$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft File: A828948E5E3657BBBB02A70735E06754A306A511.mft (raw, json) Hash identifier: Y/vbxV2KhB2YqbmDkNcW2amHoebgPqafhkcxAymd4JE= Subject key identifier: 9A:05:4F:E3:2B:2B:FA:58:E4:E0:A0:20:E6:3E:30:42:87:46:B7:67 Authority key identifier: A8:28:94:8E:5E:36:57:BB:BB:02:A7:07:35:E0:67:54:A3:06:A5:11 Certificate issuer: /CN=A828948E5E3657BBBB02A70735E06754A306A511 Certificate serial: 66D74B2B344D6594C0B208920A681DF1B6C5E432 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 19:53:16 +0000 Manifest this update: Tue 16 Jun 2026 19:48:16 +0000 Manifest next update: Wed 17 Jun 2026 22:11:16 +0000 Files and hashes: 1: A828948E5E3657BBBB02A70735E06754A306A511.crl (hash: ie0P9LGU6OrzC+wEkcyT4HciEg4RWuuZu/K8KXYBfOk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.crl rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d7:4b:2b:34:4d:65:94:c0:b2:08:92:0a:68:1d:f1:b6:c5:e4:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A828948E5E3657BBBB02A70735E06754A306A511 Validity Not Before: Jun 16 19:48:16 2026 GMT Not After : Jun 17 22:11:16 2026 GMT Subject: CN=9A054FE32B2BFA58E4E0A020E63E30428746B767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e2:0d:b8:34:3e:48:57:27:bf:34:2e:61:13: 42:f4:a9:fa:21:39:bd:9a:f3:65:2d:d2:13:97:15: 89:28:67:98:13:d1:cc:0c:8d:bc:c1:ef:44:48:6d: 38:01:3d:51:47:33:a5:83:51:90:f7:fe:46:fe:2c: 48:b0:06:30:3f:b2:f1:57:67:5d:ab:0e:d9:b8:8c: 01:68:13:cd:45:87:72:85:7c:a9:66:34:20:4c:7b: bf:a9:f2:63:00:41:52:b0:78:c2:25:8f:6f:f0:bc: ba:e1:0d:d0:d7:7a:57:63:19:fe:6b:c0:76:bb:4b: 80:b6:00:bb:b7:cb:7a:32:3c:d4:5d:a9:ea:bf:54: 6e:ef:92:52:cd:96:bb:73:49:f3:34:4b:97:94:6e: 1e:8e:da:23:f5:62:a0:4a:50:31:f7:9c:b6:76:de: 95:9a:b3:a2:58:60:a3:71:d0:a5:9c:11:31:5c:c4: 6e:6f:7b:97:07:18:69:fb:07:a4:82:5b:0c:b4:87: b4:ef:0f:5b:d7:55:a4:c1:85:32:ba:f8:d0:eb:f0: bb:d4:23:7c:c6:f2:88:e1:d8:00:3a:4b:cd:88:8b: 73:79:01:d7:da:82:f2:25:6b:40:41:1d:85:b3:27: 38:59:82:0b:98:10:40:b5:15:c7:89:9b:f0:b2:bc: cb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:05:4F:E3:2B:2B:FA:58:E4:E0:A0:20:E6:3E:30:42:87:46:B7:67 X509v3 Authority Key Identifier: keyid:A8:28:94:8E:5E:36:57:BB:BB:02:A7:07:35:E0:67:54:A3:06:A5:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:78:09:5c:ce:47:ce:ac:87:cf:4f:b9:40:77:7e:78:97:53: 19:fa:4e:1d:fb:2f:d6:2e:50:a1:55:35:4d:97:67:a8:17:5a: 