$ rpki-client -vvf rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.mft File: 368503D1386A131369164C5912181352537A2D3C.mft (raw, json) Hash identifier: 3QplkBNGpIeZSGSfx4nCF0NvhY/FwQLOd/gp7qGvqKc= Subject key identifier: 45:E1:30:28:4E:1E:FC:FB:68:30:86:C9:84:4A:D9:63:82:98:7C:10 Authority key identifier: 36:85:03:D1:38:6A:13:13:69:16:4C:59:12:18:13:52:53:7A:2D:3C Certificate issuer: /CN=368503D1386A131369164C5912181352537A2D3C Certificate serial: 1BE4A476CAF038F5B7ACFB40F4F9BC5B06810BA3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/368503D1386A131369164C5912181352537A2D3C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.mft Manifest number: 0E Signing time: Wed 13 May 2026 02:51:49 +0000 Manifest this update: Wed 13 May 2026 02:46:49 +0000 Manifest next update: Thu 14 May 2026 05:32:49 +0000 Files and hashes: 1: 368503D1386A131369164C5912181352537A2D3C.crl (hash: Wl9MVjzubXpdziKF3DkZ4GX5L4Qd6u0ILTV9feso36o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.crl rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/368503D1386A131369164C5912181352537A2D3C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e4:a4:76:ca:f0:38:f5:b7:ac:fb:40:f4:f9:bc:5b:06:81:0b:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368503D1386A131369164C5912181352537A2D3C Validity Not Before: May 13 02:46:49 2026 GMT Not After : May 14 05:32:49 2026 GMT Subject: CN=45E130284E1EFCFB683086C9844AD96382987C10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:98:f4:0a:d0:c7:bd:6a:46:49:e0:a2:9e:6f: 3f:7a:3e:6e:ac:6b:1f:23:79:61:e3:dc:58:fc:eb: 48:43:7b:e2:31:bb:29:71:91:ef:93:cf:38:d7:87: 4b:12:7b:80:d2:52:03:f3:b4:56:91:bb:ec:b9:3a: 6e:de:7a:fe:ba:ef:bf:c8:e6:3c:34:fc:40:3d:73: 82:e6:3d:ea:2e:e4:d0:d2:f9:6d:30:8d:1b:de:b6: 42:fb:33:d9:ab:f4:d7:80:e2:a6:84:51:f2:9c:7d: b8:9e:29:23:ef:44:96:ae:07:7d:0f:00:2b:61:dd: e0:ba:96:b0:17:cf:90:a2:7b:0b:54:b3:c2:26:3c: b4:cd:ea:9b:7c:0f:a5:4b:2e:f5:03:7d:17:4b:f6: cb:aa:fa:1d:eb:98:8b:b7:1c:49:96:24:be:23:54: d2:26:a0:86:20:2c:28:6b:7e:8c:bd:7f:92:f5:7e: b3:00:a7:5a:b0:59:de:bb:7a:7d:bd:d4:c5:48:43: 33:dd:28:e2:d0:07:07:3b:32:1f:b8:3b:0f:0c:50: 69:2b:18:25:b2:b0:4c:3c:eb:27:91:b9:44:77:51: 2b:e1:fa:09:d1:b1:cf:24:cf:73:88:c4:2b:d1:03: f4:04:47:7d:88:75:81:20:b7:67:d8:55:6d:c8:38: de:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E1:30:28:4E:1E:FC:FB:68:30:86:C9:84:4A:D9:63:82:98:7C:10 X509v3 Authority Key Identifier: keyid:36:85:03:D1:38:6A:13:13:69:16:4C:59:12:18:13:52:53:7A:2D:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/368503D1386A131369164C5912181352537A2D3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:7b:ca:c9:4f:8e:62:78:08:43:c6:04:bf:65:ca:8a:24:dc: 