$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft File: 101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft (raw, json) Hash identifier: lSrDFdflHpjTOcfi0cJ4+L8fOODGf6OZMFfIwtBF3p4= Subject key identifier: 76:95:B9:A0:0F:D5:B8:8B:3F:7F:9A:91:B5:C7:08:7F:FB:3D:5F:5C Authority key identifier: 10:1F:B7:84:02:0D:5C:A6:B8:B0:A4:2E:7A:29:97:4D:B0:41:EF:88 Certificate issuer: /CN=101FB784020D5CA6B8B0A42E7A29974DB041EF88 Certificate serial: 1E85CD0119813504FDF94B1E2F0FBD06ABFC34FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft Manifest number: 0E Signing time: Tue 12 May 2026 18:08:18 +0000 Manifest this update: Tue 12 May 2026 18:03:18 +0000 Manifest next update: Wed 13 May 2026 21:19:18 +0000 Files and hashes: 1: 101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl (hash: q4kKI8KzcuJ1Xo5QH40/8G+57uRpiQ+DI/VNgt1RvS8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:85:cd:01:19:81:35:04:fd:f9:4b:1e:2f:0f:bd:06:ab:fc:34:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101FB784020D5CA6B8B0A42E7A29974DB041EF88 Validity Not Before: May 12 18:03:18 2026 GMT Not After : May 13 21:19:18 2026 GMT Subject: CN=7695B9A00FD5B88B3F7F9A91B5C7087FFB3D5F5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:02:7b:2b:71:8a:88:21:b1:b8:5f:03:d8:b9: fa:21:f1:07:b9:07:eb:65:a9:50:79:2a:8c:24:6c: 4f:62:7c:92:c4:09:a9:3a:b4:24:ec:cc:ab:24:35: 6e:26:01:f0:6d:9c:8a:a5:18:bd:0d:8b:01:a9:5e: 3d:98:11:8b:32:e6:e1:c0:da:ea:27:a2:6f:e6:a3: 3b:6e:04:f6:5c:b9:05:d9:1c:97:b9:0b:d6:08:28: 7c:b0:1f:ed:41:87:b0:7f:ea:0b:0e:71:b8:b7:3b: 5c:fe:18:5b:f1:a4:cf:46:82:d8:26:e4:60:b2:7a: 12:67:23:34:98:a3:f7:c6:66:17:bc:0a:bd:1f:aa: d8:2c:57:cc:e0:d2:c3:05:b6:6b:56:9a:aa:c5:3a: 0e:c1:4c:e0:90:8d:cc:f8:c7:26:d1:f7:59:80:02: bf:11:30:b2:ea:ff:2f:be:60:ca:c5:d2:be:18:bc: 2d:27:cd:51:41:d5:a7:74:49:ba:a4:88:4e:8a:a8: e7:15:73:0c:c0:ac:b9:a3:08:33:26:9c:de:27:0f: 8a:10:b8:a2:90:4e:01:ba:1f:64:69:a3:e3:b7:cb: 2d:55:c3:df:83:c2:33:cc:7d:3e:da:d5:02:f0:e5: f9:40:2b:2c:8b:3a:a5:1c:7e:db:1e:3d:5d:84:ec: 09:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:95:B9:A0:0F:D5:B8:8B:3F:7F:9A:91:B5:C7:08:7F:FB:3D:5F:5C X509v3 Authority Key Identifier: keyid:10:1F:B7:84:02:0D:5C:A6:B8:B0:A4:2E:7A:29:97:4D:B0:41:EF:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e5:61:72:d4:cb:a6:7d:94:28:68:7e:fb:90:8e:91:ca:b8: 43:ef:b2:79:5b:5a:3e:8e:31:75:d3:07:55:f0:3e:b2:aa:eb: 