$ rpki-client -vvf rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft File: A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft (raw, json) Hash identifier: Hp49pnAmwEAJS3XBjeQldug1HQ73C+d8eTCBVkDL0yo= Subject key identifier: 31:17:EF:4D:85:45:3D:EF:3D:08:6A:C3:40:FF:89:07:F7:2F:38:10 Authority key identifier: A2:B3:83:F9:8D:09:D3:C4:43:CA:2D:F5:56:F6:4F:98:BB:68:B1:E2 Certificate issuer: /CN=A2B383F98D09D3C443CA2DF556F64F98BB68B1E2 Certificate serial: 1A1B62B04C73BF0DD73D59D7B50A8F0BDC4CD203 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 22:51:51 +0000 Manifest this update: Tue 16 Jun 2026 22:46:51 +0000 Manifest next update: Thu 18 Jun 2026 02:46:51 +0000 Files and hashes: 1: A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl (hash: rtAnjUxtUKa62sFMeDWdfGnZrJxVHjDcN6Xvk77JVcE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1b:62:b0:4c:73:bf:0d:d7:3d:59:d7:b5:0a:8f:0b:dc:4c:d2:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2B383F98D09D3C443CA2DF556F64F98BB68B1E2 Validity Not Before: Jun 16 22:46:51 2026 GMT Not After : Jun 18 02:46:51 2026 GMT Subject: CN=3117EF4D85453DEF3D086AC340FF8907F72F3810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:84:72:bc:b1:d9:70:96:24:7c:72:35:4b:95: 9c:09:f1:6e:17:ac:d8:17:b4:9b:87:bb:91:69:a9: 2b:95:7b:83:41:3f:f7:4e:ae:f9:a3:9b:7d:eb:0a: 86:f0:00:6b:f1:b4:33:7f:69:fa:d2:a8:88:b2:06: 05:27:50:92:7f:0e:2b:40:c3:8c:82:76:84:1a:57: 3a:4d:17:19:61:b2:e2:fb:40:46:a9:57:0b:f3:aa: 55:b7:41:86:42:42:0e:94:2f:04:45:0f:3f:03:e9: 8f:00:2c:4a:b7:04:b2:e6:f3:d2:02:88:a6:21:4c: 91:0e:ef:8c:8b:ec:49:bc:c5:ea:34:e7:60:31:74: 59:a3:7a:26:b5:51:9a:b6:f0:f9:e5:76:31:57:d7: 45:a4:5a:46:ad:12:c8:3e:94:ea:8a:6a:ae:11:fc: ff:6c:58:f6:b1:fb:cc:2a:c8:98:2c:f8:e8:80:32: 34:fb:7a:0b:07:90:23:49:87:72:d8:be:68:65:72: a2:37:8d:18:c3:01:c4:7c:63:e2:50:1f:a0:69:f8: d8:bc:38:0d:f4:19:cd:4b:57:0f:b2:32:93:44:98: 1a:c7:83:08:16:be:d6:b5:7f:67:da:c2:b3:d2:98: da:a3:ce:9e:c8:45:2f:c4:c4:10:d0:a6:d5:2d:79: eb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:17:EF:4D:85:45:3D:EF:3D:08:6A:C3:40:FF:89:07:F7:2F:38:10 X509v3 Authority Key Identifier: keyid:A2:B3:83:F9:8D:09:D3:C4:43:CA:2D:F5:56:F6:4F:98:BB:68:B1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:88:fa:ab:71:bc:2c:98:ea:bf:03:c0:e7:5a:9b:15:71:42: 94:62:77:1f:7e:bb:de:b0:42:f7:a6:5e:cd:36:dc:40:f6:b9: 