$ rpki-client -vvf rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft File: 1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft (raw, json) Hash identifier: 1AgMxVpcnRHyI0Fbd9xkDjneqJubDXBzOhFbO5XIGnI= Subject key identifier: 32:8B:CC:B1:C5:D6:B7:68:45:66:33:5B:48:26:DE:23:34:50:14:1F Authority key identifier: 1A:84:6D:C7:EE:A8:A9:0C:9D:5E:86:7F:6C:C5:2E:B5:A5:F5:1E:CA Certificate issuer: /CN=1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA Certificate serial: 4CC83806FA80035AD88FF411CD4E8CCB561FA003 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 20:54:26 +0000 Manifest this update: Tue 16 Jun 2026 20:49:26 +0000 Manifest next update: Wed 17 Jun 2026 23:14:26 +0000 Files and hashes: 1: 1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl (hash: f89Wv2+rXsLtBojlmyq6hhUwvUaNSrtjazfZjCSSqrI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c8:38:06:fa:80:03:5a:d8:8f:f4:11:cd:4e:8c:cb:56:1f:a0:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA Validity Not Before: Jun 16 20:49:26 2026 GMT Not After : Jun 17 23:14:26 2026 GMT Subject: CN=328BCCB1C5D6B7684566335B4826DE233450141F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:20:d2:6d:90:89:fb:6c:aa:fe:d3:6d:64:40: 1e:08:cc:9b:f2:02:a9:7b:c4:61:a0:7d:39:14:3e: 6c:a5:c6:21:eb:79:e6:bb:f4:6f:f9:77:2d:bc:c1: 29:28:c0:bd:e6:bb:8b:ed:33:56:51:9a:df:91:9b: 7c:44:16:ad:77:eb:5d:b9:2d:91:c1:37:91:a1:bf: 9b:d7:66:e4:ae:e6:c0:73:e9:f6:4f:f8:8e:cf:83: 21:7e:ff:48:39:f6:c2:2a:e5:eb:08:56:c4:39:71: c0:a2:72:71:d8:15:88:68:b8:77:a4:80:50:a2:03: d8:68:9e:88:20:ed:cf:c3:6d:1f:24:d5:cd:e4:eb: 68:e7:a7:09:54:ce:2e:e1:d6:f8:8a:24:be:c6:69: 03:e0:8d:85:29:43:46:c5:81:12:2c:bc:04:d5:45: 3b:be:14:af:2e:d8:12:3c:dc:6b:c7:a8:0d:d0:71: 65:22:2c:96:b4:11:eb:9e:68:fb:fb:9e:8e:01:85: 01:dc:7f:ab:f3:a9:47:c0:71:70:53:6b:ff:67:65: 5c:b0:3e:9c:e6:80:26:0a:40:43:90:8a:20:27:b9: d3:92:fa:37:23:0d:63:5c:02:54:4a:f7:ff:b9:25: 1b:f8:ff:4c:ce:1d:af:96:24:8d:2d:bb:1a:21:d8: 96:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8B:CC:B1:C5:D6:B7:68:45:66:33:5B:48:26:DE:23:34:50:14:1F X509v3 Authority Key Identifier: keyid:1A:84:6D:C7:EE:A8:A9:0C:9D:5E:86:7F:6C:C5:2E:B5:A5:F5:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a8:9e:67:b5:a9:7c:0d:57:c1:b2:64:f2:b2:36:8c:dd:8a: 63:22:2b:16:b0:0d:95:45:02:62:fa:94:0c:01:10:29:f8:c2: d9:c2:c4:b4:a2:4b:d7:0e:05:0b:84:f3:20:53:12:75:ce:b4: a7:a3:a4:9a:87:fa:91:b5:61:2e:57:74:29:8a:45:d5:e9:3f: c2:7b:f8:35:6b:b9:4f:6f:89:b5:2f:41:1d:f2:b7:d0:b6:b4: 8f:9e:5f:f6:80:d0:5d:80:83:f3:ed:97:19:59:54:e4:dc:aa: ad:2b:35:11:5d:d5:39:7e:a6:4c:92:82:b0:03:f8:2d:e7:11: 9d:18:2f:5e:3c:54:9f:d1:55:99:87:d5:63:51:8b:e5:13:1c: 9e:73:ca:c6:ea:0e:4c:64:f3:67:8e:b3:5a:81:e1:b3:1e:b7: 02:38:19:a0:64:6f:69:30:2d:6f:16:0b:99:55:f0:cc:03:ea: d7:99:e1:8a:37:c2:ae:73:8e:49:7d:d6:96:44:ba:24:16:bd: 64:89:8e:cc:dd:5d:31:20:73:20:d5:3d:7a:ce:4f:26:63:6c: 4a:c0:74:e2:4e:b0:09:03:8d:0d:a9:8f:b3:9c:b8:13:93:66: 04:62:55:e2:79:6a:82:3c:36:7b:99:6d:41:9e:70:fc:92:88: 99:a4:14:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTMg4BvqAA1rYj/QRzU6My1YfoAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4NDZEQzdFRUE4QTkwQzlENUU4NjdGNkNDNTJFQjVB NUY1MUVDQTAeFw0yNjA2MTYyMDQ5MjZaFw0yNjA2MTcyMzE0MjZaMDMxMTAvBgNV BAMTKDMyOEJDQ0IxQzVENkI3Njg0NTY2MzM1QjQ4MjZERTIzMzQ1MDE0MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSINJtkIn7bKr+021kQB4IzJvy Aql7xGGgfTkUPmylxiHreea79G/5dy28wSkowL3mu4vtM1ZRmt+Rm3xEFq136125 LZHBN5Ghv5vXZuSu5sBz6fZP+I7PgyF+/0g59sIq5esIVsQ5ccCicnHYFYhouHek gFCiA9honogg7c/DbR8k1c3k62jnpwlUzi7h1viKJL7GaQPgjYUpQ0bFgRIsvATV RTu+FK8u2BI83GvHqA3QcWUiLJa0EeueaPv7no4BhQHcf6vzqUfAcXBTa/9nZVyw PpzmgCYKQEOQiiAnudOS+jcjDWNcAlRK9/+5JRv4/0zOHa+WJI0tuxoh2JbrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMovMscXWt2hFZjNbSCbeIzRQFB8wHwYDVR0j BBgwFoAUGoRtx+6oqQydXoZ/bMUutaX1HsowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk2NWRkMzktNDhkMC00NTc4LThmZTUtNjZkOTUzMzg0ZTUwLzAvMUE4NDZEQzdF RUE4QTkwQzlENUU4NjdGNkNDNTJFQjVBNUY1MUVDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTg0NkRDN0VFQThBOTBDOUQ1RTg2N0Y2Q0M1MkVCNUE1RjUx RUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvMUE4NDZEQzdFRUE4QTkwQzlENUU4NjdGNkNDNTJF QjVBNUY1MUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKonme1qXwNV8GyZPKyNozdimMiKxawDZVF AmL6lAwBECn4wtnCxLSiS9cOBQuE8yBTEnXOtKejpJqH+pG1YS5XdCmKRdXpP8J7 +DVruU9vibUvQR3yt9C2tI+eX/aA0F2Ag/PtlxlZVOTcqq0rNRFd1Tl+pkySgrAD +C3nEZ0YL148VJ/RVZmH1WNRi+UTHJ5zysbqDkxk82eOs1qB4bMetwI4GaBkb2kw LW8WC5lV8MwD6teZ4Yo3wq5zjkl91pZEuiQWvWSJjszdXTEgcyDVPXrOTyZjbErA dOJOsAkDjQ2pj7OcuBOTZgRiVeJ5aoI8NnuZbUGecPySiJmkFNc= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:50 2026 by rpki-client