$ rpki-client -vvf rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft File: F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft (raw, json) Hash identifier: JNz86Fh2RQmcPwxfBSOn+Ub4PiYfwEfceVV5M/vFjjw= Subject key identifier: 9A:08:F5:3E:65:A8:CA:C1:9C:85:F4:35:14:9A:30:4D:C1:4F:AE:2D Authority key identifier: F3:48:AD:E3:81:68:4E:BA:60:AF:50:D5:39:16:D6:F7:9C:EB:CD:20 Certificate issuer: /CN=F348ADE381684EBA60AF50D53916D6F79CEBCD20 Certificate serial: 67FEB8F229E33DE120EE11B4CEFADF21704AE6C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F348ADE381684EBA60AF50D53916D6F79CEBCD20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:21:15 +0000 Manifest this update: Tue 16 Jun 2026 22:16:15 +0000 Manifest next update: Thu 18 Jun 2026 00:23:15 +0000 Files and hashes: 1: F348ADE381684EBA60AF50D53916D6F79CEBCD20.crl (hash: qz+7itnfTcXJpxi90GJejGBpbNhABXpGbdhkyIwfltE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.crl rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F348ADE381684EBA60AF50D53916D6F79CEBCD20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fe:b8:f2:29:e3:3d:e1:20:ee:11:b4:ce:fa:df:21:70:4a:e6:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F348ADE381684EBA60AF50D53916D6F79CEBCD20 Validity Not Before: Jun 16 22:16:15 2026 GMT Not After : Jun 18 00:23:15 2026 GMT Subject: CN=9A08F53E65A8CAC19C85F435149A304DC14FAE2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:23:51:5f:58:65:b1:30:03:09:0c:8a:d5:53: cf:f9:9f:fc:60:1a:5c:ea:91:1d:8d:31:7e:6c:1c: 00:08:f2:5f:0c:76:e7:af:09:90:09:5f:c9:b1:22: 74:42:3c:7c:39:6c:63:ee:60:46:f1:5b:17:0a:37: 57:c8:ef:ce:9a:3f:63:90:f3:5a:00:70:98:da:b3: 45:5a:da:6b:02:c8:bc:04:eb:28:e2:f1:d6:a2:7d: 12:83:d1:b8:ad:2e:84:4b:83:46:f9:ce:08:51:4e: 37:85:2a:b1:64:41:e3:54:32:e1:0e:11:3e:97:47: 02:a7:1a:67:86:69:ce:6d:06:ac:b8:a0:8f:dd:58: 2f:a1:64:7a:e0:7e:03:53:fd:97:f9:03:ee:f9:07: 56:da:a5:63:a3:39:8f:f2:96:b2:13:b1:eb:0d:52: 2a:ac:ac:d0:a1:0b:d2:ab:e2:f1:df:25:da:9e:25: 1e:67:4a:15:de:61:a4:82:f5:92:3d:36:14:84:78: 98:43:6e:da:7f:63:78:ed:e3:6f:87:00:4e:32:e9: 31:46:96:7f:a0:03:a5:a8:00:75:bd:00:52:19:eb: 11:90:ff:ef:b9:db:16:d7:0a:59:c7:ff:98:10:53: 30:ee:56:36:c0:56:b9:b1:fe:b3:c4:62:47:10:08: 03:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:08:F5:3E:65:A8:CA:C1:9C:85:F4:35:14:9A:30:4D:C1:4F:AE:2D X509v3 Authority Key Identifier: keyid:F3:48:AD:E3:81:68:4E:BA:60:AF:50:D5:39:16:D6:F7:9C:EB:CD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F348ADE381684EBA60AF50D53916D6F79CEBCD20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:a7:ab:c6:08:67:cf:80:46:aa:aa:7a:b8:35:08:f1:1d:a2: