$ rpki-client -vvf rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft File: D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft (raw, json) Hash identifier: 4R6uNC4P7myQf0bu0pfSteCjjT7+oZw7GmBI2w8ocQQ= Subject key identifier: 3D:C9:3A:84:F3:F6:87:1B:63:AB:CF:E2:4B:FF:0E:D9:60:89:48:49 Authority key identifier: D4:FA:2D:C5:A4:A1:A1:CD:6E:63:EC:67:8B:76:D8:F9:0B:43:02:36 Certificate issuer: /CN=D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236 Certificate serial: 06E1E3C6BB676360ACF9CFACE49FBCD2F4607ED2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:51:10 +0000 Manifest this update: Wed 17 Jun 2026 06:46:10 +0000 Manifest next update: Thu 18 Jun 2026 08:13:10 +0000 Files and hashes: 1: D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl (hash: 7ro/NFXHmILWVPtVhXjs9mqbsgofOOqh7v9a9LavQ9E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:e1:e3:c6:bb:67:63:60:ac:f9:cf:ac:e4:9f:bc:d2:f4:60:7e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236 Validity Not Before: Jun 17 06:46:10 2026 GMT Not After : Jun 18 08:13:10 2026 GMT Subject: CN=3DC93A84F3F6871B63ABCFE24BFF0ED960894849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f4:4c:31:85:51:5f:44:ae:9b:2d:b2:e9:65: 8c:ad:4d:1d:0d:c4:b7:78:b1:3e:6f:e6:fd:29:61: b8:77:fa:94:e7:14:2f:07:75:80:87:99:e0:13:c2: 83:a6:84:3b:73:36:f5:bc:0b:93:27:9b:b7:5d:a5: cd:35:4d:a2:7b:cd:fa:d6:ed:cb:fc:e2:23:87:24: e4:a0:76:88:8d:8a:4c:5d:8d:22:c5:97:ad:0d:d8: 8a:7d:d9:55:17:7e:1b:e8:2f:f7:25:b5:9e:31:02: f9:6b:92:6b:3a:87:f0:0d:25:a4:72:84:01:3d:59: 93:b2:cf:3c:3b:b5:2f:b8:a7:e3:12:71:06:e7:86: d5:06:54:80:89:d5:f6:0f:62:63:e8:fd:16:e0:ce: ec:06:4b:e1:15:f6:cd:80:eb:82:9d:45:92:29:9f: 2e:31:27:e0:ed:07:2b:28:76:6d:f1:37:57:bd:6f: 40:2c:93:27:7c:0e:12:5e:82:b8:e9:c4:10:ed:7c: a4:96:6b:a1:86:9c:d0:35:13:cc:e0:be:d7:b2:95: f4:af:11:bc:bd:e0:00:14:63:5e:8a:52:69:a8:3f: ad:d7:64:4e:12:1e:2e:41:18:eb:64:de:32:c7:a0: 1d:07:e8:a9:4e:eb:68:94:7d:88:2f:ed:87:e3:91: e9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C9:3A:84:F3:F6:87:1B:63:AB:CF:E2:4B:FF:0E:D9:60:89:48:49 X509v3 Authority Key Identifier: keyid:D4:FA:2D:C5:A4:A1:A1:CD:6E:63:EC:67:8B:76:D8:F9:0B:43:02:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:15:5f:f8:f6:17:a0:f5:14:a0:23:8a:55:3f:c2:29:5c:ca: 66:5a:ee:11:2b:f1:a2:e6:19:05:a4:52:9a:0f:6f:6d:82:82: 