$ rpki-client -vvf rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft File: F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft (raw, json) Hash identifier: J/xyuBjZfvUPswQ3Fxij5B4HUEr3Nq2aJe595o6/ZoM= Subject key identifier: BD:39:D5:DF:B7:83:D4:56:9C:4F:79:5E:BC:44:7D:8A:C6:FF:14:BF Authority key identifier: F9:AD:F5:9D:FC:07:02:EB:1E:3C:C8:F9:D5:63:CA:A4:C0:61:2D:91 Certificate issuer: /CN=F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91 Certificate serial: 6053D59B880B330A2CF5FC38F6F56C05F33F1F4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 16:39:19 +0000 Manifest this update: Tue 16 Jun 2026 16:34:19 +0000 Manifest next update: Wed 17 Jun 2026 18:00:19 +0000 Files and hashes: 1: F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl (hash: 2+r2iqUDhbz7NeyWso2w1k3LNokQiweYo7qcGb9k7IQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:53:d5:9b:88:0b:33:0a:2c:f5:fc:38:f6:f5:6c:05:f3:3f:1f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91 Validity Not Before: Jun 16 16:34:19 2026 GMT Not After : Jun 17 18:00:19 2026 GMT Subject: CN=BD39D5DFB783D4569C4F795EBC447D8AC6FF14BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2a:11:64:13:4e:ef:a9:d3:5a:7a:99:5e:76: 68:07:40:92:90:1e:25:af:c6:d2:ab:8e:f3:f3:04: 83:21:97:77:8a:a7:0b:a5:09:e8:f6:7d:9c:d2:b1: e9:6f:d5:1b:0c:91:a3:81:b7:df:e0:f2:99:8e:0b: 30:43:16:d8:5f:70:c9:cb:3e:6f:82:0a:13:77:ca: d2:72:73:ae:23:dd:e4:03:86:39:6e:7b:41:33:41: 48:56:7e:b4:37:88:7f:75:5e:ea:08:06:b7:fd:03: 6e:ed:44:35:f1:23:e6:99:aa:60:b1:6f:57:59:db: fe:0c:29:95:2f:1d:4e:52:62:51:f9:91:07:46:12: fd:35:dc:01:7d:72:56:3e:14:09:bf:f9:30:c1:6f: b7:2e:b4:bd:8b:ed:88:3f:e8:11:1e:a3:72:83:22: 9a:fa:01:80:39:89:74:15:f4:d2:81:ad:83:f4:91: 22:98:1e:49:02:5c:6e:56:36:83:8f:95:28:75:0e: 8c:3b:ab:a5:9b:f6:6f:ad:57:bd:39:c8:ec:a0:9c: 7d:7b:d4:6c:65:60:ba:e0:e2:4a:1a:79:fc:80:6e: 9e:27:70:46:da:88:9f:05:8e:6c:2a:86:73:aa:7e: f7:aa:33:a3:c0:33:0a:4b:63:be:2a:ca:68:58:11: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:39:D5:DF:B7:83:D4:56:9C:4F:79:5E:BC:44:7D:8A:C6:FF:14:BF X509v3 Authority Key Identifier: keyid:F9:AD:F5:9D:FC:07:02:EB:1E:3C:C8:F9:D5:63:CA:A4:C0:61:2D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f2:a6:76:76:f4:3a:b7:a4:52:cc:68:7a:11:83:c1:50:c8:b3: b7:9c:71:59:10:8c:40:99:e9:01:44:7b:67:34:56:3d:b8:b0: