$ rpki-client -vvf rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft File: 609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft (raw, json) Hash identifier: smZo4PofzykpoHEGw69//MdcEeFbznbz+Hnf6YqsXIc= Subject key identifier: A1:00:89:B0:BA:59:20:16:22:2A:32:7B:61:D3:48:37:A1:70:72:A4 Authority key identifier: 60:94:29:AB:5B:0A:4F:C2:EF:4C:1B:8E:2F:40:BF:C5:20:51:40:A2 Certificate issuer: /CN=609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2 Certificate serial: 2314AB4C25AD988BC4B801657DB0A5AAB7B6BEA1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:16:25 +0000 Manifest this update: Tue 12 May 2026 10:11:25 +0000 Manifest next update: Wed 13 May 2026 12:10:25 +0000 Files and hashes: 1: 609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl (hash: 7n79oIDQyYdnwn6RVMVHKo+CQ+0dXKlO1iCCk72VJhw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:14:ab:4c:25:ad:98:8b:c4:b8:01:65:7d:b0:a5:aa:b7:b6:be:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2 Validity Not Before: May 12 10:11:25 2026 GMT Not After : May 13 12:10:25 2026 GMT Subject: CN=A10089B0BA592016222A327B61D34837A17072A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3e:37:74:a3:14:1c:54:d9:83:48:bf:95:60: af:e0:bd:55:68:ae:2e:6f:b1:c8:39:c4:15:bb:a4: b6:4b:fa:e0:9b:85:ba:7a:6e:11:a4:e8:07:45:b7: 18:fc:4a:5c:85:5f:b0:67:5e:82:d9:af:9f:1f:dc: 01:91:70:7c:93:59:93:f3:a2:8b:c1:59:97:b9:7b: 94:4b:8c:68:a3:2e:df:21:97:b7:4b:c7:69:63:52: 8d:9a:be:e0:93:33:a8:f6:2a:84:1b:eb:09:ea:c2: f9:a8:fe:37:d4:4c:ac:58:c0:7b:bd:14:a8:89:08: b2:1b:ec:9a:67:a3:09:96:a0:bf:ee:4d:64:9b:e1: 64:0b:dd:9a:88:5d:98:09:e4:aa:51:5b:ba:b4:27: 05:cf:7a:94:f5:bd:0e:28:44:af:15:b1:73:34:63: 29:a7:75:7c:d8:5f:fd:da:40:5b:35:5f:bd:ae:49: ca:20:a7:19:c1:e0:2d:0e:26:68:38:fb:e8:5d:bd: 04:4c:82:02:48:e5:06:5d:84:1a:e1:27:14:8b:b2: c7:7d:fc:8d:9a:c5:ef:32:02:1f:9a:45:ab:32:3c: 5b:f7:be:2e:4b:81:61:7c:5d:63:7e:70:8e:2e:cf: a6:99:e8:47:af:99:a2:d7:e2:dc:28:50:c4:a2:f4: 4e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:00:89:B0:BA:59:20:16:22:2A:32:7B:61:D3:48:37:A1:70:72:A4 X509v3 Authority Key Identifier: keyid:60:94:29:AB:5B:0A:4F:C2:EF:4C:1B:8E:2F:40:BF:C5:20:51:40:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:af:3c:57:5e:0a:b0:01:50:ac:62:09:59:aa:c2:98:90:dd: 8c:ca:e3:e7:58:ee:da:87:f4:39:45:0b:fb:5f:75:bc:98:e5: 