$ rpki-client -vvf rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft File: A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft (raw, json) Hash identifier: FWX1Ws2qE4DSAnJuCNi+uIRzpnwYcyUULUEbKJ2IVys= Subject key identifier: 63:A2:B5:E5:D2:FD:19:EA:01:8E:CC:5B:C8:55:A3:E8:EB:E1:07:EF Authority key identifier: A9:41:92:CB:26:2F:A7:8C:5F:C6:7C:E1:8B:DB:9C:CF:1F:42:D5:89 Certificate issuer: /CN=A94192CB262FA78C5FC67CE18BDB9CCF1F42D589 Certificate serial: 43DA2E84BCC8DBCA36A13717174B6C3A2836B5B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft Manifest number: 0E Signing time: Tue 12 May 2026 19:20:14 +0000 Manifest this update: Tue 12 May 2026 19:15:14 +0000 Manifest next update: Wed 13 May 2026 21:31:14 +0000 Files and hashes: 1: A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.crl (hash: P66LOmey0uQUGJzkGTL5JuVTE57WTRtDdAPemXB0ULc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.crl rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:da:2e:84:bc:c8:db:ca:36:a1:37:17:17:4b:6c:3a:28:36:b5:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A94192CB262FA78C5FC67CE18BDB9CCF1F42D589 Validity Not Before: May 12 19:15:14 2026 GMT Not After : May 13 21:31:14 2026 GMT Subject: CN=63A2B5E5D2FD19EA018ECC5BC855A3E8EBE107EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:aa:f7:9d:f1:be:37:01:0a:d6:9c:1f:57:e3: 01:d5:25:60:ee:06:21:87:90:5f:12:bc:87:5b:5b: c5:05:6d:d9:84:24:45:83:9d:36:69:69:ac:07:ea: 40:c8:f8:61:cd:e8:e7:bc:e0:0c:f3:cb:de:79:04: 7c:a9:2b:70:6c:77:7d:28:fc:d6:8d:4f:bc:dc:b2: 92:90:30:0b:5b:1c:e9:af:38:bf:ba:21:bc:3f:55: 39:2e:56:f3:3f:36:5e:11:cd:b3:31:74:c2:e4:49: dd:a2:c3:06:5b:e5:01:a0:38:a7:2d:cb:ce:8a:52: f7:96:0e:56:7b:4f:52:fa:97:e6:fc:47:69:66:09: 72:0d:e6:cb:e8:c3:2c:34:6b:5b:4f:f3:c3:52:91: e4:0d:28:a7:82:0f:f7:18:6d:12:f8:1c:92:08:a3: 77:11:64:5f:20:84:48:02:2f:b0:95:bd:ca:25:6d: a9:4a:02:13:d0:73:66:e5:1b:48:a1:7a:a0:e3:b1: f1:0d:cc:df:56:a6:61:83:0b:e1:00:6a:55:f9:19: dc:48:bb:e4:d1:bf:99:79:13:28:0a:fe:2a:0b:df: aa:1c:23:1e:ce:a4:12:2f:6f:66:e9:c5:54:c1:26: 0c:f0:b7:20:b0:b3:53:5f:e7:bd:02:24:2e:16:6c: fa:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A2:B5:E5:D2:FD:19:EA:01:8E:CC:5B:C8:55:A3:E8:EB:E1:07:EF X509v3 Authority Key Identifier: keyid:A9:41:92:CB:26:2F:A7:8C:5F:C6:7C:E1:8B:DB:9C:CF:1F:42:D5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:f6:f6:68:97:d8:d6:b8:cb:ab:a7:c7:79:0a:e8:b8:b5:54: 