$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft File: 583609807E4BA80D0B54C99C333B7590A6907BD4.mft (raw, json) Hash identifier: yziTsPxKn9V2bEj1QFHdB/6wnQjy6MXH8io2Be3Xtbc= Subject key identifier: 03:2E:9B:04:C0:27:A7:48:96:7B:73:EB:C3:FD:A9:2C:BC:A9:78:45 Authority key identifier: 58:36:09:80:7E:4B:A8:0D:0B:54:C9:9C:33:3B:75:90:A6:90:7B:D4 Certificate issuer: /CN=583609807E4BA80D0B54C99C333B7590A6907BD4 Certificate serial: 0AD8C6E4FAD6E6A0E4F918C54ABC73B13E544AA5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft Manifest number: 0E Signing time: Tue 12 May 2026 12:42:57 +0000 Manifest this update: Tue 12 May 2026 12:37:57 +0000 Manifest next update: Wed 13 May 2026 12:53:57 +0000 Files and hashes: 1: 583609807E4BA80D0B54C99C333B7590A6907BD4.crl (hash: /TG0ZSRy3sS2OPvuqbrifR06FYsadZx1xaLyIN5Jw8A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.crl rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d8:c6:e4:fa:d6:e6:a0:e4:f9:18:c5:4a:bc:73:b1:3e:54:4a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583609807E4BA80D0B54C99C333B7590A6907BD4 Validity Not Before: May 12 12:37:57 2026 GMT Not After : May 13 12:53:57 2026 GMT Subject: CN=032E9B04C027A748967B73EBC3FDA92CBCA97845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f0:16:03:9c:06:7c:ba:87:dc:00:c4:79:a3: b3:b4:6c:cb:8e:64:3a:fc:7d:d4:e5:59:c5:d3:0f: 56:63:65:27:55:b7:07:53:ce:a5:5e:da:a1:15:86: 1c:89:17:fb:55:4e:9f:df:7d:41:0e:20:05:11:64: 73:38:0d:aa:ec:bb:0a:db:b7:49:ad:50:15:e1:e9: bb:ec:36:4a:b8:99:95:20:1b:33:b9:74:3e:c0:ef: 3e:00:44:34:02:9f:73:16:f9:98:67:cb:72:54:ae: 57:e3:14:e7:1e:f8:5c:2f:d9:e1:c3:1a:d4:55:dc: 8f:e8:9b:2b:5d:e9:0d:b2:bc:5b:25:7f:c7:7b:86: bb:d1:1c:60:4f:d5:65:23:4c:eb:33:c9:18:9a:2f: 5b:c4:81:8f:a3:d0:e5:81:26:e3:11:b8:0f:6a:b0: 56:68:ee:48:e4:4c:76:d6:55:22:12:7a:94:97:96: b7:b3:92:67:6f:3d:09:32:1b:af:bf:70:94:9f:9e: f1:66:32:61:a2:fe:8d:d1:34:f7:0d:c8:cd:7a:f2: 57:93:c3:dc:1d:08:64:63:c5:87:27:75:a0:5a:e2: fa:f5:7b:b2:49:01:09:64:fe:f7:6e:ba:c2:cc:89: 98:7c:a7:75:2b:b9:32:ad:b9:fe:c0:f0:23:7f:be: 0e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2E:9B:04:C0:27:A7:48:96:7B:73:EB:C3:FD:A9:2C:BC:A9:78:45 X509v3 Authority Key Identifier: keyid:58:36:09:80:7E:4B:A8:0D:0B:54:C9:9C:33:3B:75:90:A6:90:7B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:9b:39:a0:96:d6:90:87:26:cc:39:2b:3c:9d:24:3e:3d:46: 