$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft File: 10B2C61A3BF002D69AD557B8392E1F340162A168.mft (raw, json) Hash identifier: PcMaAgnMu5BWyhtj6D60Hg0cwYMJzjzC1UqIVR+z6qA= Subject key identifier: 03:36:84:BD:80:6D:48:39:82:DF:26:FC:03:00:36:EE:8E:1C:DE:1C Authority key identifier: 10:B2:C6:1A:3B:F0:02:D6:9A:D5:57:B8:39:2E:1F:34:01:62:A1:68 Certificate issuer: /CN=10B2C61A3BF002D69AD557B8392E1F340162A168 Certificate serial: 3A70D4F690EB07A8FF1E03E46F67E9DA282E1942 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft Manifest number: 0E Signing time: Tue 12 May 2026 20:47:54 +0000 Manifest this update: Tue 12 May 2026 20:42:54 +0000 Manifest next update: Wed 13 May 2026 21:55:54 +0000 Files and hashes: 1: 10B2C61A3BF002D69AD557B8392E1F340162A168.crl (hash: IQL/Q4bf6ms0Nm2eojLY//vvc8C5T76LQy49ooonEGQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.crl rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:70:d4:f6:90:eb:07:a8:ff:1e:03:e4:6f:67:e9:da:28:2e:19:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B2C61A3BF002D69AD557B8392E1F340162A168 Validity Not Before: May 12 20:42:54 2026 GMT Not After : May 13 21:55:54 2026 GMT Subject: CN=033684BD806D483982DF26FC030036EE8E1CDE1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:13:59:90:6b:1f:f7:06:8c:67:09:b3:44:b8: 3c:a3:da:df:82:c8:a1:cd:74:1a:53:c8:1e:69:1a: 89:81:b2:91:d1:31:cf:a9:17:0c:c9:a7:2e:d3:c6: d8:98:93:bd:7d:bb:22:45:58:86:e5:f1:37:ee:71: 06:27:56:dc:31:45:83:66:22:66:97:66:19:66:3c: 17:86:9c:49:42:ee:69:cb:73:4e:fd:e0:fa:34:35: 38:5d:6a:63:5f:e5:78:26:e8:ee:79:d5:ea:9a:d1: 68:a0:da:61:a5:a9:95:fc:88:43:11:8b:d1:43:ef: 26:35:c8:9a:54:ca:1f:8a:95:cd:db:1b:de:03:fd: 3c:02:13:2c:5e:d5:3b:ea:f9:6d:a2:ee:bf:95:c6: 7c:79:5c:f8:f7:4a:f9:86:d8:1b:48:b0:d1:b2:c2: 7f:8e:45:1f:f9:45:35:08:25:da:56:d1:78:9a:79: 39:e6:40:bd:8f:79:dd:20:cd:9e:c4:10:a5:00:11: d8:e7:7c:e4:36:38:b5:74:b9:e4:64:59:a7:96:42: 30:02:7e:1e:3a:04:0b:39:02:2e:be:ac:21:ff:25: 45:40:73:be:f2:ff:13:14:20:43:0d:5a:d7:3d:04: a2:0f:29:da:87:e3:e1:34:5c:9b:7d:d0:30:11:c5: f0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:36:84:BD:80:6D:48:39:82:DF:26:FC:03:00:36:EE:8E:1C:DE:1C X509v3 Authority Key Identifier: keyid:10:B2:C6:1A:3B:F0:02:D6:9A:D5:57:B8:39:2E:1F:34:01:62:A1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:5c:d5:81:a6:93:7c:9f:b7:09:0b:a9:6f:85:aa:0a:b4:36: ee:bb:eb:0c:6d:5e:9e:15:42:45:77:74:cd:5d:a4:7a:3e:69: 