8d:45:55:9c:a7:72:3b:c1:64:bd:94:9b:1c:8e:3e:92:a3:f4: 31:d3:64:04:45:3b:cc:c3:ea:77:92:0b:40:1c:52:89:b0:66: a3:76:27:3b:51:1c:31:3d:36:e3:1d:45:b9:e2:b8:25:81:8a: 5e:ba:73:b5:c0:19:c4:5d:f4:45:7b:30:f6:4b:b3:b2:ab:fb: 74:87:ff:2f:ad:8c:19:9e:2f:59:01:16:91:76:f6:23:dc:48: dc:f0:a7:59:17:5a:e4:52:21:5e:5d:be:3a:ff:43:bd:db:35: 52:60:13:18:b3:f9:66:1a:51:b8:45:4a:08:3e:aa:83:8d:b2: ac:14:f6:a0:c2:5b:9b:45:a5:a4:2e:3d:4f:be:3e:78:af:ff: 6d:34:13:ae:8f:ae:45:ea:f7:0b:11:b5:52:d8:22:d4:12:55: f6:1e:03:ca:a5:0d:5c:1b:1f:15:b9:8f:7b:94:27:1b:39:41: e3:29:57:15:cf:45:44:50:34:65:f8:a7:e4:3e:24:47:d1:d1: 0b:0e:97:f3:5e:fe:58:ae:88:c5:b6:96:73:8c:9d:a6:fa:66: ad:88:c0:63:07:6c:0e:5b:29:9d:52:d4:d6:35:a7:b5:c9:d7: 46:71:d2:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG+SkdsrwOPW3rPtA9Pm8WwaBC6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NTAzRDEzODZBMTMxMzY5MTY0QzU5MTIxODEzNTI1 MzdBMkQzQzAeFw0yNjA1MTMwMjQ2NDlaFw0yNjA1MTQwNTMyNDlaMDMxMTAvBgNV BAMTKDQ1RTEzMDI4NEUxRUZDRkI2ODMwODZDOTg0NEFEOTYzODI5ODdDMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJmPQK0Me9akZJ4KKebz96Pm6s ax8jeWHj3Fj860hDe+Ixuylxke+TzzjXh0sSe4DSUgPztFaRu+y5Om7eev6677/I 5jw0/EA9c4LmPeou5NDS+W0wjRvetkL7M9mr9NeA4qaEUfKcfbieKSPvRJauB30P ACth3eC6lrAXz5CiewtUs8ImPLTN6pt8D6VLLvUDfRdL9suq+h3rmIu3HEmWJL4j VNImoIYgLChrfoy9f5L1frMAp1qwWd67en291MVIQzPdKOLQBwc7Mh+4Ow8MUGkr GCWysEw86yeRuUR3USvh+gnRsc8kz3OIxCvRA/QER32IdYEgt2fYVW3ION7hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUReEwKE4e/PtoMIbJhErZY4KYfBAwHwYDVR0j BBgwFoAUNoUD0ThqExNpFkxZEhgTUlN6LTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTkyMDVlN2MtYTg4MS00ODczLTkxODgtZTUyMWI2YWY1MjljLzAvMzY4NTAzRDEz ODZBMTMxMzY5MTY0QzU5MTIxODEzNTI1MzdBMkQzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjg1MDNEMTM4NkExMzEzNjkxNjRDNTkxMjE4MTM1MjUzN0Ey RDNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTkyMDVlN2MtYTg4MS00ODczLTkx ODgtZTUyMWI2YWY1MjljLzAvMzY4NTAzRDEzODZBMTMxMzY5MTY0QzU5MTIxODEz NTI1MzdBMkQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGV7yslPjmJ4CEPGBL9lyook3I1FVZyncjvB ZL2UmxyOPpKj9DHTZARFO8zD6neSC0AcUomwZqN2JztRHDE9NuMdRbniuCWBil66 c7XAGcRd9EV7MPZLs7Kr+3SH/y+tjBmeL1kBFpF29iPcSNzwp1kXWuRSIV5dvjr/ Q73bNVJgExiz+WYaUbhFSgg+qoONsqwU9qDCW5tFpaQuPU++Pniv/200E66PrkXq 9wsRtVLYItQSVfYeA8qlDVwbHxW5j3uUJxs5QeMpVxXPRURQNGX4p+Q+JEfR0QsO l/Ne/liuiMW2lnOMnab6Zq2IwGMHbA5bKZ1S1NY1p7XJ10Zx0mY= -----END CERTIFICATE-----Generated at Wed May 13 10:36:01 2026 by rpki-client