$ rpki-client -vvf rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft File: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft (raw, json) Hash identifier: XkP0qPFYdG7HbkxSrMEwQexaN/WO9bYIQ2/3hwMJ97o= Subject key identifier: DC:86:B0:82:64:8C:2F:1C:47:E7:62:06:6E:3E:6F:62:F3:5E:02:CA Authority key identifier: DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E Certificate issuer: /CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Certificate serial: 2CA86357C0848D1B69C77F2116B284D5BF0094D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 10:35:53 +0000 Manifest this update: Wed 17 Jun 2026 10:30:53 +0000 Manifest next update: Thu 18 Jun 2026 12:10:53 +0000 Files and hashes: 1: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl (hash: usE1qUq2MV0tL7PyUj4Cvob32UgZIHFRjjhQxay5d6U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a8:63:57:c0:84:8d:1b:69:c7:7f:21:16:b2:84:d5:bf:00:94:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Validity Not Before: Jun 17 10:30:53 2026 GMT Not After : Jun 18 12:10:53 2026 GMT Subject: CN=DC86B082648C2F1C47E762066E3E6F62F35E02CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:f0:09:3f:56:67:8e:96:b1:c9:23:9d:e9: 9d:45:b7:4f:5c:3b:b0:9a:f1:05:2a:8b:74:24:ea: be:06:e2:b1:28:39:d9:cb:a2:cd:19:39:bb:0b:0e: 06:ea:ae:9f:79:35:c6:44:2d:a7:a7:d6:db:03:5a: fb:99:d2:24:dd:99:d3:3a:7a:0d:3d:8e:6e:0f:53: cd:ad:d6:25:52:be:d4:e6:da:0b:9d:23:2b:3a:ec: 90:1c:51:ae:7e:85:bd:0c:1e:a4:1c:7e:b3:72:84: 24:cd:02:0b:43:96:54:f0:fe:35:2a:47:95:ff:af: 83:71:09:b6:a8:4c:60:ca:7e:d5:67:2c:35:18:81: 32:02:f9:6e:d7:e0:09:cf:49:41:12:24:e3:67:12: 05:b8:9a:7f:9b:11:63:c7:40:08:2c:bc:3e:86:66: 98:bc:4d:c9:25:67:0c:c2:71:a9:e3:e7:f6:e9:48: e2:cc:fb:a8:f6:08:d7:8d:49:b8:42:dd:51:f7:d1: f1:82:c3:61:a6:4c:77:ab:b1:76:2e:f6:3a:16:ab: 67:39:9b:6b:e6:43:8a:a6:0d:1a:d3:02:3c:b1:24: 1d:29:cb:4d:44:61:2b:34:da:59:f6:c4:86:f1:66: aa:1c:42:1b:dc:ff:d6:62:05:0e:b4:48:12:18:02: b0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:86:B0:82:64:8C:2F:1C:47:E7:62:06:6E:3E:6F:62:F3:5E:02:CA X509v3 Authority Key Identifier: keyid:DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f2:71:41:23:e7:c8:5f:3c:79:04:7b:0f:b3:29:c1:a1:08: b2:18:5f:96:4f:7e:92:56:c0:3f:99:c3:03:ca:c4:29:f6:e0: ce:f5:b2:39:44:58:a5:00:b2:45:54:30:c9:e0:1e:87:46:d9: b5:3b:5c:16:ae:8d:f8:e3:94:bc:06:3d:fa:5e:cc:f5:be:d6: 3a:30:ef:2f:57:29:67:7a:00:67:83:16:98:3a:41:b8:8a:84: 37:14:51:7e:bf:e3:7f:f4:9c:3a:82:5e:3c:36:4a:5f:b7:04: cb:54:48:3d:8f:c0:de:1f:26:c9:f0:2a:55:e6:b2:c5:fe:b8: 68:49:f7:90:2d:dd:29:f8:f9:16:0d:03:fb:61:11:25:50:e2: 3e:12:9f:72:68:ce:2a:a1:c3:dc:b7:34:35:9d:d1:10:31:66: 13:db:f3:99:ed:14:a7:92:e7:ed:31:74:fd:d0:9c:b3:ca:fe: ef:96:46:a0:05:5a:fe:80:09:75:83:44:4c:23:82:75:6d:5f: 7a:f3:b6:e7:85:06:cb:f5:cd:a2:7c:26:38:0b:19:0a:d4:79: a8:d9:a5:6c:02:6e:08:64:07:35:78:dc:f8:f9:60:69:bb:16: a8:94:6d:f7:f7:9e:4f:48:f7:33:a6:b9:74:5e:27:d2:e0:45: e7:18:db:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULKhjV8CEjRtpx38hFrKE1b8AlNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2NkJC OEY5MkEzRTAeFw0yNjA2MTcxMDMwNTNaFw0yNjA2MTgxMjEwNTNaMDMxMTAvBgNV BAMTKERDODZCMDgyNjQ4QzJGMUM0N0U3NjIwNjZFM0U2RjYyRjM1RTAyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2N/AJP1ZnjpaxySOd6Z1Ft09c O7Ca8QUqi3Qk6r4G4rEoOdnLos0ZObsLDgbqrp95NcZELaen1tsDWvuZ0iTdmdM6 eg09jm4PU82t1iVSvtTm2gudIys67JAcUa5+hb0MHqQcfrNyhCTNAgtDllTw/jUq R5X/r4NxCbaoTGDKftVnLDUYgTIC+W7X4AnPSUESJONnEgW4mn+bEWPHQAgsvD6G Zpi8TcklZwzCcanj5/bpSOLM+6j2CNeNSbhC3VH30fGCw2GmTHersXYu9joWq2c5 m2vmQ4qmDRrTAjyxJB0py01EYSs02ln2xIbxZqocQhvc/9ZiBQ60SBIYArBtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3IawgmSMLxxH52IGbj5vYvNeAsowHwYDVR0j BBgwFoAU29WY4bt0l4Ld5jk9Q7gGa7j5Kj4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjIzOGU1NmUtZWRhNS00MDVhLWFiYmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFC Qjc0OTc4MkRERTYzOTNENDNCODA2NkJCOEY5MkEzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQkQ1OThFMUJCNzQ5NzgyRERFNjM5M0Q0M0I4MDY2QkI4Rjky QTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjIzOGU1NmUtZWRhNS00MDVhLWFi YmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2 NkJCOEY5MkEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnycUEj58hfPHkEew+zKcGhCLIYX5ZPfpJW wD+ZwwPKxCn24M71sjlEWKUAskVUMMngHodG2bU7XBaujfjjlLwGPfpezPW+1jow 7y9XKWd6AGeDFpg6QbiKhDcUUX6/43/0nDqCXjw2Sl+3BMtUSD2PwN4fJsnwKlXm ssX+uGhJ95At3Sn4+RYNA/thESVQ4j4Sn3Joziqhw9y3NDWd0RAxZhPb85ntFKeS 5+0xdP3QnLPK/u+WRqAFWv6ACXWDREwjgnVtX3rztueFBsv1zaJ8JjgLGQrUeajZ pWwCbghkBzV43Pj5YGm7FqiUbff3nk9I9zOmuXReJ9LgRecY21s= -----END CERTIFICATE-----Generated at Wed Jun 17 14:30:35 2026 by rpki-client