$ rpki-client -vvf rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft File: DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft (raw, json) Hash identifier: LFkfFihPlDDP5QY8VXYcRHwANCzb6hHVnIh4U++EFKU= Subject key identifier: D2:C7:22:30:01:01:1B:C9:09:DB:37:32:C6:83:A2:AE:55:03:0C:91 Authority key identifier: DF:5D:D0:70:8B:81:D1:5C:F9:DE:A4:8B:E5:4A:C0:3E:1E:C3:E5:3E Certificate issuer: /CN=DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E Certificate serial: 092141D529B1F1C018788D32989D886BC4359D47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft Manifest number: 0D Signing time: Tue 12 May 2026 02:15:17 +0000 Manifest this update: Tue 12 May 2026 02:10:17 +0000 Manifest next update: Wed 13 May 2026 06:04:17 +0000 Files and hashes: 1: DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.crl (hash: viZygsCdf3N6/IqEKcCNyVqFgGWBohHxS4v4lWA0X9w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.crl rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:21:41:d5:29:b1:f1:c0:18:78:8d:32:98:9d:88:6b:c4:35:9d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E Validity Not Before: May 12 02:10:17 2026 GMT Not After : May 13 06:04:17 2026 GMT Subject: CN=D2C7223001011BC909DB3732C683A2AE55030C91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bb:79:71:ea:e8:79:2d:70:42:38:1a:71:13: 27:ec:58:e2:3c:9b:f5:71:81:92:a9:2d:c7:ea:e5: a7:18:a7:7d:df:04:11:be:47:24:67:dd:93:6b:0c: 84:11:35:aa:51:85:63:21:a6:1b:33:80:59:40:a4: 1e:7e:a7:e2:4a:4a:14:a7:76:ae:c7:d0:48:57:04: fb:19:9b:da:bc:db:c1:9f:b0:c9:ee:26:1f:8c:1e: 56:02:d7:2f:19:7f:39:09:2f:f6:a6:3b:6f:36:90: 49:0c:11:ea:25:17:b6:a4:fd:09:a5:52:c5:b5:aa: 03:b6:2a:c7:52:b2:87:ca:f5:d8:c3:2b:8e:87:01: 55:0e:c8:bb:3c:3e:1b:4b:64:c5:63:4c:01:4c:c8: 6a:1f:19:d5:3f:02:be:ee:41:03:89:a1:ee:e5:23: 70:9a:db:ad:7e:0c:40:3a:0a:38:0e:56:d1:10:c1: dc:55:bb:76:e7:9f:f2:74:9e:34:67:c9:fb:b4:3c: 6d:51:4f:e1:d9:95:ce:6f:bf:50:4b:38:bf:63:08: bf:d7:f3:4c:c2:8f:58:65:35:ff:85:0d:65:6c:33: ba:42:47:5d:89:64:65:dd:69:e2:f9:df:a3:81:59: a5:e7:ec:a8:ee:a6:49:ff:16:ee:90:58:79:b9:0c: 33:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C7:22:30:01:01:1B:C9:09:DB:37:32:C6:83:A2:AE:55:03:0C:91 X509v3 Authority Key Identifier: keyid:DF:5D:D0:70:8B:81:D1:5C:F9:DE:A4:8B:E5:4A:C0:3E:1E:C3:E5:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:56:ef:0b:2a:19:28:ab:50:c9:04:62:ae:01:e2:3b:e3:e4: 