7e:7a:f9:29:d0:1d:eb:62:74:72:c0:4e:08:7b:93:2f:db:04: 8f:58:7b:04:f7:c2:9c:c1:44:da:c7:28:0b:f3:91:52:8a:d2: 93:4b:88:c9:86:6d:ad:6f:f3:62:7f:ee:1a:7f:6c:0b:8c:ee: 12:1e:f7:80:a9:04:9d:13:62:a0:41:6a:59:0a:be:39:73:54: ab:b7:84:e0:70:4e:4d:1a:4b:9a:a1:e7:da:07:b6:c2:e2:4c: 2a:ef:d4:f0:5b:2f:d6:b4:aa:bd:5c:f4:67:95:18:68:6f:f7: 4c:d7:be:54:49:11:40:60:b1:27:54:c5:4c:35:ce:5d:21:53: 6e:1d:60:3a:8f:3b:e6:90:b2:de:64:bd:d7:fc:a1:95:2b:94: b6:d9:da:c8:bc:65:ff:1d:83:c0:34:44:60:fd:45:e3:00:32: 29:9e:d1:fc:36:6a:f1:64:84:b9:81:34:7a:64:1c:f4:f5:fe: 74:d0:26:bd:53:c7:19:36:5b:41:43:fe:e6:3e:64:e5:98:26: 61:00:80:6a:c5:04:52:10:ca:d4:34:42:e7:8f:4f:15:f6:15: a7:82:64:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtdLKzRNZZTAsgiSCmgd8bbF5DIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgyODk0OEU1RTM2NTdCQkJCMDJBNzA3MzVFMDY3NTRB MzA2QTUxMTAeFw0yNjA2MTYxOTQ4MTZaFw0yNjA2MTcyMjExMTZaMDMxMTAvBgNV BAMTKDlBMDU0RkUzMkIyQkZBNThFNEUwQTAyMEU2M0UzMDQyODc0NkI3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi4g24ND5IVye/NC5hE0L0qfoh Ob2a82Ut0hOXFYkoZ5gT0cwMjbzB70RIbTgBPVFHM6WDUZD3/kb+LEiwBjA/svFX Z12rDtm4jAFoE81Fh3KFfKlmNCBMe7+p8mMAQVKweMIlj2/wvLrhDdDXeldjGf5r wHa7S4C2ALu3y3oyPNRdqeq/VG7vklLNlrtzSfM0S5eUbh6O2iP1YqBKUDH3nLZ2 3pWas6JYYKNx0KWcETFcxG5ve5cHGGn7B6SCWwy0h7TvD1vXVaTBhTK6+NDr8LvU I3zG8ojh2AA6S82Ii3N5AdfagvIla0BBHYWzJzhZgguYEEC1FceJm/CyvMuXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmgVP4ysr+ljk4KAg5j4wQodGt2cwHwYDVR0j BBgwFoAUqCiUjl42V7u7AqcHNeBnVKMGpREwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGJhNmQwNzItODM2MS00ZGRmLTgwMGEtMWNlMTVjNDc1OTJjLzAvQTgyODk0OEU1 RTM2NTdCQkJCMDJBNzA3MzVFMDY3NTRBMzA2QTUxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODI4OTQ4RTVFMzY1N0JCQkIwMkE3MDczNUUwNjc1NEEzMDZB NTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvQTgyODk0OEU1RTM2NTdCQkJCMDJBNzA3MzVFMDY3 NTRBMzA2QTUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC14CVzOR86sh89PuUB3fniXUxn6Th37L9Yu UKFVNU2XZ6gXWn56+SnQHetidHLATgh7ky/bBI9YewT3wpzBRNrHKAvzkVKK0pNL iMmGba1v82J/7hp/bAuM7hIe94CpBJ0TYqBBalkKvjlzVKu3hOBwTk0aS5qh59oH tsLiTCrv1PBbL9a0qr1c9GeVGGhv90zXvlRJEUBgsSdUxUw1zl0hU24dYDqPO+aQ st5kvdf8oZUrlLbZ2si8Zf8dg8A0RGD9ReMAMime0fw2avFkhLmBNHpkHPT1/nTQ Jr1Txxk2W0FD/uY+ZOWYJmEAgGrFBFIQytQ0QuePTxX2FaeCZDo= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:29 2026 by rpki-client