$ rpki-client -vvf rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft File: 11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft (raw, json) Hash identifier: LqmILqiPykCd6TWbUSYH+vCXmglqS5HqKWV6A0knLUQ= Subject key identifier: 8E:23:25:59:23:49:5B:3F:95:83:10:7E:01:95:72:9F:A2:64:F8:FE Authority key identifier: 11:16:76:03:08:2A:A6:8E:C7:45:8A:AA:D6:1E:FC:5B:0B:3B:ED:03 Certificate issuer: /CN=11167603082AA68EC7458AAAD61EFC5B0B3BED03 Certificate serial: 1B91BF4FA4B2A4F2FAD4EBFF2450D38CE2D81005 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11167603082AA68EC7458AAAD61EFC5B0B3BED03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft Manifest number: 0E Signing time: Tue 12 May 2026 15:55:25 +0000 Manifest this update: Tue 12 May 2026 15:50:25 +0000 Manifest next update: Wed 13 May 2026 19:14:25 +0000 Files and hashes: 1: 11167603082AA68EC7458AAAD61EFC5B0B3BED03.crl (hash: tZyLYNA47vBx4f7AzEigxOU7vBVWh6OJ2Hx2miAM9l0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.crl rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11167603082AA68EC7458AAAD61EFC5B0B3BED03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:91:bf:4f:a4:b2:a4:f2:fa:d4:eb:ff:24:50:d3:8c:e2:d8:10:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11167603082AA68EC7458AAAD61EFC5B0B3BED03 Validity Not Before: May 12 15:50:25 2026 GMT Not After : May 13 19:14:25 2026 GMT Subject: CN=8E23255923495B3F9583107E0195729FA264F8FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:13:af:c7:24:75:78:47:4b:f9:ad:c2:0f:4c: f9:66:32:ab:48:2d:84:0c:7b:0a:de:25:3b:4a:00: c5:8c:00:85:7f:3d:67:48:20:23:ae:ef:f3:59:71: 36:81:51:12:08:7c:b0:f9:d6:80:1a:66:0d:b3:d0: 39:c8:e1:cc:97:8c:26:a6:8d:9c:6e:89:5e:f8:5e: 8e:05:23:4c:5e:f3:34:d7:27:83:bd:01:25:70:51: 9f:2f:e5:5a:20:9d:0c:ef:6b:03:00:74:73:ba:df: ce:47:af:a7:82:e8:22:61:47:c8:fb:b6:44:da:70: d2:cc:97:9b:82:7d:d0:3c:f7:4d:29:a7:e6:bf:76: 2b:86:e6:d6:6a:0c:1f:b6:de:5f:9d:50:b3:f5:47: b4:4a:f1:29:3e:b5:88:1c:38:b1:61:c6:20:a7:1b: b0:98:e3:7e:63:67:51:cb:18:2c:95:5b:05:41:f3: bb:08:27:69:d9:54:46:f4:70:36:9b:40:61:5c:a0: 64:3c:96:8b:ab:8b:44:c3:3f:57:04:5a:68:93:94: e5:ad:f3:59:4d:52:3c:9a:03:46:e3:d3:d2:43:15: ef:2e:63:da:9b:de:72:e9:92:da:a0:54:9e:44:1f: 64:fb:d8:02:84:01:e4:10:37:a5:b7:58:68:a3:8c: 18:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:23:25:59:23:49:5B:3F:95:83:10:7E:01:95:72:9F:A2:64:F8:FE X509v3 Authority Key Identifier: keyid:11:16:76:03:08:2A:A6:8E:C7:45:8A:AA:D6:1E:FC:5B:0B:3B:ED:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11167603082AA68EC7458AAAD61EFC5B0B3BED03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:83:50:cd:d6:26:71:8a:77:86:01:12:7d:68:96:67:1f:ed: 