$ rpki-client -vvf rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft File: E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft (raw, json) Hash identifier: HPScZUkss+KAy6ltS4uHA0bvH4SG8y3mNzyBNg42dr4= Subject key identifier: 99:6A:DC:FA:84:D1:C7:7F:05:92:34:AB:39:A2:37:E5:33:5F:66:12 Authority key identifier: E0:63:3F:E9:AA:4E:1B:B8:C1:4C:B8:76:4B:6A:FA:38:FD:0C:A7:88 Certificate issuer: /CN=E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788 Certificate serial: 60D17F77664EC6D03DCFC459C283E3D2F55AECC4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:48:10 +0000 Manifest this update: Tue 16 Jun 2026 19:43:10 +0000 Manifest next update: Wed 17 Jun 2026 21:24:10 +0000 Files and hashes: 1: E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.crl (hash: +VFciGiw18BWJwRLyxSyx2jNba8ln7LwmScgghY+Zog=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.crl rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d1:7f:77:66:4e:c6:d0:3d:cf:c4:59:c2:83:e3:d2:f5:5a:ec:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788 Validity Not Before: Jun 16 19:43:10 2026 GMT Not After : Jun 17 21:24:10 2026 GMT Subject: CN=996ADCFA84D1C77F059234AB39A237E5335F6612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9e:1d:00:41:a1:37:28:4f:68:d4:57:ea:f7: 03:1e:ce:51:4a:ee:d8:e6:56:24:c6:e9:4e:9d:eb: 9c:f2:6c:b9:9d:f5:be:66:1e:b1:31:9e:8b:82:52: e9:e8:8e:42:fb:2b:a1:c7:bf:a1:47:69:b2:5a:b5: 31:f2:70:23:45:e6:20:db:aa:c1:0d:0a:e2:4f:f8: e7:cf:67:4d:72:8f:d9:a8:61:1e:7e:34:69:7b:30: d3:b0:02:a0:f7:72:c6:f0:1f:b7:d1:3b:52:e2:33: 20:05:72:b4:01:e0:71:85:96:e9:34:3f:e3:0d:31: 4e:0b:e8:d9:d9:2d:04:4d:0e:67:28:dd:fd:01:92: 0f:38:ba:1e:22:6e:ca:11:df:c0:18:14:a1:e1:78: a3:46:8d:89:d2:e6:94:87:de:f7:62:d9:70:52:5c: a6:17:91:65:b6:cf:f9:47:7b:fa:d0:84:39:c1:cb: c7:35:6e:bd:fb:d7:02:4e:22:a0:02:ac:45:b3:19: 13:05:8e:5a:ba:29:d1:74:40:70:15:d2:6f:eb:f2: 8f:a6:45:df:fc:b0:05:2a:8b:a9:bd:2d:ab:ad:7b: d7:a0:8d:4c:a9:8e:b5:aa:39:dd:6c:8e:ed:17:ec: de:87:c9:74:97:2f:03:bc:36:37:8e:de:bd:f8:ad: 24:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6A:DC:FA:84:D1:C7:7F:05:92:34:AB:39:A2:37:E5:33:5F:66:12 X509v3 Authority Key Identifier: keyid:E0:63:3F:E9:AA:4E:1B:B8:C1:4C:B8:76:4B:6A:FA:38:FD:0C:A7:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d8:07:b9:c2:2a:c7:ee:c2:b5:1b:c2:98:95:10:8b:cf:9b: 51:6e:f5:06:54:56:5c:e5:df:7b:4c:a0:d0:a0:06:b1:ae:be: b9:4f:73:b4:0e:77:66:73:6f:26:16:8e:05:bc:39:12:2b:42: a5:5a:47:da:51:2f:61:bb:23:46:fe:4c:40:b8:84:b1:df:65: be:5e:2d:a7:84:bf:a8:39:0b:50:5e:4f:10:99:ea:c6:3b:09: 3e:e9:e2:fb:c9:40:72:b2:f6:60:4a:2d:cc:a0:4c:3c:ee:99: 46:25:f1:a7:82:e0:a8:92:b5:4c:80:50:7a:2b:a4:fd:b1:5a: 64:c2:4b:68:20:24:a5:48:d5:bd:e5:51:75:da:a6:04:f9:08: b0:fb:06:44:14:bd:55:34:11:37:d4:e0:9b:92:4e:1d:34:34: 63:08:d6:5f:76:93:68:04:40:5b:7b:1c:f9:35:be:7f:ba:46: a4:f8:ad:47:f9:fb:ac:27:bd:5f:84:4e:00:39:39:4e:73:16: 9b:b8:26:8f:f0:6e:cc:61:53:f5:95:69:3b:30:9b:0c:69:9e: 89:2f:7b:0a:78:a0:30:c2:50:d9:d0:dd:7e:a2:6f:bd:bf:73: 0b:c2:bd:ea:ac:ba:3c:df:1f:70:e0:43:8c:b9:13:80:5f:8d: bf:f3:e9:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYNF/d2ZOxtA9z8RZwoPj0vVa7MQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA2MzNGRTlBQTRFMUJCOEMxNENCODc2NEI2QUZBMzhG RDBDQTc4ODAeFw0yNjA2MTYxOTQzMTBaFw0yNjA2MTcyMTI0MTBaMDMxMTAvBgNV BAMTKDk5NkFEQ0ZBODREMUM3N0YwNTkyMzRBQjM5QTIzN0U1MzM1RjY2MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3nh0AQaE3KE9o1Ffq9wMezlFK 7tjmViTG6U6d65zybLmd9b5mHrExnouCUunojkL7K6HHv6FHabJatTHycCNF5iDb qsENCuJP+OfPZ01yj9moYR5+NGl7MNOwAqD3csbwH7fRO1LiMyAFcrQB4HGFluk0 P+MNMU4L6NnZLQRNDmco3f0Bkg84uh4ibsoR38AYFKHheKNGjYnS5pSH3vdi2XBS XKYXkWW2z/lHe/rQhDnBy8c1br371wJOIqACrEWzGRMFjlq6KdF0QHAV0m/r8o+m Rd/8sAUqi6m9Laute9egjUypjrWqOd1sju0X7N6HyXSXLwO8NjeO3r34rSTlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmWrc+oTRx38FkjSrOaI35TNfZhIwHwYDVR0j BBgwFoAU4GM/6apOG7jBTLh2S2r6OP0Mp4gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWYyYjE3ODYtMTgzMy00ZDBhLWExMzktNDY0NDMzMzkzZDc4LzAvRTA2MzNGRTlB QTRFMUJCOEMxNENCODc2NEI2QUZBMzhGRDBDQTc4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDYzM0ZFOUFBNEUxQkI4QzE0Q0I4NzY0QjZBRkEzOEZEMENB Nzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvRTA2MzNGRTlBQTRFMUJCOEMxNENCODc2NEI2QUZB MzhGRDBDQTc4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvYB7nCKsfuwrUbwpiVEIvPm1Fu9QZUVlzl 33tMoNCgBrGuvrlPc7QOd2ZzbyYWjgW8ORIrQqVaR9pRL2G7I0b+TEC4hLHfZb5e LaeEv6g5C1BeTxCZ6sY7CT7p4vvJQHKy9mBKLcygTDzumUYl8aeC4KiStUyAUHor pP2xWmTCS2ggJKVI1b3lUXXapgT5CLD7BkQUvVU0ETfU4JuSTh00NGMI1l92k2gE QFt7HPk1vn+6RqT4rUf5+6wnvV+ETgA5OU5zFpu4Jo/wbsxhU/WVaTswmwxpnokv ewp4oDDCUNnQ3X6ib72/cwvCveqsujzfH3DgQ4y5E4Bfjb/z6Uc= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:31 2026 by rpki-client