$ rpki-client -vvf rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft File: DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft (raw, json) Hash identifier: GFThx8XKPx4qhamB40g9G+bY8Hbf4a2cmS9yg0/bXtQ= Subject key identifier: 62:29:31:8B:1E:4B:4B:4C:27:44:AA:DD:8F:CE:22:5B:79:32:3A:03 Authority key identifier: DA:E5:9D:7C:32:09:C3:34:9D:E0:17:8E:70:1C:B4:E9:FC:F3:12:10 Certificate issuer: /CN=DAE59D7C3209C3349DE0178E701CB4E9FCF31210 Certificate serial: 0B340E71E7CEE59FFEDA2D0FE2CCD211D051AF5F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft Manifest number: 0E Signing time: Tue 12 May 2026 14:24:12 +0000 Manifest this update: Tue 12 May 2026 14:19:12 +0000 Manifest next update: Wed 13 May 2026 16:13:12 +0000 Files and hashes: 1: DAE59D7C3209C3349DE0178E701CB4E9FCF31210.crl (hash: G9F9yUoEirBrgrnQ28ISQObTd8qWT1+Bb1wnUqHYRjg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.crl rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:34:0e:71:e7:ce:e5:9f:fe:da:2d:0f:e2:cc:d2:11:d0:51:af:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DAE59D7C3209C3349DE0178E701CB4E9FCF31210 Validity Not Before: May 12 14:19:12 2026 GMT Not After : May 13 16:13:12 2026 GMT Subject: CN=6229318B1E4B4B4C2744AADD8FCE225B79323A03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:af:9f:7f:e4:5b:0c:e2:23:ec:4e:b4:b2:6f: 03:48:3f:54:0f:34:2d:ad:b3:01:17:3c:0f:a7:e2: 81:f2:6d:7c:ad:e6:b4:0a:99:d4:6a:c9:fd:ef:f5: 17:ad:96:6d:0f:c8:f2:15:fc:6d:d5:94:4b:44:b5: 5e:ed:65:83:05:c8:35:aa:73:04:ca:15:8b:77:d4: 70:02:4f:c7:7e:ec:01:31:53:a7:74:0c:b4:82:02: 98:0f:59:8a:ef:20:cf:91:2d:a4:7c:b6:c5:9a:95: fc:06:c4:aa:aa:96:6b:68:d5:88:85:cb:8a:41:14: 39:9c:17:1d:9e:0c:9c:c0:7b:64:99:bd:f0:bf:f5: 02:6f:2d:cd:5f:fc:3b:2c:34:38:fc:57:e5:86:57: 5a:f8:c0:d9:97:28:aa:7e:18:d5:22:7c:aa:d6:5a: 96:7c:46:84:27:75:20:03:f1:9a:b0:23:2f:8a:67: 9b:88:68:9b:da:fb:ce:b5:c7:ee:fc:25:6e:fb:ad: 22:62:5e:0c:77:f6:92:57:d8:76:66:a9:44:8b:f7: d2:f0:d8:32:58:36:6e:49:08:09:2d:cd:32:bb:91: b7:c7:9f:97:8d:1d:7f:ac:3a:f6:cc:ae:d4:57:df: b5:eb:58:da:17:85:30:a1:77:a3:14:e9:00:83:7c: 98:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:29:31:8B:1E:4B:4B:4C:27:44:AA:DD:8F:CE:22:5B:79:32:3A:03 X509v3 Authority Key Identifier: keyid:DA:E5:9D:7C:32:09:C3:34:9D:E0:17:8E:70:1C:B4:E9:FC:F3:12:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:93:ea:9d:6f:46:d4:de:7a:e8:49:06:86:1b:16:28:ba:47: 