$ rpki-client -vvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft File: 681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft (raw, json) Hash identifier: fTXRaWSPGIDwGn4YQ2BntNpyi042RYMUx/SG3d/z69g= Subject key identifier: 56:DA:AE:77:1F:CB:E9:75:D6:C8:3A:62:29:D5:4A:A7:78:2D:B3:A7 Authority key identifier: 68:1B:E3:4D:FA:90:CE:2B:D9:87:C1:F7:72:EA:7B:05:E5:70:83:E2 Certificate issuer: /CN=681BE34DFA90CE2BD987C1F772EA7B05E57083E2 Certificate serial: 3E61AE423614B83BD3E6ACFC2377D48B4F489FDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 09:49:49 +0000 Manifest this update: Wed 17 Jun 2026 09:44:49 +0000 Manifest next update: Thu 18 Jun 2026 11:50:49 +0000 Files and hashes: 1: 681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl (hash: 6QbmjxzxkbRrmFocg/Y/1iAmeQTRy/ox/8WdIDBe74Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:61:ae:42:36:14:b8:3b:d3:e6:ac:fc:23:77:d4:8b:4f:48:9f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=681BE34DFA90CE2BD987C1F772EA7B05E57083E2 Validity Not Before: Jun 17 09:44:49 2026 GMT Not After : Jun 18 11:50:49 2026 GMT Subject: CN=56DAAE771FCBE975D6C83A6229D54AA7782DB3A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7a:83:7a:27:ba:00:0c:13:51:9a:4f:13:30: 66:b1:8a:4d:b0:e8:d0:97:f9:0a:ff:6a:5d:94:bc: d4:ef:9c:6b:b0:90:7d:16:0b:34:57:f1:55:0d:3d: cd:4a:d1:e8:a8:35:89:05:00:1a:51:8d:f9:6b:04: ee:e7:dc:19:1d:6a:a3:9a:35:52:62:26:96:39:84: f1:68:1d:00:97:93:d5:f0:a7:6f:33:f8:72:bb:f8: 9c:cb:e7:8b:b6:1f:e8:d7:48:69:0f:5c:8c:88:80: a2:0d:6b:06:7d:29:c2:7c:08:33:94:cd:80:45:8f: aa:36:ff:db:aa:ea:5b:f9:d2:81:a8:51:7a:65:9c: 79:26:d4:3b:2d:49:63:61:f2:48:0f:83:01:47:df: 07:13:38:fc:37:e5:ee:03:52:95:5c:e2:72:5a:86: 28:60:1b:53:31:5b:f8:54:92:e9:d9:a4:c6:27:f3: d6:ed:b0:84:50:b5:1c:b3:62:6e:a7:bb:96:52:36: 7c:35:7e:0b:b6:a2:80:22:cf:4b:91:73:c9:83:84: 66:1b:43:7e:e1:6f:2a:20:42:dd:35:e8:22:62:a0: 8d:47:4d:df:a2:55:9c:b3:24:41:24:eb:f9:9b:06: 11:9e:6b:43:5e:dd:a2:50:59:e5:c3:37:c6:90:46: 4d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DA:AE:77:1F:CB:E9:75:D6:C8:3A:62:29:D5:4A:A7:78:2D:B3:A7 X509v3 Authority Key Identifier: keyid:68:1B:E3:4D:FA:90:CE:2B:D9:87:C1:F7:72:EA:7B:05:E5:70:83:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:59:38:e7:ad:7c:6e:ae:58:eb:49:5a:da:01:6f:41:77:80: 2f:36:fb:60:45:6f:1e:30:04:9e:ed:ce:53:a9:a2:b8:29:9d: ad:dd:65:81:4c:d9:04:b1:f8:9f:7f:fc:9d:c8:40:3a:1d:01: 40:80:b0:d8:da:62:c2:0b:a4:ec:52:82:d6:f1:c7:dd:e6:d8: b3:55:bc:28:63:f0:df:72:d5:c8:eb:43:df:c3:1b:e0:ca:5f: b2:97:e0:03:b0:3e:ee:5c:ba:ac:11:26:1b:7b:09:16:c8:37: 44:5b:89:20:d0:11:91:77:99:db:78:b3:2f:7f:ca:26:d8:46: c3:29:50:12:45:95:95:04:15:f8:ac:f2:4e:23:f2:04:65:5c: ce:a4:c3:9f:33:a8:13:90:8c:92:82:ce:d6:6a:3c:86:93:12: 80:bf:d0:ce:60:3a:f8:b3:7b:cb:ae:a0:0d:43:83:6a:01:73: 8f:df:ae:3f:e3:66:1b:8b:db:4f:2a:1c:2d:cf:06:1b:f1:28: f8:06:a6:03:9a:69:db:a6:3f:59:a1:5c:f4:e2:ec:04:f0:b0: ee:4a:52:ad:8b:da:1a:1d:04:b5:44:3e:cf:4c:f5:5e:d0:f2: e6:b2:73:6e:ab:69:d8:9a:f2:21:75:2e:9e:5a:24:fd:48:0d: df:c8:a1:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmGuQjYUuDvT5qz8I3fUi09In9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgxQkUzNERGQTkwQ0UyQkQ5ODdDMUY3NzJFQTdCMDVF NTcwODNFMjAeFw0yNjA2MTcwOTQ0NDlaFw0yNjA2MTgxMTUwNDlaMDMxMTAvBgNV BAMTKDU2REFBRTc3MUZDQkU5NzVENkM4M0E2MjI5RDU0QUE3NzgyREIzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveoN6J7oADBNRmk8TMGaxik2w 6NCX+Qr/al2UvNTvnGuwkH0WCzRX8VUNPc1K0eioNYkFABpRjflrBO7n3BkdaqOa NVJiJpY5hPFoHQCXk9Xwp28z+HK7+JzL54u2H+jXSGkPXIyIgKINawZ9KcJ8CDOU zYBFj6o2/9uq6lv50oGoUXplnHkm1DstSWNh8kgPgwFH3wcTOPw35e4DUpVc4nJa hihgG1MxW/hUkunZpMYn89btsIRQtRyzYm6nu5ZSNnw1fgu2ooAiz0uRc8mDhGYb Q37hbyogQt016CJioI1HTd+iVZyzJEEk6/mbBhGea0Ne3aJQWeXDN8aQRk3fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVtqudx/L6XXWyDpiKdVKp3gts6cwHwYDVR0j BBgwFoAUaBvjTfqQzivZh8H3cup7BeVwg+IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzEvNjgxQkUzNERG QTkwQ0UyQkQ5ODdDMUY3NzJFQTdCMDVFNTcwODNFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODFCRTM0REZBOTBDRTJCRDk4N0MxRjc3MkVBN0IwNUU1NzA4 M0UyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzEvNjgxQkUzNERGQTkwQ0UyQkQ5ODdDMUY3NzJFQTdC MDVFNTcwODNFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNZOOetfG6uWOtJWtoBb0F3gC82+2BFbx4w BJ7tzlOporgpna3dZYFM2QSx+J9//J3IQDodAUCAsNjaYsILpOxSgtbxx93m2LNV vChj8N9y1cjrQ9/DG+DKX7KX4AOwPu5cuqwRJht7CRbIN0RbiSDQEZF3mdt4sy9/ yibYRsMpUBJFlZUEFfis8k4j8gRlXM6kw58zqBOQjJKCztZqPIaTEoC/0M5gOviz e8uuoA1Dg2oBc4/frj/jZhuL208qHC3PBhvxKPgGpgOaadumP1mhXPTi7ATwsO5K Uq2L2hodBLVEPs9M9V7Q8uayc26radia8iF1Lp5aJP1IDd/IoYM= -----END CERTIFICATE-----Generated at Wed Jun 17 12:40:49 2026 by rpki-client