$ rpki-client -vvf rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.mft File: 4C2533216EFE900E826FB212E41459F4DC754554.mft (raw, json) Hash identifier: SPpzwAPk12S5RS59Ic0j7jVm44HqSla6y6GB8SxwHBY= Subject key identifier: 1B:5F:A1:1A:EF:11:AF:CB:E7:34:8C:B3:10:E2:61:54:50:66:AD:11 Authority key identifier: 4C:25:33:21:6E:FE:90:0E:82:6F:B2:12:E4:14:59:F4:DC:75:45:54 Certificate issuer: /CN=4C2533216EFE900E826FB212E41459F4DC754554 Certificate serial: 46507C0187ACBFEA9EE1C19537A11D4323E955EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C2533216EFE900E826FB212E41459F4DC754554.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.mft Manifest number: 0E Signing time: Tue 12 May 2026 19:09:52 +0000 Manifest this update: Tue 12 May 2026 19:04:52 +0000 Manifest next update: Wed 13 May 2026 22:58:52 +0000 Files and hashes: 1: 4C2533216EFE900E826FB212E41459F4DC754554.crl (hash: XHxXtbdQ2KTH8qrM9yjDja1hI422xIU+oATbGPsEjNM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.crl rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C2533216EFE900E826FB212E41459F4DC754554.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:50:7c:01:87:ac:bf:ea:9e:e1:c1:95:37:a1:1d:43:23:e9:55:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C2533216EFE900E826FB212E41459F4DC754554 Validity Not Before: May 12 19:04:52 2026 GMT Not After : May 13 22:58:52 2026 GMT Subject: CN=1B5FA11AEF11AFCBE7348CB310E261545066AD11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b5:fa:a3:27:c8:0f:cf:d9:e0:21:5e:a3:c2: be:cd:4c:d9:a7:de:a0:ae:31:e7:78:3f:66:dc:ca: d0:03:82:db:bc:f9:0a:c3:d9:e7:2a:8c:4e:c7:2f: 4f:ed:ec:66:c5:68:64:3c:31:3f:18:e3:08:71:01: 8b:09:14:88:a0:45:3f:2c:4d:fc:09:5d:92:30:5b: 6a:f3:6a:97:7e:74:bd:c8:57:fa:ef:99:ba:28:42: f2:a8:c6:9f:12:2b:19:25:70:2a:52:0d:a0:98:ec: 55:16:d2:bd:c6:08:44:5d:50:98:d4:10:89:af:cb: 41:a4:1c:1e:cf:f8:6f:fe:f4:e3:a4:1d:62:36:ca: b7:cc:4a:c0:b4:dd:81:02:bd:e7:df:bf:07:a2:34: 2e:97:0c:88:24:0b:4a:d4:7e:83:fa:68:d5:fe:dc: cd:0e:c0:2a:24:6e:3b:df:65:16:4d:19:e1:cb:d3: 8e:c3:ca:4a:6f:15:38:60:72:43:50:fc:25:24:15: 07:9b:71:52:ae:cb:6e:01:24:04:a8:98:c2:d7:a1: 7d:4f:22:a2:62:85:ff:92:9c:c0:9c:75:c7:27:d4: 31:19:53:ec:9c:9d:fb:a3:08:b0:1f:38:92:3d:ca: 6e:0f:c2:c0:cf:5d:99:90:5d:4a:fd:01:a1:ca:2f: b1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5F:A1:1A:EF:11:AF:CB:E7:34:8C:B3:10:E2:61:54:50:66:AD:11 X509v3 Authority Key Identifier: keyid:4C:25:33:21:6E:FE:90:0E:82:6F:B2:12:E4:14:59:F4:DC:75:45:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C2533216EFE900E826FB212E41459F4DC754554.