$ rpki-client -vvf rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft File: D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft (raw, json) Hash identifier: QABtkAyU/4buvoMzBVfkv3nshTPoyTm6sIOPUU41bqQ= Subject key identifier: 2F:9F:01:5B:EB:C5:89:9C:98:93:96:80:07:AE:C7:13:7C:B4:52:54 Authority key identifier: D4:FA:2D:C5:A4:A1:A1:CD:6E:63:EC:67:8B:76:D8:F9:0B:43:02:36 Certificate issuer: /CN=D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236 Certificate serial: 407E36CA19E6BCC240D4782569EC0F4FE32065D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft Manifest number: 0E Signing time: Tue 12 May 2026 16:10:47 +0000 Manifest this update: Tue 12 May 2026 16:05:47 +0000 Manifest next update: Wed 13 May 2026 17:09:47 +0000 Files and hashes: 1: D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl (hash: zEmcjm3RrL1rHFycPzYjD8XR+UqE+qnGv7iRBaa8nmg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:7e:36:ca:19:e6:bc:c2:40:d4:78:25:69:ec:0f:4f:e3:20:65:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236 Validity Not Before: May 12 16:05:47 2026 GMT Not After : May 13 17:09:47 2026 GMT Subject: CN=2F9F015BEBC5899C9893968007AEC7137CB45254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e8:c7:04:06:41:f2:e9:83:53:fd:b4:c8:0f: e8:37:45:46:38:87:7e:76:67:16:f6:70:67:26:ba: f8:2c:6b:f5:10:09:3a:2f:90:13:c8:45:1b:45:bb: 4b:4b:24:19:ed:25:a6:12:e4:1e:2b:a2:da:e6:8f: 6a:07:be:56:6a:6f:e6:4b:48:b6:58:7a:76:be:83: bd:1d:6e:a7:81:c7:d6:36:c2:e8:04:d9:0b:ef:83: 62:c7:ff:f9:bd:19:cc:7e:98:13:f6:f0:c8:f1:df: af:a1:35:fd:d8:3d:d2:7a:8f:e1:0c:6d:6c:73:20: 84:c0:d5:20:13:bd:65:69:61:d7:88:a5:cb:bc:c6: ea:67:a7:96:bc:b5:39:7b:69:87:5d:60:63:22:3b: 06:14:b2:48:49:1d:d3:f7:02:13:9a:6d:1b:89:3c: 91:63:55:fd:32:36:e1:4e:4c:23:99:c7:2d:c9:40: 88:1f:43:98:67:82:a2:22:25:f1:6b:92:d4:2f:cc: 70:f0:2d:9e:f5:e9:cc:f0:16:b0:90:65:72:cb:89: 2f:7d:25:fe:f8:c8:7a:20:1e:c9:4c:b1:2e:a0:03: b5:b9:8a:ac:f6:e8:9b:48:f4:b9:e4:52:77:f6:d3: 53:54:fe:e0:54:88:78:90:1d:74:d6:bb:14:59:66: 1b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9F:01:5B:EB:C5:89:9C:98:93:96:80:07:AE:C7:13:7C:B4:52:54 X509v3 Authority Key Identifier: keyid:D4:FA:2D:C5:A4:A1:A1:CD:6E:63:EC:67:8B:76:D8:F9:0B:43:02:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:85:a2:50:57:37:2d:3f:f6:40:b7:f9:53:83:61:b9:96:ad: ee:e3:87:96:11:b2:74:c9:03:d1:bd:c3:ff:df:8c:49:e8:79: