$ rpki-client -vvf rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft File: D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft (raw, json) Hash identifier: oCKl6TRsVuzAQMHWbVqnPzDkcDIbWmq+9bZjw2evDPE= Subject key identifier: 68:9D:F6:FD:B4:5C:0E:C5:0A:92:CE:5F:12:C8:94:F5:42:C5:EB:F5 Authority key identifier: D6:C0:95:71:57:A1:ED:A2:4F:0D:EF:F6:D0:FE:F2:81:37:C1:97:DC Certificate issuer: /CN=D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC Certificate serial: 7416B5F8E568261543A3BCB97E3B0B7BDE781C6B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft Manifest number: 0E Signing time: Tue 12 May 2026 11:47:23 +0000 Manifest this update: Tue 12 May 2026 11:42:23 +0000 Manifest next update: Wed 13 May 2026 14:14:23 +0000 Files and hashes: 1: D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl (hash: z/DEyXGaf+Osoesv22J8Knp1G6RnfTjSVOQVZzPOwfU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:16:b5:f8:e5:68:26:15:43:a3:bc:b9:7e:3b:0b:7b:de:78:1c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC Validity Not Before: May 12 11:42:23 2026 GMT Not After : May 13 14:14:23 2026 GMT Subject: CN=689DF6FDB45C0EC50A92CE5F12C894F542C5EBF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:82:a2:37:f1:ed:7c:e1:85:6d:bc:2c:85:2e: 9b:22:bb:4d:71:46:25:61:aa:5f:38:b5:1f:2c:bf: 72:63:b1:fb:39:18:a3:b5:ca:ce:3d:6a:b9:b7:35: 0f:52:a1:37:8e:b8:af:5a:49:27:e6:93:3a:c6:04: 05:0b:c3:24:de:94:8c:0f:c0:48:77:33:2d:55:34: 81:38:87:f1:39:6b:2c:70:fc:9a:80:12:73:04:e1: 6d:ee:fa:40:57:65:0c:89:2a:ca:a7:56:df:36:73: 6f:ac:ad:90:aa:73:af:69:e8:9f:f5:c0:0f:0e:79: 5b:e3:8f:e1:11:5d:6d:78:b3:fb:0a:58:09:b6:6b: f0:b7:91:91:f3:eb:fe:23:97:64:ba:ae:5f:9a:c9: 16:c8:9e:f0:f1:53:63:22:6f:58:0f:48:42:b7:db: e0:fa:26:1c:eb:c8:fe:29:8b:6b:10:6e:8b:a4:f7: 23:c8:ad:f4:a1:ab:e9:ef:74:5d:d8:5e:f1:60:c7: ef:33:26:80:05:25:de:29:d2:59:d9:43:1a:eb:c8: 10:e5:f1:b5:94:84:7c:7b:a7:db:24:ab:44:df:62: 4d:b1:a4:1c:bb:be:a4:20:c3:44:e7:1b:15:92:11: aa:86:ff:8d:c4:98:fc:28:f0:01:2c:9c:f7:27:bf: 60:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9D:F6:FD:B4:5C:0E:C5:0A:92:CE:5F:12:C8:94:F5:42:C5:EB:F5 X509v3 Authority Key Identifier: keyid:D6:C0:95:71:57:A1:ED:A2:4F:0D:EF:F6:D0:FE:F2:81:37:C1:97:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9b:9c:d0:6c:64:02:f8:75:a1:17:b4:65:21:c6:bb:eb:d3: f1:ea:71:d5:8f:7a:90:f2:11:6b:37:c2:00:08:a6:67:e0:c7: 