$ rpki-client -vvf rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft File: DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft (raw, json) Hash identifier: a/dOinRfwXl/SLdfrqCrwb456oCR+zPFIz2ul7cxkNc= Subject key identifier: 47:E0:BF:92:56:80:5E:1F:53:1E:CE:B8:3C:C1:FB:AF:15:78:F7:3C Authority key identifier: DE:AB:D6:7A:7F:8A:1C:94:C4:FE:B4:1F:DC:B2:3D:3F:D2:80:E0:C9 Certificate issuer: /CN=DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9 Certificate serial: 03617FB7A167AEE8F75A2A49260A7B6385311CDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft Manifest number: 0E Signing time: Tue 12 May 2026 21:29:14 +0000 Manifest this update: Tue 12 May 2026 21:24:14 +0000 Manifest next update: Wed 13 May 2026 23:43:14 +0000 Files and hashes: 1: DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.crl (hash: GECj2srxJhZvEJgyCtzTR93VCF7xneENC3S3iPxJTYY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.crl rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:61:7f:b7:a1:67:ae:e8:f7:5a:2a:49:26:0a:7b:63:85:31:1c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9 Validity Not Before: May 12 21:24:14 2026 GMT Not After : May 13 23:43:14 2026 GMT Subject: CN=47E0BF9256805E1F531ECEB83CC1FBAF1578F73C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:28:8a:91:7f:1a:c7:3a:eb:27:57:c2:91:57: b1:38:5e:22:6f:a2:7d:ff:7c:5c:71:c6:80:44:12: 5f:83:d2:fa:fc:7c:6f:7c:90:02:c7:76:2f:dd:b9: 90:db:f0:6f:b5:fd:4c:88:26:4b:d6:e5:ea:02:20: 7e:5c:ee:e7:03:7c:8a:84:81:1a:52:e5:9d:a7:cf: f3:77:35:01:8b:ac:d9:3f:d0:27:d1:a0:69:6e:87: 6c:7a:25:93:bd:21:9d:6f:fa:02:4e:cb:78:ed:70: 6b:f0:b4:b3:10:08:48:e7:18:98:b7:7a:39:57:2e: 0e:57:fc:29:cf:a1:36:6a:8d:f3:cb:6d:31:79:fa: b6:a8:30:72:2a:dd:32:a9:f7:c2:c1:cf:62:d3:62: 26:3a:65:e2:c3:2b:f3:cd:8a:6d:bb:f5:c8:46:d4: bb:f6:e8:72:40:f4:6f:4b:9b:ef:23:cc:4e:3b:40: 14:6c:11:28:16:0f:81:e5:e0:33:35:7d:c9:b3:66: d4:b4:9a:1f:58:7b:52:33:12:b4:2c:7b:48:a3:5d: 3c:c4:62:6a:ed:65:e2:91:6c:2b:f7:6f:44:9c:cc: b9:1c:8c:a6:3e:6c:ad:cd:ca:05:5a:89:e5:8d:c1: 1d:dd:e3:70:3c:35:88:14:36:29:bd:4e:9e:3f:91: 0b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E0:BF:92:56:80:5E:1F:53:1E:CE:B8:3C:C1:FB:AF:15:78:F7:3C X509v3 Authority Key Identifier: keyid:DE:AB:D6:7A:7F:8A:1C:94:C4:FE:B4:1F:DC:B2:3D:3F:D2:80:E0:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:59:16:27:63:dd:62:7d:98:bd:63:f7:27:fc:32:86:46:3f: a3:33:c6:38:9a:31:2d:56:eb:7e:26:31:3f:84:f9:fd:34:01: ca:36:5d:9f:db:5c:04:b8:43:ea:fb:59:df:d0:d5:6c:e8:38: 39:d8:6a:c1:51:de:5b:70:11:b6:d4:51:a9:c4:cc:ab:ca:d2: c9:ef:71:eb:8f:f9:18:5d:ea:f4:45:f7:3b:26:ed:41:9d:79: 8f:74:9e:a4:2b:e4:66:df:03:18:06:c6:49:cc:3a:79:71:51: 48:c9:32:b5:4c:f6:d6:3f:2b:46:e5:49:5b:88:b5:34:34:76: 7b:3f:31:34:dd:fc:e7:8a:1c:35:e3:41:02:71:91:bd:0b:55: 37:05:8f:7c:bd:37:e4:74:1d:f8:2f:9a:18:4e:9f:91:3d:4a: ce:76:c7:bb:df:7d:79:d5:63:e7:5e:5d:dd:71:78:2e:ad:06: a5:29:86:dc:1b:a8:68:62:c6:ac:2c:d3:00:0f:9a:ad:0a:ec: 09:3a:fc:e9:38:01:86:6d:29:5e:57:bb:e3:a0:d7:dc:2e:c5: e1:8b:d5:58:1b:8e:c9:d9:04:31:9a:0d:06:dd:d4:cd:ae:c1: 1b:aa:f7:6b:3b:83:d7:eb:aa:1e:ad:38:34:73:41:c7:d3:93: 49:65:2a:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA2F/t6Fnruj3WipJJgp7Y4UxHN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBQkQ2N0E3RjhBMUM5NEM0RkVCNDFGRENCMjNEM0ZE MjgwRTBDOTAeFw0yNjA1MTIyMTI0MTRaFw0yNjA1MTMyMzQzMTRaMDMxMTAvBgNV BAMTKDQ3RTBCRjkyNTY4MDVFMUY1MzFFQ0VCODNDQzFGQkFGMTU3OEY3M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQKIqRfxrHOusnV8KRV7E4XiJv on3/fFxxxoBEEl+D0vr8fG98kALHdi/duZDb8G+1/UyIJkvW5eoCIH5c7ucDfIqE gRpS5Z2nz/N3NQGLrNk/0CfRoGluh2x6JZO9IZ1v+gJOy3jtcGvwtLMQCEjnGJi3 ejlXLg5X/CnPoTZqjfPLbTF5+raoMHIq3TKp98LBz2LTYiY6ZeLDK/PNim279chG 1Lv26HJA9G9Lm+8jzE47QBRsESgWD4Hl4DM1fcmzZtS0mh9Ye1IzErQse0ijXTzE YmrtZeKRbCv3b0SczLkcjKY+bK3NygVaieWNwR3d43A8NYgUNim9Tp4/kQs9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR+C/klaAXh9THs64PMH7rxV49zwwHwYDVR0j BBgwFoAU3qvWen+KHJTE/rQf3LI9P9KA4MkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZhNmJjYTgtMzc0MS00NGVmLThhNWYtMGU3NmI4MGQ0MTQ2LzAvREVBQkQ2N0E3 RjhBMUM5NEM0RkVCNDFGRENCMjNEM0ZEMjgwRTBDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUFCRDY3QTdGOEExQzk0QzRGRUI0MUZEQ0IyM0QzRkQyODBF MEM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZhNmJjYTgtMzc0MS00NGVmLThh NWYtMGU3NmI4MGQ0MTQ2LzAvREVBQkQ2N0E3RjhBMUM5NEM0RkVCNDFGRENCMjNE M0ZEMjgwRTBDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVZFidj3WJ9mL1j9yf8MoZGP6MzxjiaMS1W 634mMT+E+f00Aco2XZ/bXAS4Q+r7Wd/Q1WzoODnYasFR3ltwEbbUUanEzKvK0snv ceuP+Rhd6vRF9zsm7UGdeY90nqQr5GbfAxgGxknMOnlxUUjJMrVM9tY/K0blSVuI tTQ0dns/MTTd/OeKHDXjQQJxkb0LVTcFj3y9N+R0HfgvmhhOn5E9Ss52x7vffXnV Y+deXd1xeC6tBqUphtwbqGhixqws0wAPmq0K7Ak6/Ok4AYZtKV5Xu+Og19wuxeGL 1VgbjsnZBDGaDQbd1M2uwRuq92s7g9frqh6tODRzQcfTk0llKl0= -----END CERTIFICATE-----Generated at Wed May 13 01:11:23 2026 by rpki-client