$ rpki-client -vvf rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft File: 0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft (raw, json) Hash identifier: ewCci63WeLMyvxor7TM+pw0pXHo/0A8j8Q244B5aeZw= Subject key identifier: 93:AC:60:83:94:45:F8:26:63:4B:E3:F5:39:06:C7:09:E9:EB:02:D3 Authority key identifier: 0C:1E:C4:D6:BE:1D:7A:19:2B:A6:D1:88:CA:0C:75:70:E5:D7:6C:EC Certificate issuer: /CN=0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC Certificate serial: 0392D106BBA13344108EAF1EE368B545188D20DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft Manifest number: 0D Signing time: Tue 12 May 2026 05:56:40 +0000 Manifest this update: Tue 12 May 2026 05:51:40 +0000 Manifest next update: Wed 13 May 2026 07:07:40 +0000 Files and hashes: 1: 0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.crl (hash: bGJxj5jItMTHjjZlP2YeBLM7L1nZP4TZ5mEqNpOtHZo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.crl rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:92:d1:06:bb:a1:33:44:10:8e:af:1e:e3:68:b5:45:18:8d:20:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC Validity Not Before: May 12 05:51:40 2026 GMT Not After : May 13 07:07:40 2026 GMT Subject: CN=93AC60839445F826634BE3F53906C709E9EB02D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3c:70:27:48:de:fc:3c:bb:c6:7a:a8:17:16: 37:95:d7:33:49:18:ff:7b:5c:67:c7:47:9c:87:b7: ac:2e:77:5b:32:5a:4f:4f:19:61:10:c1:a4:29:e6: b3:e6:8e:aa:df:ae:84:90:4f:a4:64:8b:7e:49:6f: 07:62:9d:62:bb:5b:f7:e0:8c:d8:ba:5f:b7:6f:fc: 8b:d1:a1:34:02:a3:51:82:f9:36:d5:19:79:1c:ab: 85:22:76:73:3e:9b:25:9b:7f:88:7d:b7:c3:d8:5d: e0:2c:be:92:cb:ca:85:0d:95:65:0c:eb:a2:c7:d8: df:15:c4:ff:30:9e:db:43:a8:52:d3:26:f2:ad:34: d8:d1:03:3e:d8:53:78:23:6d:a0:d9:4e:0f:c9:3d: 06:51:79:59:b2:f3:f7:d2:14:79:c4:a5:a5:8a:1a: 92:d0:29:12:ee:a0:15:ce:a8:19:8e:8d:14:f3:5c: 8a:10:80:c9:85:2c:81:9a:df:26:f8:39:a1:b1:51: 53:5e:31:4d:b5:50:42:63:e3:09:7f:20:49:ad:e8: 50:d4:92:38:41:ac:54:83:a0:6d:7a:6f:8e:a0:54: bd:60:7d:04:55:09:80:4b:2d:a1:2c:d7:3f:4e:a5: 7e:7b:f6:6a:3c:a2:7c:88:35:26:ce:82:7d:07:e8: 62:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AC:60:83:94:45:F8:26:63:4B:E3:F5:39:06:C7:09:E9:EB:02:D3 X509v3 Authority Key Identifier: keyid:0C:1E:C4:D6:BE:1D:7A:19:2B:A6:D1:88:CA:0C:75:70:E5:D7:6C:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:32:3b:2b:06:9a:22:b7:91:9c:2a:8f:96:20:53:98:54:0b: 5f:af:04:84:c1:7b:a3:50:be:ba:9d:06:03:cd:27:fb:f0:bc: 