$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft File: 0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft (raw, json) Hash identifier: DwSNnCoT0tRrlDUMsA866375EZmPrJXAI3bg28jTl2Y= Subject key identifier: B6:01:55:3E:66:88:C4:46:92:AB:61:D5:90:70:D2:09:2E:21:97:7F Authority key identifier: 0A:05:34:14:BE:A5:B1:C3:C3:67:D5:FC:0F:A3:E0:9D:CD:4C:8C:6B Certificate issuer: /CN=0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B Certificate serial: 2BC9FA84513A0C6F9125B5B4C81940B9F2FF295C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:42:36 +0000 Manifest this update: Tue 12 May 2026 17:37:36 +0000 Manifest next update: Wed 13 May 2026 20:23:36 +0000 Files and hashes: 1: 0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl (hash: qCQmbbAtBmyExZuDlMcfSwytReg5phsYhH3wRv8hLos=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c9:fa:84:51:3a:0c:6f:91:25:b5:b4:c8:19:40:b9:f2:ff:29:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B Validity Not Before: May 12 17:37:36 2026 GMT Not After : May 13 20:23:36 2026 GMT Subject: CN=B601553E6688C44692AB61D59070D2092E21977F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9b:d8:9e:8e:a0:3b:78:21:50:04:32:a3:5b: 25:a2:be:53:4d:44:60:0b:53:07:d5:73:38:cc:d3: ec:21:4c:8f:91:6b:ab:e7:72:4c:bf:7a:94:e0:7a: 4d:f8:40:20:ea:66:77:a5:bf:b6:91:6e:79:74:f5: 88:9a:8f:ad:c2:45:9a:cd:7c:89:de:22:38:d8:b9: 15:a7:60:c2:c4:13:ee:94:84:35:1b:cb:2e:b2:aa: e5:38:65:c7:df:f6:79:57:5c:9f:16:e0:81:94:2e: dc:19:e5:d8:24:52:06:fc:f6:50:07:ec:6c:31:68: c4:b3:d6:1c:c5:ea:f4:94:42:2c:d4:1d:51:ca:fb: a8:b5:68:6b:15:71:ad:be:40:9e:01:75:d5:28:02: 8e:2e:3c:b5:b8:cd:4e:5f:d3:33:19:c3:5d:e6:16: 4b:a8:74:36:6f:23:fc:0d:18:c1:14:96:f2:85:1a: 0c:7e:91:31:d1:b2:0e:17:30:07:62:1c:1b:4a:19: fe:45:ea:76:02:50:a7:57:80:52:70:bb:85:f8:ce: 4a:87:1d:dc:73:26:39:99:31:f5:47:95:f4:72:57: 8e:48:88:09:5d:dd:5a:c9:99:cd:69:f6:77:a7:5a: 62:52:46:13:64:bc:16:1a:67:e9:47:e8:b9:b4:78: 52:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:01:55:3E:66:88:C4:46:92:AB:61:D5:90:70:D2:09:2E:21:97:7F X509v3 Authority Key Identifier: keyid:0A:05:34:14:BE:A5:B1:C3:C3:67:D5:FC:0F:A3:E0:9D:CD:4C:8C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:cf:1f:86:6b:1c:be:de:40:10:7d:3c:35:8f:20:1a:f9:66: 57:16:01:4b:af:85:0f:b8:a6:4e:53:df:b5:a7:46:a7:8a:3e: