$ rpki-client -vvf rpki-rsync.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/740413EDEC6F98DB668C2A497B8665332A59262E.mft File: 740413EDEC6F98DB668C2A497B8665332A59262E.mft (raw, json) Hash identifier: VM1GGK/Wxv4Q0nAAx0hVL+hufcUMkqxztNbszxozl3c= Subject key identifier: 4B:21:D7:99:36:92:C7:D4:37:5A:33:86:7B:E8:50:DB:8B:A6:52:6D Authority key identifier: 74:04:13:ED:EC:6F:98:DB:66:8C:2A:49:7B:86:65:33:2A:59:26:2E Certificate issuer: /CN=740413EDEC6F98DB668C2A497B8665332A59262E Certificate serial: 63DB7315A9C697F85D806EB1CFC6F4C28D89C2E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/740413EDEC6F98DB668C2A497B8665332A59262E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/740413EDEC6F98DB668C2A497B8665332A59262E.mft Manifest number: 0E Signing time: Tue 12 May 2026 17:27:18 +0000 Manifest this update: Tue 12 May 2026 17:22:18 +0000 Manifest next update: Wed 13 May 2026 20:37:18 +0000 Files and hashes: 1: 740413EDEC6F98DB668C2A497B8665332A59262E.crl (hash: +99hk6tcDznUcGYhq0xCDd2Se3KH7GaogaqlgAOP4tc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/740413EDEC6F98DB668C2A497B8665332A59262E.crl rsync://rpki-rsync.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/740413EDEC6F98DB668C2A497B8665332A59262E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/740413EDEC6F98DB668C2A497B8665332A59262E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:db:73:15:a9:c6:97:f8:5d:80:6e:b1:cf:c6:f4:c2:8d:89:c2:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=740413EDEC6F98DB668C2A497B8665332A59262E Validity Not Before: May 12 17:22:18 2026 GMT Not After : May 13 20:37:18 2026 GMT Subject: CN=4B21D7993692C7D4375A33867BE850DB8BA6526D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4e:5c:c4:6b:4c:00:21:f8:35:42:a2:15:e1: 18:22:65:2a:d3:50:71:c1:e5:c7:59:78:9e:98:a5: a9:d0:97:3b:c4:24:06:ee:6b:8f:2a:73:ac:3a:d4: 26:a2:f4:24:98:92:ab:10:dc:83:c0:99:82:ac:bc: 35:af:eb:72:71:a0:ba:eb:73:ec:bd:45:ec:95:8b: a4:c0:ed:76:b7:38:79:7a:83:cb:9c:cc:23:d8:02: c1:15:70:17:19:4d:2d:b5:d9:62:0d:d0:2a:dd:85: d5:39:43:ba:ed:ad:02:c6:7f:41:87:c6:9b:49:d3: 7b:27:88:69:71:0c:ea:d6:c7:ec:30:7b:30:53:06: 3d:64:24:e3:fa:dc:04:fe:71:0c:aa:77:11:bf:3e: c6:a3:cc:51:70:e7:68:7d:34:10:61:7f:76:29:37: 48:9c:3b:40:ee:30:b9:d3:e0:89:12:49:d0:8a:5c: 47:95:9e:06:e8:c3:eb:cb:63:a5:9b:e8:35:b2:e0: c6:ec:4c:89:46:34:f1:33:be:e5:f9:c2:d9:58:ee: 1f:b1:8f:6f:ff:1c:39:ed:02:4b:7f:07:1a:a4:a6: 82:96:78:cc:4c:a8:e7:6c:06:7b:a8:b4:f2:f2:1b: 69:4f:79:e7:5e:53:b5:ff:6b:78:14:9c:73:a7:b4: e5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:21:D7:99:36:92:C7:D4:37:5A:33:86:7B:E8:50:DB:8B:A6:52:6D X509v3 Authority Key Identifier: keyid:74:04:13:ED:EC:6F:98:DB:66:8C:2A:49:7B:86:65:33:2A:59:26:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/740413EDEC6F98DB668C2A497B8665332A59262E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/740413EDEC6F98DB668C2A497B8665332A59262E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/740413EDEC6F98DB668C2A497B8665332A59262E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:d6:bf:c2:a9:70:ea:62:be:a7:06:95:18:47:c1:8d:77:59: 6e:7e:80:21:a6:5f:bc:29:f5:29:27:d7:c4:b8:fc:78:06:9f: e7:d4:a4:da:35:41:fc:4b:80:da:8d:97:53:ef:a8:c8:b0:35: 22:1e:37:f1:d1:40:de:91:88:b3:62:e2:c9:a9:b0:fa:68:b6: 4b:e9:04:71:95:1d:ee:f9:69:26:c2:10:74:e2:44:bd:d0:b8: 51:65:38:18:98:87:0c:7d:6b:78:eb:95:8f:2a:de:d6:7c:ba: 0a:68:b0:03:36:67:e9:71:31:42:8e:ea:f6:8b:37:28:18:06: 36:e5:26:a9:69:7d:8e:3f:87:35:76:f8:b9:a1:98:08:38:c7: f6:c4:81:52:98:dc:70:84:de:d9:64:66:ca:71:8e:97:0a:18: 53:d4:fd:b3:41:88:72:40:4a:53:da:d5:ea:c0:8e:52:e1:64: 7c:10:88:55:1c:40:cb:a0:30:ea:6a:73:5c:59:ff:18:88:5f: eb:b2:85:7d:36:e4:ff:d3:81:b6:f0:23:95:9e:e0:68:9a:ba: 3b:b3:6a:ac:8e:67:98:a3:36:8a:41:d6:b4:3d:11:24:bc:7c: 37:85:23:83:49:c3:1a:95:b8:df:9e:90:d8:20:e4:fa:25:26: 09:9b:40:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY9tzFanGl/hdgG6xz8b0wo2JwucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQwNDEzRURFQzZGOThEQjY2OEMyQTQ5N0I4NjY1MzMy QTU5MjYyRTAeFw0yNjA1MTIxNzIyMThaFw0yNjA1MTMyMDM3MThaMDMxMTAvBgNV BAMTKDRCMjFENzk5MzY5MkM3RDQzNzVBMzM4NjdCRTg1MERCOEJBNjUyNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcTlzEa0wAIfg1QqIV4RgiZSrT UHHB5cdZeJ6YpanQlzvEJAbua48qc6w61Cai9CSYkqsQ3IPAmYKsvDWv63JxoLrr c+y9ReyVi6TA7Xa3OHl6g8uczCPYAsEVcBcZTS212WIN0CrdhdU5Q7rtrQLGf0GH xptJ03sniGlxDOrWx+wwezBTBj1kJOP63AT+cQyqdxG/PsajzFFw52h9NBBhf3Yp N0icO0DuMLnT4IkSSdCKXEeVngbow+vLY6Wb6DWy4MbsTIlGNPEzvuX5wtlY7h+x j2//HDntAkt/BxqkpoKWeMxMqOdsBnuotPLyG2lPeedeU7X/a3gUnHOntOW9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSyHXmTaSx9Q3WjOGe+hQ24umUm0wHwYDVR0j BBgwFoAUdAQT7exvmNtmjCpJe4ZlMypZJi4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJlN2RlOWYtYmZkMi00ODVjLThiYTItOTI0ZWVkNTJhMzA1LzAvNzQwNDEzRURF QzZGOThEQjY2OEMyQTQ5N0I4NjY1MzMyQTU5MjYyRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NDA0MTNFREVDNkY5OERCNjY4QzJBNDk3Qjg2NjUzMzJBNTky NjJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmJlN2RlOWYtYmZkMi00ODVjLThi YTItOTI0ZWVkNTJhMzA1LzAvNzQwNDEzRURFQzZGOThEQjY2OEMyQTQ5N0I4NjY1 MzMyQTU5MjYyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnWv8KpcOpivqcGlRhHwY13WW5+gCGmX7wp 9Skn18S4/HgGn+fUpNo1QfxLgNqNl1PvqMiwNSIeN/HRQN6RiLNi4smpsPpotkvp BHGVHe75aSbCEHTiRL3QuFFlOBiYhwx9a3jrlY8q3tZ8ugposAM2Z+lxMUKO6vaL NygYBjblJqlpfY4/hzV2+LmhmAg4x/bEgVKY3HCE3tlkZspxjpcKGFPU/bNBiHJA SlPa1erAjlLhZHwQiFUcQMugMOpqc1xZ/xiIX+uyhX025P/TgbbwI5We4Giaujuz aqyOZ5ijNopB1rQ9ESS8fDeFI4NJwxqVuN+ekNgg5PolJgmbQCM= -----END CERTIFICATE-----Generated at Wed May 13 00:44:09 2026 by rpki-client