$ rpki-client -vvf rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft File: D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft (raw, json) Hash identifier: 5TP1RIMzyvfks6lzhgzK/RtEOuUf3BLAF3pSsLNqS2I= Subject key identifier: 1A:18:57:FF:FC:5D:18:A1:70:2D:8B:B5:C5:E3:65:7C:BF:B5:BE:6A Authority key identifier: D5:A9:D1:A5:8E:3E:E4:57:41:AF:FD:59:7F:03:CB:F6:34:91:22:3C Certificate issuer: /CN=D5A9D1A58E3EE45741AFFD597F03CBF63491223C Certificate serial: 21D90E4647FA4A4976141F510CDD9B92A1547974 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 14:57:42 +0000 Manifest this update: Sat 13 Jun 2026 14:52:42 +0000 Manifest next update: Sun 14 Jun 2026 16:19:42 +0000 Files and hashes: 1: D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl (hash: DqXfEEhRUIXtjwj8zdz1ikLrV+TPsFtYOqu8VAPIBVU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d9:0e:46:47:fa:4a:49:76:14:1f:51:0c:dd:9b:92:a1:54:79:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5A9D1A58E3EE45741AFFD597F03CBF63491223C Validity Not Before: Jun 13 14:52:42 2026 GMT Not After : Jun 14 16:19:42 2026 GMT Subject: CN=1A1857FFFC5D18A1702D8BB5C5E3657CBFB5BE6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e4:13:23:3e:8c:6f:e0:02:c5:96:eb:49:e6: de:f9:bf:ea:3a:98:7a:73:68:de:be:13:28:73:0c: d5:e9:ed:16:99:58:c8:43:49:de:65:35:45:2e:32: c8:2f:1c:bd:05:02:a9:2a:d6:cc:bb:c6:4f:80:ea: e9:05:48:22:08:a9:fd:c3:89:4a:44:e6:c8:ca:d1: 61:59:91:ac:64:d5:62:c1:33:8f:b8:7d:a0:83:51: 76:89:4a:fd:8f:dd:9f:63:f4:27:5c:81:b5:20:63: 35:18:d9:a4:c1:16:6e:62:ea:8c:b0:5e:e5:b8:01: eb:9f:34:81:29:b4:cb:e3:57:77:25:b3:0b:a8:6c: 3c:f2:4f:9d:26:f5:92:29:f1:b3:10:bf:23:2a:3f: 66:59:bc:af:3f:1f:05:4c:b9:f8:ba:d1:a3:99:73: c9:82:79:b3:7f:00:0d:1f:17:06:bb:d6:e8:10:b9: 64:98:8e:5d:ad:8e:b1:00:11:b7:52:64:81:99:ad: 64:3f:59:5d:7b:54:57:dd:11:30:08:42:0e:85:e1: fb:e3:f9:f3:94:2f:1d:3b:af:4d:fb:f0:f2:b0:96: 6a:bf:98:57:20:ac:1b:dd:ac:da:75:47:82:a1:70: 90:d4:b6:07:7d:82:42:30:86:9e:21:1a:83:35:49: 1a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:18:57:FF:FC:5D:18:A1:70:2D:8B:B5:C5:E3:65:7C:BF:B5:BE:6A X509v3 Authority Key Identifier: keyid:D5:A9:D1:A5:8E:3E:E4:57:41:AF:FD:59:7F:03:CB:F6:34:91:22:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:1a:60:fd:1e:38:5d:9f:57:df:28:42:df:12:c8:65:a5:04: bd:ed:2f:5f:68:81:0b:dc:d9:b6:01:9e:0c:5f:bb:f2:9a:5c: