$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.mft File: 11B59A73410511C9A6E01CB13423495DDC1B58CE.mft (raw, json) Hash identifier: YPKdkIBIJ3tOANiUxdw1qHSsx0y8uKIAdJHQbiyTbHE= Subject key identifier: 10:61:23:68:9B:92:38:B2:E0:6F:D1:08:85:88:8C:C8:2E:9D:E1:F5 Authority key identifier: 11:B5:9A:73:41:05:11:C9:A6:E0:1C:B1:34:23:49:5D:DC:1B:58:CE Certificate issuer: /CN=11B59A73410511C9A6E01CB13423495DDC1B58CE Certificate serial: 1F96EB3FE7B3195A69CBA5D68B71E39757F71B4C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11B59A73410511C9A6E01CB13423495DDC1B58CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 18:51:54 +0000 Manifest this update: Tue 16 Jun 2026 18:46:54 +0000 Manifest next update: Wed 17 Jun 2026 21:29:54 +0000 Files and hashes: 1: 11B59A73410511C9A6E01CB13423495DDC1B58CE.crl (hash: KCTVz17QIfCdnmDBFlxFGP1TC0u9MxN9eVQ9HgaNepU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.crl rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11B59A73410511C9A6E01CB13423495DDC1B58CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:96:eb:3f:e7:b3:19:5a:69:cb:a5:d6:8b:71:e3:97:57:f7:1b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11B59A73410511C9A6E01CB13423495DDC1B58CE Validity Not Before: Jun 16 18:46:54 2026 GMT Not After : Jun 17 21:29:54 2026 GMT Subject: CN=106123689B9238B2E06FD10885888CC82E9DE1F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:21:ac:5b:f8:ac:d6:cc:87:81:b5:ec:09:7a: 3a:d5:28:27:3b:86:d4:22:86:73:10:21:62:a4:90: 7b:ab:5c:45:47:60:5a:57:1f:c3:f4:b4:ec:37:9c: 61:cc:5a:ea:20:c3:ff:0b:e5:d5:48:92:32:e7:46: 88:18:91:26:9e:2e:a3:f7:69:38:b1:4f:a5:e5:e0: f7:27:3d:3e:9f:91:8b:f5:58:bf:50:61:97:b7:51: b3:36:ae:44:cb:03:9a:62:71:8d:c0:ba:e8:c0:f2: 2a:17:96:91:69:0f:fe:3b:f3:69:0f:ed:73:ca:bf: 97:70:13:3b:68:9f:bd:11:5d:4c:db:e6:4f:b3:7a: 1f:55:f8:7c:e6:30:99:b4:57:15:2a:3f:ac:a9:cf: e2:49:50:e2:0e:7d:a9:ef:3b:2b:37:89:fe:62:72: 63:17:cb:92:5e:e7:f8:74:51:64:39:b0:90:8a:10: 49:ce:36:1e:17:d1:30:25:bf:c4:71:bc:2c:5b:fc: 52:e6:58:16:f7:80:4d:4e:93:fb:dc:02:6b:d1:cf: 06:15:5e:5b:de:eb:76:1a:dd:c3:f8:dc:d9:24:81: 11:96:0f:d5:3e:fb:ff:48:90:3a:27:91:49:f5:e1: 71:39:ac:8f:23:f1:ee:72:6b:de:75:f4:d7:06:5a: 4e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:61:23:68:9B:92:38:B2:E0:6F:D1:08:85:88:8C:C8:2E:9D:E1:F5 X509v3 Authority Key Identifier: keyid:11:B5:9A:73:41:05:11:C9:A6:E0:1C:B1:34:23:49:5D:DC:1B:58:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11B59A73410511C9A6E01CB13423495DDC1B58CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ae:8e:9e:d6:45:26:cb:95:0f:00:fa:e1:cd:2c:51:b9:22: 