$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.mft File: 83B5C37E9FBCC271373337B3F35E92BE81C88790.mft (raw, json) Hash identifier: 5lJrXV8AB6bKV98jqkPKVy27+p8z92ZFvTKm0y+35bk= Subject key identifier: 10:66:5D:6F:B4:E8:5F:D0:17:47:6A:D7:8F:18:04:2C:24:73:CE:8A Authority key identifier: 83:B5:C3:7E:9F:BC:C2:71:37:33:37:B3:F3:5E:92:BE:81:C8:87:90 Certificate issuer: /CN=83B5C37E9FBCC271373337B3F35E92BE81C88790 Certificate serial: 15C55E9680E92EB860E1D8EFE24790E814BBDAA5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B5C37E9FBCC271373337B3F35E92BE81C88790.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.mft Manifest number: 0E Signing time: Tue 12 May 2026 18:28:50 +0000 Manifest this update: Tue 12 May 2026 18:23:50 +0000 Manifest next update: Wed 13 May 2026 18:34:50 +0000 Files and hashes: 1: 83B5C37E9FBCC271373337B3F35E92BE81C88790.crl (hash: 3TXSNi8koriC8pLYyn28ObBC7P0vQKUafGH4mSSnVYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.crl rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B5C37E9FBCC271373337B3F35E92BE81C88790.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c5:5e:96:80:e9:2e:b8:60:e1:d8:ef:e2:47:90:e8:14:bb:da:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83B5C37E9FBCC271373337B3F35E92BE81C88790 Validity Not Before: May 12 18:23:50 2026 GMT Not After : May 13 18:34:50 2026 GMT Subject: CN=10665D6FB4E85FD017476AD78F18042C2473CE8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:68:7f:d1:5b:2a:f7:7d:5c:69:93:0c:cb:7b: f2:a4:59:08:db:19:bc:45:48:fa:ca:85:f3:8d:1c: 87:e4:1f:d2:cc:14:9a:b1:6f:dd:5c:48:88:d8:23: 51:bb:7c:93:fa:e1:dc:cb:2b:a4:28:8a:f3:83:d4: 40:ff:ce:d5:90:2c:34:b2:d5:64:f6:66:38:b2:c4: 48:a0:c2:a2:27:d0:0e:ab:74:c7:94:e8:ba:51:2f: 53:6b:63:0b:57:53:a5:4b:fa:7f:0d:3a:67:da:f7: 8e:fc:c9:c7:e0:15:01:79:76:b0:5c:65:ac:30:c1: 92:00:3e:94:dd:c8:fd:3c:86:fd:f5:91:df:99:0e: dd:3a:7e:36:03:b3:b7:69:96:6a:a8:5a:f1:66:32: f0:d9:69:e5:10:60:7d:03:0d:5f:af:f7:dc:68:d4: dc:46:a2:ba:f9:b7:9d:98:f1:d9:27:b0:c0:d5:b4: 63:1b:76:5c:03:c8:e0:1e:40:42:b7:82:75:5e:2a: 7c:2c:28:26:6e:ec:4d:d6:9c:a9:9e:52:2f:6b:d8: a3:e1:07:17:f3:f2:d5:cf:fc:a7:d5:5b:d7:58:6e: 62:6c:6b:b7:d0:4b:d3:b1:52:0c:db:10:e2:4c:03: c4:cd:fc:2c:d7:bd:00:c5:f7:cc:3c:06:61:39:20: 54:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:66:5D:6F:B4:E8:5F:D0:17:47:6A:D7:8F:18:04:2C:24:73:CE:8A X509v3 Authority Key Identifier: keyid:83:B5:C3:7E:9F:BC:C2:71:37:33:37:B3:F3:5E:92:BE:81:C8:87:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B5C37E9FBCC271373337B3F35E92BE81C88790.