c8:e3:10:3e:18:68:9d:84:d8:92:76:3b:9d:ce:fd:2a:ea:c9: b6:48:50:72:d1:4e:53:ae:d2:10:e7:9b:47:53:b0:e2:c1:0a: 3c:52:ff:7e:c2:d4:f4:7b:e3:02:71:9e:11:b1:87:7e:91:91: be:24:c6:22:f7:cf:78:2e:01:c3:fc:da:4d:87:0b:fd:e6:d4: 67:c4:b8:05:ae:58:20:06:48:03:46:59:f1:24:2b:81:b9:69: 60:28:f7:d7:95:74:5f:9b:f2:cb:60:80:a2:ef:83:52:ed:3f: 26:2e:a8:be:a7:5e:10:22:00:c3:2b:d1:a6:8b:c4:f9:7a:09: df:b8:e8:cb:1b:80:87:a7:be:87:5a:06:1e:a4:9b:9d:52:e8: e3:f5:29:c0:79:8b:bf:d2:10:7b:f5:19:a2:8d:c7:bb:43:d4: a5:7b:55:70:f9:f5:7b:b4:1b:12:37:25:aa:e5:a9:d9:a0:cb: 21:81:48:1c:32:05:34:3d:74:ae:c4:b0:54:28:2b:15:1a:5e: a2:38:af:40:b2:5c:58:03:81:12:cb:12:24:ce:1f:a2:1b:85: 4a:56:13:22:e1:c9:7f:a7:43:b3:bf:13:ab:61:82:7b:24:e3: db:16:91:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/648injPeEg7hG0zvrfIXBK5scwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM0OEFERTM4MTY4NEVCQTYwQUY1MEQ1MzkxNkQ2Rjc5 Q0VCQ0QyMDAeFw0yNjA2MTYyMjE2MTVaFw0yNjA2MTgwMDIzMTVaMDMxMTAvBgNV BAMTKDlBMDhGNTNFNjVBOENBQzE5Qzg1RjQzNTE0OUEzMDREQzE0RkFFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBI1FfWGWxMAMJDIrVU8/5n/xg GlzqkR2NMX5sHAAI8l8MduevCZAJX8mxInRCPHw5bGPuYEbxWxcKN1fI786aP2OQ 81oAcJjas0Va2msCyLwE6yji8daifRKD0bitLoRLg0b5zghRTjeFKrFkQeNUMuEO ET6XRwKnGmeGac5tBqy4oI/dWC+hZHrgfgNT/Zf5A+75B1bapWOjOY/ylrITsesN UiqsrNChC9Kr4vHfJdqeJR5nShXeYaSC9ZI9NhSEeJhDbtp/Y3jt42+HAE4y6TFG ln+gA6WoAHW9AFIZ6xGQ/++52xbXClnH/5gQUzDuVjbAVrmx/rPEYkcQCAM3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmgj1PmWoysGchfQ1FJowTcFPri0wHwYDVR0j BBgwFoAU80it44FoTrpgr1DVORbW95zrzSAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJmMjczMGItZGY1OC00ZjI3LTgwZTEtMDhkZTY2YmMxYWNmLzAvRjM0OEFERTM4 MTY4NEVCQTYwQUY1MEQ1MzkxNkQ2Rjc5Q0VCQ0QyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzQ4QURFMzgxNjg0RUJBNjBBRjUwRDUzOTE2RDZGNzlDRUJD RDIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJmMjczMGItZGY1OC00ZjI3LTgw ZTEtMDhkZTY2YmMxYWNmLzAvRjM0OEFERTM4MTY4NEVCQTYwQUY1MEQ1MzkxNkQ2 Rjc5Q0VCQ0QyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOnq8YIZ8+ARqqqerg1CPEdosjjED4YaJ2E 2JJ2O53O/SrqybZIUHLRTlOu0hDnm0dTsOLBCjxS/37C1PR74wJxnhGxh36Rkb4k xiL3z3guAcP82k2HC/3m1GfEuAWuWCAGSANGWfEkK4G5aWAo99eVdF+b8stggKLv g1LtPyYuqL6nXhAiAMMr0aaLxPl6Cd+46MsbgIenvodaBh6km51S6OP1KcB5i7/S EHv1GaKNx7tD1KV7VXD59Xu0GxI3JarlqdmgyyGBSBwyBTQ9dK7EsFQoKxUaXqI4 r0CyXFgDgRLLEiTOH6IbhUpWEyLhyX+nQ7O/E6thgnsk49sWkek= -----END CERTIFICATE-----Generated at Wed Jun 17 09:19:48 2026 by rpki-client