2a:66:73:65:d0:98:b5:b3:d5:be:0e:31:ac:29:1f:05:b5:36: 35:46:c7:1e:79:f3:32:6e:14:64:2f:7d:91:ca:75:de:cf:5e: 8b:77:b8:be:c5:ff:d7:0c:3f:32:ff:fe:58:fc:a8:aa:d0:57: 9b:94:23:23:60:19:61:50:2a:58:67:74:6a:00:7e:48:14:35: b5:e0:1e:ef:96:9e:79:1b:37:bc:33:dd:65:db:c3:07:12:1b: 87:73:f7:fa:5f:37:f8:8b:a7:f7:fe:7c:fa:ab:60:52:f0:9e: fe:90:8e:36:1f:22:e4:1d:bf:b1:c7:93:70:ba:62:03:49:15: 05:98:e0:05:1f:d5:52:71:84:37:1b:0b:c3:36:88:89:53:0e: 4b:5a:b1:34:41:cc:83:e8:3c:a9:70:d9:e0:62:16:fa:e0:90: ec:16:92:58:5a:36:32:c4:e6:c0:ab:33:bf:c7:14:8c:63:33: cf:99:67:76:d3:bb:a0:4e:63:2f:93:0b:bd:71:2d:24:31:f9: 73:53:1f:69:d7:3e:fd:9d:e5:11:ce:f9:d2:00:9c:c7:ff:4b: 6b:e6:30:a4:02:33:bf:19:bd:e0:ab:49:0b:a7:cf:9d:38:ad: 0d:e6:f0:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG5G/T6SypPL61Ov/JFDTjOLYEAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTExNjc2MDMwODJBQTY4RUM3NDU4QUFBRDYxRUZDNUIw QjNCRUQwMzAeFw0yNjA1MTIxNTUwMjVaFw0yNjA1MTMxOTE0MjVaMDMxMTAvBgNV BAMTKDhFMjMyNTU5MjM0OTVCM0Y5NTgzMTA3RTAxOTU3MjlGQTI2NEY4RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVE6/HJHV4R0v5rcIPTPlmMqtI LYQMewreJTtKAMWMAIV/PWdIICOu7/NZcTaBURIIfLD51oAaZg2z0DnI4cyXjCam jZxuiV74Xo4FI0xe8zTXJ4O9ASVwUZ8v5VognQzvawMAdHO6385Hr6eC6CJhR8j7 tkTacNLMl5uCfdA8900pp+a/diuG5tZqDB+23l+dULP1R7RK8Sk+tYgcOLFhxiCn G7CY435jZ1HLGCyVWwVB87sIJ2nZVEb0cDabQGFcoGQ8louri0TDP1cEWmiTlOWt 81lNUjyaA0bj09JDFe8uY9qb3nLpktqgVJ5EH2T72AKEAeQQN6W3WGijjBhHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjiMlWSNJWz+VgxB+AZVyn6Jk+P4wHwYDVR0j BBgwFoAUERZ2Awgqpo7HRYqq1h78Wws77QMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQ3NjVmMDYtYjRjOS00N2MxLWFkOWEtMDYxMmM3YzAyZDFjLzAvMTExNjc2MDMw ODJBQTY4RUM3NDU4QUFBRDYxRUZDNUIwQjNCRUQwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTE2NzYwMzA4MkFBNjhFQzc0NThBQUFENjFFRkM1QjBCM0JF RDAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQ3NjVmMDYtYjRjOS00N2MxLWFk OWEtMDYxMmM3YzAyZDFjLzAvMTExNjc2MDMwODJBQTY4RUM3NDU4QUFBRDYxRUZD NUIwQjNCRUQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6DUM3WJnGKd4YBEn1olmcf7Spmc2XQmLWz 1b4OMawpHwW1NjVGxx558zJuFGQvfZHKdd7PXot3uL7F/9cMPzL//lj8qKrQV5uU IyNgGWFQKlhndGoAfkgUNbXgHu+WnnkbN7wz3WXbwwcSG4dz9/pfN/iLp/f+fPqr YFLwnv6QjjYfIuQdv7HHk3C6YgNJFQWY4AUf1VJxhDcbC8M2iIlTDktasTRBzIPo PKlw2eBiFvrgkOwWklhaNjLE5sCrM7/HFIxjM8+ZZ3bTu6BOYy+TC71xLSQx+XNT H2nXPv2d5RHO+dIAnMf/S2vmMKQCM78ZveCrSQunz504rQ3m8Ok= -----END CERTIFICATE-----Generated at Wed May 13 05:58:17 2026 by rpki-client