$ rpki-client -vvf rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft File: 7168844A5B4818230195B100CFC496E3E99AE5A0.mft (raw, json) Hash identifier: yhuDqNcKq28ym59RoyCzh1fUdQOBgoDAgo1dtDOxiEY= Subject key identifier: 15:FD:BE:21:02:08:34:3C:54:82:0C:6D:9A:98:E4:4B:96:D6:A5:64 Authority key identifier: 71:68:84:4A:5B:48:18:23:01:95:B1:00:CF:C4:96:E3:E9:9A:E5:A0 Certificate issuer: /CN=7168844A5B4818230195B100CFC496E3E99AE5A0 Certificate serial: 25205A88802C170601A87F97E2B810224A2ECBC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 18:11:06 +0000 Manifest this update: Tue 16 Jun 2026 18:06:06 +0000 Manifest next update: Wed 17 Jun 2026 20:06:06 +0000 Files and hashes: 1: 7168844A5B4818230195B100CFC496E3E99AE5A0.crl (hash: XTaD5Iui27+yVot2aUUVf15jBy2mH163+VQZtF1RK6k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.crl rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:20:5a:88:80:2c:17:06:01:a8:7f:97:e2:b8:10:22:4a:2e:cb:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7168844A5B4818230195B100CFC496E3E99AE5A0 Validity Not Before: Jun 16 18:06:06 2026 GMT Not After : Jun 17 20:06:06 2026 GMT Subject: CN=15FDBE210208343C54820C6D9A98E44B96D6A564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:54:2f:d0:c4:7d:a6:37:70:98:93:8c:b6:86: e3:e2:e7:78:07:3b:cd:ca:86:b6:2f:04:54:86:48: dc:76:53:48:96:4a:37:6e:14:79:75:3e:58:85:0d: c1:5e:c8:db:56:93:c6:c2:24:f8:d3:ac:9b:09:e3: 57:1b:7f:88:21:5c:f9:cd:fc:25:09:4c:6a:ea:32: 5f:1d:8e:f5:d2:4e:ae:00:05:26:14:7b:33:c6:b1: 37:7a:b9:bb:3e:e7:5a:df:d7:7c:0b:e3:35:19:5c: ad:f4:7c:0e:0c:f7:cd:6b:ac:10:92:2e:de:97:2a: b3:f0:08:af:78:28:8b:a2:d8:ea:dd:cb:68:37:af: fe:14:63:b9:2f:7f:f0:19:92:3f:53:6c:24:9d:6e: aa:b5:16:2c:58:8e:01:30:58:c2:5f:36:ab:a1:f9: f2:45:d3:e0:9b:43:85:4e:4a:0f:33:7d:d2:86:27: 6c:88:2f:65:6e:51:1b:19:18:8e:2f:4a:94:db:de: e4:6a:f7:31:5d:78:9e:15:5f:1d:7d:1a:66:d7:d6: 46:de:e3:9b:b6:43:67:07:37:c4:38:ef:44:e0:c4: 99:39:5b:31:c8:45:95:7f:ff:50:9d:c4:ab:ff:df: 81:a1:12:61:5b:50:4c:ef:a7:af:f7:46:ec:54:6f: 3c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FD:BE:21:02:08:34:3C:54:82:0C:6D:9A:98:E4:4B:96:D6:A5:64 X509v3 Authority Key Identifier: keyid:71:68:84:4A:5B:48:18:23:01:95:B1:00:CF:C4:96:E3:E9:9A:E5:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:07:73:d9:91:49:a9:cf:07:8a:58:e4:c6:2e:3c:a7:4a:5d: 0f:6a:09:32:ef:f5:fa:2f:d8:8f:38:be:f8:b9:a1:4b:a8:74: 