$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft File: 10B2C61A3BF002D69AD557B8392E1F340162A168.mft (raw, json) Hash identifier: noOJ4CuaRdnc6IeNT1STY3BHe0Z/xHgq2DnV6HRXvJ8= Subject key identifier: 5D:F3:3C:81:D9:BF:91:A5:B1:F2:3D:C4:C1:71:0E:19:AF:BE:07:3E Authority key identifier: 10:B2:C6:1A:3B:F0:02:D6:9A:D5:57:B8:39:2E:1F:34:01:62:A1:68 Certificate issuer: /CN=10B2C61A3BF002D69AD557B8392E1F340162A168 Certificate serial: 254495780B8BF752B1893E47C95331C844AB6503 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 02:40:56 +0000 Manifest this update: Wed 17 Jun 2026 02:35:56 +0000 Manifest next update: Thu 18 Jun 2026 03:16:56 +0000 Files and hashes: 1: 10B2C61A3BF002D69AD557B8392E1F340162A168.crl (hash: oF27uDyohcAfPc1I41nD82S+COrLuYTrmHIrCN9dAbM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.crl rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:44:95:78:0b:8b:f7:52:b1:89:3e:47:c9:53:31:c8:44:ab:65:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B2C61A3BF002D69AD557B8392E1F340162A168 Validity Not Before: Jun 17 02:35:56 2026 GMT Not After : Jun 18 03:16:56 2026 GMT Subject: CN=5DF33C81D9BF91A5B1F23DC4C1710E19AFBE073E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f3:13:4b:c7:6c:f2:8f:25:58:3c:e0:2c:62: de:0b:f3:15:09:96:ca:29:ff:3d:38:bc:ff:71:78: 76:4f:9b:d7:50:9e:3f:8d:dd:5a:39:b8:b1:67:a8: db:06:bd:fa:3c:28:9b:51:47:f0:c0:41:8d:86:da: 90:5f:d7:0a:a8:96:95:42:a7:77:2e:bf:2b:f7:5c: 80:02:a9:3d:fa:e9:a9:c0:5f:17:9f:46:13:cd:dc: c2:d8:22:94:19:c3:db:69:85:da:5a:82:2b:c4:d3: 2a:ae:66:00:68:77:8e:e9:aa:1e:61:4b:a4:69:e4: bb:c9:9d:fe:62:20:08:af:b5:55:77:b7:36:4c:d1: 1f:34:56:e5:c6:91:93:b2:a5:b9:ba:d4:88:ce:2a: 0e:96:f4:ff:c3:9f:84:44:44:e8:f6:e8:7f:7a:49: 2a:9f:e6:09:e6:25:80:87:a5:23:ec:0e:94:20:fc: ba:22:41:95:6c:49:dc:9b:9f:36:17:48:d9:8f:f7: df:76:63:8b:64:8a:79:c8:78:7f:77:80:27:f1:65: 20:37:d0:d7:bf:41:5e:89:34:bf:3a:09:63:a2:98: 01:3f:1f:cc:f3:4c:82:b6:8e:be:24:1b:52:0b:ec: d1:0a:27:0d:32:3e:c1:86:ec:5d:fc:df:2d:74:a0: 46:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F3:3C:81:D9:BF:91:A5:B1:F2:3D:C4:C1:71:0E:19:AF:BE:07:3E X509v3 Authority Key Identifier: keyid:10:B2:C6:1A:3B:F0:02:D6:9A:D5:57:B8:39:2E:1F:34:01:62:A1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ba:73:de:85:9a:0a:9d:ce:bf:28:4a:68:ea:2e:fc:db:77: 93:29:dd:24:96:19:a9:a6:0d:e3:8f:b2:36:4b:ec:40:7f:81: 