$ rpki-client -vvf rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft File: F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft (raw, json) Hash identifier: XTwYi10fDNMZ62oK5ks6cR7yFJNci4z7u/Om54FZ3wo= Subject key identifier: E8:1D:CF:32:93:55:4E:39:8E:63:78:FE:17:D5:7E:11:91:C7:9F:25 Authority key identifier: F5:A8:75:F4:B1:94:D8:FE:EE:E6:58:64:23:80:16:F5:BA:01:1B:F3 Certificate issuer: /CN=F5A875F4B194D8FEEEE65864238016F5BA011BF3 Certificate serial: 33B5F5130EDA2A7FC340A6169B80F55282347BD1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5A875F4B194D8FEEEE65864238016F5BA011BF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft Manifest number: 0E Signing time: Tue 12 May 2026 21:08:29 +0000 Manifest this update: Tue 12 May 2026 21:03:29 +0000 Manifest next update: Thu 14 May 2026 00:51:29 +0000 Files and hashes: 1: F5A875F4B194D8FEEEE65864238016F5BA011BF3.crl (hash: HOBDBMm9gwXWXulR6IPoB2mc2Ebh0dIQ9DDcqu1UdOU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.crl rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5A875F4B194D8FEEEE65864238016F5BA011BF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b5:f5:13:0e:da:2a:7f:c3:40:a6:16:9b:80:f5:52:82:34:7b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A875F4B194D8FEEEE65864238016F5BA011BF3 Validity Not Before: May 12 21:03:29 2026 GMT Not After : May 14 00:51:29 2026 GMT Subject: CN=E81DCF3293554E398E6378FE17D57E1191C79F25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:b7:07:47:ee:08:55:79:69:c8:01:52:64: 2f:9d:05:3c:c8:4d:a2:69:9c:16:3b:8a:64:78:b2: 15:bd:09:7f:eb:d1:24:ee:61:e7:39:b9:b5:33:0f: 75:1d:8f:30:f0:df:3c:76:8e:cf:17:7a:2c:f6:02: 60:c1:64:18:c3:78:6a:bc:15:b9:d3:b6:7c:50:45: 5d:50:4a:44:e8:71:57:3b:3b:f0:79:42:ba:d8:6b: 78:95:47:6f:07:a1:1d:75:16:bd:57:54:59:ed:7d: be:ca:a5:f2:4f:a0:8a:e0:df:6e:3d:14:48:90:a8: 39:e7:05:22:1a:c1:5a:6d:a3:e2:94:c1:58:f9:7b: 76:f7:ae:81:74:52:50:cb:89:1c:bb:20:84:36:51: ae:46:fd:0e:82:e5:1d:c5:ec:bb:e2:15:8a:55:5f: 2d:1c:db:46:76:02:b7:fb:7e:87:7e:63:76:56:e9: 28:7a:05:86:42:3e:19:88:8e:18:35:9e:7a:37:28: 9d:d1:97:ac:4d:c5:f3:d0:25:c8:e6:f5:dd:d3:94: 27:d8:95:38:6f:91:f1:74:44:f4:92:6a:ac:f1:a6: 64:83:64:04:4b:16:a3:08:57:e2:d9:5c:73:f4:ac: 40:82:43:34:61:e8:2a:08:b4:e9:00:d1:94:83:20: 92:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1D:CF:32:93:55:4E:39:8E:63:78:FE:17:D5:7E:11:91:C7:9F:25 X509v3 Authority Key Identifier: keyid:F5:A8:75:F4:B1:94:D8:FE:EE:E6:58:64:23:80:16:F5:BA:01:1B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5A875F4B194D8FEEEE65864238016F5BA011BF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:68:d7:7e:5b:8e:a7:30:e9:69:f7:91:3f:53:18:69:20:41: 