a4:a0:18:8f:67:3d:ee:b0:89:e1:33:1f:33:ef:65:ea:96:f7: e3:52:66:d8:ac:1a:81:c7:50:bc:94:61:02:e5:3c:de:17:74: 40:5c:8b:95:2b:d3:cb:eb:a1:3e:c3:29:d3:3a:e6:b1:83:ed: 82:be:25:ca:c2:a5:e3:0d:18:95:47:d3:1e:2c:3e:3e:d3:41: 01:18:4c:d1:b8:1e:d7:f1:cf:c2:3c:7f:d5:4a:5a:92:e4:33: 92:c9:9e:1f:96:ef:44:c2:62:e0:56:ad:4e:81:d0:c2:56:75: 80:43:83:5d:cd:bc:bb:b2:e9:95:76:e9:e7:b4:a9:c0:bf:c6: d3:8a:6c:ba:ee:1f:75:eb:24:ca:95:b7:93:08:50:8b:14:58: 46:c0:99:ea:d6:91:10:d2:88:ce:91:10:29:db:39:1f:54:a9: 8f:47:45:30:32:35:4f:68:42:a6:ae:b6:c0:87:eb:ad:9a:68: 25:52:f6:a5:75:56:7b:c7:7a:ff:41:30:e1:18:0a:6f:83:84: fd:0d:04:0f:0f:60:70:33:90:7e:c6:45:2b:b4:cb:43:d9:16: ca:7e:c3:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQH42yhnmvMJA1HglaewPT+MgZdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRGQTJEQzVBNEExQTFDRDZFNjNFQzY3OEI3NkQ4Rjkw QjQzMDIzNjAeFw0yNjA1MTIxNjA1NDdaFw0yNjA1MTMxNzA5NDdaMDMxMTAvBgNV BAMTKDJGOUYwMTVCRUJDNTg5OUM5ODkzOTY4MDA3QUVDNzEzN0NCNDUyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb6McEBkHy6YNT/bTID+g3RUY4 h352Zxb2cGcmuvgsa/UQCTovkBPIRRtFu0tLJBntJaYS5B4rotrmj2oHvlZqb+ZL SLZYena+g70dbqeBx9Y2wugE2Qvvg2LH//m9Gcx+mBP28Mjx36+hNf3YPdJ6j+EM bWxzIITA1SATvWVpYdeIpcu8xupnp5a8tTl7aYddYGMiOwYUskhJHdP3AhOabRuJ PJFjVf0yNuFOTCOZxy3JQIgfQ5hngqIiJfFrktQvzHDwLZ716czwFrCQZXLLiS99 Jf74yHogHslMsS6gA7W5iqz26JtI9LnkUnf201NU/uBUiHiQHXTWuxRZZhtrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL58BW+vFiZyYk5aAB67HE3y0UlQwHwYDVR0j BBgwFoAU1PotxaShoc1uY+xni3bY+QtDAjYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTY3OWNiZjYtMDkxMy00ODIxLThhZTEtYmI1MTFlYWYwODhmLzAvRDRGQTJEQzVB NEExQTFDRDZFNjNFQzY3OEI3NkQ4RjkwQjQzMDIzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEZBMkRDNUE0QTFBMUNENkU2M0VDNjc4Qjc2RDhGOTBCNDMw MjM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvRDRGQTJEQzVBNEExQTFDRDZFNjNFQzY3OEI3NkQ4 RjkwQjQzMDIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+FolBXNy0/9kC3+VODYbmWre7jh5YRsnTJ A9G9w//fjEnoeaSgGI9nPe6wieEzHzPvZeqW9+NSZtisGoHHULyUYQLlPN4XdEBc i5Ur08vroT7DKdM65rGD7YK+JcrCpeMNGJVH0x4sPj7TQQEYTNG4Htfxz8I8f9VK WpLkM5LJnh+W70TCYuBWrU6B0MJWdYBDg13NvLuy6ZV26ee0qcC/xtOKbLruH3Xr JMqVt5MIUIsUWEbAmerWkRDSiM6RECnbOR9UqY9HRTAyNU9oQqautsCH662aaCVS 9qV1VnvHev9BMOEYCm+DhP0NBA8PYHAzkH7GRSu0y0PZFsp+wxs= -----END CERTIFICATE-----Generated at Wed May 13 00:44:38 2026 by rpki-client