$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft File: 1236E394229BC623C890CC5AB178B4BFC96DCE66.mft (raw, json) Hash identifier: HDh6CjjIiDNmXyzRN6UjH7blPBqRfWTK4Dm2RpkA/IA= Subject key identifier: C0:3D:EB:84:C1:7B:ED:59:20:C2:E2:DD:07:3B:76:B0:F2:78:05:03 Authority key identifier: 12:36:E3:94:22:9B:C6:23:C8:90:CC:5A:B1:78:B4:BF:C9:6D:CE:66 Certificate issuer: /CN=1236E394229BC623C890CC5AB178B4BFC96DCE66 Certificate serial: 5124D6BBF1E3EFB91B1401037784889FBA69E242 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft Manifest number: 0E Signing time: Tue 12 May 2026 17:37:35 +0000 Manifest this update: Tue 12 May 2026 17:32:35 +0000 Manifest next update: Wed 13 May 2026 20:23:35 +0000 Files and hashes: 1: 1236E394229BC623C890CC5AB178B4BFC96DCE66.crl (hash: fPye6EDUtbw/UzS/I/Qgf1vIQyF41cPqSE2M0F46tLU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.crl rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:24:d6:bb:f1:e3:ef:b9:1b:14:01:03:77:84:88:9f:ba:69:e2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1236E394229BC623C890CC5AB178B4BFC96DCE66 Validity Not Before: May 12 17:32:35 2026 GMT Not After : May 13 20:23:35 2026 GMT Subject: CN=C03DEB84C17BED5920C2E2DD073B76B0F2780503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:19:b7:3c:57:05:6c:a8:eb:ad:33:4e:8e: 0a:81:85:16:20:8d:d8:c2:1a:ea:47:a8:81:9c:7c: ec:3c:8f:e0:0b:0f:e6:10:fc:33:36:c4:76:c3:ae: dd:83:93:70:ed:c1:29:a1:3f:31:27:0e:a0:62:9b: cc:da:68:43:16:e4:e2:bd:4a:6f:04:ae:2d:f8:f2: 51:55:4a:44:b5:ed:51:19:e1:6a:66:f2:e4:3d:26: ef:8c:c4:ec:80:ba:ed:61:a1:b7:d0:a5:45:16:d1: b8:4d:d3:93:48:0b:52:b3:9d:40:6c:da:be:07:d7: cf:56:5d:55:29:0a:03:f1:87:6b:92:31:fd:e0:7a: d9:f7:a5:1b:81:3c:a1:66:b2:ec:8c:85:10:9e:6c: af:ea:42:40:91:ab:28:d2:4a:c8:6b:09:cb:59:d6: 54:84:8b:66:01:bb:39:9a:d1:4d:d4:af:07:63:55: 60:cf:64:04:68:3c:10:70:5d:c5:84:ab:3d:ee:d7: 0b:d1:db:a4:d0:f1:db:e0:ec:b0:91:23:48:01:8c: b5:d4:7c:fa:98:4d:ad:38:7f:74:7c:3b:57:1c:0c: 15:fb:48:73:4b:52:61:22:68:f2:31:ca:71:98:6a: ae:9b:2f:72:1a:fe:e4:10:8a:23:73:a0:fb:2e:04: 8e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3D:EB:84:C1:7B:ED:59:20:C2:E2:DD:07:3B:76:B0:F2:78:05:03 X509v3 Authority Key Identifier: keyid:12:36:E3:94:22:9B:C6:23:C8:90:CC:5A:B1:78:B4:BF:C9:6D:CE:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:36:8a:30:08:92:91:d2:2d:e0:98:67:ae:24:3a:24:1c:82: 