9f:a6:16:78:07:08:a1:29:3e:11:48:f3:db:13:ba:0b:91:61: 82:45:bc:21:5b:d1:3d:74:bf:ef:a3:77:7e:3c:1e:27:92:92: 96:0d:41:18:27:13:7b:98:08:f7:3a:88:79:72:03:78:ce:93: 73:75:28:e5:e6:2c:1a:45:5d:20:96:88:61:18:1f:54:c4:45: 25:de:5a:11:4d:dd:17:9c:d5:f8:cd:89:14:9b:c2:c5:ba:15: e0:18:3b:f5:42:02:6d:c4:73:84:f1:bb:33:c2:c2:73:f5:21: 1e:5f:d7:e2:d8:c7:d9:79:3c:37:bf:82:f6:24:3b:29:ae:27: f2:84:cb:1b:1e:08:2f:c6:b8:56:79:83:08:bc:8e:ee:36:16: b3:2f:41:d6:dc:c1:05:13:48:e2:7c:63:c3:21:31:bc:56:b5: 51:65:30:47:37:5b:a9:e0:60:f4:e0:52:29:00:b2:f2:d2:b4: 01:68:71:1c:d0:b8:28:34:14:8a:f3:6c:19:70:10:59:e5:83: 23:f9:ac:01:19:99:cd:97:dc:51:b1:ad:c5:90:3c:6f:1a:4c: 2f:d4:b2:e0:c7:91:64:6d:f5:ae:42:c8:86:27:78:45:43:9f: c1:6b:9b:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCtjG5PrW5qDk+RjFSrxzsT5USqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgzNjA5ODA3RTRCQTgwRDBCNTRDOTlDMzMzQjc1OTBB NjkwN0JENDAeFw0yNjA1MTIxMjM3NTdaFw0yNjA1MTMxMjUzNTdaMDMxMTAvBgNV BAMTKDAzMkU5QjA0QzAyN0E3NDg5NjdCNzNFQkMzRkRBOTJDQkNBOTc4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI8BYDnAZ8uofcAMR5o7O0bMuO ZDr8fdTlWcXTD1ZjZSdVtwdTzqVe2qEVhhyJF/tVTp/ffUEOIAURZHM4Darsuwrb t0mtUBXh6bvsNkq4mZUgGzO5dD7A7z4ARDQCn3MW+Zhny3JUrlfjFOce+Fwv2eHD GtRV3I/omytd6Q2yvFslf8d7hrvRHGBP1WUjTOszyRiaL1vEgY+j0OWBJuMRuA9q sFZo7kjkTHbWVSISepSXlrezkmdvPQkyG6+/cJSfnvFmMmGi/o3RNPcNyM168leT w9wdCGRjxYcndaBa4vr1e7JJAQlk/vduusLMiZh8p3UruTKtuf7A8CN/vg5bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAy6bBMAnp0iWe3Prw/2pLLypeEUwHwYDVR0j BBgwFoAUWDYJgH5LqA0LVMmcMzt1kKaQe9QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NjMjJjMmUtYWNhNy00MmYyLTliOGEtOGRhN2Q0ZTJiYTAwLzAvNTgzNjA5ODA3 RTRCQTgwRDBCNTRDOTlDMzMzQjc1OTBBNjkwN0JENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODM2MDk4MDdFNEJBODBEMEI1NEM5OUMzMzNCNzU5MEE2OTA3 QkQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvNTgzNjA5ODA3RTRCQTgwRDBCNTRDOTlDMzMzQjc1 OTBBNjkwN0JENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+bOaCW1pCHJsw5KzydJD49Rp+mFngHCKEp PhFI89sTuguRYYJFvCFb0T10v++jd348HieSkpYNQRgnE3uYCPc6iHlyA3jOk3N1 KOXmLBpFXSCWiGEYH1TERSXeWhFN3Rec1fjNiRSbwsW6FeAYO/VCAm3Ec4TxuzPC wnP1IR5f1+LYx9l5PDe/gvYkOymuJ/KEyxseCC/GuFZ5gwi8ju42FrMvQdbcwQUT SOJ8Y8MhMbxWtVFlMEc3W6ngYPTgUikAsvLStAFocRzQuCg0FIrzbBlwEFnlgyP5 rAEZmc2X3FGxrcWQPG8aTC/UsuDHkWRt9a5CyIYneEVDn8FrmyU= -----END CERTIFICATE-----Generated at Tue May 12 22:56:35 2026 by rpki-client