c0:37:3f:a8:c4:b7:0d:37:09:f2:0a:8d:5e:21:a3:96:5a:6a: 78:9d:a1:17:15:d8:7a:61:15:9a:6f:6e:5c:ad:c7:85:6f:f5: f0:5f:e8:f2:ce:c4:82:b5:f4:b4:b6:92:a2:b8:aa:ac:c8:4c: 74:c9:3b:f2:e6:9a:d9:64:40:40:9d:05:da:28:9f:aa:e9:1c: ff:28:c7:6e:60:87:0a:2c:94:18:3e:ac:17:41:06:8b:ee:43: 3d:24:fa:d7:f4:20:21:d8:d4:d2:42:e4:20:36:46:78:fe:8c: 39:e0:88:17:24:8c:1d:1c:d3:ed:c7:b2:10:93:79:d2:08:4a: c8:6f:3a:ab:1a:09:8d:d6:f9:7a:d1:7b:1d:4c:fe:f6:35:68: 60:94:49:43:3b:bc:a1:f8:00:89:7b:d1:fc:16:0c:a6:d8:72: a3:75:89:00:e4:54:4f:20:af:5b:28:ef:8c:fd:ba:d4:f0:f3: 6c:86:09:92:35:f5:2c:b7:ac:91:e4:ea:97:ec:f0:0e:94:71: 7d:83:ba:55:f3:2e:33:8b:43:0e:00:3b:55:80:4c:ca:09:42: a3:b1:64:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYFPVm4gLMwos9fw49vVsBfM/H00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlBREY1OURGQzA3MDJFQjFFM0NDOEY5RDU2M0NBQTRD MDYxMkQ5MTAeFw0yNjA2MTYxNjM0MTlaFw0yNjA2MTcxODAwMTlaMDMxMTAvBgNV BAMTKEJEMzlENURGQjc4M0Q0NTY5QzRGNzk1RUJDNDQ3RDhBQzZGRjE0QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKhFkE07vqdNaepledmgHQJKQ HiWvxtKrjvPzBIMhl3eKpwulCej2fZzSselv1RsMkaOBt9/g8pmOCzBDFthfcMnL Pm+CChN3ytJyc64j3eQDhjlue0EzQUhWfrQ3iH91XuoIBrf9A27tRDXxI+aZqmCx b1dZ2/4MKZUvHU5SYlH5kQdGEv013AF9clY+FAm/+TDBb7cutL2L7Yg/6BEeo3KD Ipr6AYA5iXQV9NKBrYP0kSKYHkkCXG5WNoOPlSh1Dow7q6Wb9m+tV705yOygnH17 1GxlYLrg4koaefyAbp4ncEbaiJ8FjmwqhnOqfveqM6PAMwpLY74qymhYEV+zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvTnV37eD1FacT3levER9isb/FL8wHwYDVR0j BBgwFoAU+a31nfwHAusePMj51WPKpMBhLZEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk3YjhmNGEtMzExMC00MGI3LTkwMzItMGYwMjIxNWEwYjZhLzAvRjlBREY1OURG QzA3MDJFQjFFM0NDOEY5RDU2M0NBQTRDMDYxMkQ5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOUFERjU5REZDMDcwMkVCMUUzQ0M4RjlENTYzQ0FBNEMwNjEy RDkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvRjlBREY1OURGQzA3MDJFQjFFM0NDOEY5RDU2M0NB QTRDMDYxMkQ5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPKmdnb0OrekUsxoehGDwVDIs7eccVkQjECZ 6QFEe2c0Vj24sMA3P6jEtw03CfIKjV4ho5ZaanidoRcV2HphFZpvblytx4Vv9fBf 6PLOxIK19LS2kqK4qqzITHTJO/LmmtlkQECdBdoon6rpHP8ox25ghwoslBg+rBdB BovuQz0k+tf0ICHY1NJC5CA2Rnj+jDngiBckjB0c0+3HshCTedIISshvOqsaCY3W +XrRex1M/vY1aGCUSUM7vKH4AIl70fwWDKbYcqN1iQDkVE8gr1so74z9utTw82yG CZI19Sy3rJHk6pfs8A6UcX2DulXzLjOLQw4AO1WATMoJQqOxZLk= -----END CERTIFICATE-----Generated at Wed Jun 17 10:43:03 2026 by rpki-client