71:eb:63:e0:cf:eb:4b:01:9c:3a:c9:e8:1b:1b:63:6a:df:66: 5c:e0:ac:be:a6:04:b0:9e:cc:b4:de:fc:36:d2:53:07:e7:9f: b3:51:3d:57:7e:e6:85:db:3a:40:99:1e:c7:32:47:ce:37:cf: 00:5d:5a:91:5c:98:c6:ab:89:93:f4:0a:29:a7:33:5a:85:99: 37:74:25:6c:70:d1:c5:f1:21:a4:98:bf:d8:c7:11:7e:8b:79: ea:59:ed:c8:7d:19:1f:77:5f:83:ff:33:e5:c1:b1:8f:0b:e0: 34:d2:74:48:f0:e4:d5:d6:6a:c7:70:55:dc:76:61:6a:38:ae: 12:f6:00:e9:0d:4e:aa:a6:36:c2:a1:26:18:a8:51:5a:4d:f5: f5:02:16:7b:01:91:72:a5:2a:65:c0:f0:70:3d:2c:59:f3:5e: dc:e0:3d:cb:00:40:1c:96:ce:1e:22:5a:85:cb:57:52:c7:4c: ae:6b:45:01:67:53:90:fe:17:9a:fc:e3:a8:a4:91:e0:81:8f: dc:7b:64:f4:ae:d3:ee:26:51:86:0f:4a:97:9b:19:53:84:a0: 96:3c:d3:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIxSrTCWtmIvEuAFlfbClqre2vqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA5NDI5QUI1QjBBNEZDMkVGNEMxQjhFMkY0MEJGQzUy MDUxNDBBMjAeFw0yNjA1MTIxMDExMjVaFw0yNjA1MTMxMjEwMjVaMDMxMTAvBgNV BAMTKEExMDA4OUIwQkE1OTIwMTYyMjJBMzI3QjYxRDM0ODM3QTE3MDcyQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHPjd0oxQcVNmDSL+VYK/gvVVo ri5vscg5xBW7pLZL+uCbhbp6bhGk6AdFtxj8SlyFX7BnXoLZr58f3AGRcHyTWZPz oovBWZe5e5RLjGijLt8hl7dLx2ljUo2avuCTM6j2KoQb6wnqwvmo/jfUTKxYwHu9 FKiJCLIb7JpnowmWoL/uTWSb4WQL3ZqIXZgJ5KpRW7q0JwXPepT1vQ4oRK8VsXM0 YymndXzYX/3aQFs1X72uScogpxnB4C0OJmg4++hdvQRMggJI5QZdhBrhJxSLssd9 /I2axe8yAh+aRasyPFv3vi5LgWF8XWN+cI4uz6aZ6EevmaLX4twoUMSi9E57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoQCJsLpZIBYiKjJ7YdNIN6FwcqQwHwYDVR0j BBgwFoAUYJQpq1sKT8LvTBuOL0C/xSBRQKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAzOTYzODgtMmQ2Yi00NzZlLTk2M2QtMWNjMzgxMzc0YjFjLzEvNjA5NDI5QUI1 QjBBNEZDMkVGNEMxQjhFMkY0MEJGQzUyMDUxNDBBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MDk0MjlBQjVCMEE0RkMyRUY0QzFCOEUyRjQwQkZDNTIwNTE0 MEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvNjA5NDI5QUI1QjBBNEZDMkVGNEMxQjhFMkY0MEJG QzUyMDUxNDBBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSvPFdeCrABUKxiCVmqwpiQ3YzK4+dY7tqH 9DlFC/tfdbyY5XHrY+DP60sBnDrJ6BsbY2rfZlzgrL6mBLCezLTe/DbSUwfnn7NR PVd+5oXbOkCZHscyR843zwBdWpFcmMariZP0CimnM1qFmTd0JWxw0cXxIaSYv9jH EX6LeepZ7ch9GR93X4P/M+XBsY8L4DTSdEjw5NXWasdwVdx2YWo4rhL2AOkNTqqm NsKhJhioUVpN9fUCFnsBkXKlKmXA8HA9LFnzXtzgPcsAQByWzh4iWoXLV1LHTK5r RQFnU5D+F5r846ikkeCBj9x7ZPSu0+4mUYYPSpebGVOEoJY809A= -----END CERTIFICATE-----Generated at Wed May 13 01:36:53 2026 by rpki-client