$ rpki-client -vvf rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft File: D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft (raw, json) Hash identifier: K2P3HvY9ckn7gSOIIY7pXCcMCPk73CfGpw2z9Ba/NsQ= Subject key identifier: 70:53:37:9B:99:48:05:3C:21:E1:97:52:E1:E8:38:FA:4A:57:D1:0D Authority key identifier: D4:1E:F4:7F:23:FE:51:C0:A3:8F:09:E4:EB:23:30:83:B3:00:FA:F6 Certificate issuer: /CN=D41EF47F23FE51C0A38F09E4EB233083B300FAF6 Certificate serial: 26C88760772F68249558D3B29F95F4E22BCC4EF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:38:15 +0000 Manifest this update: Tue 16 Jun 2026 15:33:15 +0000 Manifest next update: Wed 17 Jun 2026 18:55:15 +0000 Files and hashes: 1: D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl (hash: +4N0pHEdGmiaD+MsIxYGtkHIcCIaaq/LOT4uP2DT4/s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c8:87:60:77:2f:68:24:95:58:d3:b2:9f:95:f4:e2:2b:cc:4e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D41EF47F23FE51C0A38F09E4EB233083B300FAF6 Validity Not Before: Jun 16 15:33:15 2026 GMT Not After : Jun 17 18:55:15 2026 GMT Subject: CN=7053379B9948053C21E19752E1E838FA4A57D10D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:54:c3:4c:56:77:48:23:c0:34:7a:2a:1b:08: b9:06:06:44:25:0f:e8:db:60:e6:a5:db:0d:71:09: 34:5d:cd:c0:7e:d3:c5:84:c3:f1:ee:a2:c9:74:70: 8d:92:4f:89:03:07:51:c6:85:5d:5f:dc:36:90:4f: a5:43:19:6a:21:39:a7:c2:d0:83:ef:ed:37:96:57: 50:2c:c5:c9:31:b9:e9:70:85:c8:4a:bc:f1:1f:af: 09:67:bf:2e:8f:78:06:7e:54:24:71:a9:5f:77:07: 37:a1:4a:03:7f:5b:3d:f0:42:bb:ce:17:ad:6a:3b: 52:0d:ec:ec:dc:21:38:48:73:98:e6:24:9f:e4:de: 03:50:5b:58:50:33:cf:71:49:79:2e:66:69:c3:19: 4a:47:52:c9:18:9a:16:2e:30:af:ed:6c:95:d2:1e: 0d:73:16:e9:4c:d2:a3:96:f1:db:af:9b:51:d2:87: b1:14:c7:ea:ce:bf:c3:ee:b7:e0:3a:a2:94:4f:35: ab:72:b3:e2:57:a4:1d:02:14:e9:e3:de:53:1f:1f: bf:78:73:f2:22:6f:c3:73:2c:62:08:e4:8c:ba:4a: 9d:b7:93:0d:f3:e6:1b:56:d6:cf:e9:09:ab:50:fb: b9:9a:f2:4c:f0:2d:2f:19:6b:58:c7:27:dc:93:9d: 96:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:53:37:9B:99:48:05:3C:21:E1:97:52:E1:E8:38:FA:4A:57:D1:0D X509v3 Authority Key Identifier: keyid:D4:1E:F4:7F:23:FE:51:C0:A3:8F:09:E4:EB:23:30:83:B3:00:FA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:2b:e1:9c:82:35:88:da:30:e0:81:d2:6c:c6:fd:36:c1:f4: ba:66:fa:08:5b:54:0e:e2:e6:5f:d3:0b:ac:cf:14:dd:c1:e8: 