$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft File: F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft (raw, json) Hash identifier: z2BsBen2+b+GieoW+XSKFBXL1hui2TIdFE/HSRZ56UE= Subject key identifier: BE:6A:03:10:A2:88:0A:50:4A:F7:91:6C:DA:EB:14:F7:37:25:74:2E Authority key identifier: F9:6E:6B:3F:2C:8C:DE:D6:84:63:F5:F2:4C:79:EB:24:29:C9:2F:92 Certificate issuer: /CN=F96E6B3F2C8CDED68463F5F24C79EB2429C92F92 Certificate serial: 0294F629CE6D4E6D8E82446D7236C26E24F6829F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft Manifest number: 0D Signing time: Tue 12 May 2026 15:30:07 +0000 Manifest this update: Tue 12 May 2026 15:25:07 +0000 Manifest next update: Wed 13 May 2026 15:46:07 +0000 Files and hashes: 1: F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.crl (hash: ozpfkFcg89YnjfVi557HTGcq8INSp1CwRjo3nLMMEf8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.crl rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:94:f6:29:ce:6d:4e:6d:8e:82:44:6d:72:36:c2:6e:24:f6:82:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F96E6B3F2C8CDED68463F5F24C79EB2429C92F92 Validity Not Before: May 12 15:25:07 2026 GMT Not After : May 13 15:46:07 2026 GMT Subject: CN=BE6A0310A2880A504AF7916CDAEB14F73725742E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:16:38:e2:4e:a2:41:c9:21:2a:85:1a:b7:c6: dc:13:9e:c6:99:ba:ce:72:2f:19:44:68:a4:de:ec: 2a:6b:1d:f6:c4:14:c6:ca:b0:6c:31:67:b4:d2:c5: 62:a8:21:57:de:41:f1:d8:17:11:02:b7:b2:13:70: c3:56:94:11:8d:1f:ab:7c:ba:b4:09:3d:92:5e:f7: 30:73:26:56:cd:1b:8c:87:b9:80:37:c7:ad:fc:31: cc:cc:8c:5d:4b:45:19:74:77:99:5a:ee:17:de:9d: 48:59:b6:ac:ff:f4:59:58:74:7b:e1:8f:5b:35:12: 68:06:7c:13:5b:81:84:48:60:cd:79:42:9c:fe:e7: 64:2d:bf:e4:b7:9c:0b:bb:18:85:35:5b:f1:98:0d: ac:88:fa:9a:88:ed:ad:34:aa:c8:8b:94:fa:c1:d3: 6f:78:ec:51:a4:09:f1:46:4e:5f:11:b6:1e:1f:9e: ff:c8:46:44:0e:83:19:d2:2a:e1:98:9d:39:36:0e: 62:8a:5a:29:72:4d:e2:54:d3:35:8d:dc:52:cd:92: 1f:3e:49:18:9a:77:d8:73:9f:8f:75:c7:4b:04:fc: 98:9a:12:fd:c7:05:2e:09:be:6f:8f:13:b3:53:7c: 6a:3d:da:97:b5:f9:5c:b2:7f:92:56:7b:bd:85:bb: 15:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6A:03:10:A2:88:0A:50:4A:F7:91:6C:DA:EB:14:F7:37:25:74:2E X509v3 Authority Key Identifier: keyid:F9:6E:6B:3F:2C:8C:DE:D6:84:63:F5:F2:4C:79:EB:24:29:C9:2F:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:96:29:c9:3f:bd:63:55:67:6f:2e:17:1d:6e:57:3e:a6:d2: 