69:ad:ad:86:9b:af:aa:13:5b:17:1d:2b:7a:a4:5f:70:ed:7c: ed:23:95:21:25:6a:9d:a8:d1:fc:3b:c3:7d:88:60:27:70:8b: 6b:36:3a:ad:c8:7d:51:5f:37:70:4c:9b:aa:f8:63:05:98:5f: d1:6c:ac:68:1b:1e:3d:9a:15:9c:15:eb:83:d8:e5:42:1e:2b: 4a:0b:00:31:76:d4:92:59:3e:d9:48:ac:0f:7d:36:82:0f:e7: 34:1b:e4:2b:5a:f6:b2:fb:67:5d:d7:25:92:d4:7a:d6:d2:57: 0e:c1:6d:55:ea:ea:d1:c5:41:d1:0e:dc:76:04:35:d7:cc:6a: 20:59:17:8c:4d:30:cc:a1:af:c0:12:6f:b3:62:48:f5:b2:3c: e6:51:3c:5b:14:16:eb:fb:30:c3:e3:74:05:97:ba:6c:35:71: 94:33:a5:d8:a5:45:65:4d:1e:7b:5e:9c:cd:ec:bb:9a:c0:45: 85:dc:e8:56:af:4a:f1:24:fc:22:36:14:59:28:06:72:e7:f3: 28:1f:96:01:d7:52:5c:79:ad:6d:3c:d0:66:ce:d2:23:36:17: d0:e1:41:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJSBaiIAsFwYBqH+X4rgQIkouy8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2ODg0NEE1QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2RTNF OTlBRTVBMDAeFw0yNjA2MTYxODA2MDZaFw0yNjA2MTcyMDA2MDZaMDMxMTAvBgNV BAMTKDE1RkRCRTIxMDIwODM0M0M1NDgyMEM2RDlBOThFNDRCOTZENkE1NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMVC/QxH2mN3CYk4y2huPi53gH O83KhrYvBFSGSNx2U0iWSjduFHl1PliFDcFeyNtWk8bCJPjTrJsJ41cbf4ghXPnN /CUJTGrqMl8djvXSTq4ABSYUezPGsTd6ubs+51rf13wL4zUZXK30fA4M981rrBCS Lt6XKrPwCK94KIui2Ordy2g3r/4UY7kvf/AZkj9TbCSdbqq1FixYjgEwWMJfNquh +fJF0+CbQ4VOSg8zfdKGJ2yIL2VuURsZGI4vSpTb3uRq9zFdeJ4VXx19GmbX1kbe 45u2Q2cHN8Q470TgxJk5WzHIRZV//1CdxKv/34GhEmFbUEzvp6/3RuxUbzxDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFf2+IQIINDxUggxtmpjkS5bWpWQwHwYDVR0j BBgwFoAUcWiESltIGCMBlbEAz8SW4+ma5aAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODg4ZDBiNmUtYjJlZC00OWM4LWE0OTgtOGZkMjk5YWZiNzAxLzAvNzE2ODg0NEE1 QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2RTNFOTlBRTVBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTY4ODQ0QTVCNDgxODIzMDE5NUIxMDBDRkM0OTZFM0U5OUFF NUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvNzE2ODg0NEE1QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2 RTNFOTlBRTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEHc9mRSanPB4pY5MYuPKdKXQ9qCTLv9fov 2I84vvi5oUuodGmtrYabr6oTWxcdK3qkX3DtfO0jlSElap2o0fw7w32IYCdwi2s2 Oq3IfVFfN3BMm6r4YwWYX9FsrGgbHj2aFZwV64PY5UIeK0oLADF21JJZPtlIrA99 NoIP5zQb5Cta9rL7Z13XJZLUetbSVw7BbVXq6tHFQdEO3HYENdfMaiBZF4xNMMyh r8ASb7NiSPWyPOZRPFsUFuv7MMPjdAWXumw1cZQzpdilRWVNHntenM3su5rARYXc 6FavSvEk/CI2FFkoBnLn8ygflgHXUlx5rW080GbO0iM2F9DhQaw= -----END CERTIFICATE-----Generated at Wed Jun 17 12:39:54 2026 by rpki-client