$ rpki-client -vvf rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft File: B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft (raw, json) Hash identifier: zb4tRiQjBloAIsA6mF40njl60gPyS6CVzlrv30j8ycE= Subject key identifier: A5:7D:6B:E1:AB:FF:65:2D:79:A7:DF:FF:F5:FC:7D:71:3A:08:40:C6 Authority key identifier: B9:8F:D4:89:14:B4:89:C7:84:7A:7A:27:E5:3C:7F:16:03:BE:EA:D2 Certificate issuer: /CN=B98FD48914B489C7847A7A27E53C7F1603BEEAD2 Certificate serial: 4A217B7156522E84424C214ADCA12FF94721C616 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 15:12:37 +0000 Manifest this update: Tue 16 Jun 2026 15:07:37 +0000 Manifest next update: Wed 17 Jun 2026 16:46:37 +0000 Files and hashes: 1: B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl (hash: u/Y2OUl9OXaLz7NUZ+3kb6wJbXiTFWv5kH7hDEgI6sc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 16:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:21:7b:71:56:52:2e:84:42:4c:21:4a:dc:a1:2f:f9:47:21:c6:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B98FD48914B489C7847A7A27E53C7F1603BEEAD2 Validity Not Before: Jun 16 15:07:37 2026 GMT Not After : Jun 17 16:46:37 2026 GMT Subject: CN=A57D6BE1ABFF652D79A7DFFFF5FC7D713A0840C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ff:1c:ff:16:8d:96:99:71:46:4f:73:32:54: 86:45:93:e2:04:88:20:de:e1:0f:ce:b8:29:63:91: 96:e8:56:3b:6c:4e:f2:12:2e:9a:fa:fd:8f:d5:46: 88:c6:7d:2d:63:ed:b3:68:85:d7:08:10:20:d5:66: df:fb:90:e9:31:5e:b3:ec:61:88:af:20:c7:17:08: 13:29:91:1c:96:9f:55:14:01:6a:22:f6:95:f6:96: fd:24:18:8f:bf:da:b8:05:f3:62:b6:b7:28:93:0b: 28:22:59:fd:d5:6c:c1:41:6b:a4:62:2e:0d:bd:97: a8:54:f8:93:33:75:a0:1b:47:b3:25:ce:90:03:76: 8a:6e:6b:81:db:a6:a4:6e:e5:32:d7:7f:fb:2b:03: fd:6c:dc:72:eb:a5:5d:0d:4d:0f:f7:a3:52:0c:b5: c5:55:67:01:44:9c:a4:f5:9d:a6:b6:e2:5b:fa:5c: ca:fd:44:4a:6c:df:fd:31:6f:ac:3d:45:6a:8a:e8: 82:38:cf:d0:40:74:05:2f:b1:ec:fc:9a:7b:2c:94: 70:6a:bc:85:5d:85:71:ca:b4:33:78:f4:91:03:e1: e5:86:40:83:bd:6b:e4:6e:e7:3d:54:26:07:13:9b: 31:2f:10:b4:98:1b:aa:ff:d2:14:db:60:d2:1a:22: eb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7D:6B:E1:AB:FF:65:2D:79:A7:DF:FF:F5:FC:7D:71:3A:08:40:C6 X509v3 Authority Key Identifier: keyid:B9:8F:D4:89:14:B4:89:C7:84:7A:7A:27:E5:3C:7F:16:03:BE:EA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:ef:0b:21:97:0b:34:88:ea:2e:44:53:11:61:0d:b8:b0:5e: 