$ rpki-client -vvf rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft File: 13E8109758E3F09B256C9654C5812DA9993E9D23.mft (raw, json) Hash identifier: iva/G2XWRbG/5fUXpWLtOJxOINfk3yxS/MLSxcJgP5I= Subject key identifier: D3:C8:50:65:19:2D:51:97:12:FD:E7:9D:54:B7:68:43:A0:92:81:9C Authority key identifier: 13:E8:10:97:58:E3:F0:9B:25:6C:96:54:C5:81:2D:A9:99:3E:9D:23 Certificate issuer: /CN=13E8109758E3F09B256C9654C5812DA9993E9D23 Certificate serial: 2E6DD7AFDC2939F097587499418EFE68DB630F1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:27:38 +0000 Manifest this update: Tue 16 Jun 2026 19:22:38 +0000 Manifest next update: Wed 17 Jun 2026 21:58:38 +0000 Files and hashes: 1: 13E8109758E3F09B256C9654C5812DA9993E9D23.crl (hash: TZCxTgzqyA2076yzOsl5YEw2iOfC8lyE2F7wcppaKHA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.crl rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6d:d7:af:dc:29:39:f0:97:58:74:99:41:8e:fe:68:db:63:0f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E8109758E3F09B256C9654C5812DA9993E9D23 Validity Not Before: Jun 16 19:22:38 2026 GMT Not After : Jun 17 21:58:38 2026 GMT Subject: CN=D3C85065192D519712FDE79D54B76843A092819C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f7:ab:12:66:62:54:ca:84:60:1c:d8:39:aa: 62:2c:91:df:cd:9a:f2:d2:4f:ec:7d:9d:5e:f8:28: 16:15:24:ba:f8:8b:b1:d5:d1:4a:c9:11:18:10:c5: 4e:62:bb:fd:e3:72:98:ac:25:d9:b9:e4:47:e0:f0: bd:c6:92:d4:f1:92:01:2a:ab:5d:dd:62:43:16:8a: a3:6e:b0:73:22:81:c3:2e:df:0d:0f:5f:50:b0:3e: 14:03:60:7e:71:53:43:c9:4c:50:d3:c5:ff:4e:f5: f4:b0:bb:c8:49:54:26:30:55:1c:7f:5d:0d:e8:a0: bc:cd:cf:a4:33:34:79:97:2c:e4:26:db:b6:e6:d6: 9d:45:90:fe:ab:f7:6f:e1:4d:6d:d3:d5:88:6e:31: bf:53:9c:08:66:8a:24:00:63:b5:6d:5e:66:5a:46: 50:28:d0:7c:d9:8d:c4:af:05:b4:0a:1f:61:97:62: e6:a3:5f:1d:2e:f7:4d:53:29:e3:84:d8:1c:e1:f6: ac:62:2d:c6:e4:1d:80:1a:d4:3d:00:6b:ba:05:a2: cc:1d:74:4b:89:8b:fe:bb:89:49:d0:71:26:4e:12: d6:26:02:5c:29:ac:f7:5f:5d:65:40:92:a1:15:6b: e6:f6:44:a2:0c:95:1e:6c:72:c8:7c:e2:91:c8:14: 4f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C8:50:65:19:2D:51:97:12:FD:E7:9D:54:B7:68:43:A0:92:81:9C X509v3 Authority Key Identifier: keyid:13:E8:10:97:58:E3:F0:9B:25:6C:96:54:C5:81:2D:A9:99:3E:9D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:c0:22:06:94:90:5e:87:ad:f6:67:ca:16:8a:96:9b:e5:ed: 0c:1e:da:b7:2b:61:3a:24:3e:1f:40:e5:5e:0f:26:c2:4f:c8: 