$ rpki-client -vvf rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft File: 8452DA0E5C0E92F8DBB2845824D032330956238B.mft (raw, json) Hash identifier: GVb4CiShZpfaK+6QwAu145l55ApmgRYptt2gi6a590M= Subject key identifier: 5A:9D:C3:D5:DF:D3:7D:92:89:38:F2:73:8F:E6:59:D2:04:48:8B:F2 Authority key identifier: 84:52:DA:0E:5C:0E:92:F8:DB:B2:84:58:24:D0:32:33:09:56:23:8B Certificate issuer: /CN=8452DA0E5C0E92F8DBB2845824D032330956238B Certificate serial: 3657623D831C452EAE9DB33EAFEA80CEB509A9EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8452DA0E5C0E92F8DBB2845824D032330956238B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 23:22:18 +0000 Manifest this update: Tue 16 Jun 2026 23:17:18 +0000 Manifest next update: Thu 18 Jun 2026 00:07:18 +0000 Files and hashes: 1: 8452DA0E5C0E92F8DBB2845824D032330956238B.crl (hash: dnVzsbyVXEMc8IOsE++pLFkOVKbkKJcHjwxEQ/uJcPE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.crl rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8452DA0E5C0E92F8DBB2845824D032330956238B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:57:62:3d:83:1c:45:2e:ae:9d:b3:3e:af:ea:80:ce:b5:09:a9:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452DA0E5C0E92F8DBB2845824D032330956238B Validity Not Before: Jun 16 23:17:18 2026 GMT Not After : Jun 18 00:07:18 2026 GMT Subject: CN=5A9DC3D5DFD37D928938F2738FE659D204488BF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:68:02:85:97:cb:93:27:05:d6:ba:d2:2c: d4:4e:6a:de:44:32:51:05:7e:70:83:fc:50:a9:74: 4f:0f:e4:a7:d3:96:69:e0:40:c7:b7:8d:d9:0a:bf: 03:d2:28:8b:eb:6c:e6:48:94:44:f5:40:42:71:2f: 33:d6:9e:80:54:79:47:52:82:8a:b9:08:6e:72:88: 30:eb:c4:a3:f2:48:9d:d5:3e:38:03:c2:2d:20:66: 20:6a:b2:55:40:24:b6:34:52:fd:49:69:ae:73:b4: 29:88:8e:b4:ec:11:12:24:4b:b9:a4:0a:cb:00:cc: fc:48:7e:02:1f:4f:b3:d9:c2:fe:30:59:57:a8:b5: d6:ca:d9:f3:f6:6a:d7:26:5a:4a:d4:43:83:48:1f: d7:19:34:3a:02:87:4a:62:ce:ac:bf:24:3c:dc:7b: 58:6c:b9:3f:da:4a:74:08:a8:75:c9:5b:38:ea:62: be:70:51:47:48:55:ba:77:77:d3:10:c0:ee:ba:7c: 42:c6:da:93:3e:29:b2:6a:71:34:a2:99:39:6d:1a: 6b:28:e6:11:5f:a0:06:37:89:3a:79:c1:fd:6f:14: 1e:4b:8d:8b:93:61:c8:6c:60:ef:d4:fb:00:25:07: c1:9c:2d:5f:98:16:44:2a:c9:04:88:01:d2:0d:de: 33:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9D:C3:D5:DF:D3:7D:92:89:38:F2:73:8F:E6:59:D2:04:48:8B:F2 X509v3 Authority Key Identifier: keyid:84:52:DA:0E:5C:0E:92:F8:DB:B2:84:58:24:D0:32:33:09:56:23:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8452DA0E5C0E92F8DBB2845824D032330956238B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:5e:91:56:83:bf:6c:f6:93:46:39:87:17:39:16:49:ba:23: 