$ rpki-client -vvf rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft File: 405E6B7463BC0531CCD985CD4D468E60B5078B16.mft (raw, json) Hash identifier: kippDTkAbJxQOG8N1DWXBtS38TL56GImCYCfb5nyLhE= Subject key identifier: 6E:EA:4F:A9:31:42:3C:15:5D:8C:8A:21:C8:12:2C:1F:F9:0A:10:8D Authority key identifier: 40:5E:6B:74:63:BC:05:31:CC:D9:85:CD:4D:46:8E:60:B5:07:8B:16 Certificate issuer: /CN=405E6B7463BC0531CCD985CD4D468E60B5078B16 Certificate serial: 53161674AAA811F2AEB1C7FAD3B584ECF07E67F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft Manifest number: 3C Signing time: Wed 17 Jun 2026 04:43:36 +0000 Manifest this update: Wed 17 Jun 2026 04:38:36 +0000 Manifest next update: Thu 18 Jun 2026 06:33:36 +0000 Files and hashes: 1: 405E6B7463BC0531CCD985CD4D468E60B5078B16.crl (hash: QTtWrAfZ7PsrFVBHz6pW84JeMZ1PpU2f3DiV+bx0vx0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.crl rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:16:16:74:aa:a8:11:f2:ae:b1:c7:fa:d3:b5:84:ec:f0:7e:67:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405E6B7463BC0531CCD985CD4D468E60B5078B16 Validity Not Before: Jun 17 04:38:36 2026 GMT Not After : Jun 18 06:33:36 2026 GMT Subject: CN=6EEA4FA931423C155D8C8A21C8122C1FF90A108D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:28:65:75:13:d6:a9:74:40:5e:ed:f8:0c:0f: c7:ed:cf:ae:87:a5:7d:eb:e1:9c:e2:83:76:34:ef: 28:6b:6d:9e:45:cf:6c:e0:f3:e2:6a:05:a7:15:48: d8:b3:36:c0:e6:b7:57:f9:8f:ea:8e:3c:5b:fb:8f: 19:6d:ee:8e:9c:ef:38:02:d5:08:8d:e5:80:6f:74: 6b:f6:87:91:cd:ae:ea:b2:d3:d9:a8:2d:67:1b:e6: b2:32:bd:30:8d:c0:63:d6:0e:4b:7f:b8:d8:da:94: 0e:1c:3a:47:88:a1:cb:33:e9:b0:0e:a2:4f:5a:7a: 1d:59:aa:21:a1:ee:c7:6d:58:31:1a:48:97:e9:ce: 3b:ac:8e:e2:99:40:05:d7:da:25:37:27:6b:ff:57: ac:33:d9:a3:03:6a:02:0f:2a:8a:47:c5:2e:42:a9: 57:f6:5f:c0:db:3d:7b:b8:92:37:ea:4c:82:d2:2a: ba:d0:ad:f6:e6:dc:f4:36:83:ce:27:36:c2:2e:0c: 9c:22:33:94:49:14:82:1a:5d:5e:f6:ee:35:a5:38: b1:60:d1:55:24:a1:f0:e7:85:42:5b:bc:84:16:c5: cc:e7:3b:68:b9:66:f6:c8:23:e1:d1:4b:ea:a5:5d: 0a:f2:a9:51:0c:98:ed:3d:09:34:eb:2d:56:9e:1a: e5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EA:4F:A9:31:42:3C:15:5D:8C:8A:21:C8:12:2C:1F:F9:0A:10:8D X509v3 Authority Key Identifier: keyid:40:5E:6B:74:63:BC:05:31:CC:D9:85:CD:4D:46:8E:60:B5:07:8B:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:47:17:41:4b:1a:31:85:64:fe:3f:03:45:07:23:fa:33:53: af:a2:52:81:77:e0:46:12:5a:9a:90:fb:8d:c7:f0:58:0b:c2: 8b:27:90:1d:fe:1e:38:84:32:1a:bf:92:83:e4:bd:4d:60:fc: 18:a5:5d:7d:92:ce:19:f3:e9:03:fd:5d:d8:de:ce:bc:65:08: 7c:c9:1a:bb:c2:e6:18:bb:22:c2:e5:9e:cf:7b:3e:c5:43:77: 26:48:df:7e:25:ad:66:55:af:c1:70:85:5b:fb:4b:4d:02:89: 4f:2c:4a:4f:55:61:b5:ac:69:8d:c1:5a:b4:ed:47:92:5c:e4: 20:b1:35:4e:eb:3e:81:22:c3:76:74:ca:a5:66:26:82:88:7e: 12:78:9a:59:03:5b:ca:62:b6:b6:dc:9e:f3:4b:82:37:f5:08: 19:4f:c5:f4:d7:f6:1f:3c:37:55:66:40:cb:5e:19:36:97:9d: 63:28:2e:62:2f:06:dd:0a:5d:29:9b:86:d0:47:87:e8:ed:b5: 56:db:64:1a:5d:e2:37:9e:00:63:dc:16:61:b9:96:cc:53:44: 5c:24:8d:ce:5b:84:d7:af:6f:00:30:85:1e:64:1f:02:f9:44: bd:cb:9e:41:64:0b:97:f0:92:03:62:31:3a:64:3f:83:fd:ea: fc:ef:98:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUxYWdKqoEfKuscf607WE7PB+Z/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1RTZCNzQ2M0JDMDUzMUNDRDk4NUNENEQ0NjhFNjBC NTA3OEIxNjAeFw0yNjA2MTcwNDM4MzZaFw0yNjA2MTgwNjMzMzZaMDMxMTAvBgNV BAMTKDZFRUE0RkE5MzE0MjNDMTU1RDhDOEEyMUM4MTIyQzFGRjkwQTEwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkKGV1E9apdEBe7fgMD8ftz66H pX3r4Zzig3Y07yhrbZ5Fz2zg8+JqBacVSNizNsDmt1f5j+qOPFv7jxlt7o6c7zgC 1QiN5YBvdGv2h5HNruqy09moLWcb5rIyvTCNwGPWDkt/uNjalA4cOkeIocsz6bAO ok9aeh1ZqiGh7sdtWDEaSJfpzjusjuKZQAXX2iU3J2v/V6wz2aMDagIPKopHxS5C qVf2X8DbPXu4kjfqTILSKrrQrfbm3PQ2g84nNsIuDJwiM5RJFIIaXV727jWlOLFg 0VUkofDnhUJbvIQWxcznO2i5ZvbII+HRS+qlXQryqVEMmO09CTTrLVaeGuVPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbupPqTFCPBVdjIohyBIsH/kKEI0wHwYDVR0j BBgwFoAUQF5rdGO8BTHM2YXNTUaOYLUHixYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTEzZGUzZWMtNGQzYy00NDAyLWE3YjgtOGExYjk2MjI2ZTc1LzEvNDA1RTZCNzQ2 M0JDMDUzMUNDRDk4NUNENEQ0NjhFNjBCNTA3OEIxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDVFNkI3NDYzQkMwNTMxQ0NEOTg1Q0Q0RDQ2OEU2MEI1MDc4 QjE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvNDA1RTZCNzQ2M0JDMDUzMUNDRDk4NUNENEQ0NjhF NjBCNTA3OEIxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9HF0FLGjGFZP4/A0UHI/ozU6+iUoF34EYS WpqQ+43H8FgLwosnkB3+HjiEMhq/koPkvU1g/BilXX2Szhnz6QP9XdjezrxlCHzJ GrvC5hi7IsLlns97PsVDdyZI334lrWZVr8FwhVv7S00CiU8sSk9VYbWsaY3BWrTt R5Jc5CCxNU7rPoEiw3Z0yqVmJoKIfhJ4mlkDW8pitrbcnvNLgjf1CBlPxfTX9h88 N1VmQMteGTaXnWMoLmIvBt0KXSmbhtBHh+jttVbbZBpd4jeeAGPcFmG5lsxTRFwk jc5bhNevbwAwhR5kHwL5RL3LnkFkC5fwkgNiMTpkP4P96vzvmG0= -----END CERTIFICATE-----Generated at Wed Jun 17 10:14:16 2026 by rpki-client