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/4C2533216EFE900E826FB212E41459F4DC754554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b7:4d:34:0c:54:fc:87:53:8f:e5:ee:d6:f9:39:3c:93:74: 85:d7:d2:04:53:97:fa:40:80:27:64:a8:cc:42:54:f7:c6:9c: d0:76:e1:11:a7:61:94:72:d8:34:e2:93:97:27:99:b2:fd:54: 54:32:f9:f2:3d:eb:dc:96:20:22:48:a7:87:12:75:7c:33:a3: d4:88:de:53:49:f3:ab:b6:34:be:56:67:6e:26:e3:0b:16:f3: 0f:15:e6:00:be:fe:bb:f3:7a:1e:b2:3c:5e:96:5d:d6:26:12: 84:af:24:c4:cb:2c:29:03:76:73:0b:5d:5c:db:26:b0:87:d8: 35:c7:45:21:47:bb:b5:33:3d:2b:b4:5f:e6:97:43:26:e5:56: 4e:87:40:5c:c1:99:31:b6:ad:4f:99:5e:5c:a0:90:65:a2:b9: 19:c5:27:ce:ec:c5:65:9a:1c:97:f0:c2:42:84:7b:bc:72:a2: 08:7a:93:c1:2f:4a:13:71:11:08:fc:ce:b5:cc:da:aa:f8:37: d1:b1:8f:4d:f6:5f:76:41:99:3e:68:e4:4f:f9:c0:32:52:80: c7:80:ef:bb:30:51:91:be:e6:44:bf:2c:3c:01:7b:82:32:96: 5c:d9:db:18:ac:60:ff:c9:1a:db:3c:74:7f:c6:10:18:70:5d: 90:83:6c:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURlB8AYesv+qe4cGVN6EdQyPpVe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMyNTMzMjE2RUZFOTAwRTgyNkZCMjEyRTQxNDU5RjRE Qzc1NDU1NDAeFw0yNjA1MTIxOTA0NTJaFw0yNjA1MTMyMjU4NTJaMDMxMTAvBgNV BAMTKDFCNUZBMTFBRUYxMUFGQ0JFNzM0OENCMzEwRTI2MTU0NTA2NkFEMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+tfqjJ8gPz9ngIV6jwr7NTNmn 3qCuMed4P2bcytADgtu8+QrD2ecqjE7HL0/t7GbFaGQ8MT8Y4whxAYsJFIigRT8s TfwJXZIwW2rzapd+dL3IV/rvmbooQvKoxp8SKxklcCpSDaCY7FUW0r3GCERdUJjU EImvy0GkHB7P+G/+9OOkHWI2yrfMSsC03YECveffvweiNC6XDIgkC0rUfoP6aNX+ 3M0OwCokbjvfZRZNGeHL047DykpvFThgckNQ/CUkFQebcVKuy24BJASomMLXoX1P IqJihf+SnMCcdccn1DEZU+ycnfujCLAfOJI9ym4PwsDPXZmQXUr9AaHKL7EBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG1+hGu8Rr8vnNIyzEOJhVFBmrREwHwYDVR0j BBgwFoAUTCUzIW7+kA6Cb7IS5BRZ9Nx1RVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU2MGQyZGYtNjVmZi00M2E4LWE5ODMtMzMyMGNmOWZkMjkyLzAvNEMyNTMzMjE2 RUZFOTAwRTgyNkZCMjEyRTQxNDU5RjREQzc1NDU1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzI1MzMyMTZFRkU5MDBFODI2RkIyMTJFNDE0NTlGNERDNzU0 NTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU2MGQyZGYtNjVmZi00M2E4LWE5 ODMtMzMyMGNmOWZkMjkyLzAvNEMyNTMzMjE2RUZFOTAwRTgyNkZCMjEyRTQxNDU5 RjREQzc1NDU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGu3TTQMVPyHU4/l7tb5OTyTdIXX0gRTl/pA gCdkqMxCVPfGnNB24RGnYZRy2DTik5cnmbL9VFQy+fI969yWICJIp4cSdXwzo9SI 3lNJ86u2NL5WZ24m4wsW8w8V5gC+/rvzeh6yPF6WXdYmEoSvJMTLLCkDdnMLXVzb JrCH2DXHRSFHu7UzPSu0X+aXQyblVk6HQFzBmTG2rU+ZXlygkGWiuRnFJ87sxWWa HJfwwkKEe7xyogh6k8EvShNxEQj8zrXM2qr4N9Gxj032X3ZBmT5o5E/5wDJSgMeA 77swUZG+5kS/LDwBe4IyllzZ2xisYP/JGts8dH/GEBhwXZCDbFg= -----END CERTIFICATE-----Generated at Wed May 13 04:26:24 2026 by rpki-client