32:96:71:ea:cb:c8:4e:45:61:2d:a2:c8:e2:28:7c:d3:da:60: 7b:59:0c:71:14:e8:af:c2:7c:f5:b4:c5:1e:44:56:57:be:42: a9:92:b3:68:3f:51:db:2c:71:49:0f:5d:45:5b:2b:98:2f:5d: 63:2d:32:c4:80:ce:2a:eb:82:ed:17:6c:91:46:20:eb:22:96: 11:0e:75:17:9a:d6:72:70:bc:95:38:3f:88:da:61:cb:66:ad: af:98:b5:2f:02:cb:ee:00:36:ee:6a:12:80:38:77:b1:ee:ae: 12:03:9c:ec:0c:b6:0b:f4:59:8a:c3:7f:c5:d3:86:9a:ff:f1: 66:1c:76:28:4d:bc:15:bf:e6:79:a1:d8:e6:66:13:0d:49:06: f8:e2:18:46:26:04:93:12:d1:f7:5a:fe:30:78:a0:a3:6d:7c: 9e:ca:64:e9:a3:9d:0c:3b:c3:02:aa:d3:15:67:83:19:b1:43: c7:21:0b:15:9b:96:b6:91:f0:b1:e6:15:dc:49:13:2a:1c:ca: 57:12:90:d3:5e:4b:ac:16:16:67:9e:5c:46:db:1f:25:65:be: b8:d6:a4:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJUSVeAuL91KxiT5HyVMxyESrZQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCMkM2MUEzQkYwMDJENjlBRDU1N0I4MzkyRTFGMzQw MTYyQTE2ODAeFw0yNjA2MTcwMjM1NTZaFw0yNjA2MTgwMzE2NTZaMDMxMTAvBgNV BAMTKDVERjMzQzgxRDlCRjkxQTVCMUYyM0RDNEMxNzEwRTE5QUZCRTA3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8xNLx2zyjyVYPOAsYt4L8xUJ lsop/z04vP9xeHZPm9dQnj+N3Vo5uLFnqNsGvfo8KJtRR/DAQY2G2pBf1wqolpVC p3cuvyv3XIACqT366anAXxefRhPN3MLYIpQZw9tphdpagivE0yquZgBod47pqh5h S6Rp5LvJnf5iIAivtVV3tzZM0R80VuXGkZOypbm61IjOKg6W9P/Dn4REROj26H96 SSqf5gnmJYCHpSPsDpQg/LoiQZVsSdybnzYXSNmP9992Y4tkinnIeH93gCfxZSA3 0Ne/QV6JNL86CWOimAE/H8zzTIK2jr4kG1IL7NEKJw0yPsGG7F383y10oEbRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXfM8gdm/kaWx8j3EwXEOGa++Bz4wHwYDVR0j BBgwFoAUELLGGjvwAtaa1Ve4OS4fNAFioWgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ1YTAzZWItYTNlMS00ODc5LTg1YmYtMmJlYTAzNTU1OGRkLzEvMTBCMkM2MUEz QkYwMDJENjlBRDU1N0I4MzkyRTFGMzQwMTYyQTE2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy8xMEIyQzYxQTNCRjAwMkQ2OUFENTU3QjgzOTJFMUYzNDAxNjJB MTY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ1YTAzZWItYTNlMS00ODc5LTg1 YmYtMmJlYTAzNTU1OGRkLzEvMTBCMkM2MUEzQkYwMDJENjlBRDU1N0I4MzkyRTFG MzQwMTYyQTE2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIu6c96Fmgqdzr8oSmjqLvzbd5Mp3SSWGamm DeOPsjZL7EB/gTKWcerLyE5FYS2iyOIofNPaYHtZDHEU6K/CfPW0xR5EVle+QqmS s2g/UdsscUkPXUVbK5gvXWMtMsSAzirrgu0XbJFGIOsilhEOdRea1nJwvJU4P4ja Yctmra+YtS8Cy+4ANu5qEoA4d7HurhIDnOwMtgv0WYrDf8XThpr/8WYcdihNvBW/ 5nmh2OZmEw1JBvjiGEYmBJMS0fda/jB4oKNtfJ7KZOmjnQw7wwKq0xVngxmxQ8ch CxWblraR8LHmFdxJEyocylcSkNNeS6wWFmeeXEbbHyVlvrjWpFw= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:28 2026 by rpki-client