18:6c:22:11:43:73:e1:db:29:31:76:08:28:29:95:11:eb:8e: 92:f6:29:da:e4:69:8e:68:7a:1b:54:7c:3c:5c:87:2b:0b:a6: a7:de:36:ce:4a:fe:35:81:8f:65:fa:77:03:06:bc:46:f5:6f: a0:2f:c5:d8:1e:60:be:63:36:2e:22:59:5a:68:b5:74:70:58: 51:97:08:5f:12:2e:fc:78:dc:4a:02:96:35:34:ce:06:d1:cc: 38:95:58:48:4e:9c:6c:85:11:ac:6c:a4:7b:97:c6:61:5d:08: 4a:47:8e:60:02:c7:58:43:7a:cd:96:b8:a9:07:c8:c7:74:81: 18:54:44:52:bb:52:5d:97:ff:90:0e:05:3b:0a:40:83:a5:43: 07:7a:03:22:bc:93:03:40:ed:4c:66:d6:a9:fd:4d:98:20:1e: fe:2d:4c:15:8d:57:88:4c:b9:68:1a:49:5c:a3:6b:aa:23:05: 2a:bc:24:4c:59:76:2c:86:10:e6:18:ac:f4:70:2b:33:b0:6e: dd:09:23:b9:c5:95:d7:a1:d6:0e:b6:31:cd:38:6f:53:58:8b: e4:a7:8a:c5:58:81:da:25:44:02:98:74:2a:b3:03:47:0d:e1: 8f:6f:99:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH5brP+ezGVppy6XWi3Hjl1f3G0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFCNTlBNzM0MTA1MTFDOUE2RTAxQ0IxMzQyMzQ5NURE QzFCNThDRTAeFw0yNjA2MTYxODQ2NTRaFw0yNjA2MTcyMTI5NTRaMDMxMTAvBgNV BAMTKDEwNjEyMzY4OUI5MjM4QjJFMDZGRDEwODg1ODg4Q0M4MkU5REUxRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQIaxb+KzWzIeBtewJejrVKCc7 htQihnMQIWKkkHurXEVHYFpXH8P0tOw3nGHMWuogw/8L5dVIkjLnRogYkSaeLqP3 aTixT6Xl4PcnPT6fkYv1WL9QYZe3UbM2rkTLA5picY3AuujA8ioXlpFpD/4782kP 7XPKv5dwEzton70RXUzb5k+zeh9V+HzmMJm0VxUqP6ypz+JJUOIOfanvOys3if5i cmMXy5Je5/h0UWQ5sJCKEEnONh4X0TAlv8RxvCxb/FLmWBb3gE1Ok/vcAmvRzwYV Xlve63Ya3cP43NkkgRGWD9U++/9IkDonkUn14XE5rI8j8e5ya9519NcGWk7NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEGEjaJuSOLLgb9EIhYiMyC6d4fUwHwYDVR0j BBgwFoAUEbWac0EFEcmm4ByxNCNJXdwbWM4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzRkNDEwMDMtMTJiMC00ZTZhLWIwODUtNTZiYzJkMTlkYWE4LzAvMTFCNTlBNzM0 MTA1MTFDOUE2RTAxQ0IxMzQyMzQ5NUREQzFCNThDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMUI1OUE3MzQxMDUxMUM5QTZFMDFDQjEzNDIzNDk1RERDMUI1 OENFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw ODUtNTZiYzJkMTlkYWE4LzAvMTFCNTlBNzM0MTA1MTFDOUE2RTAxQ0IxMzQyMzQ5 NUREQzFCNThDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyujp7WRSbLlQ8A+uHNLFG5IhhsIhFDc+Hb KTF2CCgplRHrjpL2KdrkaY5oehtUfDxchysLpqfeNs5K/jWBj2X6dwMGvEb1b6Av xdgeYL5jNi4iWVpotXRwWFGXCF8SLvx43EoCljU0zgbRzDiVWEhOnGyFEaxspHuX xmFdCEpHjmACx1hDes2WuKkHyMd0gRhURFK7Ul2X/5AOBTsKQIOlQwd6AyK8kwNA 7Uxm1qn9TZggHv4tTBWNV4hMuWgaSVyja6ojBSq8JExZdiyGEOYYrPRwKzOwbt0J I7nFldeh1g62Mc04b1NYi+SnisVYgdolRAKYdCqzA0cN4Y9vmU4= -----END CERTIFICATE-----Generated at Wed Jun 17 11:49:12 2026 by rpki-client