$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft File: 1236E394229BC623C890CC5AB178B4BFC96DCE66.mft (raw, json) Hash identifier: mBp6JcarQ06ovTvHY1bAd1hD2MqUDH3iCvm1hhFGLBA= Subject key identifier: 6D:76:3F:39:B8:F0:40:3E:1E:23:45:F4:C6:B0:DC:24:4B:1B:49:DC Authority key identifier: 12:36:E3:94:22:9B:C6:23:C8:90:CC:5A:B1:78:B4:BF:C9:6D:CE:66 Certificate issuer: /CN=1236E394229BC623C890CC5AB178B4BFC96DCE66 Certificate serial: 63EDE3477B397B87BFFD16F7B34EFA4B1A73E30F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 19:32:48 +0000 Manifest this update: Tue 16 Jun 2026 19:27:48 +0000 Manifest next update: Wed 17 Jun 2026 20:59:48 +0000 Files and hashes: 1: 1236E394229BC623C890CC5AB178B4BFC96DCE66.crl (hash: qjefvdDJQHS2qcFsYtt75Y23YaaPXhbefIz5AF6mJvM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.crl rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ed:e3:47:7b:39:7b:87:bf:fd:16:f7:b3:4e:fa:4b:1a:73:e3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1236E394229BC623C890CC5AB178B4BFC96DCE66 Validity Not Before: Jun 16 19:27:48 2026 GMT Not After : Jun 17 20:59:48 2026 GMT Subject: CN=6D763F39B8F0403E1E2345F4C6B0DC244B1B49DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:59:fd:04:b6:64:ff:8a:88:da:38:21:4f:67: 68:11:8c:e6:21:39:36:fe:bc:8e:03:1f:ee:08:59: bb:fe:d3:ff:e3:62:5c:ff:35:30:98:bb:10:f0:d3: 8c:b0:09:b6:1a:2c:22:3b:c0:40:9c:76:72:8e:81: 3b:f4:71:95:aa:d0:ec:fc:da:66:91:aa:0d:85:63: 54:d0:b3:d9:55:2e:5e:45:df:7d:8f:ca:f2:ed:c1: 02:c0:19:5b:55:fb:27:2b:49:3c:02:a9:3e:e2:90: fb:2f:28:b6:8e:ed:05:79:d7:1c:f5:1e:e2:78:60: 76:38:4d:34:84:6c:34:c5:b4:7a:99:ef:df:5f:cb: 71:46:f5:82:10:4c:76:91:68:bf:0d:33:ff:15:29: 3b:a2:69:f0:01:f1:42:62:22:7c:9a:19:c8:d4:66: 9a:9c:68:c2:87:81:d1:ec:82:3c:cf:4e:3e:ff:b2: 2b:ba:c3:4a:5d:1e:e7:44:fd:de:92:c4:00:a7:55: 58:ef:e9:3a:2d:55:15:84:87:d8:53:6f:ee:a5:e8: 77:63:16:2f:42:c4:6b:f6:8c:25:0b:bc:7f:10:bf: de:f8:c8:ef:39:88:2b:83:6f:50:8a:95:a4:de:09: be:6b:e8:03:b3:1d:eb:ad:84:2a:f5:0b:ca:3f:9a: e3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:76:3F:39:B8:F0:40:3E:1E:23:45:F4:C6:B0:DC:24:4B:1B:49:DC X509v3 Authority Key Identifier: keyid:12:36:E3:94:22:9B:C6:23:C8:90:CC:5A:B1:78:B4:BF:C9:6D:CE:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:e2:6f:51:26:9d:68:a2:60:43:be:81:b1:94:5f:33:ec:30: 9b:2b:0b:c4:ed:d3:46:06:fe:06:bd:98:79:74:18:1d:5d:cf: 