$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/F31E15BE02A167AD0052555C4C55DC145AB53C32.mft File: F31E15BE02A167AD0052555C4C55DC145AB53C32.mft (raw, json) Hash identifier: bTnEsjILGBQ5leRLIC89u2WMMf5p9gqB9mYK0RV1Uqg= Subject key identifier: 66:AF:B8:22:E0:38:47:BA:27:64:97:18:FA:3D:DA:07:EB:A2:B4:26 Authority key identifier: F3:1E:15:BE:02:A1:67:AD:00:52:55:5C:4C:55:DC:14:5A:B5:3C:32 Certificate issuer: /CN=F31E15BE02A167AD0052555C4C55DC145AB53C32 Certificate serial: 4F31FDDBA8AEADBA309BB629B2A9981A32C160B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31E15BE02A167AD0052555C4C55DC145AB53C32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/F31E15BE02A167AD0052555C4C55DC145AB53C32.mft Manifest number: 0E Signing time: Tue 12 May 2026 20:42:48 +0000 Manifest this update: Tue 12 May 2026 20:37:48 +0000 Manifest next update: Wed 13 May 2026 21:09:48 +0000 Files and hashes: 1: F31E15BE02A167AD0052555C4C55DC145AB53C32.crl (hash: vvNd+6cc/s58PD0tEEax6RuLwPaGm/9DDuyB3IBHcKE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/F31E15BE02A167AD0052555C4C55DC145AB53C32.crl rsync://rpki-rsync.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/F31E15BE02A167AD0052555C4C55DC145AB53C32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31E15BE02A167AD0052555C4C55DC145AB53C32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:31:fd:db:a8:ae:ad:ba:30:9b:b6:29:b2:a9:98:1a:32:c1:60:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F31E15BE02A167AD0052555C4C55DC145AB53C32 Validity Not Before: May 12 20:37:48 2026 GMT Not After : May 13 21:09:48 2026 GMT Subject: CN=66AFB822E03847BA27649718FA3DDA07EBA2B426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:16:25:e6:cd:6b:f0:5b:23:7b:e5:05:d7:f7: 64:88:28:7a:d6:50:15:52:8e:e7:d7:96:f6:d5:12: 06:5c:a0:06:6d:6a:a7:45:5c:ff:1f:ba:58:c0:37: 00:1f:45:ef:a0:55:d6:ca:0d:24:c5:7d:9b:53:86: 9d:f6:f9:13:6f:7b:3b:c3:b9:9f:94:9b:4f:67:3a: b0:06:0f:f9:fe:d2:37:f3:a0:c0:72:51:bb:af:07: 57:ef:c2:31:77:02:cb:9b:e4:a6:fc:f8:cd:9d:03: 0f:c7:8f:9a:aa:b7:0f:b6:17:00:3c:25:71:1d:ca: 9e:ab:23:4c:6c:f8:7e:9e:61:b3:33:f5:91:7d:0a: 29:c7:e3:07:68:03:50:ab:79:58:5a:c8:e4:0d:8f: 01:d2:b0:8d:33:b7:1a:fb:4a:ea:8f:7f:df:c7:c1: 5b:06:44:3f:a8:f9:b1:d7:1b:e5:46:c1:f1:73:b2: ef:b5:ec:4e:6f:5a:bc:2e:c6:57:1c:17:f6:5e:0d: e0:e3:63:8a:49:a1:55:8e:2e:84:49:a8:3b:ed:08: 15:fb:40:12:47:67:e6:83:24:fc:f6:b4:4c:21:ae: d3:2c:9a:79:f2:52:64:e2:e0:3a:d3:9a:2c:ed:ce: dc:74:14:bc:2d:93:1c:82:26:8e:e1:4a:7f:74:76: e7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AF:B8:22:E0:38:47:BA:27:64:97:18:FA:3D:DA:07:EB:A2:B4:26 X509v3 Authority Key Identifier: keyid:F3:1E:15:BE:02:A1:67:AD:00:52:55:5C:4C:55:DC:14:5A:B5:3C:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/F31E15BE02A167AD0052555C4C55DC145AB53C32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31E15BE02A167AD0052555C4C55DC145AB53C32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/F31E15BE02A167AD0052555C4C55DC145AB53C32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:cb:e0:cf:38:1c:eb:7b:73:48:39:c8:f1:98:25:11:83:98: 68:aa:07:0f:bf:ef:9a:10:4f:96:e0:b7:8f:0d:09:66:0e:64: 1a:8d:b2:aa:e5:13:e0:7a:a1:0a:2e:96:36:53:aa:a4:84:40: 36:84:57:ca:89:14:58:8e:ab:9e:bd:69:5c:9d:29:46:1f:94: 4e:34:2b:f6:c7:31:d0:57:f9:5e:f6:23:ee:65:28:44:d8:f3: 17:93:9c:ec:3f:02:ec:b3:46:49:37:9b:71:79:6d:d9:5e:bb: 03:b6:4e:78:2b:b2:56:5c:28:48:00:8d:86:1c:4b:20:db:e7: b2:18:7e:b5:d9:79:ad:43:c8:98:3f:c9:d3:0b:62:e3:79:df: c7:16:52:f0:0a:c8:9c:e1:4e:c1:9b:27:2a:b0:f2:1d:aa:9e: bc:cf:66:f8:15:85:c9:4b:49:fa:7b:a3:ad:bd:b3:a4:8d:55: 21:de:29:e6:42:87:d5:ed:20:34:b0:45:97:97:58:a1:fa:e2: 11:01:d0:02:a3:78:1e:89:be:14:ad:be:df:6a:ab:8e:c0:3b: 35:ed:c5:a5:4f:40:fe:94:c7:01:4f:ca:c7:79:83:2b:66:76: 7f:90:99:44:7c:75:42:13:ab:1d:cb:c9:e8:02:30:1d:2f:30: 6c:6e:0c:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTzH926iurbowm7YpsqmYGjLBYLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxRTE1QkUwMkExNjdBRDAwNTI1NTVDNEM1NURDMTQ1 QUI1M0MzMjAeFw0yNjA1MTIyMDM3NDhaFw0yNjA1MTMyMTA5NDhaMDMxMTAvBgNV BAMTKDY2QUZCODIyRTAzODQ3QkEyNzY0OTcxOEZBM0REQTA3RUJBMkI0MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmFiXmzWvwWyN75QXX92SIKHrW UBVSjufXlvbVEgZcoAZtaqdFXP8fuljANwAfRe+gVdbKDSTFfZtThp32+RNvezvD uZ+Um09nOrAGD/n+0jfzoMByUbuvB1fvwjF3Asub5Kb8+M2dAw/Hj5qqtw+2FwA8 JXEdyp6rI0xs+H6eYbMz9ZF9CinH4wdoA1CreVhayOQNjwHSsI0ztxr7SuqPf9/H wVsGRD+o+bHXG+VGwfFzsu+17E5vWrwuxlccF/ZeDeDjY4pJoVWOLoRJqDvtCBX7 QBJHZ+aDJPz2tEwhrtMsmnnyUmTi4DrTmiztztx0FLwtkxyCJo7hSn90ducDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZq+4IuA4R7onZJcY+j3aB+uitCYwHwYDVR0j BBgwFoAU8x4VvgKhZ60AUlVcTFXcFFq1PDIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGYzMzBkMDYtZjkyZC00OTViLTliYTAtYWNkZDgxN2IxNDgzLzAvRjMxRTE1QkUw MkExNjdBRDAwNTI1NTVDNEM1NURDMTQ1QUI1M0MzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzFFMTVCRTAyQTE2N0FEMDA1MjU1NUM0QzU1REMxNDVBQjUz QzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGYzMzBkMDYtZjkyZC00OTViLTli YTAtYWNkZDgxN2IxNDgzLzAvRjMxRTE1QkUwMkExNjdBRDAwNTI1NTVDNEM1NURD MTQ1QUI1M0MzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3L4M84HOt7c0g5yPGYJRGDmGiqBw+/75oQ T5bgt48NCWYOZBqNsqrlE+B6oQouljZTqqSEQDaEV8qJFFiOq569aVydKUYflE40 K/bHMdBX+V72I+5lKETY8xeTnOw/AuyzRkk3m3F5bdleuwO2TngrslZcKEgAjYYc SyDb57IYfrXZea1DyJg/ydMLYuN538cWUvAKyJzhTsGbJyqw8h2qnrzPZvgVhclL Sfp7o629s6SNVSHeKeZCh9XtIDSwRZeXWKH64hEB0AKjeB6JvhStvt9qq47AOzXt xaVPQP6UxwFPysd5gytmdn+QmUR8dUITqx3LyegCMB0vMGxuDLE= -----END CERTIFICATE-----Generated at Wed May 13 03:26:36 2026 by rpki-client