11:2a:e5:be:56:55:77:28:a2:ab:ef:08:56:de:d8:6c:2c:5b: 8b:d0:6f:e0:d7:3e:f5:58:a5:dc:1b:10:3f:39:19:39:22:72: c5:27:90:07:75:9b:02:dd:40:27:5b:bd:db:8d:3d:7a:cd:84: be:e3:8d:5a:f0:96:d1:23:f4:00:38:99:5a:72:5b:f0:29:7f: 7b:ee:14:35:f1:1e:8c:68:02:fc:be:ed:b3:62:b1:c4:48:6e: a7:20:90:af:3f:7f:3c:21:b9:03:18:44:4d:1c:f4:85:24:bb: 91:45:44:44:3d:f5:ac:50:8c:c9:97:00:17:79:6c:37:ce:ae: 54:40:da:3d:e1:0f:21:cc:fa:38:ed:78:0e:31:2c:7b:59:a2: 0e:67:e3:54:17:fe:cc:cc:e7:99:69:0c:f8:f2:38:8b:24:2c: 3e:98:96:30:22:8a:b2:fe:74:8f:1e:0c:70:9f:2d:e3:b4:29: de:4b:b4:f0:4d:95:92:ef:fa:80:27:27:93:67:a5:f4:e2:4b: 62:bb:05:f8:73:5d:e6:33:1a:24:8b:61:bc:0c:2f:5b:d2:8b: 33:47:f0:75:ef:40:92:4b:5f:d1:a0:d9:63:77:3a:e5:7c:a4: e6:a0:d3:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUApT2Kc5tTm2OgkRtcjbCbiT2gp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2RTZCM0YyQzhDREVENjg0NjNGNUYyNEM3OUVCMjQy OUM5MkY5MjAeFw0yNjA1MTIxNTI1MDdaFw0yNjA1MTMxNTQ2MDdaMDMxMTAvBgNV BAMTKEJFNkEwMzEwQTI4ODBBNTA0QUY3OTE2Q0RBRUIxNEY3MzcyNTc0MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkFjjiTqJBySEqhRq3xtwTnsaZ us5yLxlEaKTe7CprHfbEFMbKsGwxZ7TSxWKoIVfeQfHYFxECt7ITcMNWlBGNH6t8 urQJPZJe9zBzJlbNG4yHuYA3x638MczMjF1LRRl0d5la7hfenUhZtqz/9FlYdHvh j1s1EmgGfBNbgYRIYM15Qpz+52Qtv+S3nAu7GIU1W/GYDayI+pqI7a00qsiLlPrB 02947FGkCfFGTl8Rth4fnv/IRkQOgxnSKuGYnTk2DmKKWilyTeJU0zWN3FLNkh8+ SRiad9hzn491x0sE/JiaEv3HBS4Jvm+PE7NTfGo92pe1+Vyyf5JWe72FuxXzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvmoDEKKIClBK95Fs2usU9zcldC4wHwYDVR0j BBgwFoAU+W5rPyyM3taEY/XyTHnrJCnJL5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGI2YWQyYjQtZWJlNS00Y2MyLTlkMDUtZWZkZDExZDYwZTJhLzAvRjk2RTZCM0Yy QzhDREVENjg0NjNGNUYyNEM3OUVCMjQyOUM5MkY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTZFNkIzRjJDOENERUQ2ODQ2M0Y1RjI0Qzc5RUIyNDI5Qzky RjkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGI2YWQyYjQtZWJlNS00Y2MyLTlk MDUtZWZkZDExZDYwZTJhLzAvRjk2RTZCM0YyQzhDREVENjg0NjNGNUYyNEM3OUVC MjQyOUM5MkY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESWKck/vWNVZ28uFx1uVz6m0hEq5b5WVXco oqvvCFbe2GwsW4vQb+DXPvVYpdwbED85GTkicsUnkAd1mwLdQCdbvduNPXrNhL7j jVrwltEj9AA4mVpyW/Apf3vuFDXxHoxoAvy+7bNiscRIbqcgkK8/fzwhuQMYRE0c 9IUku5FFREQ99axQjMmXABd5bDfOrlRA2j3hDyHM+jjteA4xLHtZog5n41QX/szM 55lpDPjyOIskLD6YljAiirL+dI8eDHCfLeO0Kd5LtPBNlZLv+oAnJ5NnpfTiS2K7 BfhzXeYzGiSLYbwML1vSizNH8HXvQJJLX9Gg2WN3OuV8pOag024= -----END CERTIFICATE-----Generated at Tue May 12 22:40:14 2026 by rpki-client