$ rpki-client -vvf rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft File: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft (raw, json) Hash identifier: Onx20BaKDhjwvYsdmMtEzAVWvsdkVGN0HYPRfttEiTE= Subject key identifier: 1D:F5:EF:A9:D9:34:D1:1F:B4:D7:FE:FE:4D:5E:0F:18:E4:EB:EC:B0 Authority key identifier: 0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1 Certificate issuer: /CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1 Certificate serial: 58FED04D148E6CA9E0484C1A7FB12C1067D7E318 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:30:56 +0000 Manifest this update: Tue 12 May 2026 22:25:56 +0000 Manifest next update: Wed 13 May 2026 23:27:56 +0000 Files and hashes: 1: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl (hash: +1+PnUaT7p/9xUmXHIIqdIaOlOdm3LhBqepvwsTxVFg=) 2: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: 5EvruLBNSAVPD9rhIUp2sgGO0l1cxlFHLpEgjT7FBPg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:fe:d0:4d:14:8e:6c:a9:e0:48:4c:1a:7f:b1:2c:10:67:d7:e3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1 Validity Not Before: May 12 22:25:56 2026 GMT Not After : May 13 23:27:56 2026 GMT Subject: CN=1DF5EFA9D934D11FB4D7FEFE4D5E0F18E4EBECB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:81:af:c3:a2:1d:82:60:ad:0d:36:62:b2:b9: ae:2c:4e:6e:85:ab:3d:c4:2c:a4:bc:80:1d:ba:ac: a8:41:0b:2d:a1:18:5d:21:64:33:15:0c:73:e0:4c: b5:52:55:8e:38:a5:0a:5c:16:f0:3a:94:50:f1:ba: 48:f1:e7:85:5f:f8:bf:f4:62:d2:9c:9d:86:4d:3a: eb:c6:09:6d:60:94:2d:ce:b7:60:48:c1:51:36:98: 1c:6b:c6:0e:c6:68:4e:92:71:87:76:e7:e6:3c:64: c2:47:39:f6:9f:08:18:f5:81:40:5f:50:8a:43:05: be:4e:09:5a:4f:26:05:2c:78:79:43:54:e6:45:d0: 33:01:ef:05:a2:b2:28:f5:4d:dc:9d:41:88:b5:d6: 1a:bc:45:24:aa:c0:f1:54:38:7c:96:7e:07:2c:59: 7c:e1:cd:bb:17:f4:81:4d:23:ab:f7:79:1f:15:da: e7:5b:10:24:52:33:5c:ee:8e:e1:2b:46:a1:71:1f: 7c:d0:f1:1f:70:b2:b2:66:77:5f:9c:6d:79:4d:92: 0b:a0:fb:d9:31:11:7b:57:00:8f:73:bb:cf:74:1a: 43:20:6e:9c:e9:16:6c:dc:6e:c6:80:e6:5f:75:25: 1b:4f:c7:14:4f:27:03:cb:50:d3:8f:92:55:0e:ef: 41:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F5:EF:A9:D9:34:D1:1F:B4:D7:FE:FE:4D:5E:0F:18:E4:EB:EC:B0 X509v3 Authority Key Identifier: keyid:0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:33:f1:6c:4f:9e:01:7f:39:54:b5:b2:a2:21:9f:9d:a3:55: a8:81:42:81:9d:c4:ad:04:61:c4:0b:54:46:d0:c1:32:35:1e: