$ rpki-client -vvf rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft File: 0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft (raw, json) Hash identifier: Qex/egRLPMThzt1i4oIxwNcF/g9yyd3M8uTtY8y3Qkk= Subject key identifier: EC:64:DB:8A:E0:B9:61:60:1A:21:C5:83:A2:97:17:CD:EF:29:EF:03 Authority key identifier: 0C:5B:86:D6:54:91:27:DB:C4:D1:6B:A0:A7:C4:9A:54:6D:9E:E8:7B Certificate issuer: /CN=0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B Certificate serial: 135A07C018BEA14D42FF31CC9649CEC662883E36 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:21:28 +0000 Manifest this update: Tue 12 May 2026 10:16:28 +0000 Manifest next update: Wed 13 May 2026 12:47:28 +0000 Files and hashes: 1: 0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.crl (hash: ieF8Q08GWK3o5yQ+/P4Q6IEeF2nsSP1JaPEnYeSjGR4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.crl rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5a:07:c0:18:be:a1:4d:42:ff:31:cc:96:49:ce:c6:62:88:3e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B Validity Not Before: May 12 10:16:28 2026 GMT Not After : May 13 12:47:28 2026 GMT Subject: CN=EC64DB8AE0B961601A21C583A29717CDEF29EF03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0e:a0:34:52:9e:9a:eb:ad:43:9c:90:99:db: 9a:c4:b6:37:7b:f3:b4:d0:c2:75:ee:f2:2f:22:5a: b1:0f:3d:49:5e:c1:e9:49:3a:68:e9:98:0e:6f:d8: 8b:7f:8c:ea:39:8c:41:fd:53:fc:7c:de:4b:b1:a9: d2:13:6d:3f:4b:36:e3:00:fe:0c:ad:19:b5:38:ff: 22:92:16:d2:f8:d3:c5:76:18:1f:3f:c4:d4:d5:3b: c2:3f:7f:ed:a6:61:18:d9:b0:6b:d1:b6:b6:b9:ae: 06:f8:65:89:f2:2c:f2:e5:38:94:50:b3:b9:30:7e: d7:65:a5:02:af:48:e4:0f:26:40:b7:b1:cc:10:49: e7:1e:f4:6f:9d:2a:6e:25:0e:82:9f:36:0e:bb:b1: b3:29:34:61:d3:6e:1a:9f:81:97:b4:9a:cf:db:b5: 6a:10:48:67:58:67:6d:75:ec:64:ca:e4:33:db:71: 51:b9:2f:97:fa:cb:58:38:c8:68:20:7d:ec:c2:ba: 6f:25:21:a3:2d:cc:23:ae:1e:02:d9:e8:dd:69:29: 44:77:9d:3a:e3:13:6a:ac:b7:bf:89:60:fc:9e:f2: 7c:e5:5b:ce:54:65:cf:ee:61:67:1b:47:3a:9b:81: 72:60:56:03:8e:69:34:d8:66:a9:8a:9b:95:bd:c5: 73:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:64:DB:8A:E0:B9:61:60:1A:21:C5:83:A2:97:17:CD:EF:29:EF:03 X509v3 Authority Key Identifier: keyid:0C:5B:86:D6:54:91:27:DB:C4:D1:6B:A0:A7:C4:9A:54:6D:9E:E8:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b2:07:82:85:35:1b:a3:70:2a:5c:c4:26:b3:5e:fc:8f:ed: fd:ba:fa:22:5a:31:1c:6f:ca:0c:d8:5f:fe:af:67:c9:35:ca: de:b1:75:14:cc:87:eb:a6:ab:b9:99:a6:e1:8a:30:b0:4e:08: c6:62:6c:2a:c0:f2:4f:e2:1a:78:44:b1:3e:7f:8d:7d:62:23: 20:ed:42:c9:6a:69:e8:96:9c:86:ef:06:e7:c3:a6:2d:76:75: ac:8b:f7:11:d4:e1:0d:16:3e:06:3a:d6:65:bd:75:b5:25:dc: 10:d9:5d:4b:88:9f:ad:2e:d9:8c:61:52:f8:e5:65:5d:d6:e4: 57:c1:26:e6:b3:97:63:d6:cc:58:0f:23:12:95:39:b3:f5:75: 6d:41:fc:3e:94:75:71:30:3c:d1:98:e8:5a:3f:ee:19:96:4f: 60:4c:04:42:e6:16:51:63:9d:fa:a0:a1:af:25:63:8b:ac:7a: 3c:1e:54:22:3d:71:ab:e3:3d:55:28:64:55:f5:1f:1e:78:12: e8:99:dd:d0:77:20:ff:48:dd:53:8b:13:10:52:d1:00:87:05: 32:89:50:51:cb:08:0b:96:0f:e8:7e:07:59:9f:e2:ec:fb:5b: 44:68:b5:fd:d2:98:eb:77:fb:07:c5:23:f5:d3:99:12:11:b6: 67:02:9d:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE1oHwBi+oU1C/zHMlknOxmKIPjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEM1Qjg2RDY1NDkxMjdEQkM0RDE2QkEwQTdDNDlBNTQ2 RDlFRTg3QjAeFw0yNjA1MTIxMDE2MjhaFw0yNjA1MTMxMjQ3MjhaMDMxMTAvBgNV BAMTKEVDNjREQjhBRTBCOTYxNjAxQTIxQzU4M0EyOTcxN0NERUYyOUVGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChDqA0Up6a661DnJCZ25rEtjd7 87TQwnXu8i8iWrEPPUlewelJOmjpmA5v2It/jOo5jEH9U/x83kuxqdITbT9LNuMA /gytGbU4/yKSFtL408V2GB8/xNTVO8I/f+2mYRjZsGvRtra5rgb4ZYnyLPLlOJRQ s7kwftdlpQKvSOQPJkC3scwQSece9G+dKm4lDoKfNg67sbMpNGHTbhqfgZe0ms/b tWoQSGdYZ2117GTK5DPbcVG5L5f6y1g4yGggfezCum8lIaMtzCOuHgLZ6N1pKUR3 nTrjE2qst7+JYPye8nzlW85UZc/uYWcbRzqbgXJgVgOOaTTYZqmKm5W9xXNtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7GTbiuC5YWAaIcWDopcXze8p7wMwHwYDVR0j BBgwFoAUDFuG1lSRJ9vE0Wugp8SaVG2e6HswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDNiNTljZTQtNjZhMi00ZjRkLWIzZDYtOTI5OTQ4NGJhNTZiLzAvMEM1Qjg2RDY1 NDkxMjdEQkM0RDE2QkEwQTdDNDlBNTQ2RDlFRTg3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQzVCODZENjU0OTEyN0RCQzREMTZCQTBBN0M0OUE1NDZEOUVF ODdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvMEM1Qjg2RDY1NDkxMjdEQkM0RDE2QkEwQTdDNDlB NTQ2RDlFRTg3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWyB4KFNRujcCpcxCazXvyP7f26+iJaMRxv ygzYX/6vZ8k1yt6xdRTMh+umq7mZpuGKMLBOCMZibCrA8k/iGnhEsT5/jX1iIyDt QslqaeiWnIbvBufDpi12dayL9xHU4Q0WPgY61mW9dbUl3BDZXUuIn60u2YxhUvjl ZV3W5FfBJuazl2PWzFgPIxKVObP1dW1B/D6UdXEwPNGY6Fo/7hmWT2BMBELmFlFj nfqgoa8lY4usejweVCI9cavjPVUoZFX1Hx54EuiZ3dB3IP9I3VOLExBS0QCHBTKJ UFHLCAuWD+h+B1mf4uz7W0Rotf3SmOt3+wfFI/XTmRIRtmcCnWM= -----END CERTIFICATE-----Generated at Wed May 13 03:16:35 2026 by rpki-client