$ rpki-client -vvf rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft File: D21C7558CD1D6E80F107C302A7A49637AD11D654.mft (raw, json) Hash identifier: XuhNz+5MagkOBwlD+QtEBaYS76v1MIJDIcUDfDmTvS8= Subject key identifier: 3A:1F:E7:3B:CA:B4:64:C7:59:46:9F:D0:B5:3C:C0:F4:23:62:A8:A7 Authority key identifier: D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 Certificate issuer: /CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Certificate serial: 1E276A584F906A8EC3300C33AB0A82E188AC5C84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft Manifest number: 0E Signing time: Tue 12 May 2026 17:47:44 +0000 Manifest this update: Tue 12 May 2026 17:42:44 +0000 Manifest next update: Wed 13 May 2026 20:53:44 +0000 Files and hashes: 1: D21C7558CD1D6E80F107C302A7A49637AD11D654.crl (hash: UYNjv5Bst7hxq3mcwJJa79tel3FqLtzPr6VkUSpVpJE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:27:6a:58:4f:90:6a:8e:c3:30:0c:33:ab:0a:82:e1:88:ac:5c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Validity Not Before: May 12 17:42:44 2026 GMT Not After : May 13 20:53:44 2026 GMT Subject: CN=3A1FE73BCAB464C759469FD0B53CC0F42362A8A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:fd:26:a3:b6:c8:a4:f7:99:45:d7:b0:35: d1:a1:d5:be:b0:38:89:df:e1:38:bd:1d:3e:3e:67: 40:9e:17:5a:45:a6:07:87:7f:d6:47:a4:4b:2a:69: c2:0d:72:43:8a:11:cd:55:0f:d2:6c:ef:ad:12:47: 80:60:54:83:92:db:4a:8f:bc:ea:d3:a5:77:83:b3: 1f:f5:c7:33:29:4e:c5:42:d5:4e:8a:2d:3b:86:23: ee:a5:9a:8e:aa:2b:8c:0c:ca:ab:47:1e:50:7c:d5: 33:1e:59:60:79:a9:84:d8:bd:2d:37:c7:3a:8c:06: f0:87:5e:63:fe:c4:57:b8:ee:62:da:79:92:21:23: 8e:0b:01:e2:26:0d:17:af:00:b2:92:79:05:b5:0f: 4d:1c:7e:3c:4e:94:ec:53:d6:18:ba:9d:3b:0b:bc: 5c:4c:23:d8:0c:11:90:5e:b5:9b:07:70:6b:45:ba: a5:21:85:d4:40:35:98:2f:c0:55:ea:2b:5c:ff:3e: 39:75:09:28:87:29:86:97:47:44:e3:78:1b:bb:c9: e0:97:ef:69:a5:b5:6b:95:38:62:2d:54:15:74:ab: 79:9a:73:60:6d:b2:8d:54:b4:1a:7e:10:32:da:47: 8a:72:14:87:bb:87:c7:81:c9:33:b3:c6:08:3d:63: 25:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1F:E7:3B:CA:B4:64:C7:59:46:9F:D0:B5:3C:C0:F4:23:62:A8:A7 X509v3 Authority Key Identifier: keyid:D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b9:b1:2b:08:22:29:2e:1f:de:d2:51:a2:c8:0d:de:88:b2: af:1c:38:54:b5:26:49:e3:72:d0:e6:45:a3:49:a5:a6:7a:c5: 4d:68:b1:68:8c:23:f5:d8:8c:80:6d:93:88:84:df:3b:ff:bf: b6:50:b5:ab:c2:e0:c5:0f:e8:cc:9b:77:16:85:f2:a6:a1:80: 0d:05:84:d6:e5:cb:4f:27:5d:27:f2:a3:e9:0b:73:7e:90:e0: 04:ac:55:f1:58:06:89:53:ef:c1:16:81:e7:e4:61:29:91:48: 2b:79:cc:5a:b8:69:8e:40:c3:d2:36:4e:7c:ef:b0:ea:05:0b: 6f:74:d0:00:73:e2:88:7a:a6:a0:47:6b:54:f8:23:3c:8e:bc: cd:a1:5c:50:07:b9:0a:b7:2f:0a:47:74:8b:ec:d0:81:68:6f: 5b:22:1b:f7:2d:a4:a6:d9:9c:5e:05:1c:39:51:1c:6e:ae:dd: 23:30:25:97:55:0e:7d:83:eb:2a:00:24:1c:9e:5d:8c:f4:b1: c1:d9:93:5e:19:17:ba:09:c0:9d:d0:42:7e:c1:42:3f:55:bd: 63:2a:6b:8e:7f:d0:30:4a:a6:45:44:59:94:24:c6:a5:bb:cf: b2:7b:b1:3b:3c:bf:f8:da:98:99:6b:34:35:33:bd:c1:f7:d5: 2d:15:65:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHidqWE+Qao7DMAwzqwqC4YisXIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2MzdB RDExRDY1NDAeFw0yNjA1MTIxNzQyNDRaFw0yNjA1MTMyMDUzNDRaMDMxMTAvBgNV BAMTKDNBMUZFNzNCQ0FCNDY0Qzc1OTQ2OUZEMEI1M0NDMEY0MjM2MkE4QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvif0mo7bIpPeZRdewNdGh1b6w OInf4Ti9HT4+Z0CeF1pFpgeHf9ZHpEsqacINckOKEc1VD9Js760SR4BgVIOS20qP vOrTpXeDsx/1xzMpTsVC1U6KLTuGI+6lmo6qK4wMyqtHHlB81TMeWWB5qYTYvS03 xzqMBvCHXmP+xFe47mLaeZIhI44LAeImDRevALKSeQW1D00cfjxOlOxT1hi6nTsL vFxMI9gMEZBetZsHcGtFuqUhhdRANZgvwFXqK1z/Pjl1CSiHKYaXR0TjeBu7yeCX 72mltWuVOGItVBV0q3mac2Btso1UtBp+EDLaR4pyFIe7h8eByTOzxgg9YyXpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOh/nO8q0ZMdZRp/QtTzA9CNiqKcwHwYDVR0j BBgwFoAU0hx1WM0dboDxB8MCp6SWN60R1lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTY3OWI0ZDEtZDZiNS00ODIwLWE0OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThD RDFENkU4MEYxMDdDMzAyQTdBNDk2MzdBRDExRDY1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMjFDNzU1OENEMUQ2RTgwRjEwN0MzMDJBN0E0OTYzN0FEMTFE NjU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2 MzdBRDExRDY1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAa5sSsIIikuH97SUaLIDd6Isq8cOFS1Jknj ctDmRaNJpaZ6xU1osWiMI/XYjIBtk4iE3zv/v7ZQtavC4MUP6MybdxaF8qahgA0F hNbly08nXSfyo+kLc36Q4ASsVfFYBolT78EWgefkYSmRSCt5zFq4aY5Aw9I2Tnzv sOoFC2900ABz4oh6pqBHa1T4IzyOvM2hXFAHuQq3LwpHdIvs0IFob1siG/ctpKbZ nF4FHDlRHG6u3SMwJZdVDn2D6yoAJByeXYz0scHZk14ZF7oJwJ3QQn7BQj9VvWMq a45/0DBKpkVEWZQkxqW7z7J7sTs8v/jamJlrNDUzvcH31S0VZbA= -----END CERTIFICATE-----Generated at Wed May 13 02:12:38 2026 by rpki-client