$ rpki-client -vvf rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft File: 2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft (raw, json) Hash identifier: L4GCAfZGNPRrFNRAIaSaaFKOS8H2gH5QQNlyRQiaNk4= Subject key identifier: 75:FE:0B:6E:F2:5A:A5:8E:69:50:5C:8C:3F:60:9D:56:B6:C7:BA:F7 Authority key identifier: 23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91 Certificate issuer: /CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891 Certificate serial: 4EE9E1B1658359CED852DA82C0A7996B4ABACB8A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 01:39:48 +0000 Manifest this update: Wed 17 Jun 2026 01:34:48 +0000 Manifest next update: Thu 18 Jun 2026 02:47:48 +0000 Files and hashes: 1: 2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl (hash: VV5xIzynZPzvY/ITDhwikJWtOx2LqgyWFxhVo2oBHDQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e9:e1:b1:65:83:59:ce:d8:52:da:82:c0:a7:99:6b:4a:ba:cb:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891 Validity Not Before: Jun 17 01:34:48 2026 GMT Not After : Jun 18 02:47:48 2026 GMT Subject: CN=75FE0B6EF25AA58E69505C8C3F609D56B6C7BAF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:20:1e:47:32:bf:c1:71:09:2b:8e:dd:ca: c4:b5:58:2d:ed:3c:89:b8:32:2a:39:f8:c8:7a:b6: 8b:af:c9:10:40:fd:15:51:69:fc:c5:fd:e3:15:be: 8d:83:22:df:cc:41:0e:70:1d:9e:38:5a:ea:8f:c2: 59:6b:79:bd:09:2c:e7:8d:0f:92:b7:fe:e8:ad:0f: db:59:ba:5d:9d:97:d3:84:aa:4a:78:c8:3a:87:2c: 2c:9f:12:63:8b:cd:76:ec:a8:14:ed:73:32:c1:91: 78:27:f2:cb:fd:0d:22:0b:a0:ea:ae:28:42:bb:12: ff:2a:97:9a:d1:e7:a8:5d:92:eb:a5:0d:e4:bf:74: 31:12:64:ea:c7:9f:0b:14:59:16:21:b8:3c:27:0e: 41:b5:f2:39:66:3d:0f:68:03:b2:d9:f5:d1:c4:0b: b3:77:60:ec:ff:58:3c:c3:cb:56:6a:1f:68:bf:8a: 17:b3:66:3d:92:f8:a7:ff:69:45:3a:e5:8a:0e:d6: 90:fd:0a:d0:ba:54:5e:c7:d8:1b:d0:3b:f9:44:a8: 79:c4:49:a4:52:ee:57:9d:f1:10:36:b8:aa:90:cc: 81:9d:5c:ef:d2:f4:84:49:ab:7a:c5:ec:39:39:fc: d7:cd:a6:8b:83:d9:94:6d:29:78:01:31:0a:46:a2: 8c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FE:0B:6E:F2:5A:A5:8E:69:50:5C:8C:3F:60:9D:56:B6:C7:BA:F7 X509v3 Authority Key Identifier: keyid:23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:9e:d7:26:c0:e1:f9:eb:f2:9c:a6:6a:d1:49:ff:cc:88:e2: 5e:0b:c5:3a:6b:80:85:e8:8d:af:07:62:64:7e:55:3f:c9:39: 19:d8:3e:c5:86:b5:cb:c7:6b:7f:d3:ec:d9:4a:6a:19:1d:7c: 6b:0f:b9:d6:83:56:ce:f0:60:21:bb:6a:84:c3:dd:e5:9a:d5: 1f:b5:6e:f6:b7:f8:5e:75:62:15:c8:d0:9d:ca:22:cb:28:0e: 50:f5:fa:6d:94:27:be:e5:68:6f:52:21:d5:14:3e:0d:08:e5: 3b:40:87:f3:cd:71:54:bc:84:0b:3c:26:bd:c2:52:8e:7a:eb: 93:9c:62:a1:3b:a1:74:ec:be:6d:1c:c5:c9:af:62:f1:c0:b6: 41:de:be:5e:dc:61:50:0c:96:9f:2b:12:eb:d2:09:64:78:a5: 93:7e:7c:58:0c:10:8e:d6:65:9d:ed:92:4d:9d:da:f5:fe:dc: c6:8b:85:be:0f:ab:af:18:e9:cb:90:44:cd:6e:1b:a2:56:55: 74:6d:2d:7f:2e:cd:1b:de:55:5b:d6:9a:18:d6:c9:f1:54:42: c5:4a:66:45:a8:4a:71:ea:09:18:31:f6:53:ef:23:3c:08:43: 73:a3:d9:87:fc:86:6f:69:26:4d:2d:e3:99:5e:08:69:e3:1d: c2:7a:d0:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTunhsWWDWc7YUtqCwKeZa0q6y4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQwREND QUQ4MTg5MTAeFw0yNjA2MTcwMTM0NDhaFw0yNjA2MTgwMjQ3NDhaMDMxMTAvBgNV BAMTKDc1RkUwQjZFRjI1QUE1OEU2OTUwNUM4QzNGNjA5RDU2QjZDN0JBRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3yAeRzK/wXEJK47dysS1WC3t PIm4Mio5+Mh6touvyRBA/RVRafzF/eMVvo2DIt/MQQ5wHZ44WuqPwllreb0JLOeN D5K3/uitD9tZul2dl9OEqkp4yDqHLCyfEmOLzXbsqBTtczLBkXgn8sv9DSILoOqu KEK7Ev8ql5rR56hdkuulDeS/dDESZOrHnwsUWRYhuDwnDkG18jlmPQ9oA7LZ9dHE C7N3YOz/WDzDy1ZqH2i/ihezZj2S+Kf/aUU65YoO1pD9CtC6VF7H2BvQO/lEqHnE SaRS7led8RA2uKqQzIGdXO/S9IRJq3rF7Dk5/NfNpouD2ZRtKXgBMQpGooy7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdf4LbvJapY5pUFyMP2CdVrbHuvcwHwYDVR0j BBgwFoAUIzLo3GAvF0qfYyrmH3bQ3MrYGJEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQ3YzZlY2ItMGJhZS00NWMzLWFhZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2 MDJGMTc0QTlGNjMyQUU2MUY3NkQwRENDQUQ4MTg5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzMyRThEQzYwMkYxNzRBOUY2MzJBRTYxRjc2RDBEQ0NBRDgx ODkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQw RENDQUQ4MTg5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADee1ybA4fnr8pymatFJ/8yI4l4LxTprgIXo ja8HYmR+VT/JORnYPsWGtcvHa3/T7NlKahkdfGsPudaDVs7wYCG7aoTD3eWa1R+1 bva3+F51YhXI0J3KIssoDlD1+m2UJ77laG9SIdUUPg0I5TtAh/PNcVS8hAs8Jr3C Uo5665OcYqE7oXTsvm0cxcmvYvHAtkHevl7cYVAMlp8rEuvSCWR4pZN+fFgMEI7W ZZ3tkk2d2vX+3MaLhb4Pq68Y6cuQRM1uG6JWVXRtLX8uzRveVVvWmhjWyfFUQsVK ZkWoSnHqCRgx9lPvIzwIQ3Oj2Yf8hm9pJk0t45leCGnjHcJ60Lc= -----END CERTIFICATE-----Generated at Wed Jun 17 10:43:03 2026 by rpki-client