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:fd:9c:3e:6a:69:bc:df:2d:f2:9f:3a:99:8a:20:70:50:01: bb:96:6d:a6:83:fe:81:e6:30:68:0d:9e:95:35:68:89:83:e5: 7a:a5:e0:91:4c:6a:0c:09:45:f4:d4:ac:da:bc:bd:d9:81:49: 0f:39:8b:5d:aa:14:0c:20:cd:9c:da:9a:71:a5:6a:02:f6:1b: 15:f4:e0:6f:5a:7e:5c:60:7a:c6:d4:b5:b2:72:e1:64:da:c8: d3:7e:9c:de:9c:fc:f6:83:b1:af:32:12:7d:31:00:a7:b3:95: 1f:e4:8d:2d:cb:9d:6e:f9:a7:74:9e:64:e5:c9:0c:fe:13:5b: af:5a:78:e4:85:33:d3:a8:47:85:aa:3b:6a:31:c2:06:65:fd: 1c:e9:cd:97:18:e7:61:49:27:29:fc:2d:0f:e9:aa:04:53:49: fe:53:d2:d6:f2:21:9e:f4:8a:ec:1b:5a:dc:09:58:90:4a:9c: bc:29:a8:95:40:df:54:70:8c:34:60:b9:51:72:0d:0d:3d:14: 58:76:6d:41:97:f5:c3:17:06:ff:9e:9d:45:43:be:e1:fb:43: 85:ba:a1:e0:48:b1:92:4e:68:73:05:9c:bb:9e:9a:83:5a:60: ee:5e:4d:ae:96:41:44:88:cc:db:4d:d9:cf:8e:e3:47:50:7d: f3:26:b9:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFcVeloDpLrhg4djv4keQ6BS72qUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNCNUMzN0U5RkJDQzI3MTM3MzMzN0IzRjM1RTkyQkU4 MUM4ODc5MDAeFw0yNjA1MTIxODIzNTBaFw0yNjA1MTMxODM0NTBaMDMxMTAvBgNV BAMTKDEwNjY1RDZGQjRFODVGRDAxNzQ3NkFENzhGMTgwNDJDMjQ3M0NFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNaH/RWyr3fVxpkwzLe/KkWQjb GbxFSPrKhfONHIfkH9LMFJqxb91cSIjYI1G7fJP64dzLK6QoivOD1ED/ztWQLDSy 1WT2ZjiyxEigwqIn0A6rdMeU6LpRL1NrYwtXU6VL+n8NOmfa9478ycfgFQF5drBc ZawwwZIAPpTdyP08hv31kd+ZDt06fjYDs7dplmqoWvFmMvDZaeUQYH0DDV+v99xo 1NxGorr5t52Y8dknsMDVtGMbdlwDyOAeQEK3gnVeKnwsKCZu7E3WnKmeUi9r2KPh Bxfz8tXP/KfVW9dYbmJsa7fQS9OxUgzbEOJMA8TN/CzXvQDF98w8BmE5IFRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEGZdb7ToX9AXR2rXjxgELCRzzoowHwYDVR0j BBgwFoAUg7XDfp+8wnE3Mzez816SvoHIh5AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI3MmY3MWEtYjljMi00MDMzLTk2NzUtZDc3MDc2MDNhODJjLzAvODNCNUMzN0U5 RkJDQzI3MTM3MzMzN0IzRjM1RTkyQkU4MUM4ODc5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84M0I1QzM3RTlGQkNDMjcxMzczMzM3QjNGMzVFOTJCRTgxQzg4 NzkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2 NzUtZDc3MDc2MDNhODJjLzAvODNCNUMzN0U5RkJDQzI3MTM3MzMzN0IzRjM1RTky QkU4MUM4ODc5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/9nD5qabzfLfKfOpmKIHBQAbuWbaaD/oHm MGgNnpU1aImD5Xql4JFMagwJRfTUrNq8vdmBSQ85i12qFAwgzZzamnGlagL2GxX0 4G9aflxgesbUtbJy4WTayNN+nN6c/PaDsa8yEn0xAKezlR/kjS3LnW75p3SeZOXJ DP4TW69aeOSFM9OoR4WqO2oxwgZl/RzpzZcY52FJJyn8LQ/pqgRTSf5T0tbyIZ70 iuwbWtwJWJBKnLwpqJVA31RwjDRguVFyDQ09FFh2bUGX9cMXBv+enUVDvuH7Q4W6 oeBIsZJOaHMFnLuemoNaYO5eTa6WQUSIzNtN2c+O40dQffMmuSM= -----END CERTIFICATE-----Generated at Wed May 13 04:08:50 2026 by rpki-client