c6:d0:01:07:e6:87:e7:62:10:40:53:de:19:42:52:51:ba:fa: 9f:5a:b5:9a:b3:17:40:83:25:e9:a2:fd:e3:e7:2a:91:13:cc: ea:70:1f:0d:ed:43:84:bd:cb:bc:5a:f6:42:3b:17:2a:67:93: 84:b2:6b:a4:33:25:d9:fa:e4:2e:27:8c:9f:91:f1:4e:1e:4a: 03:0d:a9:cb:3d:ca:e8:46:40:77:f4:0b:55:59:28:65:ce:14: 0d:b4:29:af:43:14:57:1c:e3:4f:79:17:80:65:96:93:01:de: e3:f2:27:5e:c0:49:0a:16:51:87:0e:e4:ae:05:a7:8c:6c:1b: b4:4a:e4:28:68:48:74:29:9e:14:82:46:3b:f0:1b:e7:30:64: 24:29:66:93:9a:5a:90:b5:7e:9e:60:63:e1:8d:9a:2d:4a:77: 9e:4c:5f:78:08:9b:d9:a4:dc:2e:43:d3:cc:c4:98:49:b9:b2: 96:49:84:6e:ad:a7:fa:5c:36:6f:d2:11:f3:11:1c:25:9f:d1: 5e:ea:5f:dd:c6:83:eb:d7:bf:a1:dc:5a:8f:31:c6:83:d7:8c: 69:22:a8:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdkORkf6Skl2FB9RDN2bkqFUeXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVBOUQxQTU4RTNFRTQ1NzQxQUZGRDU5N0YwM0NCRjYz NDkxMjIzQzAeFw0yNjA2MTMxNDUyNDJaFw0yNjA2MTQxNjE5NDJaMDMxMTAvBgNV BAMTKDFBMTg1N0ZGRkM1RDE4QTE3MDJEOEJCNUM1RTM2NTdDQkZCNUJFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5BMjPoxv4ALFlutJ5t75v+o6 mHpzaN6+EyhzDNXp7RaZWMhDSd5lNUUuMsgvHL0FAqkq1sy7xk+A6ukFSCIIqf3D iUpE5sjK0WFZkaxk1WLBM4+4faCDUXaJSv2P3Z9j9CdcgbUgYzUY2aTBFm5i6oyw XuW4AeufNIEptMvjV3clswuobDzyT50m9ZIp8bMQvyMqP2ZZvK8/HwVMufi60aOZ c8mCebN/AA0fFwa71ugQuWSYjl2tjrEAEbdSZIGZrWQ/WV17VFfdETAIQg6F4fvj +fOULx07r0378PKwlmq/mFcgrBvdrNp1R4KhcJDUtgd9gkIwhp4hGoM1SRrVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGhhX//xdGKFwLYu1xeNlfL+1vmowHwYDVR0j BBgwFoAU1anRpY4+5FdBr/1ZfwPL9jSRIjwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIxNjQ2YmUtM2Q2YS00MjU3LWI3N2MtYjMzYzEwZjM1ZDMyLzAvRDVBOUQxQTU4 RTNFRTQ1NzQxQUZGRDU5N0YwM0NCRjYzNDkxMjIzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUE5RDFBNThFM0VFNDU3NDFBRkZENTk3RjAzQ0JGNjM0OTEy MjNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvRDVBOUQxQTU4RTNFRTQ1NzQxQUZGRDU5N0YwM0NC RjYzNDkxMjIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4aYP0eOF2fV98oQt8SyGWlBL3tL19ogQvc 2bYBngxfu/KaXMbQAQfmh+diEEBT3hlCUlG6+p9atZqzF0CDJemi/ePnKpETzOpw Hw3tQ4S9y7xa9kI7Fypnk4Sya6QzJdn65C4njJ+R8U4eSgMNqcs9yuhGQHf0C1VZ KGXOFA20Ka9DFFcc4095F4BllpMB3uPyJ17ASQoWUYcO5K4Fp4xsG7RK5ChoSHQp nhSCRjvwG+cwZCQpZpOaWpC1fp5gY+GNmi1Kd55MX3gIm9mk3C5D08zEmEm5spZJ hG6tp/pcNm/SEfMRHCWf0V7qX93Gg+vXv6HcWo8xxoPXjGkiqHo= -----END CERTIFICATE-----Generated at Sat Jun 13 20:18:16 2026 by rpki-client