9d:3e:bf:c2:90:15:f2:78:2d:be:42:2a:4e:e5:98:5b:27:1f: 5d:eb:1a:a4:b3:45:a3:31:57:b7:f6:63:1f:30:fe:7b:11:50: ac:f0:d1:d8:1b:8b:53:2b:b2:aa:e4:01:7c:48:a5:48:11:2d: 9b:c6:e6:4c:29:f7:1a:ed:97:67:9e:d7:db:0c:42:a7:21:a5: ba:c0:fb:2a:10:f7:f7:d9:08:d8:20:5b:8f:a9:6b:1e:0a:c3: 71:88:7f:4d:25:27:1b:ed:af:e9:0e:1d:46:d8:14:64:f0:84: f9:c7:b4:37:82:34:56:ba:4c:4f:a5:74:6f:49:b6:28:18:4d: ad:86:a9:05:51:12:8a:06:e0:11:68:6d:48:61:0d:c8:75:39: d6:1a:6d:b7:04:66:1c:fe:80:6a:43:13:d9:05:ce:65:1a:5c: a8:32:5d:fd:9a:89:38:75:23:8c:d1:0d:03:63:2a:a4:9b:da: 25:7c:e2:a6:5c:60:f1:a9:2b:9a:7a:9a:41:69:bb:fb:95:a2: c0:e6:15:c1:ca:8a:a5:98:66:15:21:fe:c8:68:bf:b5:d8:da: 87:97:38:56:17:e6:ae:2a:0a:ca:95:06:70:26:2d:f6:e8:b9: 4d:72:6d:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCSFB1Smx8cAYeI0ymJ2Ia8Q1nUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY1REQwNzA4QjgxRDE1Q0Y5REVBNDhCRTU0QUMwM0Ux RUMzRTUzRTAeFw0yNjA1MTIwMjEwMTdaFw0yNjA1MTMwNjA0MTdaMDMxMTAvBgNV BAMTKEQyQzcyMjMwMDEwMTFCQzkwOURCMzczMkM2ODNBMkFFNTUwMzBDOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDu3lx6uh5LXBCOBpxEyfsWOI8 m/VxgZKpLcfq5acYp33fBBG+RyRn3ZNrDIQRNapRhWMhphszgFlApB5+p+JKShSn dq7H0EhXBPsZm9q828GfsMnuJh+MHlYC1y8ZfzkJL/amO282kEkMEeolF7ak/Qml UsW1qgO2KsdSsofK9djDK46HAVUOyLs8PhtLZMVjTAFMyGofGdU/Ar7uQQOJoe7l I3Ca261+DEA6CjgOVtEQwdxVu3bnn/J0njRnyfu0PG1RT+HZlc5vv1BLOL9jCL/X 80zCj1hlNf+FDWVsM7pCR12JZGXdaeL536OBWaXn7Kjupkn/Fu6QWHm5DDNJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0sciMAEBG8kJ2zcyxoOirlUDDJEwHwYDVR0j BBgwFoAU313QcIuB0Vz53qSL5UrAPh7D5T4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDhiOGMxYjUtM2JlOC00YWE3LWE0YzYtMjFiY2M4ZjNmYTQwLzAvREY1REQwNzA4 QjgxRDE1Q0Y5REVBNDhCRTU0QUMwM0UxRUMzRTUzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjVERDA3MDhCODFEMTVDRjlERUE0OEJFNTRBQzAzRTFFQzNF NTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvREY1REQwNzA4QjgxRDE1Q0Y5REVBNDhCRTU0QUMw M0UxRUMzRTUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANW7wsqGSirUMkEYq4B4jvj5J0+v8KQFfJ4 Lb5CKk7lmFsnH13rGqSzRaMxV7f2Yx8w/nsRUKzw0dgbi1MrsqrkAXxIpUgRLZvG 5kwp9xrtl2ee19sMQqchpbrA+yoQ9/fZCNggW4+pax4Kw3GIf00lJxvtr+kOHUbY FGTwhPnHtDeCNFa6TE+ldG9JtigYTa2GqQVREooG4BFobUhhDch1OdYabbcEZhz+ gGpDE9kFzmUaXKgyXf2aiTh1I4zRDQNjKqSb2iV84qZcYPGpK5p6mkFpu/uVosDm FcHKiqWYZhUh/shov7XY2oeXOFYX5q4qCsqVBnAmLfbouU1ybbk= -----END CERTIFICATE-----Generated at Tue May 12 22:20:08 2026 by rpki-client