31:d8:4a:6e:e1:17:ab:d2:42:55:74:6a:fa:08:63:67:19:93: c8:a5:1e:fa:f6:a3:1c:3e:00:ab:7b:17:20:82:d4:db:3b:6b: fe:03:80:aa:a6:c8:ed:e3:aa:b1:24:09:b0:23:22:98:02:ca: c0:1d:2b:89:7f:06:40:53:17:5c:4d:ad:d7:5c:f6:d5:68:8c: 63:1f:c6:84:7f:97:d3:4b:0f:4a:c8:ef:2a:1e:22:75:d9:b2: 28:0e:63:d1:24:a8:5d:ed:0c:33:bf:29:e6:4f:b1:10:30:30: d6:e6:8d:d1:02:67:4f:26:a3:08:0c:ba:df:ac:0f:b9:3d:59: b3:73:0f:ca:f7:50:e9:1c:7c:91:cc:2d:b8:0d:18:82:6c:f5: 88:a7:09:4b:4d:44:94:6b:de:2c:ba:4a:02:1c:1e:d3:70:77: 4d:ef:0d:7e:4f:d2:cb:5d:f2:c2:22:bd:88:9b:1f:f0:c1:f5: 6a:19:f3:5c:d9:53:45:a7:36:20:d0:5e:af:55:35:91:38:56: e0:d9:de:8a:d6:1e:f1:70:18:64:51:0a:bb:ef:80:aa:dd:ff: 9d:05:33:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBuHjxrtnY2Cs+c+s5J+80vRgftIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRGQTJEQzVBNEExQTFDRDZFNjNFQzY3OEI3NkQ4Rjkw QjQzMDIzNjAeFw0yNjA2MTcwNjQ2MTBaFw0yNjA2MTgwODEzMTBaMDMxMTAvBgNV BAMTKDNEQzkzQTg0RjNGNjg3MUI2M0FCQ0ZFMjRCRkYwRUQ5NjA4OTQ4NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm9EwxhVFfRK6bLbLpZYytTR0N xLd4sT5v5v0pYbh3+pTnFC8HdYCHmeATwoOmhDtzNvW8C5Mnm7ddpc01TaJ7zfrW 7cv84iOHJOSgdoiNikxdjSLFl60N2Ip92VUXfhvoL/cltZ4xAvlrkms6h/ANJaRy hAE9WZOyzzw7tS+4p+MScQbnhtUGVICJ1fYPYmPo/RbgzuwGS+EV9s2A64KdRZIp ny4xJ+DtBysodm3xN1e9b0Askyd8DhJegrjpxBDtfKSWa6GGnNA1E8zgvteylfSv Eby94AAUY16KUmmoP63XZE4SHi5BGOtk3jLHoB0H6KlO62iUfYgv7YfjkekVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPck6hPP2hxtjq8/iS/8O2WCJSEkwHwYDVR0j BBgwFoAU1PotxaShoc1uY+xni3bY+QtDAjYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTY3OWNiZjYtMDkxMy00ODIxLThhZTEtYmI1MTFlYWYwODhmLzAvRDRGQTJEQzVB NEExQTFDRDZFNjNFQzY3OEI3NkQ4RjkwQjQzMDIzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEZBMkRDNUE0QTFBMUNENkU2M0VDNjc4Qjc2RDhGOTBCNDMw MjM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvRDRGQTJEQzVBNEExQTFDRDZFNjNFQzY3OEI3NkQ4 RjkwQjQzMDIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoVX/j2F6D1FKAjilU/wilcymZa7hEr8aLm GQWkUpoPb22CgjHYSm7hF6vSQlV0avoIY2cZk8ilHvr2oxw+AKt7FyCC1Ns7a/4D gKqmyO3jqrEkCbAjIpgCysAdK4l/BkBTF1xNrddc9tVojGMfxoR/l9NLD0rI7yoe InXZsigOY9EkqF3tDDO/KeZPsRAwMNbmjdECZ08mowgMut+sD7k9WbNzD8r3UOkc fJHMLbgNGIJs9YinCUtNRJRr3iy6SgIcHtNwd03vDX5P0std8sIivYibH/DB9WoZ 81zZU0WnNiDQXq9VNZE4VuDZ3orWHvFwGGRRCrvvgKrd/50FM7w= -----END CERTIFICATE-----Generated at Wed Jun 17 10:41:20 2026 by rpki-client