$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft File: D76923298A332CDB03F66375CE7D78C12CF624A8.mft (raw, json) Hash identifier: wLPlW//1+Rv8lxvjLevJ8/H8sNJJkfIGwYmqaN8zeyg= Subject key identifier: AC:FE:BF:9B:09:48:15:86:E8:19:EB:5F:E9:FF:F4:C6:8B:FB:A9:B3 Authority key identifier: D7:69:23:29:8A:33:2C:DB:03:F6:63:75:CE:7D:78:C1:2C:F6:24:A8 Certificate issuer: /CN=D76923298A332CDB03F66375CE7D78C12CF624A8 Certificate serial: 3DDFC0C3F844BBDA2D9D16CD922C8B2C32AB8485 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D76923298A332CDB03F66375CE7D78C12CF624A8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 20:03:29 +0000 Manifest this update: Tue 16 Jun 2026 19:58:29 +0000 Manifest next update: Wed 17 Jun 2026 23:39:29 +0000 Files and hashes: 1: D76923298A332CDB03F66375CE7D78C12CF624A8.crl (hash: NsLROr44leCDs12byvUTBsoyVvj39vnLVVLh1fFLStY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.crl rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D76923298A332CDB03F66375CE7D78C12CF624A8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:df:c0:c3:f8:44:bb:da:2d:9d:16:cd:92:2c:8b:2c:32:ab:84:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76923298A332CDB03F66375CE7D78C12CF624A8 Validity Not Before: Jun 16 19:58:29 2026 GMT Not After : Jun 17 23:39:29 2026 GMT Subject: CN=ACFEBF9B09481586E819EB5FE9FFF4C68BFBA9B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a9:64:75:b8:29:1e:eb:16:04:51:ad:dc:ec: 10:3c:27:8f:13:50:88:dd:78:d5:55:aa:01:3d:96: e3:82:ae:08:08:82:cd:70:1c:29:02:e5:e2:02:e6: 0c:73:09:b3:34:1a:f6:d5:d1:03:bc:96:67:a6:07: d5:95:fe:ce:6f:53:a7:13:b5:49:a1:2f:ee:86:dd: ed:80:2b:c2:95:2f:bc:07:4b:4c:2b:d9:2e:c6:07: 8b:65:34:d8:99:78:bb:03:4f:33:86:53:54:7b:ab: 7e:fe:fc:2d:bb:04:27:1c:f4:e2:1b:8a:bb:ed:74: 33:5a:19:c1:1e:f8:ea:0f:ed:15:c5:67:54:99:0f: 9c:4a:c5:72:8d:f0:97:f3:e6:9c:65:b1:56:69:2f: 49:62:3e:83:ab:35:43:fa:cd:1c:3b:26:7a:2c:b3: 57:71:f8:e5:b3:52:0d:a0:d3:05:82:fb:9b:91:af: c7:14:46:3f:39:64:2e:19:21:ea:54:f4:a4:02:7d: a4:18:8f:f8:0a:53:c6:89:40:44:b5:d9:7a:01:d2: a2:7f:a0:5e:32:53:9e:b6:f7:27:f2:b8:73:23:90: 4d:45:23:28:ff:af:4c:d5:d0:f2:44:85:59:86:39: 9e:cd:4c:3e:56:b1:d1:40:7e:e9:74:4e:a5:19:3c: 6e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FE:BF:9B:09:48:15:86:E8:19:EB:5F:E9:FF:F4:C6:8B:FB:A9:B3 X509v3 Authority Key Identifier: keyid:D7:69:23:29:8A:33:2C:DB:03:F6:63:75:CE:7D:78:C1:2C:F6:24:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D76923298A332CDB03F66375CE7D78C12CF624A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:62:67:e6:3d:2d:12:ec:8d:64:3e:a1:03:bd:4b:e2:80:34: 