52:95:86:c5:e1:36:d6:fc:57:a3:78:2a:73:03:a2:39:3a:7c: 4f:f8:cc:45:09:7f:46:46:4d:ff:91:6a:11:79:e7:a7:8e:b8: cf:47:fb:92:84:18:95:5e:a6:0b:e1:92:f2:c3:40:3a:9c:43: 4b:45:bb:df:67:ea:50:fe:d2:af:df:bf:f6:11:94:ce:90:a6: f2:ac:53:46:e5:d8:e8:32:79:9f:e1:1e:16:76:ad:87:c7:d9: bd:1c:c6:6c:d5:c5:54:6f:be:a8:82:ff:d2:eb:9a:5d:c4:ff: 41:03:48:38:5b:f0:5b:96:4f:fa:ef:ec:97:90:d5:6b:c5:0e: 3f:d6:a7:a0:67:63:bd:8d:83:0f:ed:7c:cb:49:6f:5b:e1:52: 34:fa:6c:1a:45:40:cc:fb:28:01:14:3c:bc:9b:ac:df:3f:a5: 3e:04:90:fd:1b:59:a9:51:95:0f:ef:37:b1:bd:aa:25:7e:24: f7:8a:93:03:45:72:38:f7:a8:ff:0c:c5:93:7d:7b:69:44:dd: b8:9f:21:f0:05:b0:e9:fb:13:de:ee:99:64:0a:ef:d1:fb:7e: c8:33:87:60:3a:86:17:d1:04:3a:7e:92:2b:be:db:b4:72:4b: fd:46:c9:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNldiPYMcRS6unbM+r+qAzrUJqeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1MkRBMEU1QzBFOTJGOERCQjI4NDU4MjREMDMyMzMw OTU2MjM4QjAeFw0yNjA2MTYyMzE3MThaFw0yNjA2MTgwMDA3MThaMDMxMTAvBgNV BAMTKDVBOURDM0Q1REZEMzdEOTI4OTM4RjI3MzhGRTY1OUQyMDQ0ODhCRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEhWgChZfLkycF1rrSLNROat5E MlEFfnCD/FCpdE8P5KfTlmngQMe3jdkKvwPSKIvrbOZIlET1QEJxLzPWnoBUeUdS goq5CG5yiDDrxKPySJ3VPjgDwi0gZiBqslVAJLY0Uv1Jaa5ztCmIjrTsERIkS7mk CssAzPxIfgIfT7PZwv4wWVeotdbK2fP2atcmWkrUQ4NIH9cZNDoCh0pizqy/JDzc e1hsuT/aSnQIqHXJWzjqYr5wUUdIVbp3d9MQwO66fELG2pM+KbJqcTSimTltGmso 5hFfoAY3iTp5wf1vFB5LjYuTYchsYO/U+wAlB8GcLV+YFkQqyQSIAdIN3jO5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWp3D1d/TfZKJOPJzj+ZZ0gRIi/IwHwYDVR0j BBgwFoAUhFLaDlwOkvjbsoRYJNAyMwlWI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWU5M2Y4NzYtZDUxZS00ODU3LWE2Y2UtYzhkODdjYjQwZTE3LzAvODQ1MkRBMEU1 QzBFOTJGOERCQjI4NDU4MjREMDMyMzMwOTU2MjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDUyREEwRTVDMEU5MkY4REJCMjg0NTgyNEQwMzIzMzA5NTYy MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWU5M2Y4NzYtZDUxZS00ODU3LWE2 Y2UtYzhkODdjYjQwZTE3LzAvODQ1MkRBMEU1QzBFOTJGOERCQjI4NDU4MjREMDMy MzMwOTU2MjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlekVaDv2z2k0Y5hxc5Fkm6I1KVhsXhNtb8 V6N4KnMDojk6fE/4zEUJf0ZGTf+RahF556eOuM9H+5KEGJVepgvhkvLDQDqcQ0tF u99n6lD+0q/fv/YRlM6QpvKsU0bl2OgyeZ/hHhZ2rYfH2b0cxmzVxVRvvqiC/9Lr ml3E/0EDSDhb8FuWT/rv7JeQ1WvFDj/Wp6BnY72Ngw/tfMtJb1vhUjT6bBpFQMz7 KAEUPLybrN8/pT4EkP0bWalRlQ/vN7G9qiV+JPeKkwNFcjj3qP8MxZN9e2lE3bif IfAFsOn7E97umWQK79H7fsgzh2A6hhfRBDp+kiu+27RyS/1GybI= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:16 2026 by rpki-client