30:d7:47:f2:44:5c:0a:df:34:31:6b:72:04:04:9f:ef:58:1b: 99:38:d6:7b:57:bc:b0:82:de:02:d5:66:a0:f6:2d:0c:99:dd: b1:bb:16:13:cc:a3:a0:85:33:77:84:29:43:0c:16:a9:36:f4: 04:63:23:83:80:ed:4a:0c:1e:be:f7:51:da:e1:0d:0d:72:5d: fc:f6:4d:5f:65:09:16:bc:18:94:4e:b0:e9:fa:07:9b:bd:a6: 39:2b:a3:cc:28:4c:6b:51:3b:88:82:6d:c1:6f:f5:49:b7:6a: a6:de:55:1d:39:59:83:83:fd:ac:8b:d3:82:c6:2d:82:d9:80: f2:7e:e6:79:b2:38:17:89:d7:40:db:e3:a7:d5:03:99:e5:3f: 37:4f:c3:b6:6a:62:c7:b2:43:a0:1f:80:e8:71:87:ec:6a:f9: c3:75:24:4a:c2:cb:5b:cb:8e:a0:b6:75:0e:ca:c2:ef:af:57: d7:dc:0a:8b:2e:a9:69:d9:8d:0d:a4:c2:7e:7f:ae:8e:42:57: 6c:b2:81:42:b9:8b:48:0d:bf:19:e0:7c:ba:a6:27:cf:34:95: 83:59:97:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdBa1+OVoJhVDo7y5fjsLe954HGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMDk1NzE1N0ExRURBMjRGMERFRkY2RDBGRUYyODEz N0MxOTdEQzAeFw0yNjA1MTIxMTQyMjNaFw0yNjA1MTMxNDE0MjNaMDMxMTAvBgNV BAMTKDY4OURGNkZEQjQ1QzBFQzUwQTkyQ0U1RjEyQzg5NEY1NDJDNUVCRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3gqI38e184YVtvCyFLpsiu01x RiVhql84tR8sv3Jjsfs5GKO1ys49arm3NQ9SoTeOuK9aSSfmkzrGBAULwyTelIwP wEh3My1VNIE4h/E5ayxw/JqAEnME4W3u+kBXZQyJKsqnVt82c2+srZCqc69p6J/1 wA8OeVvjj+ERXW14s/sKWAm2a/C3kZHz6/4jl2S6rl+ayRbInvDxU2Mib1gPSEK3 2+D6JhzryP4pi2sQbouk9yPIrfShq+nvdF3YXvFgx+8zJoAFJd4p0lnZQxrryBDl 8bWUhHx7p9skq0TfYk2xpBy7vqQgw0TnGxWSEaqG/43EmPwo8AEsnPcnv2CbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaJ32/bRcDsUKks5fEsiU9ULF6/UwHwYDVR0j BBgwFoAU1sCVcVeh7aJPDe/20P7ygTfBl9wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQzOTE2OTgtMDhlYy00NzkwLWExODQtOTIyODUyZmE0ZDBhLzAvRDZDMDk1NzE1 N0ExRURBMjRGMERFRkY2RDBGRUYyODEzN0MxOTdEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkMwOTU3MTU3QTFFREEyNEYwREVGRjZEMEZFRjI4MTM3QzE5 N0RDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvRDZDMDk1NzE1N0ExRURBMjRGMERFRkY2RDBGRUYy ODEzN0MxOTdEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFubnNBsZAL4daEXtGUhxrvr0/HqcdWPepDy EWs3wgAIpmfgxzDXR/JEXArfNDFrcgQEn+9YG5k41ntXvLCC3gLVZqD2LQyZ3bG7 FhPMo6CFM3eEKUMMFqk29ARjI4OA7UoMHr73UdrhDQ1yXfz2TV9lCRa8GJROsOn6 B5u9pjkro8woTGtRO4iCbcFv9Um3aqbeVR05WYOD/ayL04LGLYLZgPJ+5nmyOBeJ 10Db46fVA5nlPzdPw7ZqYseyQ6AfgOhxh+xq+cN1JErCy1vLjqC2dQ7Kwu+vV9fc CosuqWnZjQ2kwn5/ro5CV2yygUK5i0gNvxngfLqmJ880lYNZl8o= -----END CERTIFICATE-----Generated at Wed May 13 03:56:26 2026 by rpki-client