$ rpki-client -vvf rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft File: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft (raw, json) Hash identifier: oKxAIjAoQ98klrLi57lW9SYsK6Wx7LPX0wX6+nSao98= Subject key identifier: 10:50:26:E0:27:E5:8C:90:DA:A1:93:BB:98:63:35:06:03:C6:87:AF Authority key identifier: D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 Certificate issuer: /CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Certificate serial: 10E0745CA678A19C50A7334207F35DCD518D0B18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 21:55:48 +0000 Manifest this update: Tue 16 Jun 2026 21:50:48 +0000 Manifest next update: Thu 18 Jun 2026 01:34:48 +0000 Files and hashes: 1: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl (hash: sHG8k81vCg1gkwd1AysAixBQeqbINr0+myMqjl7ihL4=) 2: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: yiKtjyaJg+/4RrQVJVpsjcN53nYqA/23WnoDn5hFEmM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e0:74:5c:a6:78:a1:9c:50:a7:33:42:07:f3:5d:cd:51:8d:0b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Validity Not Before: Jun 16 21:50:48 2026 GMT Not After : Jun 18 01:34:48 2026 GMT Subject: CN=105026E027E58C90DAA193BB9863350603C687AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:be:48:6b:1b:7c:dc:11:e1:17:7b:89:5d:bc: b2:87:7f:3d:29:27:a0:cc:ee:a5:57:e1:6d:44:86: 54:ed:c7:c5:62:da:3f:ea:09:4a:33:91:d4:38:56: 2a:38:1f:45:00:29:a6:15:47:c4:39:b6:46:bb:9c: 3b:25:c7:04:2a:c3:70:31:71:0b:e7:19:60:d3:bf: de:cc:82:2e:78:c9:24:05:32:7a:5a:e3:89:c8:59: 50:69:93:c3:6b:d8:e4:da:c4:95:11:29:a1:01:f1: be:76:1e:db:8e:20:4f:8d:81:30:9a:42:fe:7f:6d: 88:9f:81:c1:16:6f:2e:14:f0:b6:23:97:dc:95:86: 2a:ee:09:4e:b5:b9:9c:b1:52:03:f7:b7:b5:1e:88: 13:80:a3:f4:68:b7:ba:29:06:c7:45:48:a1:f3:9c: ae:7a:e4:f6:93:94:de:b5:69:d7:54:25:96:11:8e: 0d:0f:70:08:0a:bb:c9:79:fc:09:f5:fa:ae:b1:5f: 10:91:e7:53:62:45:a8:28:47:13:b3:77:cb:40:16: 71:d0:a0:6c:66:3b:c3:35:f4:25:25:a8:f1:77:00: 05:e3:7b:28:ca:43:f8:1d:c4:3b:94:04:89:0b:2b: 02:00:26:80:94:80:9d:2e:11:23:54:f0:f3:49:79: f2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:50:26:E0:27:E5:8C:90:DA:A1:93:BB:98:63:35:06:03:C6:87:AF X509v3 Authority Key Identifier: keyid:D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:63:03:72:7f:18:de:9e:2d:f9:2f:4f:cb:26:e8:e5:f3:1e: f7:32:0d:06:58:8b:7c:6f:35:fd:e4:60:01:df:a4:cb:44:6e: dc:50:7b:b8:f3:88:33:b7:0a:4d:38:d5:2c:a0:29:d2:ac:f1: ee:87:32:89:26:d5:67:3e:79:52:15:a0:01:60:fe:55:c0:6f: da:c8:a3:93:c8:cd:15:9b:7f:cb:e1:37:8e:c1:cc:42:79:76: 1b:b3:51:51:df:4c:1c:67:75:e2:eb:9e:31:13:3d:cc:e5:26: a9:2b:d4:14:fc:45:b1:bc:17:ef:76:f6:e5:fc:01:9b:56:1e: 19:75:bc:9a:c5:66:c6:15:6e:b3:72:53:13:32:44:b7:6a:5d: fd:9b:9e:1b:e6:ec:0c:9b:1e:80:fe:c2:41:40:51:1d:41:0e: 50:60:84:f6:f8:18:f8:b7:b9:e3:5f:c2:6a:1c:e0:48:d6:30: 87:5c:df:dc:f0:65:67:83:ea:64:02:bb:b2:ce:12:b8:07:62: 62:5d:8a:55:25:fa:b3:74:c1:4a:d9:34:08:f2:ef:b5:f7:e0: b6:98:27:ef:32:c5:7d:c1:ed:0f:06:60:1f:89:d0:99:60:dc: c3:47:9a:75:55:70:7d:6f:ff:1e:fb:e0:84:eb:49:46:4b:e7: ac:e1:ee:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEOB0XKZ4oZxQpzNCB/NdzVGNCxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1MUQ1OEYyODc2QkJEQTlDMzY2NzhFRkY4RDI3MUEx NEVBRDhBMzAeFw0yNjA2MTYyMTUwNDhaFw0yNjA2MTgwMTM0NDhaMDMxMTAvBgNV BAMTKDEwNTAyNkUwMjdFNThDOTBEQUExOTNCQjk4NjMzNTA2MDNDNjg3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvkhrG3zcEeEXe4ldvLKHfz0p J6DM7qVX4W1EhlTtx8Vi2j/qCUozkdQ4Vio4H0UAKaYVR8Q5tka7nDslxwQqw3Ax cQvnGWDTv97Mgi54ySQFMnpa44nIWVBpk8Nr2OTaxJURKaEB8b52HtuOIE+NgTCa Qv5/bYifgcEWby4U8LYjl9yVhiruCU61uZyxUgP3t7UeiBOAo/Rot7opBsdFSKHz nK565PaTlN61addUJZYRjg0PcAgKu8l5/An1+q6xXxCR51NiRagoRxOzd8tAFnHQ oGxmO8M19CUlqPF3AAXjeyjKQ/gdxDuUBIkLKwIAJoCUgJ0uESNU8PNJefJxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEFAm4CfljJDaoZO7mGM1BgPGh68wHwYDVR0j BBgwFoAU1VHVjyh2u9qcNmeO/40nGhTq2KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4M2EtYWNiOGYyZDc0NTgzLzAvRDU1MUQ1OEYy ODc2QkJEQTlDMzY2NzhFRkY4RDI3MUExNEVBRDhBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENTUxRDU4RjI4NzZCQkRBOUMzNjY3OEVGRjhEMjcxQTE0RUFE OEEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4 M2EtYWNiOGYyZDc0NTgzLzAvRDU1MUQ1OEYyODc2QkJEQTlDMzY2NzhFRkY4RDI3 MUExNEVBRDhBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVjA3J/GN6eLfkvT8sm6OXzHvcyDQZYi3xv Nf3kYAHfpMtEbtxQe7jziDO3Ck041SygKdKs8e6HMokm1Wc+eVIVoAFg/lXAb9rI o5PIzRWbf8vhN47BzEJ5dhuzUVHfTBxndeLrnjETPczlJqkr1BT8RbG8F+929uX8 AZtWHhl1vJrFZsYVbrNyUxMyRLdqXf2bnhvm7AybHoD+wkFAUR1BDlBghPb4GPi3 ueNfwmoc4EjWMIdc39zwZWeD6mQCu7LOErgHYmJdilUl+rN0wUrZNAjy77X34LaY J+8yxX3B7Q8GYB+J0Jlg3MNHmnVVcH1v/x774ITrSUZL56zh7jI= -----END CERTIFICATE-----Generated at Wed Jun 17 09:27:45 2026 by rpki-client