$ rpki-client -vvf rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft File: 8452DA0E5C0E92F8DBB2845824D032330956238B.mft (raw, json) Hash identifier: 29gIr728kwnQ7ODmy3vUwhvCCLZicE4rRVDJnVOmKr0= Subject key identifier: 25:C0:29:49:30:D7:B5:DF:BA:76:AC:22:9F:9C:EB:1B:38:A8:6C:F9 Authority key identifier: 84:52:DA:0E:5C:0E:92:F8:DB:B2:84:58:24:D0:32:33:09:56:23:8B Certificate issuer: /CN=8452DA0E5C0E92F8DBB2845824D032330956238B Certificate serial: 225E75EE9451543FE16897E06983155B4465A8FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8452DA0E5C0E92F8DBB2845824D032330956238B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft Manifest number: 0E Signing time: Tue 12 May 2026 15:45:16 +0000 Manifest this update: Tue 12 May 2026 15:40:16 +0000 Manifest next update: Wed 13 May 2026 17:54:16 +0000 Files and hashes: 1: 8452DA0E5C0E92F8DBB2845824D032330956238B.crl (hash: qnKZYUxB+urbs23lQVEvrSNXBN3egyNDQl/SWz3cykI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.crl rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8452DA0E5C0E92F8DBB2845824D032330956238B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:5e:75:ee:94:51:54:3f:e1:68:97:e0:69:83:15:5b:44:65:a8:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452DA0E5C0E92F8DBB2845824D032330956238B Validity Not Before: May 12 15:40:16 2026 GMT Not After : May 13 17:54:16 2026 GMT Subject: CN=25C0294930D7B5DFBA76AC229F9CEB1B38A86CF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:6a:cc:e7:ec:ba:7a:11:69:19:4e:53:cb: 5b:df:bd:2c:b2:2f:1a:ce:ab:f9:93:38:57:11:95: 80:fa:dd:96:df:f5:d5:74:72:3f:91:9b:b4:89:f4: f8:09:d7:af:7f:75:a0:7d:a2:cd:e3:20:94:a3:72: 0f:6b:8e:14:7b:f2:fb:9e:c4:db:94:68:1e:14:68: 64:ad:75:47:28:83:d3:e3:d2:33:3d:be:96:61:00: a6:61:1d:55:74:8d:23:b5:2e:38:e8:0c:e8:cf:e7: f4:7c:04:75:da:94:a2:e9:02:2d:95:ac:37:b3:6e: 91:82:62:ce:57:0b:52:05:2e:ee:93:be:7e:5d:80: 56:56:db:c0:4b:f2:17:38:ae:63:ec:a3:81:b8:f4: 8e:86:5d:0e:6c:73:3e:28:22:26:0f:97:9f:da:7e: 85:e8:07:02:e9:80:db:c8:0b:1b:c4:9d:b3:c4:2b: 78:d5:08:77:39:94:f1:02:e1:30:5f:3f:a5:28:52: b2:da:48:15:b1:f0:5c:34:42:36:d9:15:10:76:31: 28:72:54:93:9f:00:c9:ee:18:37:b1:cb:34:c6:0c: 3f:fc:ed:b2:72:de:28:0b:b3:f1:e3:d3:2e:10:bc: 7f:f9:1d:72:ed:52:ae:e6:be:60:da:93:5e:75:54: cf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C0:29:49:30:D7:B5:DF:BA:76:AC:22:9F:9C:EB:1B:38:A8:6C:F9 X509v3 Authority Key Identifier: keyid:84:52:DA:0E:5C:0E:92:F8:DB:B2:84:58:24:D0:32:33:09:56:23:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8452DA0E5C0E92F8DBB2845824D032330956238B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:45:31:00:55:5a:f7:cd:40:63:82:e8:3a:f8:28:74:c9:c8: 