$ rpki-client -vvf rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft File: F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft (raw, json) Hash identifier: kxoldaS+cNgw4yLADTOI1yerZAvZhe9FytJPkRtJjYo= Subject key identifier: 76:3F:1A:DA:9C:5F:57:8A:B9:0D:6A:89:58:E4:BB:96:B9:A7:50:D2 Authority key identifier: F3:48:AD:E3:81:68:4E:BA:60:AF:50:D5:39:16:D6:F7:9C:EB:CD:20 Certificate issuer: /CN=F348ADE381684EBA60AF50D53916D6F79CEBCD20 Certificate serial: 4A0A9D9097EC073169866C4020526835065BFA7C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F348ADE381684EBA60AF50D53916D6F79CEBCD20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft Manifest number: 0E Signing time: Tue 12 May 2026 17:57:58 +0000 Manifest this update: Tue 12 May 2026 17:52:58 +0000 Manifest next update: Wed 13 May 2026 21:34:58 +0000 Files and hashes: 1: F348ADE381684EBA60AF50D53916D6F79CEBCD20.crl (hash: 38MNP+QjDNZjcghsNtCPJXrkEvJbuf+ANAAnOLuqkNk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.crl rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F348ADE381684EBA60AF50D53916D6F79CEBCD20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:0a:9d:90:97:ec:07:31:69:86:6c:40:20:52:68:35:06:5b:fa:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F348ADE381684EBA60AF50D53916D6F79CEBCD20 Validity Not Before: May 12 17:52:58 2026 GMT Not After : May 13 21:34:58 2026 GMT Subject: CN=763F1ADA9C5F578AB90D6A8958E4BB96B9A750D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d0:df:42:9b:6c:e7:b0:db:90:8d:d3:42:e7: f2:02:69:a9:ad:91:c0:a7:30:77:7b:72:28:09:eb: e6:df:9c:fd:c6:f5:a1:33:51:3c:db:ba:49:26:24: 4a:ac:a9:78:93:ee:88:97:2a:37:ee:ab:33:20:23: 4f:6b:bf:c0:e9:b0:48:ac:56:70:74:c5:e0:8d:6b: d4:16:89:0e:dc:f1:7a:6f:cb:a8:49:de:08:88:87: ca:14:ee:fd:76:90:d4:41:5a:9d:f7:9d:bd:ed:92: fe:a0:9d:51:62:b6:63:bb:b5:db:0a:76:56:76:17: c8:83:45:9a:e3:51:be:05:bc:74:f6:17:70:ad:80: ea:b6:08:2b:6b:44:5d:2b:0c:80:c0:ac:fe:09:f9: 1c:42:0f:cc:db:bb:33:40:37:d2:0d:9e:9b:3e:d5: 6f:75:d2:e3:03:33:f0:8f:bb:dc:27:a9:8d:8e:07: c9:41:d5:e5:ba:6f:c0:4f:bb:15:24:03:0e:d3:95: c4:2b:64:87:cb:4f:11:cd:7c:2b:0d:2d:32:76:04: 7a:76:91:45:99:de:c4:5d:66:76:54:5b:31:7f:7c: 9f:f1:b7:1b:f6:30:7c:dc:42:f8:51:a4:f3:6e:71: 64:6b:a8:7e:b7:0d:ab:f6:1d:65:d2:e7:4f:bb:a8: 3d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3F:1A:DA:9C:5F:57:8A:B9:0D:6A:89:58:E4:BB:96:B9:A7:50:D2 X509v3 Authority Key Identifier: keyid:F3:48:AD:E3:81:68:4E:BA:60:AF:50:D5:39:16:D6:F7:9C:EB:CD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F348ADE381684EBA60AF50D53916D6F79CEBCD20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:fd:87:92:94:0b:2c:f2:9e:71:73:b8:34:fa:c0:4d:ab:33: e4:bd:4e:e8:0a:12:33:2b:3d:26:a7:85:d1:28:ce:4e:9f:60: b7:e5:a4:4f:29:f2:bc:a5:92:eb:7b:71:41:66:b9:ce:7e:69: c4:6d:b3:32:98:78:b0:e4:d3:d3:1b:b8:b6:b3:0e:cb:ec:d0: c5:d0:16:89:79:e3:1f:66:55:d9:18:99:c8:b7:33:81:38:38: 39:6b:c4:58:9a:37:d0:a9:40:bc:f3:c6:7b:b3:e4:d4:5d:8a: 5b:34:4c:28:bb:b4:53:69:e0:ba:d0:fb:22:1e:d3:72:db:12: 11:a8:ef:8c:bb:50:70:cb:e9:fb:82:a9:81:5e:89:2c:07:84: 84:6f:69:7e:5b:91:c4:99:29:63:53:05:a2:09:a3:5b:bb:38: ff:b4:5f:17:c9:54:49:86:5c:b0:da:d0:df:f0:6c:45:57:9e: 6a:aa:98:68:d0:db:76:28:f8:6b:61:60:c9:04:c4:52:1c:72: bc:f3:c9:59:a6:07:a4:69:d2:ca:db:e1:11:d4:3c:ad:7e:db: 24:f9:92:da:df:42:69:59:e3:41:fb:f8:42:2f:0e:03:4c:42: 76:c4:bf:df:c7:9b:83:7c:33:aa:08:82:03:72:02:e2:c1:c6: 72:d6:6f:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSgqdkJfsBzFphmxAIFJoNQZb+nwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM0OEFERTM4MTY4NEVCQTYwQUY1MEQ1MzkxNkQ2Rjc5 Q0VCQ0QyMDAeFw0yNjA1MTIxNzUyNThaFw0yNjA1MTMyMTM0NThaMDMxMTAvBgNV BAMTKDc2M0YxQURBOUM1RjU3OEFCOTBENkE4OTU4RTRCQjk2QjlBNzUwRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj0N9Cm2znsNuQjdNC5/ICaamt kcCnMHd7cigJ6+bfnP3G9aEzUTzbukkmJEqsqXiT7oiXKjfuqzMgI09rv8DpsEis VnB0xeCNa9QWiQ7c8Xpvy6hJ3giIh8oU7v12kNRBWp33nb3tkv6gnVFitmO7tdsK dlZ2F8iDRZrjUb4FvHT2F3CtgOq2CCtrRF0rDIDArP4J+RxCD8zbuzNAN9INnps+ 1W910uMDM/CPu9wnqY2OB8lB1eW6b8BPuxUkAw7TlcQrZIfLTxHNfCsNLTJ2BHp2 kUWZ3sRdZnZUWzF/fJ/xtxv2MHzcQvhRpPNucWRrqH63Dav2HWXS50+7qD2hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdj8a2pxfV4q5DWqJWOS7lrmnUNIwHwYDVR0j BBgwFoAU80it44FoTrpgr1DVORbW95zrzSAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJmMjczMGItZGY1OC00ZjI3LTgwZTEtMDhkZTY2YmMxYWNmLzAvRjM0OEFERTM4 MTY4NEVCQTYwQUY1MEQ1MzkxNkQ2Rjc5Q0VCQ0QyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzQ4QURFMzgxNjg0RUJBNjBBRjUwRDUzOTE2RDZGNzlDRUJD RDIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJmMjczMGItZGY1OC00ZjI3LTgw ZTEtMDhkZTY2YmMxYWNmLzAvRjM0OEFERTM4MTY4NEVCQTYwQUY1MEQ1MzkxNkQ2 Rjc5Q0VCQ0QyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHL9h5KUCyzynnFzuDT6wE2rM+S9TugKEjMr PSanhdEozk6fYLflpE8p8rylkut7cUFmuc5+acRtszKYeLDk09MbuLazDsvs0MXQ Fol54x9mVdkYmci3M4E4ODlrxFiaN9CpQLzzxnuz5NRdils0TCi7tFNp4LrQ+yIe 03LbEhGo74y7UHDL6fuCqYFeiSwHhIRvaX5bkcSZKWNTBaIJo1u7OP+0XxfJVEmG XLDa0N/wbEVXnmqqmGjQ23Yo+GthYMkExFIccrzzyVmmB6Rp0srb4RHUPK1+2yT5 ktrfQmlZ40H7+EIvDgNMQnbEv9/Hm4N8M6oIggNyAuLBxnLWb7Y= -----END CERTIFICATE-----Generated at Tue May 12 22:46:45 2026 by rpki-client