$ rpki-client -vvf rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft File: DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft (raw, json) Hash identifier: ETNJ9Kut5hvD8y0hwXeN0jWg+s5hJemEN3avtwW4ViM= Subject key identifier: 55:1F:5C:23:05:32:93:5B:7E:3A:86:3D:10:72:97:1B:2E:F7:77:93 Authority key identifier: DB:9A:40:F2:EA:DC:88:1D:0D:A3:EE:A0:05:7E:81:00:29:94:C3:FC Certificate issuer: /CN=DB9A40F2EADC881D0DA3EEA0057E81002994C3FC Certificate serial: 5E4D812352F8A37B842DEF1BED0FD05B200E9063 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 23:37:41 +0000 Manifest this update: Tue 16 Jun 2026 23:32:41 +0000 Manifest next update: Thu 18 Jun 2026 00:03:41 +0000 Files and hashes: 1: DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl (hash: Z+8bDU9YuSovLyQWhJDXauCRVWq2Zz/0ksjRSvcHptI=) 2: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: gnONcz3sXVxJxBOxBVij9AaOro25JvPxAm2egbKmGvk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4d:81:23:52:f8:a3:7b:84:2d:ef:1b:ed:0f:d0:5b:20:0e:90:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB9A40F2EADC881D0DA3EEA0057E81002994C3FC Validity Not Before: Jun 16 23:32:41 2026 GMT Not After : Jun 18 00:03:41 2026 GMT Subject: CN=551F5C230532935B7E3A863D1072971B2EF77793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:8a:40:85:1e:c7:9f:fe:82:cd:67:16:7b: 90:cb:37:fb:ec:07:25:20:26:5e:23:fb:c4:88:2c: c5:61:17:ec:14:3f:16:ce:1c:ef:cf:a9:57:cc:17: 2c:df:56:d8:91:b7:5a:33:06:71:c2:bb:c5:78:37: a5:2f:98:81:ea:eb:fb:b7:d0:0c:54:e1:6f:e6:f4: d4:cf:5a:e0:12:8b:e5:d6:05:a5:69:bb:f6:e4:f6: 10:76:db:4d:f8:00:13:e2:bd:a2:eb:06:d0:b5:c4: 40:a9:67:b0:ff:b1:ad:6f:39:87:db:b4:06:51:40: 4e:fe:f8:8a:12:4b:4a:76:c9:00:31:3b:d3:bf:26: 17:7c:b9:d2:0b:c9:3c:d6:c7:33:42:8a:11:09:df: fb:bd:8b:50:91:8d:78:3b:90:ee:15:4e:ca:b7:84: b8:54:a9:93:02:2c:43:e0:bb:0e:1e:de:8b:02:86: ec:b0:8e:e9:42:ee:17:6c:45:2e:17:4f:73:99:d4: 4b:fc:e3:48:51:bd:9e:c5:2b:f1:4f:52:7a:25:96: 15:bb:5b:5a:f8:39:86:2d:b5:5b:73:ff:91:2f:94: 82:b1:4b:9d:a2:b9:f6:73:44:c5:08:54:14:87:e5: 94:50:31:47:6f:05:dc:b7:7d:ca:a5:69:49:6d:f9: 6d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1F:5C:23:05:32:93:5B:7E:3A:86:3D:10:72:97:1B:2E:F7:77:93 X509v3 Authority Key Identifier: keyid:DB:9A:40:F2:EA:DC:88:1D:0D:A3:EE:A0:05:7E:81:00:29:94:C3:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9e:78:fb:7a:b8:eb:d8:a3:3e:19:43:5f:b2:7b:07:a0:ac: