYEWGpZCQbE8Wk++RjjnqnEbtEDODUH/sbu1aDNJEP8DjXw/ LyNnktOtUg6q9ZA2j4Jr9+S7dLFDtfQgxoThgwql/zNJRGl+Rm1mm/Jr/FsiQw/J 2KEYITeogtzUB4cTW9wPkXZBxypYVjbwk0IgClPV4nTiq6gENK0keJOGo3t2STS6 AN7KY6lQbW6yGk3cFh8T3Ff1Hu0//t84MKxDXVgB8SEfnQLkvXo= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:22 2026 by rpki-client