49:60:d8:4d:ee:19:e9:e6:c7:14:39:be:05:f7:48:15:eb:ed: 66:f3:71:dc:05:8d:44:b0:21:7e:8c:21:25:c8:b3:9a:2c:8c: ad:06:ba:f3:b4:91:cb:b8:d4:33:3c:c7:56:5a:7e:a8:85:a6: 4f:a1:bf:f8:9b:80:83:73:3c:47:0a:3b:13:a5:0a:11:7a:85: 67:20:25:a4:e2:ce:2d:5e:66:8e:1e:69:64:a0:01:2a:2a:d0: b4:3a:2f:eb:75:f8:66:ca:76:44:e3:fb:c3:ed:24:7d:63:ca: 05:9a:65:e4:ca:f6:e7:79:4d:82:d3:bc:5e:60:08:fe:ee:a5: 0c:07:3c:73:3e:43:44:86:c4:06:b4:49:18:01:fa:ce:f0:d7: 9b:3b:55:d4:1f:6e:f1:c3:7f:1d:76:81:f1:64:cc:c1:b3:96: ad:73:a2:d7:45:d7:cf:bc:7b:c3:ed:f0:87:eb:38:c3:b1:7c: cd:d4:88:a0:eb:ae:d3:47:d5:c2:7f:dc:9b:1b:57:fc:e2:9f: 9c:ce:a0:1a:6a:fb:d9:7c:f1:77:75:41:08:93:48:df:92:56: d3:ac:7e:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOnDU9pDrB6j/HgPkb2fp2iguGUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCMkM2MUEzQkYwMDJENjlBRDU1N0I4MzkyRTFGMzQw MTYyQTE2ODAeFw0yNjA1MTIyMDQyNTRaFw0yNjA1MTMyMTU1NTRaMDMxMTAvBgNV BAMTKDAzMzY4NEJEODA2RDQ4Mzk4MkRGMjZGQzAzMDAzNkVFOEUxQ0RFMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChE1mQax/3BoxnCbNEuDyj2t+C yKHNdBpTyB5pGomBspHRMc+pFwzJpy7TxtiYk719uyJFWIbl8TfucQYnVtwxRYNm ImaXZhlmPBeGnElC7mnLc0794Po0NThdamNf5Xgm6O551eqa0Wig2mGlqZX8iEMR i9FD7yY1yJpUyh+Klc3bG94D/TwCEyxe1Tvq+W2i7r+Vxnx5XPj3SvmG2BtIsNGy wn+ORR/5RTUIJdpW0XiaeTnmQL2Ped0gzZ7EEKUAEdjnfOQ2OLV0ueRkWaeWQjAC fh46BAs5Ai6+rCH/JUVAc77y/xMUIEMNWtc9BKIPKdqH4+E0XJt90DARxfCdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAzaEvYBtSDmC3yb8AwA27o4c3hwwHwYDVR0j BBgwFoAUELLGGjvwAtaa1Ve4OS4fNAFioWgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ1YTAzZWItYTNlMS00ODc5LTg1YmYtMmJlYTAzNTU1OGRkLzEvMTBCMkM2MUEz QkYwMDJENjlBRDU1N0I4MzkyRTFGMzQwMTYyQTE2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy8xMEIyQzYxQTNCRjAwMkQ2OUFENTU3QjgzOTJFMUYzNDAxNjJB MTY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ1YTAzZWItYTNlMS00ODc5LTg1 YmYtMmJlYTAzNTU1OGRkLzEvMTBCMkM2MUEzQkYwMDJENjlBRDU1N0I4MzkyRTFG MzQwMTYyQTE2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBc1YGmk3yftwkLqW+Fqgq0Nu676wxtXp4V QkV3dM1dpHo+aUlg2E3uGenmxxQ5vgX3SBXr7WbzcdwFjUSwIX6MISXIs5osjK0G uvO0kcu41DM8x1ZafqiFpk+hv/ibgINzPEcKOxOlChF6hWcgJaTizi1eZo4eaWSg ASoq0LQ6L+t1+GbKdkTj+8PtJH1jygWaZeTK9ud5TYLTvF5gCP7upQwHPHM+Q0SG xAa0SRgB+s7w15s7VdQfbvHDfx12gfFkzMGzlq1zotdF18+8e8Pt8IfrOMOxfM3U iKDrrtNH1cJ/3JsbV/zin5zOoBpq+9l88Xd1QQiTSN+SVtOsflU= -----END CERTIFICATE-----Generated at Wed May 13 01:37:14 2026 by rpki-client