ec:b4:d9:43:68:73:47:61:6e:38:8d:a5:85:e8:8e:6d:b5:7d: 56:1f:1f:1c:e0:28:2e:9a:5b:5b:dc:81:16:1b:9d:0d:89:5a: 4b:d8:6e:1a:f2:b8:bf:88:d4:cb:10:70:16:63:ea:ec:da:e9: 65:5e:e8:93:20:76:67:de:e3:0f:e8:74:50:16:fa:f6:e7:1a: a0:5b:b8:4f:dd:be:35:27:64:7c:82:14:ad:63:23:96:d6:d3: 4d:e3:50:75:a3:bc:56:3c:ad:5e:49:3d:45:c7:5e:80:d0:48: 01:10:2e:db:c4:8d:b8:59:37:43:0e:24:39:c2:49:76:68:27: d9:82:5b:05:05:27:c0:2b:c4:c3:a6:b8:8f:7d:fd:34:43:04: b6:59:2a:4d:38:83:65:b8:85:7a:92:e5:21:30:62:3e:57:d9: 54:0f:31:7e:ff:c9:ae:7d:1c:73:5a:dc:95:12:b8:73:31:92: e3:79:69:1d:81:4c:c3:08:81:6b:8d:e9:24:9a:de:11:3c:7d: 2e:30:05:84:66:c9:a5:ae:d1:a2:de:89:f7:09:bd:ef:eb:18: 90:25:eb:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWP7QTRSObKngSEwaf7EsEGfX4xgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFRDFFRUQwRTg1RTJCOEJBNUVGRkJFQzAyNTIwM0Q3 QzM4NEJDMTAeFw0yNjA1MTIyMjI1NTZaFw0yNjA1MTMyMzI3NTZaMDMxMTAvBgNV BAMTKDFERjVFRkE5RDkzNEQxMUZCNEQ3RkVGRTRENUUwRjE4RTRFQkVDQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAga/Doh2CYK0NNmKyua4sTm6F qz3ELKS8gB26rKhBCy2hGF0hZDMVDHPgTLVSVY44pQpcFvA6lFDxukjx54Vf+L/0 YtKcnYZNOuvGCW1glC3Ot2BIwVE2mBxrxg7GaE6ScYd25+Y8ZMJHOfafCBj1gUBf UIpDBb5OCVpPJgUseHlDVOZF0DMB7wWisij1TdydQYi11hq8RSSqwPFUOHyWfgcs WXzhzbsX9IFNI6v3eR8V2udbECRSM1zujuErRqFxH3zQ8R9wsrJmd1+cbXlNkgug +9kxEXtXAI9zu890GkMgbpzpFmzcbsaA5l91JRtPxxRPJwPLUNOPklUO70EnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHfXvqdk00R+01/7+TV4PGOTr7LAwHwYDVR0j BBgwFoAUDO0e7Q6F4ri6Xv++wCUgPXw4S8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJmMmNmMDMtZjlmOS00YmNhLThjMmMtNjA3MzI4MGRmZWE4LzAvMENFRDFFRUQw RTg1RTJCOEJBNUVGRkJFQzAyNTIwM0Q3QzM4NEJDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0VEMUVFRDBFODVFMkI4QkE1RUZGQkVDMDI1MjAzRDdDMzg0 QkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvMENFRDFFRUQwRTg1RTJCOEJBNUVGRkJFQzAyNTIw M0Q3QzM4NEJDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQz8WxPngF/OVS1sqIhn52jVaiBQoGdxK0E YcQLVEbQwTI1Huy02UNoc0dhbjiNpYXojm21fVYfHxzgKC6aW1vcgRYbnQ2JWkvY bhryuL+I1MsQcBZj6uza6WVe6JMgdmfe4w/odFAW+vbnGqBbuE/dvjUnZHyCFK1j I5bW003jUHWjvFY8rV5JPUXHXoDQSAEQLtvEjbhZN0MOJDnCSXZoJ9mCWwUFJ8Ar xMOmuI99/TRDBLZZKk04g2W4hXqS5SEwYj5X2VQPMX7/ya59HHNa3JUSuHMxkuN5 aR2BTMMIgWuN6SSa3hE8fS4wBYRmyaWu0aLeifcJve/rGJAl650= -----END CERTIFICATE-----Generated at Wed May 13 01:11:23 2026 by rpki-client