$ rpki-client -vvf rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft File: 083DF9FCF3773A042D5A64A6401BE726552524C0.mft (raw, json) Hash identifier: FPLJR0f2/2/gQ3NBhVYyRO0CyejJjbaUM15TAv1RGlw= Subject key identifier: F2:46:20:9D:16:12:DC:64:EA:93:90:35:DE:C0:50:7A:AC:D1:1D:39 Authority key identifier: 08:3D:F9:FC:F3:77:3A:04:2D:5A:64:A6:40:1B:E7:26:55:25:24:C0 Certificate issuer: /CN=083DF9FCF3773A042D5A64A6401BE726552524C0 Certificate serial: 209F965C4C3238BBA787D05EA536091CF22B1C14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft Manifest number: 0E Signing time: Tue 12 May 2026 22:15:33 +0000 Manifest this update: Tue 12 May 2026 22:10:33 +0000 Manifest next update: Thu 14 May 2026 01:42:33 +0000 Files and hashes: 1: 083DF9FCF3773A042D5A64A6401BE726552524C0.crl (hash: wXCgNMaoIL4Uj/Ach08WbeA3Uqixb/2E8SWPbpkfwqQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.crl rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:9f:96:5c:4c:32:38:bb:a7:87:d0:5e:a5:36:09:1c:f2:2b:1c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=083DF9FCF3773A042D5A64A6401BE726552524C0 Validity Not Before: May 12 22:10:33 2026 GMT Not After : May 14 01:42:33 2026 GMT Subject: CN=F246209D1612DC64EA939035DEC0507AACD11D39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e1:f8:ac:cf:5d:b3:8f:e9:be:13:5f:c1:84: 4e:b1:41:7a:ec:19:82:d7:18:c6:85:22:d2:cd:57: 4e:e1:27:c2:f4:df:02:6b:e2:52:fc:1e:ad:2d:25: 2b:f9:1e:36:c0:80:38:b3:c9:9d:79:48:60:05:14: c1:1c:8d:9e:7a:29:14:98:80:88:00:ce:11:1d:70: ff:81:bf:0f:c6:28:6d:03:d6:bc:49:c7:36:38:0b: ed:8d:43:a3:6b:27:6a:bf:7c:8a:43:ef:9e:58:e9: 0b:bc:ab:2b:c2:eb:54:ca:30:65:75:9a:ba:20:08: f0:23:f5:a7:f3:a1:56:c0:45:77:8f:c7:12:9a:0a: 74:4d:89:a5:d9:3f:39:5a:b1:47:87:65:12:1a:4b: 95:aa:3d:fd:72:8b:c3:d3:27:c1:34:7d:ef:9f:d9: f7:f9:d3:10:de:01:d9:ae:3e:f9:a0:f8:11:c4:22: 69:8a:84:57:26:a2:a1:43:6b:f2:f4:a2:3a:b5:3c: 27:ba:7d:a6:eb:41:25:b6:55:b8:07:c6:d0:ec:ba: 68:5b:eb:43:a1:40:7e:aa:92:57:f9:81:55:91:4f: aa:15:a0:06:fa:f5:39:f1:81:d4:16:47:38:af:14: 46:47:0e:3b:d6:c8:bb:74:d2:84:9e:ac:67:13:01: cf:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:46:20:9D:16:12:DC:64:EA:93:90:35:DE:C0:50:7A:AC:D1:1D:39 X509v3 Authority Key Identifier: keyid:08:3D:F9:FC:F3:77:3A:04:2D:5A:64:A6:40:1B:E7:26:55:25:24:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:be:f1:1f:40:c0:22:15:89:f0:3b:10:13:e8:a7:69:d2:7f: 