4d:13:4c:61:6e:86:2a:13:06:3b:f8:57:92:a6:d8:78:e1:00: 77:92:16:3b:0f:a7:0d:97:d9:82:3f:fd:9f:6f:13:86:9f:9d: bd:7b:83:ec:d1:af:e7:9a:ad:f9:3a:52:34:0e:44:92:97:ae: 5e:cc:24:42:97:6e:3b:3e:9d:0b:d1:de:2a:8a:cf:11:9a:c4: f8:15:47:9a:90:81:86:bd:a9:d1:f6:ff:c4:05:d2:81:34:78: 5d:89:2e:78:e0:2b:0f:c6:59:30:4d:44:8e:aa:83:22:e1:37: 7f:7b:4b:3f:ea:8b:32:b4:34:af:1e:8f:80:9b:49:65:af:7f: ab:8f:70:4c:41:5b:96:13:46:87:fe:ca:00:1c:a6:d8:45:4e: fc:7d:f0:86:a9:9e:69:70:b1:66:7b:af:57:82:61:fd:51:86: 5c:34:25:ea:82:1d:69:81:cb:de:27:cf:b0:af:ca:7f:4e:60: cf:2b:94:7c:31:93:73:fd:84:29:46:9e:70:53:6b:80:40:62: 1f:5c:07:c2:e8:fc:19:1c:83:12:06:1a:28:bb:e7:70:0c:7b: 88:4a:c3:aa:a3:9e:bb:cb:c5:37:eb:08:86:ee:54:88:4c:68: b3:8b:47:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCzQOcefO5Z/+2i0P4szSEdBRr18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREFFNTlEN0MzMjA5QzMzNDlERTAxNzhFNzAxQ0I0RTlG Q0YzMTIxMDAeFw0yNjA1MTIxNDE5MTJaFw0yNjA1MTMxNjEzMTJaMDMxMTAvBgNV BAMTKDYyMjkzMThCMUU0QjRCNEMyNzQ0QUFERDhGQ0UyMjVCNzkzMjNBMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnr59/5FsM4iPsTrSybwNIP1QP NC2tswEXPA+n4oHybXyt5rQKmdRqyf3v9Retlm0PyPIV/G3VlEtEtV7tZYMFyDWq cwTKFYt31HACT8d+7AExU6d0DLSCApgPWYrvIM+RLaR8tsWalfwGxKqqlmto1YiF y4pBFDmcFx2eDJzAe2SZvfC/9QJvLc1f/DssNDj8V+WGV1r4wNmXKKp+GNUifKrW WpZ8RoQndSAD8ZqwIy+KZ5uIaJva+861x+78JW77rSJiXgx39pJX2HZmqUSL99Lw 2DJYNm5JCAktzTK7kbfHn5eNHX+sOvbMrtRX37XrWNoXhTChd6MU6QCDfJidAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYikxix5LS0wnRKrdj84iW3kyOgMwHwYDVR0j BBgwFoAU2uWdfDIJwzSd4BeOcBy06fzzEhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDA0MWI0OGQtNzNjNC00Y2RkLWJjYWMtYTU5Njk5YmNiYmMxLzAvREFFNTlEN0Mz MjA5QzMzNDlERTAxNzhFNzAxQ0I0RTlGQ0YzMTIxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQUU1OUQ3QzMyMDlDMzM0OURFMDE3OEU3MDFDQjRFOUZDRjMx MjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvREFFNTlEN0MzMjA5QzMzNDlERTAxNzhFNzAxQ0I0 RTlGQ0YzMTIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMOT6p1vRtTeeuhJBoYbFii6R00TTGFuhioT Bjv4V5Km2HjhAHeSFjsPpw2X2YI//Z9vE4afnb17g+zRr+earfk6UjQORJKXrl7M JEKXbjs+nQvR3iqKzxGaxPgVR5qQgYa9qdH2/8QF0oE0eF2JLnjgKw/GWTBNRI6q gyLhN397Sz/qizK0NK8ej4CbSWWvf6uPcExBW5YTRof+ygAcpthFTvx98Iapnmlw sWZ7r1eCYf1Rhlw0JeqCHWmBy94nz7Cvyn9OYM8rlHwxk3P9hClGnnBTa4BAYh9c B8Lo/BkcgxIGGii753AMe4hKw6qjnrvLxTfrCIbuVIhMaLOLR10= -----END CERTIFICATE-----Generated at Tue May 12 22:13:24 2026 by rpki-client