70:d7:9f:e4:76:4e:c6:22:6f:b2:98:04:12:94:f6:0b:94:a2: 15:b7:c8:f8:f0:c1:56:e5:54:90:06:6b:44:31:7d:8a:72:fe: 26:da:4d:0c:66:af:47:c9:b5:c6:ca:4e:ac:58:8c:14:62:49: 6a:f5:de:64:d4:04:25:03:97:c8:17:45:37:3c:b6:2f:3a:8f: d1:e5:a3:4a:60:e4:d8:c7:a4:6d:a9:6b:ba:92:f3:ec:90:85: bf:a7:6d:13:a8:60:f5:39:ad:bc:f3:22:36:67:0a:91:03:c9: a7:b4:6d:4f:7b:7f:f4:bd:85:21:ab:90:de:72:3e:e5:74:0f: 02:25:a6:83:23:d1:18:fc:1e:62:f1:a9:c7:e7:c0:50:fe:d1: 92:a0:2a:8a:0f:a4:e2:44:08:c8:f0:11:a0:c8:eb:65:78:07: fe:26:46:48:52:49:ed:5f:28:a3:43:2a:7b:ef:c4:35:b7:94: be:61:91:8d:dc:91:d1:a7:d2:42:0b:c4:15:c2:30:6a:a2:c4: 3d:d5:19:fc:50:ec:a9:fa:77:24:b2:e5:cb:f9:de:e1:6c:d0: 2f:17:0c:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY+3jR3s5e4e//Rb3s076Sxpz4w8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIzNkUzOTQyMjlCQzYyM0M4OTBDQzVBQjE3OEI0QkZD OTZEQ0U2NjAeFw0yNjA2MTYxOTI3NDhaFw0yNjA2MTcyMDU5NDhaMDMxMTAvBgNV BAMTKDZENzYzRjM5QjhGMDQwM0UxRTIzNDVGNEM2QjBEQzI0NEIxQjQ5REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwWf0EtmT/iojaOCFPZ2gRjOYh OTb+vI4DH+4IWbv+0//jYlz/NTCYuxDw04ywCbYaLCI7wECcdnKOgTv0cZWq0Oz8 2maRqg2FY1TQs9lVLl5F332PyvLtwQLAGVtV+ycrSTwCqT7ikPsvKLaO7QV51xz1 HuJ4YHY4TTSEbDTFtHqZ799fy3FG9YIQTHaRaL8NM/8VKTuiafAB8UJiInyaGcjU ZpqcaMKHgdHsgjzPTj7/siu6w0pdHudE/d6SxACnVVjv6TotVRWEh9hTb+6l6Hdj Fi9CxGv2jCULvH8Qv974yO85iCuDb1CKlaTeCb5r6AOzHeuthCr1C8o/muP3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbXY/ObjwQD4eI0X0xrDcJEsbSdwwHwYDVR0j BBgwFoAUEjbjlCKbxiPIkMxasXi0v8ltzmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWExZTZhYzQtYTJjNC00MWE3LWIwZGItNmZhNzhiMGNhOGIwLzAvMTIzNkUzOTQy MjlCQzYyM0M4OTBDQzVBQjE3OEI0QkZDOTZEQ0U2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjM2RTM5NDIyOUJDNjIzQzg5MENDNUFCMTc4QjRCRkM5NkRD RTY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvMTIzNkUzOTQyMjlCQzYyM0M4OTBDQzVBQjE3OEI0 QkZDOTZEQ0U2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETib1EmnWiiYEO+gbGUXzPsMJsrC8Tt00YG /ga9mHl0GB1dz3DXn+R2TsYib7KYBBKU9guUohW3yPjwwVblVJAGa0QxfYpy/iba TQxmr0fJtcbKTqxYjBRiSWr13mTUBCUDl8gXRTc8ti86j9Hlo0pg5NjHpG2pa7qS 8+yQhb+nbROoYPU5rbzzIjZnCpEDyae0bU97f/S9hSGrkN5yPuV0DwIlpoMj0Rj8 HmLxqcfnwFD+0ZKgKooPpOJECMjwEaDI62V4B/4mRkhSSe1fKKNDKnvvxDW3lL5h kY3ckdGn0kILxBXCMGqixD3VGfxQ7Kn6dySy5cv53uFs0C8XDDQ= -----END CERTIFICATE-----Generated at Wed Jun 17 12:18:14 2026 by rpki-client