$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft File: 940B100416D69592DEA3CD164FA55B0A94E9BA09.mft (raw, json) Hash identifier: OKdLc5zE3cEKl+5+Y3na/jCqU2YeLdDy++SVMOTK3hA= Subject key identifier: 15:B9:83:E5:82:E3:EC:2A:47:29:35:10:EC:1D:55:73:DB:73:6F:62 Authority key identifier: 94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 Certificate issuer: /CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Certificate serial: 5D25C3E0DC7EE938A5FF0DC23E495AB4E3924611 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft Manifest number: 37 Signing time: Fri 12 Jun 2026 22:47:58 +0000 Manifest this update: Fri 12 Jun 2026 22:42:58 +0000 Manifest next update: Sun 14 Jun 2026 01:32:58 +0000 Files and hashes: 1: 940B100416D69592DEA3CD164FA55B0A94E9BA09.crl (hash: 8I67Pqj2ap4CkfVY7owiQxaB9UjduIRPduen6c6nV/0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 01:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:25:c3:e0:dc:7e:e9:38:a5:ff:0d:c2:3e:49:5a:b4:e3:92:46:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Validity Not Before: Jun 12 22:42:58 2026 GMT Not After : Jun 14 01:32:58 2026 GMT Subject: CN=15B983E582E3EC2A47293510EC1D5573DB736F62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:be:90:89:d6:36:a4:9e:78:d4:b8:61:4b:87: db:3e:6f:35:eb:a8:1b:a2:d8:7f:93:fd:e3:cf:c8: 10:9d:4c:bc:24:02:be:ec:43:8d:01:46:e1:73:4b: 01:5f:09:ab:21:12:58:bb:e9:9e:3c:05:8e:e6:a8: cf:34:9a:e1:01:3b:d9:18:d3:41:30:34:98:f3:cd: 3f:79:29:15:53:f0:31:af:6e:d5:59:69:72:f2:64: fc:af:56:95:83:07:32:3a:c0:68:32:61:e7:19:03: 7d:9b:9f:24:10:32:8e:3d:06:dd:a6:9d:4c:3e:ae: 03:1c:ed:3d:8c:e6:23:e2:d3:84:39:89:e9:49:b7: 78:2a:96:fb:0a:6d:30:96:23:fd:4b:42:94:08:66: 29:de:fe:e7:58:54:4d:69:04:f1:35:03:f1:0a:4e: f4:c9:41:b8:1c:82:fa:6b:19:0e:c5:b7:91:0c:09: b7:2b:d1:a0:9e:69:d8:14:25:64:30:b2:62:04:f7: e1:65:e2:cf:c6:34:f5:88:89:a6:21:96:50:a6:b0: d6:70:fc:c9:64:1c:39:1e:4d:18:13:37:a4:59:79: 87:40:25:1e:7a:5c:78:0d:db:4b:46:c7:cf:37:12: dc:58:08:32:8c:36:44:31:b9:44:5e:cc:d4:df:ae: 97:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B9:83:E5:82:E3:EC:2A:47:29:35:10:EC:1D:55:73:DB:73:6F:62 X509v3 Authority Key Identifier: keyid:94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:3b:8a:12:92:f8:5a:1f:f1:e5:49:c2:56:78:3d:da:df:5a: 48:63:8c:e3:8f:80:82:e2:92:e3:90:6c:b6:f4:08:8f:97:ab: c7:42:0e:06:53:55:76:2c:70:49:a4:d7:4a:f5:5c:e0:71:db: 74:a4:23:80:65:66:f3:cf:74:3b:ff:fa:00:a1:29:74:31:8b: 54:46:0e:63:92:7d:95:b8:38:57:38:07:63:d9:29:e0:db:c6: cc:43:ad:dd:27:5c:fe:d4:b9:5e:52:55:21:ab:34:33:17:88: 2e:86:a9:17:96:88:99:41:85:41:04:1e:fb:51:f1:05:eb:33: df:bd:a7:8d:66:33:8d:37:83:a8:b5:77:1c:80:50:9d:78:2a: 5c:15:91:53:c5:d4:55:fd:66:02:80:8c:15:d0:4f:3c:90:98: db:6c:48:a4:54:2a:41:49:e5:1a:ab:4d:b3:12:83:00:05:3a: 63:98:c5:0c:95:0b:0b:d9:ac:a8:9f:ea:29:79:ef:7e:d1:80: 65:28:f7:d1:cc:65:b3:a8:fb:a5:f3:26:b7:bd:a5:c1:f4:5a: 85:aa:31:85:a5:c6:03:5d:5b:b5:f7:5c:8f:d5:57:aa:d4:21: 60:b6:38:d5:e0:ef:b0:38:66:b3:96:7f:2b:8f:56:ab:b9:70: 9a:08:f5:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXSXD4Nx+6Til/w3CPklatOOSRhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5 NEU5QkEwOTAeFw0yNjA2MTIyMjQyNThaFw0yNjA2MTQwMTMyNThaMDMxMTAvBgNV BAMTKDE1Qjk4M0U1ODJFM0VDMkE0NzI5MzUxMEVDMUQ1NTczREI3MzZGNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYvpCJ1jaknnjUuGFLh9s+bzXr qBui2H+T/ePPyBCdTLwkAr7sQ40BRuFzSwFfCashEli76Z48BY7mqM80muEBO9kY 00EwNJjzzT95KRVT8DGvbtVZaXLyZPyvVpWDBzI6wGgyYecZA32bnyQQMo49Bt2m nUw+rgMc7T2M5iPi04Q5ielJt3gqlvsKbTCWI/1LQpQIZine/udYVE1pBPE1A/EK TvTJQbgcgvprGQ7Ft5EMCbcr0aCeadgUJWQwsmIE9+Fl4s/GNPWIiaYhllCmsNZw /MlkHDkeTRgTN6RZeYdAJR56XHgN20tGx883EtxYCDKMNkQxuURezNTfrpfzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFbmD5YLj7CpHKTUQ7B1Vc9tzb2IwHwYDVR0j BBgwFoAUlAsQBBbWlZLeo80WT6VbCpTpugkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5YWY0ZGItY2Y2Zi00OWIzLWEwNWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQx NkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5NEU5QkEwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85NDBCMTAwNDE2RDY5NTkyREVBM0NEMTY0RkE1NUIwQTk0RTlC QTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVC MEE5NEU5QkEwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQ7ihKS+Fof8eVJwlZ4PdrfWkhjjOOPgILi kuOQbLb0CI+Xq8dCDgZTVXYscEmk10r1XOBx23SkI4BlZvPPdDv/+gChKXQxi1RG DmOSfZW4OFc4B2PZKeDbxsxDrd0nXP7UuV5SVSGrNDMXiC6GqReWiJlBhUEEHvtR 8QXrM9+9p41mM403g6i1dxyAUJ14KlwVkVPF1FX9ZgKAjBXQTzyQmNtsSKRUKkFJ 5RqrTbMSgwAFOmOYxQyVCwvZrKif6il5737RgGUo99HMZbOo+6XzJre9pcH0WoWq MYWlxgNdW7X3XI/VV6rUIWC2ONXg77A4ZrOWfyuPVqu5cJoI9Wc= -----END CERTIFICATE-----Generated at Sat Jun 13 17:16:06 2026 by rpki-client