41:61:9d:7a:ce:71:cf:c9:55:ea:e3:61:1b:bf:fa:a2:a9:67: 37:50:e7:72:8c:a1:f5:b5:ea:c9:6f:60:92:4b:3e:98:a9:4a: 88:2e:d0:96:3f:2f:a6:aa:be:62:b0:e9:31:0f:80:42:f4:f3: 56:52:fc:55:88:b0:6e:c5:9f:ca:b3:dd:4a:a0:0e:df:11:70: cf:1f:4f:10:87:9a:05:ac:48:48:fb:65:09:40:0f:52:bb:5c: 29:d0:78:1f:af:07:41:24:2e:d7:9b:ad:77:63:9e:e8:ab:26: f7:74:c3:0e:c4:de:9c:20:8c:6f:fb:1c:93:58:d9:23:de:78: 54:7b:07:72:61:3b:dd:0f:0a:5a:fb:35:79:0e:72:cc:4c:f7: 56:17:56:4e:a2:d2:65:d8:71:9d:25:04:e8:f8:8d:80:4b:b1: d9:18:c7:c4:f0:7c:59:fd:2f:75:21:70:65:e7:31:ab:3f:62: 67:fc:68:dc:c5:e4:68:07:cd:e0:d6:75:09:d1:2c:ee:3c:1b: 31:1b:be:76:f9:19:a6:71:43:d7:14:db:c3:a0:8c:ce:b2:ac: 66:9c:3d:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJsiHYHcvaCSVWNOyn5X04ivMTvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQxRUY0N0YyM0ZFNTFDMEEzOEYwOUU0RUIyMzMwODNC MzAwRkFGNjAeFw0yNjA2MTYxNTMzMTVaFw0yNjA2MTcxODU1MTVaMDMxMTAvBgNV BAMTKDcwNTMzNzlCOTk0ODA1M0MyMUUxOTc1MkUxRTgzOEZBNEE1N0QxMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIVMNMVndII8A0eiobCLkGBkQl D+jbYOal2w1xCTRdzcB+08WEw/Huosl0cI2ST4kDB1HGhV1f3DaQT6VDGWohOafC 0IPv7TeWV1AsxckxuelwhchKvPEfrwlnvy6PeAZ+VCRxqV93BzehSgN/Wz3wQrvO F61qO1IN7OzcIThIc5jmJJ/k3gNQW1hQM89xSXkuZmnDGUpHUskYmhYuMK/tbJXS Hg1zFulM0qOW8duvm1HSh7EUx+rOv8Put+A6opRPNatys+JXpB0CFOnj3lMfH794 c/Iib8NzLGII5Iy6Sp23kw3z5htW1s/pCatQ+7ma8kzwLS8Za1jHJ9yTnZZNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcFM3m5lIBTwh4ZdS4eg4+kpX0Q0wHwYDVR0j BBgwFoAU1B70fyP+UcCjjwnk6yMwg7MA+vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg1NDc3Y2UtMDcxNy00N2MwLTg3NjYtOGI5YmVjMGMwODZjLzAvRDQxRUY0N0Yy M0ZFNTFDMEEzOEYwOUU0RUIyMzMwODNCMzAwRkFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENDFFRjQ3RjIzRkU1MUMwQTM4RjA5RTRFQjIzMzA4M0IzMDBG QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg1NDc3Y2UtMDcxNy00N2MwLTg3 NjYtOGI5YmVjMGMwODZjLzAvRDQxRUY0N0YyM0ZFNTFDMEEzOEYwOUU0RUIyMzMw ODNCMzAwRkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkr4ZyCNYjaMOCB0mzG/TbB9Lpm+ghbVA7i 5l/TC6zPFN3B6EFhnXrOcc/JVerjYRu/+qKpZzdQ53KMofW16slvYJJLPpipSogu 0JY/L6aqvmKw6TEPgEL081ZS/FWIsG7Fn8qz3UqgDt8RcM8fTxCHmgWsSEj7ZQlA D1K7XCnQeB+vB0EkLtebrXdjnuirJvd0ww7E3pwgjG/7HJNY2SPeeFR7B3JhO90P Clr7NXkOcsxM91YXVk6i0mXYcZ0lBOj4jYBLsdkYx8TwfFn9L3UhcGXnMas/Ymf8 aNzF5GgHzeDWdQnRLO48GzEbvnb5GaZxQ9cU28OgjM6yrGacPTA= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:26 2026 by rpki-client