$ rpki-client -vvf rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft File: 5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft (raw, json) Hash identifier: kMV6/TPmlfWmJIYHzfNOZcNzuQd+Y3ZHDqMkXQh77/4= Subject key identifier: 2B:74:80:2F:9A:CE:12:A5:AC:98:82:57:F1:B5:47:51:84:DF:FC:BD Authority key identifier: 5E:31:28:90:2F:CA:3B:CE:9C:9F:EB:FB:26:4D:55:0A:D6:23:05:72 Certificate issuer: /CN=5E3128902FCA3BCE9C9FEBFB264D550AD6230572 Certificate serial: 3B02FA3E4680E808FAE74AEE50DCB799BC0F69BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft Manifest number: 0E Signing time: Tue 12 May 2026 11:42:21 +0000 Manifest this update: Tue 12 May 2026 11:37:21 +0000 Manifest next update: Wed 13 May 2026 12:49:21 +0000 Files and hashes: 1: 5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl (hash: CefvWihtlsp7ub71tN5VZXM7IhEr+S8u5DuqAD05RIs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:02:fa:3e:46:80:e8:08:fa:e7:4a:ee:50:dc:b7:99:bc:0f:69:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E3128902FCA3BCE9C9FEBFB264D550AD6230572 Validity Not Before: May 12 11:37:21 2026 GMT Not After : May 13 12:49:21 2026 GMT Subject: CN=2B74802F9ACE12A5AC988257F1B5475184DFFCBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f0:6d:43:70:07:89:06:98:8b:ed:fa:c2:73: 90:16:2d:2d:ef:b0:bd:a2:c0:38:86:00:82:79:66: a8:a6:94:c6:0e:b6:22:4d:cc:fe:00:cd:77:22:d4: f1:34:78:63:14:20:f6:81:f6:1c:97:85:4e:80:ce: a3:6e:98:11:a9:34:37:4a:c0:48:ee:ea:ae:36:40: 09:1a:04:0b:3b:ee:83:83:6c:2e:68:ec:41:d3:2a: be:cb:ba:df:a1:5a:5b:cd:ff:61:0e:47:68:c5:81: 67:f0:10:49:16:21:bf:ed:04:67:5a:e4:70:ab:8c: 48:e4:44:d7:05:eb:a4:20:3e:12:92:52:ad:45:dc: 41:44:44:67:d2:6b:d1:4d:84:ad:6e:ab:7e:35:9b: ee:91:08:98:36:f3:04:0a:f0:a8:2a:14:49:41:8d: 0c:b4:49:e3:b2:64:81:2f:91:44:84:51:53:4c:c2: 1b:eb:99:2f:38:4c:71:6b:84:f1:63:3c:c3:67:7b: 1f:af:a5:99:36:d4:9d:85:55:6a:2b:51:76:e6:99: c2:87:5b:c3:21:25:07:b6:87:ff:44:46:d8:13:25: 30:6c:4c:2e:2a:1c:ff:5d:e4:e3:43:ad:29:85:01: ca:2b:01:c0:2e:65:44:f1:3b:33:d7:53:51:8c:8f: b6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:74:80:2F:9A:CE:12:A5:AC:98:82:57:F1:B5:47:51:84:DF:FC:BD X509v3 Authority Key Identifier: keyid:5E:31:28:90:2F:CA:3B:CE:9C:9F:EB:FB:26:4D:55:0A:D6:23:05:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1f:a9:89:5f:76:5b:0a:82:00:e8:52:fa:fb:48:5b:89:db: a3:eb:03:5b:e8:63:e5:7a:84:b7:15:e5:c8:7e:26:4f:67:08: 89:e5:11:9b:02:90:ef:b4:4a:66:f0:ca:53:7b:55:83:6a:de: 1b:95:09:b0:d7:53:83:50:21:09:a9:b8:e0:d1:8b:26:d7:27: 35:9c:ac:9c:e3:92:ba:1b:f9:eb:6a:78:e0:37:5e:fa:08:b0: 4b:16:5f:b4:ea:bf:70:2e:a7:7a:16:f3:48:c2:c7:c3:64:cc: fc:23:6f:82:b5:95:a1:b3:c3:ad:f9:65:df:aa:ae:6c:f3:51: cf:8f:74:0a:af:e4:de:f0:7a:04:b5:b9:3d:78:0d:fb:25:1e: 42:d2:85:c2:ca:a9:55:a4:19:b2:28:de:d4:65:fd:f9:24:4a: 4b:82:b5:34:f7:9d:73:b5:b2:50:7e:36:92:9a:67:6e:32:71: 18:19:75:58:1b:65:0a:f6:9b:5b:2a:42:5f:32:e0:82:c4:2a: a1:c6:4d:51:5b:87:5b:18:02:af:27:41:4c:d0:30:3f:f1:a5: a0:06:16:3c:0d:23:1c:4c:bd:f3:5c:c6:47:55:79:21:a9:84: 4d:54:91:cb:d0:d1:98:a6:8b:65:d4:58:8f:7e:ca:30:a7:89: a0:21:cf:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOwL6PkaA6Aj650ruUNy3mbwPabowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMTI4OTAyRkNBM0JDRTlDOUZFQkZCMjY0RDU1MEFE NjIzMDU3MjAeFw0yNjA1MTIxMTM3MjFaFw0yNjA1MTMxMjQ5MjFaMDMxMTAvBgNV BAMTKDJCNzQ4MDJGOUFDRTEyQTVBQzk4ODI1N0YxQjU0NzUxODRERkZDQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN8G1DcAeJBpiL7frCc5AWLS3v sL2iwDiGAIJ5ZqimlMYOtiJNzP4AzXci1PE0eGMUIPaB9hyXhU6AzqNumBGpNDdK wEju6q42QAkaBAs77oODbC5o7EHTKr7Lut+hWlvN/2EOR2jFgWfwEEkWIb/tBGda 5HCrjEjkRNcF66QgPhKSUq1F3EFERGfSa9FNhK1uq341m+6RCJg28wQK8KgqFElB jQy0SeOyZIEvkUSEUVNMwhvrmS84THFrhPFjPMNnex+vpZk21J2FVWorUXbmmcKH W8MhJQe2h/9ERtgTJTBsTC4qHP9d5ONDrSmFAcorAcAuZUTxOzPXU1GMj7ZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK3SAL5rOEqWsmIJX8bVHUYTf/L0wHwYDVR0j BBgwFoAUXjEokC/KO86cn+v7Jk1VCtYjBXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGZiNWZmMzctMzk0YS00ZWJhLWE0NzAtMTBhZjM3Y2Y3NWRjLzAvNUUzMTI4OTAy RkNBM0JDRTlDOUZFQkZCMjY0RDU1MEFENjIzMDU3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RTMxMjg5MDJGQ0EzQkNFOUM5RkVCRkIyNjRENTUwQUQ2MjMw NTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvNUUzMTI4OTAyRkNBM0JDRTlDOUZFQkZCMjY0RDU1 MEFENjIzMDU3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsfqYlfdlsKggDoUvr7SFuJ26PrA1voY+V6 hLcV5ch+Jk9nCInlEZsCkO+0SmbwylN7VYNq3huVCbDXU4NQIQmpuODRiybXJzWc rJzjkrob+etqeOA3XvoIsEsWX7Tqv3Aup3oW80jCx8NkzPwjb4K1laGzw635Zd+q rmzzUc+PdAqv5N7wegS1uT14DfslHkLShcLKqVWkGbIo3tRl/fkkSkuCtTT3nXO1 slB+NpKaZ24ycRgZdVgbZQr2m1sqQl8y4ILEKqHGTVFbh1sYAq8nQUzQMD/xpaAG FjwNIxxMvfNcxkdVeSGphE1UkcvQ0Zimi2XUWI9+yjCniaAhz2w= -----END CERTIFICATE-----Generated at Wed May 13 01:44:26 2026 by rpki-client