f9:15:6c:2d:26:be:bc:0d:96:cf:7c:b5:4c:a4:5f:19:92:81: 98:73:36:c2:4f:70:39:d3:64:79:d8:f6:c2:ef:84:46:d8:41: 20:70:4c:20:06:82:bf:5f:fb:6e:c0:b3:1f:26:9b:6d:1e:d3: a3:f0:42:c4:d1:22:7a:14:94:aa:af:ba:42:02:4c:8b:4d:c3: 74:5e:ed:3b:b9:b4:25:23:fc:a3:81:a1:0f:c0:a4:96:6f:f2: e4:f8:95:2b:25:95:6f:71:6e:14:86:a3:d8:7f:17:42:b7:be: 73:01:8a:3f:6b:d5:5a:7b:26:f1:1c:e6:5f:3b:7b:46:98:e1: 61:cf:6c:8b:08:2c:cb:d0:26:4e:aa:37:c4:aa:a4:03:58:ac: cf:d0:78:af:d5:fd:48:eb:54:cf:03:18:9f:c4:db:5c:cd:33: 21:01:a5:6a:b8:05:6e:f9:33:5a:cf:67:41:8b:91:58:62:ea: 74:29:84:a3:3a:7d:90:77:24:86:3d:a9:b0:07:1e:e2:ab:22: 18:28:56:1b:a0:46:48:b0:60:32:80:c3:cc:e3:d6:bf:b6:98: 7c:ae:a7:8b:28:c1:a6:98:b1:3f:a9:8c:6d:58:62:79:eb:78: eb:1b:17:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXk2BI1L4o3uELe8b7Q/QWyAOkGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5QTQwRjJFQURDODgxRDBEQTNFRUEwMDU3RTgxMDAy OTk0QzNGQzAeFw0yNjA2MTYyMzMyNDFaFw0yNjA2MTgwMDAzNDFaMDMxMTAvBgNV BAMTKDU1MUY1QzIzMDUzMjkzNUI3RTNBODYzRDEwNzI5NzFCMkVGNzc3OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0b4pAhR7Hn/6CzWcWe5DLN/vs ByUgJl4j+8SILMVhF+wUPxbOHO/PqVfMFyzfVtiRt1ozBnHCu8V4N6UvmIHq6/u3 0AxU4W/m9NTPWuASi+XWBaVpu/bk9hB22034ABPivaLrBtC1xECpZ7D/sa1vOYfb tAZRQE7++IoSS0p2yQAxO9O/Jhd8udILyTzWxzNCihEJ3/u9i1CRjXg7kO4VTsq3 hLhUqZMCLEPguw4e3osChuywjulC7hdsRS4XT3OZ1Ev840hRvZ7FK/FPUnollhW7 W1r4OYYttVtz/5EvlIKxS52iufZzRMUIVBSH5ZRQMUdvBdy3fcqlaUlt+W11AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVR9cIwUyk1t+OoY9EHKXGy73d5MwHwYDVR0j BBgwFoAU25pA8urciB0No+6gBX6BACmUw/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2NmMDFlYzYtOGU4OS00MDJhLTkwYzctNTBjNmYxNGNkMjQyLzEvREI5QTQwRjJF QURDODgxRDBEQTNFRUEwMDU3RTgxMDAyOTk0QzNGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjlBNDBGMkVBREM4ODFEMERBM0VFQTAwNTdFODEwMDI5OTRD M0ZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzEvREI5QTQwRjJFQURDODgxRDBEQTNFRUEwMDU3RTgx MDAyOTk0QzNGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByeePt6uOvYoz4ZQ1+yewegrPkVbC0mvrwN ls98tUykXxmSgZhzNsJPcDnTZHnY9sLvhEbYQSBwTCAGgr9f+27Asx8mm20e06Pw QsTRInoUlKqvukICTItNw3Re7Tu5tCUj/KOBoQ/ApJZv8uT4lSsllW9xbhSGo9h/ F0K3vnMBij9r1Vp7JvEc5l87e0aY4WHPbIsILMvQJk6qN8SqpANYrM/QeK/V/Ujr VM8DGJ/E21zNMyEBpWq4BW75M1rPZ0GLkVhi6nQphKM6fZB3JIY9qbAHHuKrIhgo VhugRkiwYDKAw8zj1r+2mHyup4sowaaYsT+pjG1YYnnreOsbF/k= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:18 2026 by rpki-client