1a:db:95:82:d5:2f:b0:62:a3:a6:a9:7a:e2:fb:e9:75:23:90: f0:00:ca:b3:b9:75:9d:9a:a3:7b:74:99:cc:4c:ca:74:c5:e5: 59:ca:7c:51:31:57:f2:70:62:08:68:09:99:db:e8:34:b9:8d: d1:ae:db:93:23:04:0c:41:cf:1b:0f:e2:a4:97:c8:fe:92:7a: ed:13:be:73:40:4b:79:3a:34:2d:d4:fb:37:2f:c4:7d:36:a2: 2e:1e:0b:2a:a9:2d:82:06:75:71:a4:78:fd:d9:1d:2e:cc:00: 13:ec:1f:d3:72:ef:1d:8e:25:e7:9d:fc:1a:b3:43:5d:91:b3: d9:2f:b4:86:45:ec:af:60:a6:b0:95:f0:f7:4e:6d:b1:5b:f0: 6c:79:bf:c2:fd:e5:59:f6:41:87:8c:4c:7d:bf:94:c9:41:a4: 03:97:a4:96:ae:88:6c:ce:a5:be:0b:06:10:9b:65:41:d8:f8: e2:2f:93:25:eb:ba:7b:24:36:07:96:7e:ca:be:24:93:b7:6b: 87:d0:c2:d0:cd:71:8e:e8:05:d8:52:f6:80:1d:6f:77:6c:07: 42:bd:30:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhtisExzvw3XPVnXtQqPC9xM0gMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJCMzgzRjk4RDA5RDNDNDQzQ0EyREY1NTZGNjRGOThC QjY4QjFFMjAeFw0yNjA2MTYyMjQ2NTFaFw0yNjA2MTgwMjQ2NTFaMDMxMTAvBgNV BAMTKDMxMTdFRjREODU0NTNERUYzRDA4NkFDMzQwRkY4OTA3RjcyRjM4MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hHK8sdlwliR8cjVLlZwJ8W4X rNgXtJuHu5FpqSuVe4NBP/dOrvmjm33rCobwAGvxtDN/afrSqIiyBgUnUJJ/DitA w4yCdoQaVzpNFxlhsuL7QEapVwvzqlW3QYZCQg6ULwRFDz8D6Y8ALEq3BLLm89IC iKYhTJEO74yL7Em8xeo052AxdFmjeia1UZq28PnldjFX10WkWkatEsg+lOqKaq4R /P9sWPax+8wqyJgs+OiAMjT7egsHkCNJh3LYvmhlcqI3jRjDAcR8Y+JQH6Bp+Ni8 OA30Gc1LVw+yMpNEmBrHgwgWvta1f2fawrPSmNqjzp7IRS/ExBDQptUteevlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMRfvTYVFPe89CGrDQP+JB/cvOBAwHwYDVR0j BBgwFoAUorOD+Y0J08RDyi31VvZPmLtoseIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU1NjRlNzktYjY3OS00NmQ1LWIxZmQtMDI4ZDE3N2I2OGMwLzAvQTJCMzgzRjk4 RDA5RDNDNDQzQ0EyREY1NTZGNjRGOThCQjY4QjFFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMkIzODNGOThEMDlEM0M0NDNDQTJERjU1NkY2NEY5OEJCNjhC MUUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU1NjRlNzktYjY3OS00NmQ1LWIx ZmQtMDI4ZDE3N2I2OGMwLzAvQTJCMzgzRjk4RDA5RDNDNDQzQ0EyREY1NTZGNjRG OThCQjY4QjFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyI+qtxvCyY6r8DwOdamxVxQpRidx9+u96w QvemXs023ED2uRrblYLVL7Bio6apeuL76XUjkPAAyrO5dZ2ao3t0mcxMynTF5VnK fFExV/JwYghoCZnb6DS5jdGu25MjBAxBzxsP4qSXyP6Seu0TvnNAS3k6NC3U+zcv xH02oi4eCyqpLYIGdXGkeP3ZHS7MABPsH9Ny7x2OJeed/BqzQ12Rs9kvtIZF7K9g prCV8PdObbFb8Gx5v8L95Vn2QYeMTH2/lMlBpAOXpJauiGzOpb4LBhCbZUHY+OIv kyXrunskNgeWfsq+JJO3a4fQwtDNcY7oBdhS9oAdb3dsB0K9ML8= -----END CERTIFICATE-----Generated at Wed Jun 17 12:18:45 2026 by rpki-client