00:0d:48:4d:17:ae:cf:1d:6c:6e:18:91:22:e1:f5:c0:02:48: 2d:01:d4:38:ee:0c:3e:f3:0c:a4:19:40:f6:c7:21:f5:75:81: cb:8c:b6:df:4d:cc:bb:9b:e9:03:65:89:71:fc:3f:6b:4a:1e: 6d:33:0c:e6:b3:ab:21:91:55:c1:3e:49:e7:d3:05:64:ed:4e: 79:bd:b5:c9:85:69:30:e8:90:54:b5:3e:97:06:a2:49:02:9f: 95:fb:37:a4:4b:64:23:76:8c:6f:47:da:e2:f4:c1:84:66:11: fb:de:08:1d:28:e6:de:98:cb:65:a1:6b:21:c2:16:0e:f6:76: 73:2f:4d:f3:e4:81:50:90:c9:fd:f4:11:d5:a0:8e:e4:4e:4f: 18:83:75:bf:f6:5f:92:e8:79:52:3d:78:09:f3:ff:2c:e5:e5: 9e:b8:7f:d4:fe:7b:33:96:2b:ec:c6:5c:85:90:2a:2a:3f:5b: 8a:f5:1f:29:49:81:45:47:96:44:6c:05:00:3b:80:5d:f2:7b: 3c:35:60:1a:c4:b7:cf:88:ce:06:18:6c:0a:1c:21:78:fa:37: ce:03:a7:e9:ed:0d:d5:93:93:60:c2:6d:bd:65:ac:1e:28:de: aa:ce:b9:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSiF7cVZSLoRCTCFK3KEv+UchxhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk4RkQ0ODkxNEI0ODlDNzg0N0E3QTI3RTUzQzdGMTYw M0JFRUFEMjAeFw0yNjA2MTYxNTA3MzdaFw0yNjA2MTcxNjQ2MzdaMDMxMTAvBgNV BAMTKEE1N0Q2QkUxQUJGRjY1MkQ3OUE3REZGRkY1RkM3RDcxM0EwODQwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/xz/Fo2WmXFGT3MyVIZFk+IE iCDe4Q/OuCljkZboVjtsTvISLpr6/Y/VRojGfS1j7bNohdcIECDVZt/7kOkxXrPs YYivIMcXCBMpkRyWn1UUAWoi9pX2lv0kGI+/2rgF82K2tyiTCygiWf3VbMFBa6Ri Lg29l6hU+JMzdaAbR7MlzpADdopua4HbpqRu5TLXf/srA/1s3HLrpV0NTQ/3o1IM tcVVZwFEnKT1naa24lv6XMr9REps3/0xb6w9RWqK6II4z9BAdAUvsez8mnsslHBq vIVdhXHKtDN49JED4eWGQIO9a+Ru5z1UJgcTmzEvELSYG6r/0hTbYNIaIuuRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpX1r4av/ZS15p9//9fx9cToIQMYwHwYDVR0j BBgwFoAUuY/UiRS0iceEenon5Tx/FgO+6tIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDVjMmM3MWMtNmFlNS00ZWE5LWI4NTAtNjMwMGUyZTFiYWRmLzAvQjk4RkQ0ODkx NEI0ODlDNzg0N0E3QTI3RTUzQzdGMTYwM0JFRUFEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COThGRDQ4OTE0QjQ4OUM3ODQ3QTdBMjdFNTNDN0YxNjAzQkVF QUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvQjk4RkQ0ODkxNEI0ODlDNzg0N0E3QTI3RTUzQzdG MTYwM0JFRUFEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMPvCyGXCzSI6i5EUxFhDbiwXgANSE0Xrs8d bG4YkSLh9cACSC0B1DjuDD7zDKQZQPbHIfV1gcuMtt9NzLub6QNliXH8P2tKHm0z DOazqyGRVcE+SefTBWTtTnm9tcmFaTDokFS1PpcGokkCn5X7N6RLZCN2jG9H2uL0 wYRmEfveCB0o5t6Yy2WhayHCFg72dnMvTfPkgVCQyf30EdWgjuROTxiDdb/2X5Lo eVI9eAnz/yzl5Z64f9T+ezOWK+zGXIWQKio/W4r1HylJgUVHlkRsBQA7gF3yezw1 YBrEt8+IzgYYbAocIXj6N84Dp+ntDdWTk2DCbb1lrB4o3qrOucA= -----END CERTIFICATE-----Generated at Wed Jun 17 10:00:59 2026 by rpki-client