$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft File: D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft (raw, json) Hash identifier: yZn9Nl3PMYIJC9M1DbWelWWe57JFaEI1408BWEiEpHQ= Subject key identifier: D8:40:10:67:46:94:70:F5:53:6E:0D:F0:3C:7F:6E:3B:AA:44:70:18 Authority key identifier: D3:E1:B6:C7:3E:02:7C:4D:04:2C:B7:43:48:A6:3B:4A:28:C4:3E:28 Certificate issuer: /CN=D3E1B6C73E027C4D042CB74348A63B4A28C43E28 Certificate serial: 3DAB9199F22063C77C4B3F9A450F8DDED91F3130 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft Manifest number: 0E Signing time: Tue 12 May 2026 16:15:48 +0000 Manifest this update: Tue 12 May 2026 16:10:48 +0000 Manifest next update: Wed 13 May 2026 17:13:48 +0000 Files and hashes: 1: D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl (hash: RZRbs9i19NrcQomRoCh1TYxTZwwUPJ2ZIRv9sUqHGT0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ab:91:99:f2:20:63:c7:7c:4b:3f:9a:45:0f:8d:de:d9:1f:31:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3E1B6C73E027C4D042CB74348A63B4A28C43E28 Validity Not Before: May 12 16:10:48 2026 GMT Not After : May 13 17:13:48 2026 GMT Subject: CN=D8401067469470F5536E0DF03C7F6E3BAA447018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2f:c0:47:cd:75:69:c0:e5:af:fa:ac:ed:70: 2e:7c:e9:df:4c:71:87:01:57:8e:71:93:47:bb:4b: 04:4f:b4:70:9f:e9:32:69:ae:90:43:01:58:47:4a: 3a:c1:5c:f4:b6:c1:be:fe:4d:cf:b4:f4:e6:55:d3: 93:6e:22:0a:01:55:e2:cd:89:eb:8b:ed:02:64:c7: ee:9a:c5:2d:af:80:af:52:bd:fa:3e:5a:17:98:5d: ff:50:29:8d:42:d9:f9:06:92:71:81:a1:df:7f:93: c9:7d:8d:2a:a6:66:4e:5e:e2:09:56:55:ae:f3:05: bf:52:e3:a5:51:59:15:85:63:f4:ac:f9:8b:7f:85: c4:87:cd:f7:7e:da:b9:31:94:ad:e0:21:42:ef:ba: 4d:b0:42:de:40:d8:8f:85:72:a7:ba:c6:2c:06:54: b4:61:42:d0:89:d6:52:72:30:0c:92:bb:be:72:89: 88:6a:e6:45:ae:76:32:73:55:10:1c:47:2b:52:15: 2d:13:3d:9e:b6:0e:f0:3e:05:b9:01:55:15:b8:9b: 35:79:bb:50:21:c6:23:9f:f1:2f:0b:64:77:79:23: 4b:bc:de:60:f0:4f:f0:e3:de:91:15:71:2f:47:35: 36:23:5d:25:87:16:17:4f:c4:7e:e8:ac:90:74:4f: 32:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:40:10:67:46:94:70:F5:53:6E:0D:F0:3C:7F:6E:3B:AA:44:70:18 X509v3 Authority Key Identifier: keyid:D3:E1:B6:C7:3E:02:7C:4D:04:2C:B7:43:48:A6:3B:4A:28:C4:3E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:41:39:d4:4a:bf:db:7f:de:66:00:74:29:50:44:3d:57:73: 10:bc:5a:f2:c3:49:af:94:6a:ff:82:07:77:cc:b5:4c:8e:37: 