4f:a0:a7:52:2a:b9:bd:0d:23:8a:24:70:eb:8c:85:1e:82:09: b2:8e:aa:94:ef:eb:43:34:4a:80:6a:18:87:73:b3:99:73:b5: 3c:94:c2:ca:3b:09:3f:46:ff:b5:4e:4e:53:82:03:c6:5a:24: 9f:39:d1:0b:6b:6e:85:5d:0e:ed:77:56:3d:53:b2:96:da:2c: 61:b8:cc:57:93:51:4b:bb:92:5d:1d:c4:c1:cd:6e:00:ed:46: f2:52:14:21:cd:f1:b4:7e:56:d8:02:6b:43:18:82:47:9b:52: b8:22:45:1c:90:86:d8:3a:17:e0:26:9a:38:07:35:7e:1e:64: aa:5f:60:f8:86:6e:e1:91:80:48:13:41:b1:a8:a1:ab:b9:76: 4c:42:16:7b:78:ca:f3:d7:9f:cf:71:5a:d8:c9:b1:fb:45:22: c2:7e:26:46:36:91:a3:7c:e5:22:20:f0:29:0b:28:b2:76:3c: 0b:58:d5:df:89:fe:1f:52:98:7c:23:13:b7:c8:92:e1:97:45: 63:a5:16:73:74:6d:04:71:e5:08:2f:99:47:f7:ed:b0:71:3e: 6e:59:08:1e:b3:24:4f:fa:c0:15:1a:03:74:45:dc:be:5b:d7: 18:24:be:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUSTWu/Hj77kbFAEDd4SIn7pp4kIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIzNkUzOTQyMjlCQzYyM0M4OTBDQzVBQjE3OEI0QkZD OTZEQ0U2NjAeFw0yNjA1MTIxNzMyMzVaFw0yNjA1MTMyMDIzMzVaMDMxMTAvBgNV BAMTKEMwM0RFQjg0QzE3QkVENTkyMEMyRTJERDA3M0I3NkIwRjI3ODA1MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHwBm3PFcFbKjrrTNOjgqBhRYg jdjCGupHqIGcfOw8j+ALD+YQ/DM2xHbDrt2Dk3DtwSmhPzEnDqBim8zaaEMW5OK9 Sm8Eri348lFVSkS17VEZ4Wpm8uQ9Ju+MxOyAuu1hobfQpUUW0bhN05NIC1KznUBs 2r4H189WXVUpCgPxh2uSMf3getn3pRuBPKFmsuyMhRCebK/qQkCRqyjSSshrCctZ 1lSEi2YBuzma0U3UrwdjVWDPZARoPBBwXcWEqz3u1wvR26TQ8dvg7LCRI0gBjLXU fPqYTa04f3R8O1ccDBX7SHNLUmEiaPIxynGYaq6bL3Ia/uQQiiNzoPsuBI6lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwD3rhMF77VkgwuLdBzt2sPJ4BQMwHwYDVR0j BBgwFoAUEjbjlCKbxiPIkMxasXi0v8ltzmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWExZTZhYzQtYTJjNC00MWE3LWIwZGItNmZhNzhiMGNhOGIwLzAvMTIzNkUzOTQy MjlCQzYyM0M4OTBDQzVBQjE3OEI0QkZDOTZEQ0U2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjM2RTM5NDIyOUJDNjIzQzg5MENDNUFCMTc4QjRCRkM5NkRD RTY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvMTIzNkUzOTQyMjlCQzYyM0M4OTBDQzVBQjE3OEI0 QkZDOTZEQ0U2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB42ijAIkpHSLeCYZ64kOiQcgk+gp1Iqub0N I4okcOuMhR6CCbKOqpTv60M0SoBqGIdzs5lztTyUwso7CT9G/7VOTlOCA8ZaJJ85 0QtrboVdDu13Vj1TspbaLGG4zFeTUUu7kl0dxMHNbgDtRvJSFCHN8bR+VtgCa0MY gkebUrgiRRyQhtg6F+AmmjgHNX4eZKpfYPiGbuGRgEgTQbGooau5dkxCFnt4yvPX n89xWtjJsftFIsJ+JkY2kaN85SIg8CkLKLJ2PAtY1d+J/h9SmHwjE7fIkuGXRWOl FnN0bQRx5QgvmUf37bBxPm5ZCB6zJE/6wBUaA3RF3L5b1xgkvmk= -----END CERTIFICATE-----Generated at Wed May 13 00:31:25 2026 by rpki-client