8a:82:b0:25:c1:fa:f9:d2:77:34:1f:26:57:f0:d1:55:b4:ef: 05:ec:6e:03:d3:a1:bf:f8:eb:97:8c:7e:ff:2b:85:96:ec:9a: c2:5a:8c:ef:b4:a7:19:2d:b1:92:11:31:9c:8e:be:5f:a1:50: 3a:2b:75:97:f2:c7:b7:0d:a6:3c:f8:7c:93:74:13:f1:78:73: 65:c5:fd:e4:01:af:fd:08:99:cc:45:99:2c:86:18:3d:4b:68: ff:38:f7:dc:c1:d3:eb:c5:e0:25:53:fa:7b:42:7a:a8:f3:97: 93:10:17:c0:fd:52:23:8b:5b:31:6e:bd:00:11:ec:19:68:88: b2:a5:ae:11:1c:fc:dc:30:e5:02:db:92:84:30:4a:33:2e:46: 72:bf:fa:fb:53:42:bc:52:9f:a5:d7:ed:cc:c6:a2:1a:5d:e8: 24:92:68:5b:96:e6:45:cd:89:6a:4b:53:53:d2:15:2b:6d:f6: 30:7d:fd:60:5b:cd:2e:e8:09:db:34:d8:1e:9b:97:18:09:26: 5d:de:2a:e3:e1:01:de:59:45:cb:cf:37:b8:78:d0:ba:6f:a8: d0:66:b6:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULm3Xr9wpOfCXWHSZQY7+aNtjDxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFODEwOTc1OEUzRjA5QjI1NkM5NjU0QzU4MTJEQTk5 OTNFOUQyMzAeFw0yNjA2MTYxOTIyMzhaFw0yNjA2MTcyMTU4MzhaMDMxMTAvBgNV BAMTKEQzQzg1MDY1MTkyRDUxOTcxMkZERTc5RDU0Qjc2ODQzQTA5MjgxOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC996sSZmJUyoRgHNg5qmIskd/N mvLST+x9nV74KBYVJLr4i7HV0UrJERgQxU5iu/3jcpisJdm55Efg8L3GktTxkgEq q13dYkMWiqNusHMigcMu3w0PX1CwPhQDYH5xU0PJTFDTxf9O9fSwu8hJVCYwVRx/ XQ3ooLzNz6QzNHmXLOQm27bm1p1FkP6r92/hTW3T1YhuMb9TnAhmiiQAY7VtXmZa RlAo0HzZjcSvBbQKH2GXYuajXx0u901TKeOE2Bzh9qxiLcbkHYAa1D0Aa7oFoswd dEuJi/67iUnQcSZOEtYmAlwprPdfXWVAkqEVa+b2RKIMlR5scsh84pHIFE+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU08hQZRktUZcS/eedVLdoQ6CSgZwwHwYDVR0j BBgwFoAUE+gQl1jj8JslbJZUxYEtqZk+nSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGM0MDk0ZDItZTE4ZC00ODQwLTg0ZmEtYzU3NTdhZjU4MGYxLzEvMTNFODEwOTc1 OEUzRjA5QjI1NkM5NjU0QzU4MTJEQTk5OTNFOUQyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xM0U4MTA5NzU4RTNGMDlCMjU2Qzk2NTRDNTgxMkRBOTk5M0U5 RDIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzEvMTNFODEwOTc1OEUzRjA5QjI1NkM5NjU0QzU4MTJE QTk5OTNFOUQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTAIgaUkF6HrfZnyhaKlpvl7Qwe2rcrYTok Ph9A5V4PJsJPyIqCsCXB+vnSdzQfJlfw0VW07wXsbgPTob/465eMfv8rhZbsmsJa jO+0pxktsZIRMZyOvl+hUDordZfyx7cNpjz4fJN0E/F4c2XF/eQBr/0ImcxFmSyG GD1LaP8499zB0+vF4CVT+ntCeqjzl5MQF8D9UiOLWzFuvQAR7BloiLKlrhEc/Nww 5QLbkoQwSjMuRnK/+vtTQrxSn6XX7czGohpd6CSSaFuW5kXNiWpLU1PSFStt9jB9 /WBbzS7oCds02B6blxgJJl3eKuPhAd5ZRcvPN7h40LpvqNBmtq4= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:06 2026 by rpki-client