98:2c:21:2b:bb:32:dd:80:2e:67:99:45:34:47:e8:1d:5a:7a: db:9d:c8:97:1a:d5:38:02:73:52:ec:15:ab:87:e3:b0:07:1d: 68:a6:15:03:6f:96:42:02:d0:d0:f2:81:58:6a:f1:b7:53:c1: 63:2a:0e:0a:f9:5d:94:74:bd:bf:45:07:64:2b:3b:37:c8:da: d0:d6:94:3b:5b:3d:09:9b:65:c0:cb:3a:89:9e:8b:82:c0:83: e8:58:6f:f9:13:8a:8e:45:42:b5:f9:ca:cf:df:7b:ce:2e:89: 04:36:c3:b3:f2:d4:bd:7e:d3:c0:f3:17:8e:f7:18:6b:1e:7c: c0:77:c1:86:fd:00:dc:f6:9a:d7:e2:6d:7f:a5:a9:d9:87:83: 00:e6:b0:7d:39:fb:ee:4a:8f:5f:e2:1c:4c:34:28:ca:88:95: 1d:6f:d2:d8:6d:a5:62:f1:80:44:9c:4e:9d:9c:85:d8:89:d4: c4:c4:c1:7a:c0:8a:45:8e:3c:6e:e9:49:7e:48:51:2a:db:ea: 40:6b:2a:8e:e2:33:6c:f2:68:6e:9d:19:8e:ff:ba:5e:96:5c: 3d:ca:95:50:d3:14:7a:de:58:63:27:4a:80:33:8a:0f:16:a2: 4b:cd:89:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ9ouhLzI28o2oTcXF0tsOig2tbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk0MTkyQ0IyNjJGQTc4QzVGQzY3Q0UxOEJEQjlDQ0Yx RjQyRDU4OTAeFw0yNjA1MTIxOTE1MTRaFw0yNjA1MTMyMTMxMTRaMDMxMTAvBgNV BAMTKDYzQTJCNUU1RDJGRDE5RUEwMThFQ0M1QkM4NTVBM0U4RUJFMTA3RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgqved8b43AQrWnB9X4wHVJWDu BiGHkF8SvIdbW8UFbdmEJEWDnTZpaawH6kDI+GHN6Oe84Azzy955BHypK3Bsd30o /NaNT7zcspKQMAtbHOmvOL+6Ibw/VTkuVvM/Nl4RzbMxdMLkSd2iwwZb5QGgOKct y86KUveWDlZ7T1L6l+b8R2lmCXIN5svowyw0a1tP88NSkeQNKKeCD/cYbRL4HJII o3cRZF8ghEgCL7CVvcolbalKAhPQc2blG0iheqDjsfENzN9WpmGDC+EAalX5GdxI u+TRv5l5EygK/ioL36ocIx7OpBIvb2bpxVTBJgzwtyCws1Nf570CJC4WbPrpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY6K15dL9GeoBjsxbyFWj6OvhB+8wHwYDVR0j BBgwFoAUqUGSyyYvp4xfxnzhi9uczx9C1YkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDBhNmZlYWEtNmI0Zi00N2NmLTllM2MtMDBhZWFjNjdhMzJhLzEvQTk0MTkyQ0Iy NjJGQTc4QzVGQzY3Q0UxOEJEQjlDQ0YxRjQyRDU4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTQxOTJDQjI2MkZBNzhDNUZDNjdDRTE4QkRCOUNDRjFGNDJE NTg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzEvQTk0MTkyQ0IyNjJGQTc4QzVGQzY3Q0UxOEJEQjlD Q0YxRjQyRDU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABj29miX2Na4y6unx3kK6Li1VJgsISu7Mt2A LmeZRTRH6B1aetudyJca1TgCc1LsFauH47AHHWimFQNvlkIC0NDygVhq8bdTwWMq Dgr5XZR0vb9FB2QrOzfI2tDWlDtbPQmbZcDLOomei4LAg+hYb/kTio5FQrX5ys/f e84uiQQ2w7Py1L1+08DzF473GGsefMB3wYb9ANz2mtfibX+lqdmHgwDmsH05++5K j1/iHEw0KMqIlR1v0thtpWLxgEScTp2chdiJ1MTEwXrAikWOPG7pSX5IUSrb6kBr Ko7iM2zyaG6dGY7/ul6WXD3KlVDTFHreWGMnSoAzig8WokvNib8= -----END CERTIFICATE-----Generated at Wed May 13 02:34:08 2026 by rpki-client