08:62:2c:f1:57:2b:7f:a2:43:e6:e2:c6:f2:31:b6:e1:21:70: 39:41:f0:0a:07:10:a4:fa:ef:dc:47:b9:74:40:72:10:d7:16: eb:2b:46:f6:27:b7:63:3a:b3:a7:86:53:1a:79:8d:64:bd:60: d8:44:2f:52:38:18:42:35:38:48:82:65:bd:65:c2:98:fa:87: b9:b8:18:0f:e3:f2:2f:9f:62:3e:d1:bd:fe:85:8c:13:01:05: 97:a5:7b:00:fc:07:ad:95:8e:bb:bb:0d:6d:55:b1:3f:3c:c0: f8:50:22:56:e4:75:2f:03:a9:84:72:04:94:fc:f1:49:c2:98: c7:c4:97:8d:9d:77:8a:b9:d0:3f:62:ba:53:ca:63:12:72:bc: d8:75:59:86:c7:55:c8:ee:27:33:5d:29:b0:e4:44:30:db:c6: d4:27:4e:e9:bb:56:98:43:99:2b:bd:94:d9:12:55:98:f9:16: aa:00:9f:18:f6:68:d6:0b:8d:af:3c:24:2c:3c:fa:f3:4a:41: 07:e4:88:65:68:b4:c8:3b:97:23:e3:44:d2:83:2b:ab:bc:7f: a0:18:59:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPauRmfIgY8d8Sz+aRQ+N3tkfMTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFMUI2QzczRTAyN0M0RDA0MkNCNzQzNDhBNjNCNEEy OEM0M0UyODAeFw0yNjA1MTIxNjEwNDhaFw0yNjA1MTMxNzEzNDhaMDMxMTAvBgNV BAMTKEQ4NDAxMDY3NDY5NDcwRjU1MzZFMERGMDNDN0Y2RTNCQUE0NDcwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIL8BHzXVpwOWv+qztcC586d9M cYcBV45xk0e7SwRPtHCf6TJprpBDAVhHSjrBXPS2wb7+Tc+09OZV05NuIgoBVeLN ieuL7QJkx+6axS2vgK9Svfo+WheYXf9QKY1C2fkGknGBod9/k8l9jSqmZk5e4glW Va7zBb9S46VRWRWFY/Ss+Yt/hcSHzfd+2rkxlK3gIULvuk2wQt5A2I+Fcqe6xiwG VLRhQtCJ1lJyMAySu75yiYhq5kWudjJzVRAcRytSFS0TPZ62DvA+BbkBVRW4mzV5 u1AhxiOf8S8LZHd5I0u83mDwT/Dj3pEVcS9HNTYjXSWHFhdPxH7orJB0TzJdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2EAQZ0aUcPVTbg3wPH9uO6pEcBgwHwYDVR0j BBgwFoAU0+G2xz4CfE0ELLdDSKY7SijEPigwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ1YTAzZWItYTNlMS00ODc5LTg1YmYtMmJlYTAzNTU1OGRkLzAvRDNFMUI2Qzcz RTAyN0M0RDA0MkNCNzQzNDhBNjNCNEEyOEM0M0UyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0UxQjZDNzNFMDI3QzREMDQyQ0I3NDM0OEE2M0I0QTI4QzQz RTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ1YTAzZWItYTNlMS00ODc5LTg1 YmYtMmJlYTAzNTU1OGRkLzAvRDNFMUI2QzczRTAyN0M0RDA0MkNCNzQzNDhBNjNC NEEyOEM0M0UyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZBOdRKv9t/3mYAdClQRD1XcxC8WvLDSa+U av+CB3fMtUyONwhiLPFXK3+iQ+bixvIxtuEhcDlB8AoHEKT679xHuXRAchDXFusr RvYnt2M6s6eGUxp5jWS9YNhEL1I4GEI1OEiCZb1lwpj6h7m4GA/j8i+fYj7Rvf6F jBMBBZelewD8B62Vjru7DW1VsT88wPhQIlbkdS8DqYRyBJT88UnCmMfEl42dd4q5 0D9iulPKYxJyvNh1WYbHVcjuJzNdKbDkRDDbxtQnTum7VphDmSu9lNkSVZj5FqoA nxj2aNYLja88JCw8+vNKQQfkiGVotMg7lyPjRNKDK6u8f6AYWfw= -----END CERTIFICATE-----Generated at Wed May 13 02:20:28 2026 by rpki-client