32:49:38:13:6d:88:26:1f:d3:c6:08:46:f5:de:20:80:f9:af: ce:2e:db:1a:17:43:96:0e:d5:4b:61:44:a8:2c:f3:ae:2d:90: 72:43:eb:12:a6:26:94:9d:ce:eb:48:db:37:86:77:7b:d7:73: fc:84:25:31:62:7e:eb:f4:e6:cd:01:d1:b6:d1:30:38:c9:55: 80:3d:da:b4:12:3d:45:ca:f9:1e:62:76:04:e5:40:e6:ee:ca: a4:59:10:0e:3d:de:fc:b7:73:6c:80:60:40:09:22:5d:77:58: ee:9b:7e:f1:97:f3:c7:b1:28:d0:6f:1e:72:0b:5d:95:15:55: d1:a9:94:c1:25:06:55:f6:56:51:3e:1e:74:a3:91:3f:86:bd: 6f:cf:55:44:af:75:e3:9d:60:29:76:2c:9e:70:50:91:6c:7e: c5:58:c3:b3:8a:cc:e8:b0:27:b4:af:2c:a0:32:92:27:8d:8e: e3:b4:67:f9:b6:2e:61:ce:9a:33:c7:85:c2:91:b1:e6:05:cf: 7a:b3:37:23:f1:f5:61:74:a8:0f:d1:fb:61:74:89:8f:a5:b3: 59:5b:c1:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5LRBruhM0QQjq8e42i1RRiNIN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMxRUM0RDZCRTFEN0ExOTJCQTZEMTg4Q0EwQzc1NzBF NUQ3NkNFQzAeFw0yNjA1MTIwNTUxNDBaFw0yNjA1MTMwNzA3NDBaMDMxMTAvBgNV BAMTKDkzQUM2MDgzOTQ0NUY4MjY2MzRCRTNGNTM5MDZDNzA5RTlFQjAyRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPHAnSN78PLvGeqgXFjeV1zNJ GP97XGfHR5yHt6wud1syWk9PGWEQwaQp5rPmjqrfroSQT6Rki35JbwdinWK7W/fg jNi6X7dv/IvRoTQCo1GC+TbVGXkcq4UidnM+myWbf4h9t8PYXeAsvpLLyoUNlWUM 66LH2N8VxP8wnttDqFLTJvKtNNjRAz7YU3gjbaDZTg/JPQZReVmy8/fSFHnEpaWK GpLQKRLuoBXOqBmOjRTzXIoQgMmFLIGa3yb4OaGxUVNeMU21UEJj4wl/IEmt6FDU kjhBrFSDoG16b46gVL1gfQRVCYBLLaEs1z9OpX579mo8onyINSbOgn0H6GI9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk6xgg5RF+CZjS+P1OQbHCenrAtMwHwYDVR0j BBgwFoAUDB7E1r4dehkrptGIygx1cOXXbOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDE4MGY3NTUtNWMyNy00MGY4LTgwYWYtMmZhOGRmMTE1MjgyLzAvMEMxRUM0RDZC RTFEN0ExOTJCQTZEMTg4Q0EwQzc1NzBFNUQ3NkNFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQzFFQzRENkJFMUQ3QTE5MkJBNkQxODhDQTBDNzU3MEU1RDc2 Q0VDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDE4MGY3NTUtNWMyNy00MGY4LTgw YWYtMmZhOGRmMTE1MjgyLzAvMEMxRUM0RDZCRTFEN0ExOTJCQTZEMTg4Q0EwQzc1 NzBFNUQ3NkNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0yOysGmiK3kZwqj5YgU5hUC1+vBITBe6NQ vrqdBgPNJ/vwvDJJOBNtiCYf08YIRvXeIID5r84u2xoXQ5YO1UthRKgs864tkHJD 6xKmJpSdzutI2zeGd3vXc/yEJTFifuv05s0B0bbRMDjJVYA92rQSPUXK+R5idgTl QObuyqRZEA493vy3c2yAYEAJIl13WO6bfvGX88exKNBvHnILXZUVVdGplMElBlX2 VlE+HnSjkT+GvW/PVUSvdeOdYCl2LJ5wUJFsfsVYw7OKzOiwJ7SvLKAykieNjuO0 Z/m2LmHOmjPHhcKRseYFz3qzNyPx9WF0qA/R+2F0iY+ls1lbwcM= -----END CERTIFICATE-----Generated at Wed May 13 01:35:28 2026 by rpki-client