$ rpki-client -vvf rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft File: 673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft (raw, json) Hash identifier: 35uE/l9/xImdOkSL7RQ9svfM9vFDlhO24LVerYAfxZ4= Subject key identifier: 44:59:5B:52:4F:38:6D:0B:A7:19:E6:42:6E:08:5B:E8:B1:83:35:35 Authority key identifier: 67:3A:5D:51:1F:DC:C0:A4:98:DE:9E:34:28:D3:5C:44:EB:25:AF:BB Certificate issuer: /CN=673A5D511FDCC0A498DE9E3428D35C44EB25AFBB Certificate serial: 3ACBD490443FDE089499C7927D1B361460415729 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 21:55:52 +0000 Manifest this update: Tue 16 Jun 2026 21:50:52 +0000 Manifest next update: Thu 18 Jun 2026 01:31:52 +0000 Files and hashes: 1: 673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl (hash: tVv5cdR+eqIyw/VfViBbPS6fFtfOjgdLUEM818BuFQI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:cb:d4:90:44:3f:de:08:94:99:c7:92:7d:1b:36:14:60:41:57:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673A5D511FDCC0A498DE9E3428D35C44EB25AFBB Validity Not Before: Jun 16 21:50:52 2026 GMT Not After : Jun 18 01:31:52 2026 GMT Subject: CN=44595B524F386D0BA719E6426E085BE8B1833535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ca:2f:d2:13:70:b2:21:49:66:5d:c9:37:26: c9:ce:df:21:93:f1:a1:f8:bf:e1:45:c4:93:58:c0: a7:2b:44:60:21:74:f5:eb:84:6c:17:58:e4:ce:99: 63:ac:0e:0d:18:33:3f:f1:d4:6e:a8:ab:e4:a7:e0: 31:65:39:50:5b:f5:1e:35:eb:86:5e:a5:91:ab:d5: 20:3b:80:cc:86:3a:70:8b:17:7d:86:b3:1b:06:03: 02:8a:bb:4c:30:6f:a6:0f:4f:1a:c1:1e:72:e4:93: 5d:19:52:e4:e8:de:82:a3:71:d6:bc:a8:3b:d5:bc: 76:6f:5a:d7:59:41:6f:db:e1:44:97:a9:6d:f2:8c: 5a:af:0b:fd:f2:29:8b:c6:99:b7:4e:47:79:e1:c8: 0d:b6:09:93:7c:ff:20:1b:b4:91:ae:4f:e2:d2:70: 72:92:93:7a:5b:2f:1a:6b:ff:40:4e:55:eb:07:1d: bb:30:ff:fc:d8:d2:98:2d:7c:7e:5a:f9:ee:0b:28: 15:21:d9:07:77:23:9f:23:b2:ff:2f:6c:c7:bb:2f: e7:91:75:e8:46:e0:68:bf:da:89:88:d1:6a:3e:21: 71:0f:58:c5:40:1f:c0:3f:56:e4:4d:17:00:4d:d5: ba:35:88:ce:c4:a4:45:8e:58:4b:31:1c:af:8b:c2: cb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:59:5B:52:4F:38:6D:0B:A7:19:E6:42:6E:08:5B:E8:B1:83:35:35 X509v3 Authority Key Identifier: keyid:67:3A:5D:51:1F:DC:C0:A4:98:DE:9E:34:28:D3:5C:44:EB:25:AF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:16:eb:91:fb:b1:1e:a2:06:de:b8:06:79:eb:b6:cf:86:ba: 70:72:55:3c:a2:72:88:67:97:33:44:b8:6a:ef:c4:52:74:1a: 