12:c1:1b:90:e4:7b:fe:ab:b3:b7:a9:3e:99:88:d1:3d:1a:b7: 30:b3:98:b4:e1:9b:03:94:14:a0:a8:6c:f9:b1:f6:cd:ae:f2: 38:37:37:d2:55:49:79:e5:fa:14:11:d3:4e:1e:13:20:29:25: 47:0b:10:25:e0:bc:5c:a6:d9:5c:21:35:08:79:49:85:98:ec: df:8b:71:37:c5:82:52:e0:2b:8e:57:0d:50:fc:4e:b0:61:ff: d6:56:c3:3c:3e:d1:59:4d:35:30:89:24:25:95:57:e5:18:4d: fe:a0:39:18:22:db:5b:ac:c8:49:0e:52:e6:51:bc:ea:37:6d: a3:91:2c:32:d8:3e:55:38:ca:cf:66:33:4f:85:63:8a:e1:bc: 66:cd:3e:49:d3:15:09:05:8a:9f:f0:1e:43:93:45:68:49:74: b1:84:cd:85:eb:4b:e5:59:83:b2:6d:04:db:7a:f8:87:dc:78: 82:80:24:fa:b9:c8:bd:ec:3c:8b:ce:40:c6:ab:03:c2:d6:31: 46:f6:f2:83:82:d9:8a:53:a9:6f:26:b9:aa:0d:36:72:cb:3d: 12:47:6e:b1:7e:86:a4:7f:10:07:ee:cc:aa:d5:74:d5:9c:c2: c8:e8:36:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIl517pRRVD/haJfgaYMVW0RlqP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1MkRBMEU1QzBFOTJGOERCQjI4NDU4MjREMDMyMzMw OTU2MjM4QjAeFw0yNjA1MTIxNTQwMTZaFw0yNjA1MTMxNzU0MTZaMDMxMTAvBgNV BAMTKDI1QzAyOTQ5MzBEN0I1REZCQTc2QUMyMjlGOUNFQjFCMzhBODZDRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCy2rM5+y6ehFpGU5Ty1vfvSyy LxrOq/mTOFcRlYD63Zbf9dV0cj+Rm7SJ9PgJ169/daB9os3jIJSjcg9rjhR78vue xNuUaB4UaGStdUcog9Pj0jM9vpZhAKZhHVV0jSO1LjjoDOjP5/R8BHXalKLpAi2V rDezbpGCYs5XC1IFLu6Tvn5dgFZW28BL8hc4rmPso4G49I6GXQ5scz4oIiYPl5/a foXoBwLpgNvICxvEnbPEK3jVCHc5lPEC4TBfP6UoUrLaSBWx8Fw0QjbZFRB2MShy VJOfAMnuGDexyzTGDD/87bJy3igLs/Hj0y4QvH/5HXLtUq7mvmDak151VM8jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJcApSTDXtd+6dqwin5zrGziobPkwHwYDVR0j BBgwFoAUhFLaDlwOkvjbsoRYJNAyMwlWI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWU5M2Y4NzYtZDUxZS00ODU3LWE2Y2UtYzhkODdjYjQwZTE3LzAvODQ1MkRBMEU1 QzBFOTJGOERCQjI4NDU4MjREMDMyMzMwOTU2MjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDUyREEwRTVDMEU5MkY4REJCMjg0NTgyNEQwMzIzMzA5NTYy MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWU5M2Y4NzYtZDUxZS00ODU3LWE2 Y2UtYzhkODdjYjQwZTE3LzAvODQ1MkRBMEU1QzBFOTJGOERCQjI4NDU4MjREMDMy MzMwOTU2MjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdFMQBVWvfNQGOC6Dr4KHTJyBLBG5Dke/6r s7epPpmI0T0atzCzmLThmwOUFKCobPmx9s2u8jg3N9JVSXnl+hQR004eEyApJUcL ECXgvFym2VwhNQh5SYWY7N+LcTfFglLgK45XDVD8TrBh/9ZWwzw+0VlNNTCJJCWV V+UYTf6gORgi21usyEkOUuZRvOo3baORLDLYPlU4ys9mM0+FY4rhvGbNPknTFQkF ip/wHkOTRWhJdLGEzYXrS+VZg7JtBNt6+IfceIKAJPq5yL3sPIvOQMarA8LWMUb2 8oOC2YpTqW8muaoNNnLLPRJHbrF+hqR/EAfuzKrVdNWcwsjoNiU= -----END CERTIFICATE-----Generated at Tue May 12 23:20:58 2026 by rpki-client