$ rpki-client -vvf rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft File: DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft (raw, json) Hash identifier: PeCzPmv/FpN8WAcu+EmmriejRx86xOXefrJVfFb/Y4Y= Subject key identifier: E6:3E:B5:80:40:F4:B4:D4:00:A7:07:FC:E9:39:5E:D4:AE:59:20:64 Authority key identifier: DE:AB:D6:7A:7F:8A:1C:94:C4:FE:B4:1F:DC:B2:3D:3F:D2:80:E0:C9 Certificate issuer: /CN=DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9 Certificate serial: 577E0B0911066DFBE8655A5B319BAE1420B6F533 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 02:35:55 +0000 Manifest this update: Wed 17 Jun 2026 02:30:55 +0000 Manifest next update: Thu 18 Jun 2026 05:06:55 +0000 Files and hashes: 1: DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.crl (hash: TAr/dheNaPlopC66qGXJFCwp2GAv31g/SAXssj0Blzg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.crl rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:7e:0b:09:11:06:6d:fb:e8:65:5a:5b:31:9b:ae:14:20:b6:f5:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9 Validity Not Before: Jun 17 02:30:55 2026 GMT Not After : Jun 18 05:06:55 2026 GMT Subject: CN=E63EB58040F4B4D400A707FCE9395ED4AE592064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9d:7f:57:f3:33:6a:52:99:d6:9d:3e:c5:fa: 57:1e:8e:a4:8c:57:d6:e8:4a:26:7a:e5:84:18:be: 7c:9a:26:ff:47:3f:74:25:f1:01:9d:3c:eb:46:9e: ec:2f:77:d1:2c:6a:69:07:bc:15:94:3c:8b:69:ea: 48:af:34:2c:4c:64:6d:e9:b0:61:b0:9c:c0:72:4a: 86:b7:bf:b5:4c:12:6b:b0:92:b3:c5:96:d1:7d:52: 34:8b:e2:b3:ba:d3:96:d7:73:e9:ce:44:70:13:a7: d3:80:5d:eb:11:96:0f:08:13:9a:d6:55:b8:4f:42: d1:32:74:5f:b9:72:d0:2b:96:9e:eb:5d:27:f7:73: 2b:0f:cb:db:18:e7:6d:48:2c:d8:c2:c7:6f:eb:2c: 80:40:39:9d:51:34:1c:6f:ed:79:26:43:02:b7:61: 3a:a2:fc:d5:4c:67:e0:d0:bd:8c:6a:1a:9e:c0:17: 68:7a:f0:83:38:9c:88:54:8a:a6:bd:da:89:e8:3d: 7c:c8:28:1c:4a:96:6c:04:3d:30:41:bc:a7:eb:c0: 93:cb:29:b9:a5:13:ec:68:75:cd:12:8a:12:a0:e1: 49:07:0c:8a:e7:6f:ab:41:ce:70:a4:cb:7a:3c:fb: d3:29:af:c9:e7:b6:c1:27:34:7d:46:2e:e7:40:a9: 40:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3E:B5:80:40:F4:B4:D4:00:A7:07:FC:E9:39:5E:D4:AE:59:20:64 X509v3 Authority Key Identifier: keyid:DE:AB:D6:7A:7F:8A:1C:94:C4:FE:B4:1F:DC:B2:3D:3F:D2:80:E0:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d1:db:37:0d:36:9c:8f:02:a3:29:f1:5e:9b:43:42:da:80: 99:31:5b:e4:0f:7d:2a:db:40:90:44:be:91:66:e5:19:25:aa: 