$ rpki-client -vvf rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft File: D21C7558CD1D6E80F107C302A7A49637AD11D654.mft (raw, json) Hash identifier: ap5EniPeoo2ShByzgaHKKr7+EscA19yLX4ZLKqPw0wE= Subject key identifier: 8F:21:5D:77:C1:8B:4C:ED:3E:C7:5D:C1:AB:C6:21:33:1A:D1:27:6A Authority key identifier: D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 Certificate issuer: /CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Certificate serial: 552206D095328EAB99D75197271F437FFE035DEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 21:45:34 +0000 Manifest this update: Tue 16 Jun 2026 21:40:34 +0000 Manifest next update: Wed 17 Jun 2026 23:16:34 +0000 Files and hashes: 1: D21C7558CD1D6E80F107C302A7A49637AD11D654.crl (hash: MBn1BRtuDCN2goFS/ZYBlSliObd54a95BkVvExsqmJI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:22:06:d0:95:32:8e:ab:99:d7:51:97:27:1f:43:7f:fe:03:5d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Validity Not Before: Jun 16 21:40:34 2026 GMT Not After : Jun 17 23:16:34 2026 GMT Subject: CN=8F215D77C18B4CED3EC75DC1ABC621331AD1276A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8b:fd:fe:bb:3e:a1:d4:c8:21:91:79:64:18: 0b:cc:16:99:d9:cd:37:39:32:64:ac:4c:b7:95:e6: 9f:68:59:8b:72:c5:22:03:e6:46:8d:16:b3:83:0a: ff:3e:02:45:d7:e1:fa:19:55:8d:f3:c3:b7:07:79: 69:02:7e:45:35:b3:97:38:35:6e:0c:7b:ad:48:87: 31:b2:5d:47:60:8b:bf:9d:bc:f9:aa:9b:f1:70:0d: 20:8f:74:c9:48:ff:70:32:30:b8:c8:4b:c7:f4:0f: 4b:fe:34:b9:8b:07:84:e7:e2:52:5d:a0:86:f5:eb: df:10:50:62:5d:d3:56:41:e8:3f:bd:b1:fc:ed:c7: 3e:4b:dc:54:6c:af:ff:4c:d1:6d:2c:de:68:a0:c8: 15:a7:10:cb:80:96:6a:5e:ff:39:f1:a5:1c:81:50: ad:bb:2b:91:ea:4e:71:df:ea:02:ad:38:52:3f:85: 9d:b6:77:2b:37:1d:90:12:db:23:39:c3:5e:20:9c: a5:e9:36:4c:58:ea:f1:2d:0d:6d:37:05:22:86:29: b1:0d:00:3c:2c:84:b3:10:12:32:89:3f:08:f8:f8: 67:bf:b3:c9:f7:b2:31:8b:f0:14:82:6a:e4:97:c4: 2d:7c:37:5e:90:3f:d8:63:f7:c0:8f:41:23:44:85: b7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:21:5D:77:C1:8B:4C:ED:3E:C7:5D:C1:AB:C6:21:33:1A:D1:27:6A X509v3 Authority Key Identifier: keyid:D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7f:13:15:29:04:c9:a9:0f:74:40:c8:d4:28:90:53:30:63: 1a:87:a8:eb:83:d3:88:67:59:14:f2:ee:c8:4d:7c:ec:f8:84: d1:77:54:cd:ee:31:0a:3b:b3:2d:c0:c1:5a:2b:2b:e2:9a:a5: f4:20:19:7f:d3:8c:96:7e:05:50:a3:1b:45:70:c8:14:54:08: 7d:f5:79:02:4e:4b:05:08:e4:74:ed:c2:8c:28:b0:03:11:46: a6:7d:e8:10:36:53:79:14:f0:4f:7a:42:7c:bc:03:27:4d:0d: fd:e6:c6:06:18:ea:fe:6b:56:3a:69:d3:81:7e:0d:6b:dc:a8: ee:c4:f2:5f:a5:58:b4:09:fe:5b:3c:17:57:7f:6e:a7:7f:c4: ef:83:ac:9f:47:e0:57:f2:7c:00:3e:4f:10:65:71:93:6f:5e: 12:fb:a8:b1:1b:77:3e:65:9d:8f:3c:e9:4e:bf:5b:97:c0:fd: 89:99:5d:20:58:b4:a6:b4:9d:b3:4d:f4:c6:da:b9:6c:20:81: 88:0b:54:49:0f:77:2c:e9:45:bf:8f:6d:35:b2:24:6f:78:e6: 58:68:c1:75:c7:ee:5a:11:0f:f6:84:7d:21:fd:9f:5e:92:35: a4:ce:03:b9:bd:29:7e:fa:0e:da:6b:5e:b6:cd:1d:08:6b:3b: b5:0a:5c:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVSIG0JUyjquZ11GXJx9Df/4DXeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2MzdB RDExRDY1NDAeFw0yNjA2MTYyMTQwMzRaFw0yNjA2MTcyMzE2MzRaMDMxMTAvBgNV BAMTKDhGMjE1RDc3QzE4QjRDRUQzRUM3NURDMUFCQzYyMTMzMUFEMTI3NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGi/3+uz6h1MghkXlkGAvMFpnZ zTc5MmSsTLeV5p9oWYtyxSID5kaNFrODCv8+AkXX4foZVY3zw7cHeWkCfkU1s5c4 NW4Me61IhzGyXUdgi7+dvPmqm/FwDSCPdMlI/3AyMLjIS8f0D0v+NLmLB4Tn4lJd oIb1698QUGJd01ZB6D+9sfztxz5L3FRsr/9M0W0s3migyBWnEMuAlmpe/znxpRyB UK27K5HqTnHf6gKtOFI/hZ22dys3HZAS2yM5w14gnKXpNkxY6vEtDW03BSKGKbEN ADwshLMQEjKJPwj4+Ge/s8n3sjGL8BSCauSXxC18N16QP9hj98CPQSNEhbfZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjyFdd8GLTO0+x13Bq8YhMxrRJ2owHwYDVR0j BBgwFoAU0hx1WM0dboDxB8MCp6SWN60R1lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTY3OWI0ZDEtZDZiNS00ODIwLWE0OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThD RDFENkU4MEYxMDdDMzAyQTdBNDk2MzdBRDExRDY1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMjFDNzU1OENEMUQ2RTgwRjEwN0MzMDJBN0E0OTYzN0FEMTFE NjU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2 MzdBRDExRDY1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADx/ExUpBMmpD3RAyNQokFMwYxqHqOuD04hn WRTy7shNfOz4hNF3VM3uMQo7sy3AwVorK+KapfQgGX/TjJZ+BVCjG0VwyBRUCH31 eQJOSwUI5HTtwowosAMRRqZ96BA2U3kU8E96Qny8AydNDf3mxgYY6v5rVjpp04F+ DWvcqO7E8l+lWLQJ/ls8F1d/bqd/xO+DrJ9H4FfyfAA+TxBlcZNvXhL7qLEbdz5l nY886U6/W5fA/YmZXSBYtKa0nbNN9MbauWwggYgLVEkPdyzpRb+PbTWyJG945lho wXXH7loRD/aEfSH9n16SNaTOA7m9KX76DtprXrbNHQhrO7UKXAw= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:22 2026 by rpki-client