f9:5c:bc:e1:48:f1:92:f7:d1:4c:13:05:71:1d:7c:a8:c7:70: 6d:81:f7:c3:e6:de:43:a9:3c:0b:84:1b:25:9f:8a:c7:54:f4: d3:e1:f1:2d:00:0d:02:0c:e8:85:c7:06:f9:e9:de:68:95:95: 1e:da:ea:fa:8e:4c:83:9f:3d:10:11:0c:42:fb:82:ff:7d:e2: 09:7d:85:7f:3d:36:dc:01:f6:ef:5a:4f:9d:0e:3c:45:be:60: fd:54:50:f3:55:04:20:5a:9c:c0:97:db:d6:d8:8b:93:f1:7a: f0:20:3e:6a:6a:f3:dd:04:da:fb:f7:58:a7:fb:c8:1b:ca:da: 09:8b:c9:24:3f:1a:8a:b4:9f:c7:56:22:0e:cc:90:95:82:31: 4f:c1:41:fa:28:f0:cf:d9:fd:15:64:40:ac:d8:21:83:78:6f: 7c:f5:e8:40:f9:4a:00:db:81:ad:20:e3:8d:ff:17:17:29:b1: 0c:fc:99:fb:02:20:31:0f:4d:b8:88:72:ca:7e:9c:24:9d:9e: b6:d3:78:f6:55:a6:f8:e2:af:af:0a:4f:87:78:3d:31:cf:43: bc:7e:9e:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK8n6hFE6DG+RJbW0yBlAufL/KVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEwNTM0MTRCRUE1QjFDM0MzNjdENUZDMEZBM0UwOURD RDRDOEM2QjAeFw0yNjA1MTIxNzM3MzZaFw0yNjA1MTMyMDIzMzZaMDMxMTAvBgNV BAMTKEI2MDE1NTNFNjY4OEM0NDY5MkFCNjFENTkwNzBEMjA5MkUyMTk3N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxm9iejqA7eCFQBDKjWyWivlNN RGALUwfVczjM0+whTI+Ra6vncky/epTgek34QCDqZnelv7aRbnl09Yiaj63CRZrN fIneIjjYuRWnYMLEE+6UhDUbyy6yquU4Zcff9nlXXJ8W4IGULtwZ5dgkUgb89lAH 7GwxaMSz1hzF6vSUQizUHVHK+6i1aGsVca2+QJ4BddUoAo4uPLW4zU5f0zMZw13m FkuodDZvI/wNGMEUlvKFGgx+kTHRsg4XMAdiHBtKGf5F6nYCUKdXgFJwu4X4zkqH HdxzJjmZMfVHlfRyV45IiAld3VrJmc1p9nenWmJSRhNkvBYaZ+lH6Lm0eFIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtgFVPmaIxEaSq2HVkHDSCS4hl38wHwYDVR0j BBgwFoAUCgU0FL6lscPDZ9X8D6Pgnc1MjGswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY3ZDI4OTQtYzA3Ny00MjFjLWJjMWQtMzdkNmY5ZDk4OTdkLzEvMEEwNTM0MTRC RUE1QjFDM0MzNjdENUZDMEZBM0UwOURDRDRDOEM2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTA1MzQxNEJFQTVCMUMzQzM2N0Q1RkMwRkEzRTA5RENENEM4 QzZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMEEwNTM0MTRCRUE1QjFDM0MzNjdENUZDMEZBM0Uw OURDRDRDOEM2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvPH4ZrHL7eQBB9PDWPIBr5ZlcWAUuvhQ+4 pk5T37WnRqeKPvlcvOFI8ZL30UwTBXEdfKjHcG2B98Pm3kOpPAuEGyWfisdU9NPh 8S0ADQIM6IXHBvnp3miVlR7a6vqOTIOfPRARDEL7gv994gl9hX89NtwB9u9aT50O PEW+YP1UUPNVBCBanMCX29bYi5PxevAgPmpq890E2vv3WKf7yBvK2gmLySQ/Goq0 n8dWIg7MkJWCMU/BQfoo8M/Z/RVkQKzYIYN4b3z16ED5SgDbga0g443/FxcpsQz8 mfsCIDEPTbiIcsp+nCSdnrbTePZVpvjir68KT4d4PTHPQ7x+noE= -----END CERTIFICATE-----Generated at Tue May 12 22:19:35 2026 by rpki-client