93:73:53:b6:79:f6:5e:fe:ab:2a:23:4a:7d:67:be:81:6d:df: cc:37:fa:24:13:6d:1f:96:aa:43:25:60:c9:a7:a9:d4:a9:bd: 48:0c:2c:34:3c:02:49:98:ec:01:ab:8e:ce:5e:f9:7b:aa:f1: 5d:11:7b:88:0c:fd:5d:56:9b:01:9a:9b:a6:09:8f:24:ec:3b: 19:e8:67:cc:5e:7b:d3:6c:d1:ba:9c:aa:c1:a2:67:69:3a:61: 52:96:bd:71:87:b6:c6:15:e8:0c:79:07:c6:41:7c:18:f4:9b: bd:61:29:d9:be:02:b7:36:d7:5e:5d:90:21:da:29:2f:25:4c: f6:f0:91:a0:46:49:fb:a7:05:22:d2:b9:c4:61:7d:d5:3a:ca: 06:39:f5:84:e4:19:0c:7d:b5:a1:ab:99:d2:78:bc:1a:a8:3e: 00:2f:d4:99:5a:7a:cb:6f:a3:5d:e5:a6:b4:10:44:4b:79:8a: d6:bf:02:52:db:b9:6d:2c:94:19:47:74:19:05:88:30:9f:c0: cf:14:f0:90:24:7c:f7:6b:40:81:90:80:9e:df:dc:67:da:f5: 93:4b:1c:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOsvUkEQ/3giUmceSfRs2FGBBVykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjczQTVENTExRkRDQzBBNDk4REU5RTM0MjhEMzVDNDRF QjI1QUZCQjAeFw0yNjA2MTYyMTUwNTJaFw0yNjA2MTgwMTMxNTJaMDMxMTAvBgNV BAMTKDQ0NTk1QjUyNEYzODZEMEJBNzE5RTY0MjZFMDg1QkU4QjE4MzM1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHyi/SE3CyIUlmXck3JsnO3yGT 8aH4v+FFxJNYwKcrRGAhdPXrhGwXWOTOmWOsDg0YMz/x1G6oq+Sn4DFlOVBb9R41 64ZepZGr1SA7gMyGOnCLF32GsxsGAwKKu0wwb6YPTxrBHnLkk10ZUuTo3oKjcda8 qDvVvHZvWtdZQW/b4USXqW3yjFqvC/3yKYvGmbdOR3nhyA22CZN8/yAbtJGuT+LS cHKSk3pbLxpr/0BOVesHHbsw//zY0pgtfH5a+e4LKBUh2Qd3I58jsv8vbMe7L+eR dehG4Gi/2omI0Wo+IXEPWMVAH8A/VuRNFwBN1bo1iM7EpEWOWEsxHK+LwsuVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURFlbUk84bQunGeZCbghb6LGDNTUwHwYDVR0j BBgwFoAUZzpdUR/cwKSY3p40KNNcROslr7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjUwNGU0YzctN2EyZC00ZDY2LThmYjQtMjA1NTY1Nzg3ZjI0LzAvNjczQTVENTEx RkRDQzBBNDk4REU5RTM0MjhEMzVDNDRFQjI1QUZCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzNBNUQ1MTFGRENDMEE0OThERTlFMzQyOEQzNUM0NEVCMjVB RkJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvNjczQTVENTExRkRDQzBBNDk4REU5RTM0MjhEMzVD NDRFQjI1QUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMgW65H7sR6iBt64Bnnrts+GunByVTyicohn lzNEuGrvxFJ0GpNzU7Z59l7+qyojSn1nvoFt38w3+iQTbR+WqkMlYMmnqdSpvUgM LDQ8AkmY7AGrjs5e+Xuq8V0Re4gM/V1WmwGam6YJjyTsOxnoZ8xee9Ns0bqcqsGi Z2k6YVKWvXGHtsYV6Ax5B8ZBfBj0m71hKdm+Arc2115dkCHaKS8lTPbwkaBGSfun BSLSucRhfdU6ygY59YTkGQx9taGrmdJ4vBqoPgAv1Jlaestvo13lprQQREt5ita/ AlLbuW0slBlHdBkFiDCfwM8U8JAkfPdrQIGQgJ7f3Gfa9ZNLHDo= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:43 2026 by rpki-client