93:b4:de:ec:4d:74:c4:fe:ab:3d:24:23:7a:90:8e:e6:00:9a: 43:4b:ca:36:63:f7:c1:e8:f4:31:af:47:20:3c:27:84:9c:71: 7d:43:80:13:c9:e8:02:f3:51:a7:29:f0:ac:06:a7:5a:9b:8e: eb:14:e5:0f:e9:7b:83:a4:16:b4:ef:37:29:a8:dc:84:ae:f1: 94:8a:41:9f:52:5e:96:cf:d0:41:eb:49:5f:b5:e9:86:61:53: 83:45:8a:a9:5e:c2:4c:93:40:e2:5b:9b:87:34:5b:e7:79:5d: 36:c9:fa:4d:23:82:ca:a0:aa:98:3f:11:52:70:c6:3f:5c:e0: 71:e4:db:65:b3:93:8d:e4:f2:4f:44:70:98:40:fc:1d:c7:fb: 67:7c:ce:a9:82:7d:d2:8a:2d:f1:d6:78:ca:c5:08:e9:a2:7d: 79:de:82:61:72:f2:12:93:1f:e0:1a:ac:4c:2e:63:c3:6c:5d: 7b:28:7f:29:1b:72:7a:d5:fd:1c:d3:95:9f:52:0b:8c:52:7e: cc:bd:0c:30:b9:a7:8f:54:3f:7d:98:25:78:54:f3:9b:e0:2c: 8a:d1:e5:2d:6c:de:8b:d3:7d:f6:9b:da:4e:03:9e:da:7d:24: 9e:80:2b:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM7X1Ew7aKn/DQKYWm4D1UoI0e9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBODc1RjRCMTk0RDhGRUVFRTY1ODY0MjM4MDE2RjVC QTAxMUJGMzAeFw0yNjA1MTIyMTAzMjlaFw0yNjA1MTQwMDUxMjlaMDMxMTAvBgNV BAMTKEU4MURDRjMyOTM1NTRFMzk4RTYzNzhGRTE3RDU3RTExOTFDNzlGMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcLcHR+4IVXlpyAFSZC+dBTzI TaJpnBY7imR4shW9CX/r0STuYec5ubUzD3UdjzDw3zx2js8Xeiz2AmDBZBjDeGq8 FbnTtnxQRV1QSkTocVc7O/B5QrrYa3iVR28HoR11Fr1XVFntfb7KpfJPoIrg3249 FEiQqDnnBSIawVpto+KUwVj5e3b3roF0UlDLiRy7IIQ2Ua5G/Q6C5R3F7LviFYpV Xy0c20Z2Arf7fod+Y3ZW6Sh6BYZCPhmIjhg1nno3KJ3Rl6xNxfPQJcjm9d3TlCfY lThvkfF0RPSSaqzxpmSDZARLFqMIV+LZXHP0rECCQzRh6CoItOkA0ZSDIJI9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6B3PMpNVTjmOY3j+F9V+EZHHnyUwHwYDVR0j BBgwFoAU9ah19LGU2P7u5lhkI4AW9boBG/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjUzNTg1MGUtNGJmYS00NTA0LWJiZWMtNmM2YjJjYzNiYTI5LzAvRjVBODc1RjRC MTk0RDhGRUVFRTY1ODY0MjM4MDE2RjVCQTAxMUJGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNUE4NzVGNEIxOTREOEZFRUVFNjU4NjQyMzgwMTZGNUJBMDEx QkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjUzNTg1MGUtNGJmYS00NTA0LWJi ZWMtNmM2YjJjYzNiYTI5LzAvRjVBODc1RjRCMTk0RDhGRUVFRTY1ODY0MjM4MDE2 RjVCQTAxMUJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFo135bjqcw6Wn3kT9TGGkgQZO03uxNdMT+ qz0kI3qQjuYAmkNLyjZj98Ho9DGvRyA8J4SccX1DgBPJ6ALzUacp8KwGp1qbjusU 5Q/pe4OkFrTvNymo3ISu8ZSKQZ9SXpbP0EHrSV+16YZhU4NFiqlewkyTQOJbm4c0 W+d5XTbJ+k0jgsqgqpg/EVJwxj9c4HHk22Wzk43k8k9EcJhA/B3H+2d8zqmCfdKK LfHWeMrFCOmifXnegmFy8hKTH+AarEwuY8NsXXsofykbcnrV/RzTlZ9SC4xSfsy9 DDC5p49UP32YJXhU85vgLIrR5S1s3ovTffab2k4Dntp9JJ6AKz0= -----END CERTIFICATE-----Generated at Wed May 13 01:14:24 2026 by rpki-client