15:c0:dd:6d:60:2b:1e:93:4f:e5:b7:8b:67:d0:d2:b6:75:b4: 90:01:d1:0e:e1:17:72:c9:52:37:0d:53:86:c9:57:46:dc:93: 5d:80:10:44:9a:24:9a:69:c7:24:c3:6d:72:dc:31:dc:39:05: 4a:84:ec:1a:c6:ce:9e:26:3f:24:da:4b:d0:29:8f:5a:a8:4f: 54:ec:21:29:0c:58:63:2b:a2:d4:ed:d3:2f:3b:97:c1:71:9a: 08:67:25:9b:1b:01:07:26:84:55:4e:5a:9a:e2:f9:0b:81:80: 6c:f8:45:4a:be:f1:bf:d9:47:6b:44:ff:f2:80:5d:69:61:2e: 5f:10:b4:21:ee:97:e7:7f:ae:2e:39:7e:f5:33:06:2b:99:25: c4:72:ce:a8:7f:01:79:39:ef:75:77:c6:66:e0:6f:be:6b:07: 2d:21:35:75:b7:35:39:a0:78:ed:d2:67:46:50:1e:53:b1:0a: 9d:cf:9d:16:f0:71:ba:50:67:4f:e5:c9:5e:23:71:bd:9b:67: a5:17:d7:fc:d9:96:b1:46:b1:16:cd:01:a3:2f:2e:50:9a:f1: 4b:de:3a:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV34LCREGbfvoZVpbMZuuFCC29TMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBQkQ2N0E3RjhBMUM5NEM0RkVCNDFGRENCMjNEM0ZE MjgwRTBDOTAeFw0yNjA2MTcwMjMwNTVaFw0yNjA2MTgwNTA2NTVaMDMxMTAvBgNV BAMTKEU2M0VCNTgwNDBGNEI0RDQwMEE3MDdGQ0U5Mzk1RUQ0QUU1OTIwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSnX9X8zNqUpnWnT7F+lcejqSM V9boSiZ65YQYvnyaJv9HP3Ql8QGdPOtGnuwvd9EsamkHvBWUPItp6kivNCxMZG3p sGGwnMBySoa3v7VMEmuwkrPFltF9UjSL4rO605bXc+nORHATp9OAXesRlg8IE5rW VbhPQtEydF+5ctArlp7rXSf3cysPy9sY521ILNjCx2/rLIBAOZ1RNBxv7XkmQwK3 YTqi/NVMZ+DQvYxqGp7AF2h68IM4nIhUiqa92onoPXzIKBxKlmwEPTBBvKfrwJPL KbmlE+xodc0SihKg4UkHDIrnb6tBznCky3o8+9Mpr8nntsEnNH1GLudAqUARAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5j61gED0tNQApwf86Tle1K5ZIGQwHwYDVR0j BBgwFoAU3qvWen+KHJTE/rQf3LI9P9KA4MkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZhNmJjYTgtMzc0MS00NGVmLThhNWYtMGU3NmI4MGQ0MTQ2LzAvREVBQkQ2N0E3 RjhBMUM5NEM0RkVCNDFGRENCMjNEM0ZEMjgwRTBDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUFCRDY3QTdGOEExQzk0QzRGRUI0MUZEQ0IyM0QzRkQyODBF MEM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZhNmJjYTgtMzc0MS00NGVmLThh NWYtMGU3NmI4MGQ0MTQ2LzAvREVBQkQ2N0E3RjhBMUM5NEM0RkVCNDFGRENCMjNE M0ZEMjgwRTBDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfR2zcNNpyPAqMp8V6bQ0LagJkxW+QPfSrb QJBEvpFm5RklqhXA3W1gKx6TT+W3i2fQ0rZ1tJAB0Q7hF3LJUjcNU4bJV0bck12A EESaJJppxyTDbXLcMdw5BUqE7BrGzp4mPyTaS9Apj1qoT1TsISkMWGMrotTt0y87 l8FxmghnJZsbAQcmhFVOWpri+QuBgGz4RUq+8b/ZR2tE//KAXWlhLl8QtCHul+d/ ri45fvUzBiuZJcRyzqh/AXk573V3xmbgb75rBy0hNXW3NTmgeO3SZ0ZQHlOxCp3P nRbwcbpQZ0/lyV4jcb2bZ6UX1/zZlrFGsRbNAaMvLlCa8UveOsE= -----END CERTIFICATE-----Generated at Wed Jun 17 11:03:42 2026 by rpki-client