90:9a:f0:e0:8d:ea:f4:89:f1:5a:84:1a:2c:06:af:16:4a:aa: d8:24:c1:d8:2e:d7:20:51:1a:29:bd:d3:cd:63:7f:1e:87:04: 0d:d6:bf:75:63:f7:29:df:1a:b0:a2:17:5f:38:3d:cc:45:55: 6c:79:79:cf:56:00:dd:ca:ac:e3:ed:b2:c7:6e:45:6f:a8:c4: 7c:c1:7e:8a:0f:17:d7:ae:8e:87:0a:4c:1e:8f:cb:68:5f:4d: 15:e9:82:ee:3a:2a:2e:b7:0b:25:a0:4e:d7:e2:26:0c:e3:29: a5:dc:6f:e1:6f:82:b8:f0:24:1c:c6:95:53:1b:e2:f6:27:ba: d5:90:8e:f4:ef:10:d1:4a:2c:60:bf:18:b6:9a:ea:b0:6b:bd: bc:35:da:ed:7e:79:b3:9f:a4:a7:8c:35:61:c9:2e:79:c5:cf: 3e:d5:44:72:49:fa:1d:4d:bf:1b:e7:47:91:e1:ea:94:13:cf: c5:0e:d9:34:82:b8:44:ce:80:ed:2b:ab:dc:e0:36:65:f7:f1: 80:dd:46:a3:d0:6b:e7:fe:b0:45:9b:0a:00:87:df:e1:b7:b9: 47:87:fd:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHoXNARmBNQT9+UseLw+9Bqv8NP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAxRkI3ODQwMjBENUNBNkI4QjBBNDJFN0EyOTk3NERC MDQxRUY4ODAeFw0yNjA1MTIxODAzMThaFw0yNjA1MTMyMTE5MThaMDMxMTAvBgNV BAMTKDc2OTVCOUEwMEZENUI4OEIzRjdGOUE5MUI1QzcwODdGRkIzRDVGNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWAnsrcYqIIbG4XwPYufoh8Qe5 B+tlqVB5KowkbE9ifJLECak6tCTszKskNW4mAfBtnIqlGL0NiwGpXj2YEYsy5uHA 2uonom/moztuBPZcuQXZHJe5C9YIKHywH+1Bh7B/6gsOcbi3O1z+GFvxpM9Ggtgm 5GCyehJnIzSYo/fGZhe8Cr0fqtgsV8zg0sMFtmtWmqrFOg7BTOCQjcz4xybR91mA Ar8RMLLq/y++YMrF0r4YvC0nzVFB1ad0SbqkiE6KqOcVcwzArLmjCDMmnN4nD4oQ uKKQTgG6H2Rpo+O3yy1Vw9+DwjPMfT7a1QLw5flAKyyLOqUcftsePV2E7AmRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdpW5oA/VuIs/f5qRtccIf/s9X1wwHwYDVR0j BBgwFoAUEB+3hAINXKa4sKQueimXTbBB74gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2ExNGJmZjItNDc4OS00MDE3LThmYWMtYmE1ZjYyM2U3ZWJjLzAvMTAxRkI3ODQw MjBENUNBNkI4QjBBNDJFN0EyOTk3NERCMDQxRUY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDFGQjc4NDAyMEQ1Q0E2QjhCMEE0MkU3QTI5OTc0REIwNDFF Rjg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2ExNGJmZjItNDc4OS00MDE3LThm YWMtYmE1ZjYyM2U3ZWJjLzAvMTAxRkI3ODQwMjBENUNBNkI4QjBBNDJFN0EyOTk3 NERCMDQxRUY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/lYXLUy6Z9lChofvuQjpHKuEPvsnlbWj6O MXXTB1XwPrKq65Ca8OCN6vSJ8VqEGiwGrxZKqtgkwdgu1yBRGim9081jfx6HBA3W v3Vj9ynfGrCiF184PcxFVWx5ec9WAN3KrOPtssduRW+oxHzBfooPF9eujocKTB6P y2hfTRXpgu46Ki63CyWgTtfiJgzjKaXcb+FvgrjwJBzGlVMb4vYnutWQjvTvENFK LGC/GLaa6rBrvbw12u1+ebOfpKeMNWHJLnnFzz7VRHJJ+h1NvxvnR5Hh6pQTz8UO 2TSCuETOgO0rq9zgNmX38YDdRqPQa+f+sEWbCgCH3+G3uUeH/f4= -----END CERTIFICATE-----Generated at Wed May 13 04:02:38 2026 by rpki-client