5e:88:6a:c7:77:68:71:e5:52:0f:f2:c7:27:35:3b:e1:aa:f2: b6:f6:c0:e5:28:d1:71:26:9e:9a:4b:77:e2:ec:9b:f3:b6:f5: a6:de:62:ca:49:c9:47:55:e0:55:78:37:fe:4a:70:ef:05:a2: e6:22:12:1f:cd:e3:a1:94:13:fd:09:1f:27:b3:e3:d1:86:41: 19:c0:dd:69:b1:f8:c4:9c:4f:f0:94:4c:7e:4e:6a:6a:2d:74: 89:86:53:cd:e9:57:5e:96:9b:d0:e7:4e:09:37:0e:63:18:38: 6e:3e:81:9f:33:57:c1:b8:20:2a:b5:dc:d9:23:d6:9a:e3:ff: 9e:17:0c:13:7e:e4:fd:d9:6b:6d:e2:ab:b8:be:6b:d4:5f:bf: 8c:87:df:27:e8:62:45:e4:37:7b:22:ce:07:89:0c:d9:26:3c: ca:75:c1:8f:3d:d0:f0:aa:b0:1b:7b:73:cf:fd:2c:4a:10:b3: 6a:ae:6b:c5:2b:be:3e:83:59:c2:b3:f3:c9:cf:92:71:80:b5: 78:1e:1f:ff:ab:81:a5:12:bb:c5:ed:92:93:19:52:d1:f3:66: cb:91:5e:92:94:eb:a2:d1:a3:a2:a0:87:1c:1f:5d:e9:95:0a: 68:09:7d:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIJ+WXEwyOLunh9BepTYJHPIrHBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgzREY5RkNGMzc3M0EwNDJENUE2NEE2NDAxQkU3MjY1 NTI1MjRDMDAeFw0yNjA1MTIyMjEwMzNaFw0yNjA1MTQwMTQyMzNaMDMxMTAvBgNV BAMTKEYyNDYyMDlEMTYxMkRDNjRFQTkzOTAzNURFQzA1MDdBQUNEMTFEMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ4fisz12zj+m+E1/BhE6xQXrs GYLXGMaFItLNV07hJ8L03wJr4lL8Hq0tJSv5HjbAgDizyZ15SGAFFMEcjZ56KRSY gIgAzhEdcP+Bvw/GKG0D1rxJxzY4C+2NQ6NrJ2q/fIpD755Y6Qu8qyvC61TKMGV1 mrogCPAj9afzoVbARXePxxKaCnRNiaXZPzlasUeHZRIaS5WqPf1yi8PTJ8E0fe+f 2ff50xDeAdmuPvmg+BHEImmKhFcmoqFDa/L0ojq1PCe6fabrQSW2VbgHxtDsumhb 60OhQH6qklf5gVWRT6oVoAb69TnxgdQWRzivFEZHDjvWyLt00oSerGcTAc/dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8kYgnRYS3GTqk5A13sBQeqzRHTkwHwYDVR0j BBgwFoAUCD35/PN3OgQtWmSmQBvnJlUlJMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM1MjI1YTYtMDVkMy00NDRjLWJmM2YtMTFlM2VmN2I2YTE1LzAvMDgzREY5RkNG Mzc3M0EwNDJENUE2NEE2NDAxQkU3MjY1NTI1MjRDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODNERjlGQ0YzNzczQTA0MkQ1QTY0QTY0MDFCRTcyNjU1MjUy NEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMDgzREY5RkNGMzc3M0EwNDJENUE2NEE2NDAxQkU3 MjY1NTI1MjRDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHC+8R9AwCIVifA7EBPop2nSf16Iasd3aHHl Ug/yxyc1O+Gq8rb2wOUo0XEmnppLd+Lsm/O29abeYspJyUdV4FV4N/5KcO8FouYi Eh/N46GUE/0JHyez49GGQRnA3Wmx+MScT/CUTH5OamotdImGU83pV16Wm9DnTgk3 DmMYOG4+gZ8zV8G4ICq13Nkj1prj/54XDBN+5P3Za23iq7i+a9Rfv4yH3yfoYkXk N3sizgeJDNkmPMp1wY890PCqsBt7c8/9LEoQs2qua8Urvj6DWcKz88nPknGAtXge H/+rgaUSu8XtkpMZUtHzZsuRXpKU66LRo6KghxwfXemVCmgJffA= -----END CERTIFICATE-----Generated at Wed May 13 02:12:05 2026 by rpki-client