$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft File: D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft (raw, json) Hash identifier: EL68osqSzZVYbp79SG1t1XKkb/JHY0+Z+99oQUNjXaI= Subject key identifier: 49:FE:FF:7D:98:D1:DD:2D:CB:9B:B2:BF:E0:60:97:41:46:E1:76:55 Authority key identifier: D0:4E:8E:DA:1C:6E:0A:E6:B5:89:88:7A:CF:35:5D:77:EE:17:58:C0 Certificate issuer: /CN=D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0 Certificate serial: 54D842491837CD11016CC9D371168C012E0FBA37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 08:28:13 +0000 Manifest this update: Wed 17 Jun 2026 08:23:13 +0000 Manifest next update: Thu 18 Jun 2026 08:50:13 +0000 Files and hashes: 1: D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.crl (hash: 1aKjvWJHmsWVs9r37ZmWM03LwE9gAlvFmg3FYi5+i3c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.crl rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d8:42:49:18:37:cd:11:01:6c:c9:d3:71:16:8c:01:2e:0f:ba:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0 Validity Not Before: Jun 17 08:23:13 2026 GMT Not After : Jun 18 08:50:13 2026 GMT Subject: CN=49FEFF7D98D1DD2DCB9BB2BFE060974146E17655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ef:37:73:2d:fb:43:e3:39:ce:80:b7:c1:44: 40:7f:a7:5c:7e:ee:13:49:77:d0:c0:16:81:06:b1: ec:4b:8b:90:5d:95:7d:fe:0a:78:59:f5:6e:fd:97: 6a:fc:4f:04:8b:81:b0:02:37:01:9b:c9:37:4b:3c: a5:24:34:78:69:ad:77:57:0a:58:6d:8b:b8:4d:f7: 53:18:9f:64:dc:73:3e:26:cb:ed:97:42:22:1f:34: 28:ea:c9:8d:dc:e3:5b:d6:73:24:1b:81:93:93:09: 4d:de:7d:89:27:a9:5d:e9:a8:23:6e:f0:37:04:1d: 8e:24:57:5c:40:d5:1c:87:a0:3b:32:90:a3:3a:c7: 9d:71:7e:9e:e5:38:7f:ea:fa:14:41:08:aa:42:8a: 43:1d:d4:3c:0c:7d:3c:3a:36:ad:d6:e0:b5:4f:ca: 10:38:ac:d2:d2:e3:ca:69:b5:c1:91:06:4d:b3:70: 6f:d2:76:e6:99:d8:87:5a:aa:20:a5:91:84:9f:58: 01:c6:e7:11:76:d8:13:f4:17:77:7c:96:39:aa:c6: 50:28:07:d7:92:8e:82:8e:b6:e6:89:b5:4d:26:7a: 41:de:4e:77:cb:d0:f3:2c:6f:5c:97:d8:a0:d3:bd: 24:77:a6:61:09:1b:8f:35:ae:c2:5b:b5:d3:8c:f9: 9c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FE:FF:7D:98:D1:DD:2D:CB:9B:B2:BF:E0:60:97:41:46:E1:76:55 X509v3 Authority Key Identifier: keyid:D0:4E:8E:DA:1C:6E:0A:E6:B5:89:88:7A:CF:35:5D:77:EE:17:58:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:89:bb:39:1d:73:85:13:91:a8:21:b4:d6:df:eb:29:f1:0b: 17:3a:92:61:82:9f:85:e7:e3:d4:04:fd:c5:6f:47:81:65:f6: a9:7f:b7:96:7f:53:99:06:34:1c:6b:2b:34:77:06:b0:1b:1a: c5:6e:fa:81:0c:15:56:ae:10:23:dc:65:2a:e9:cb:c4:a8:5f: 8c:90:22:29:ec:7a:4e:42:58:25:48:a8:99:bb:ce:6d:0a:3f: 2b:99:f2:0c:cb:65:87:9b:ff:07:32:eb:bb:c6:e9:fd:6b:01: eb:df:35:f4:fc:74:50:9a:83:a8:81:cd:93:3d:3b:ad:91:95: 3e:a6:ec:a5:03:76:5b:35:67:71:81:17:1b:52:7a:55:4b:0e: 72:32:1b:3e:94:84:07:3c:ae:9a:b0:06:a6:83:a9:b6:ce:5d: 0c:ff:9e:38:21:5e:62:c3:1d:c5:99:91:72:6c:e4:ce:16:91: 74:df:52:0d:04:96:59:10:6e:34:7b:1c:c3:48:5e:0d:da:ef: e9:c2:32:6c:2c:23:bc:e7:b9:0d:a0:1d:72:d6:8e:3f:44:be: 2c:91:af:7d:f9:17:c7:9f:00:96:5a:46:0a:7e:1f:24:c4:ac: 02:07:35:c8:12:0c:12:43:5f:c9:fc:83:d2:b4:9e:07:80:1f: ab:42:8e:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVNhCSRg3zREBbMnTcRaMAS4PujcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA0RThFREExQzZFMEFFNkI1ODk4ODdBQ0YzNTVENzdF RTE3NThDMDAeFw0yNjA2MTcwODIzMTNaFw0yNjA2MTgwODUwMTNaMDMxMTAvBgNV BAMTKDQ5RkVGRjdEOThEMUREMkRDQjlCQjJCRkUwNjA5NzQxNDZFMTc2NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO7zdzLftD4znOgLfBREB/p1x+ 7hNJd9DAFoEGsexLi5BdlX3+CnhZ9W79l2r8TwSLgbACNwGbyTdLPKUkNHhprXdX Clhti7hN91MYn2Tccz4my+2XQiIfNCjqyY3c41vWcyQbgZOTCU3efYknqV3pqCNu 8DcEHY4kV1xA1RyHoDsykKM6x51xfp7lOH/q+hRBCKpCikMd1DwMfTw6Nq3W4LVP yhA4rNLS48pptcGRBk2zcG/SduaZ2IdaqiClkYSfWAHG5xF22BP0F3d8ljmqxlAo B9eSjoKOtuaJtU0mekHeTnfL0PMsb1yX2KDTvSR3pmEJG481rsJbtdOM+Zx5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSf7/fZjR3S3Lm7K/4GCXQUbhdlUwHwYDVR0j BBgwFoAU0E6O2hxuCua1iYh6zzVdd+4XWMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmY0ZDFjMzYtNGEzMS00ODU3LTllMzYtMGRkZjNkNjkxZWI1LzAvRDA0RThFREEx QzZFMEFFNkI1ODk4ODdBQ0YzNTVENzdFRTE3NThDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDRFOEVEQTFDNkUwQUU2QjU4OTg4N0FDRjM1NUQ3N0VFMTc1 OEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmY0ZDFjMzYtNGEzMS00ODU3LTll MzYtMGRkZjNkNjkxZWI1LzAvRDA0RThFREExQzZFMEFFNkI1ODk4ODdBQ0YzNTVE NzdFRTE3NThDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuJuzkdc4UTkaghtNbf6ynxCxc6kmGCn4Xn 49QE/cVvR4Fl9ql/t5Z/U5kGNBxrKzR3BrAbGsVu+oEMFVauECPcZSrpy8SoX4yQ Iinsek5CWCVIqJm7zm0KPyuZ8gzLZYeb/wcy67vG6f1rAevfNfT8dFCag6iBzZM9 O62RlT6m7KUDdls1Z3GBFxtSelVLDnIyGz6UhAc8rpqwBqaDqbbOXQz/njghXmLD HcWZkXJs5M4WkXTfUg0EllkQbjR7HMNIXg3a7+nCMmwsI7znuQ2gHXLWjj9EviyR r335F8efAJZaRgp+HyTErAIHNcgSDBJDX8n8g9K0ngeAH6tCjlg= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:10 2026 by rpki-client