3f:0a:ab:09:d5:70:af:e1:4d:40:ac:cf:61:dd:6a:ab:c8:56: 31:69:77:58:52:3d:cf:d0:15:4b:b1:01:f9:f3:dc:26:7f:68: d3:9f:a1:72:a2:51:45:39:f5:28:e8:f9:68:f5:9c:9b:ea:37: 23:81:89:5d:64:bd:0f:cb:0f:58:81:db:a6:6c:05:0c:10:16: 1e:cd:b7:59:19:bc:b3:c1:32:8d:63:94:d5:4b:ee:ea:38:11: 55:16:c3:dc:2c:cc:54:71:7a:8c:38:e3:89:59:a2:15:41:ad: 20:e2:6b:8e:4a:0a:97:5c:f9:50:a6:2e:4a:f0:7a:46:19:8f: 58:25:5f:7c:3e:92:31:58:8d:44:48:37:41:ea:fc:07:de:8e: 2b:5f:ae:89:dc:7c:e7:5b:3a:11:0d:e5:fa:0f:df:8d:15:68: a1:8f:f8:92:a8:4f:02:c6:7f:f4:76:30:c8:3c:9d:84:bd:52: b4:09:b2:73:0c:44:95:35:5e:a4:c3:99:00:8e:63:6d:50:28: 68:34:bc:ad:c5:6c:f4:39:b6:d0:9e:ef:30:8f:1d:39:dc:7e: a7:6e:c3:88:7a:83:1a:18:00:c9:82:bd:93:98:30:61:e7:b2: 29:57:c6:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPd/Aw/hEu9otnRbNkiyLLDKrhIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2OTIzMjk4QTMzMkNEQjAzRjY2Mzc1Q0U3RDc4QzEy Q0Y2MjRBODAeFw0yNjA2MTYxOTU4MjlaFw0yNjA2MTcyMzM5MjlaMDMxMTAvBgNV BAMTKEFDRkVCRjlCMDk0ODE1ODZFODE5RUI1RkU5RkZGNEM2OEJGQkE5QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfqWR1uCke6xYEUa3c7BA8J48T UIjdeNVVqgE9luOCrggIgs1wHCkC5eIC5gxzCbM0GvbV0QO8lmemB9WV/s5vU6cT tUmhL+6G3e2AK8KVL7wHS0wr2S7GB4tlNNiZeLsDTzOGU1R7q37+/C27BCcc9OIb irvtdDNaGcEe+OoP7RXFZ1SZD5xKxXKN8Jfz5pxlsVZpL0liPoOrNUP6zRw7Jnos s1dx+OWzUg2g0wWC+5uRr8cURj85ZC4ZIepU9KQCfaQYj/gKU8aJQES12XoB0qJ/ oF4yU5629yfyuHMjkE1FIyj/r0zV0PJEhVmGOZ7NTD5WsdFAful0TqUZPG6XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrP6/mwlIFYboGetf6f/0xov7qbMwHwYDVR0j BBgwFoAU12kjKYozLNsD9mN1zn14wSz2JKgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmMzBlMjctYjk1ZS00ZDc1LTk2OGQtNTM4ZmI3OTE4ODI5LzAvRDc2OTIzMjk4 QTMzMkNEQjAzRjY2Mzc1Q0U3RDc4QzEyQ0Y2MjRBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzY5MjMyOThBMzMyQ0RCMDNGNjYzNzVDRTdENzhDMTJDRjYy NEE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvRDc2OTIzMjk4QTMzMkNEQjAzRjY2Mzc1Q0U3RDc4 QzEyQ0Y2MjRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZiZ+Y9LRLsjWQ+oQO9S+KAND8KqwnVcK/h TUCsz2HdaqvIVjFpd1hSPc/QFUuxAfnz3CZ/aNOfoXKiUUU59Sjo+Wj1nJvqNyOB iV1kvQ/LD1iB26ZsBQwQFh7Nt1kZvLPBMo1jlNVL7uo4EVUWw9wszFRxeow444lZ ohVBrSDia45KCpdc+VCmLkrwekYZj1glX3w+kjFYjURIN0Hq/AfejitfroncfOdb OhEN5foP340VaKGP+JKoTwLGf/R2MMg8nYS9UrQJsnMMRJU1XqTDmQCOY21QKGg0 vK3FbPQ5ttCe7zCPHTncfqduw4h6gxoYAMmCvZOYMGHnsilXxrQ= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:38 2026 by rpki-client