$ rpki-client -vvf rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft File: 5CB4B0C07702B8252693A6958EABDFD306B34D72.mft (raw, json) Hash identifier: 6kPsEL5lNV6KS5vHQKWQYDSdusDmy6FA13gnfUwvvvY= Subject key identifier: 99:CB:40:51:24:E1:4D:F7:B4:60:8A:3E:79:D7:48:E6:12:FB:A9:C1 Authority key identifier: 5C:B4:B0:C0:77:02:B8:25:26:93:A6:95:8E:AB:DF:D3:06:B3:4D:72 Certificate issuer: /CN=5CB4B0C07702B8252693A6958EABDFD306B34D72 Certificate serial: 70629C3865E61EF78837315B31D7C85142B7C823 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft Manifest number: 0D Signing time: Tue 12 May 2026 07:23:40 +0000 Manifest this update: Tue 12 May 2026 07:18:40 +0000 Manifest next update: Wed 13 May 2026 09:41:40 +0000 Files and hashes: 1: 5CB4B0C07702B8252693A6958EABDFD306B34D72.crl (hash: DfbG4mGfGG8j5Ez2aIIsGWbKtDBMukyYoOj+3izEVrA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.crl rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:62:9c:38:65:e6:1e:f7:88:37:31:5b:31:d7:c8:51:42:b7:c8:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CB4B0C07702B8252693A6958EABDFD306B34D72 Validity Not Before: May 12 07:18:40 2026 GMT Not After : May 13 09:41:40 2026 GMT Subject: CN=99CB405124E14DF7B4608A3E79D748E612FBA9C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3e:90:48:13:06:23:62:41:fe:7d:7a:3a:a3: 6d:73:3f:56:14:bd:df:8d:66:d3:a7:5c:b1:ac:02: 76:ab:39:92:8d:31:5d:d4:12:d8:f3:cc:8d:f4:9f: bb:8e:3f:e4:9e:15:e1:e6:dd:8b:9f:b3:d0:23:0f: 7b:58:80:fb:79:73:c8:fb:88:e4:17:78:55:90:30: b7:f4:4f:49:35:22:dc:b3:fa:7b:55:24:ff:7f:95: 4f:41:bb:49:fe:52:b4:31:b3:94:d7:48:b7:93:82: 52:e4:e0:48:5f:6e:d8:89:67:8d:63:c3:0e:6d:a0: 7b:1f:8d:0c:b2:d7:56:02:a1:69:7f:e2:06:23:9e: 36:23:17:c3:36:59:96:d0:27:8d:47:01:fe:48:77: d8:b4:a1:72:9e:fd:32:7d:77:ff:d0:1c:60:49:20: 0d:db:c1:9b:4a:8b:a1:ee:51:40:37:d8:26:63:e1: 1d:83:0d:52:80:c1:ee:e0:2c:18:dc:16:3e:77:a2: 59:a0:be:1f:52:d3:94:da:2e:7c:da:9a:25:d6:28: 45:79:f3:3e:7f:cb:c1:20:7b:1b:14:4a:4c:10:30: 11:58:f7:ab:8a:80:5a:d6:66:82:8a:4c:7e:f5:b0: bb:16:0c:29:1a:fc:c5:6e:c3:f2:4f:e3:b2:69:0e: 2c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CB:40:51:24:E1:4D:F7:B4:60:8A:3E:79:D7:48:E6:12:FB:A9:C1 X509v3 Authority Key Identifier: keyid:5C:B4:B0:C0:77:02:B8:25:26:93:A6:95:8E:AB:DF:D3:06:B3:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:6e:93:99:c6:eb:ac:8c:ce:92:b6:97:c5:d1:11:43:93:82: 5f:95:67:ec:eb:61:0c:4e:07:3e:40:c9:71:22:7b:dd:c0:52: 3d:8c:78:6c:9e:42:c6:ca:5d:5f:8e:b3:54:36:80:15:fe:86: af:30:57:a1:43:ff:34:d1:8a:49:54:09:45:2b:5f:be:00:4b: 9a:8c:12:d5:6f:10:92:e6:90:e0:ce:23:4a:82:d6:e0:3b:91: 10:06:ca:73:21:b3:64:78:ea:7e:0a:45:6d:e2:00:61:bb:59: 65:5d:5e:cf:a5:fa:0c:11:e0:97:25:b7:9f:77:ae:16:ac:4d: fd:9f:7a:f4:dc:74:47:1b:17:91:f6:9f:b5:d4:8e:87:9f:22: 65:44:4a:bf:3c:bf:ef:b9:86:ec:91:7f:6c:a2:5d:a2:e7:9a: fa:4e:ef:7a:ca:43:a1:ff:80:c5:96:3d:61:38:a2:f1:b2:c6: 6d:52:d9:06:10:97:56:19:95:cd:46:66:97:5a:19:e2:d1:42: b8:22:8d:35:92:60:16:b0:e2:22:9e:99:c0:c5:fd:54:ee:77: e6:fb:dc:5f:37:ae:3e:9e:a6:7c:cd:3c:24:c6:ac:e7:8a:0e: bd:dd:f0:2a:e0:be:68:f1:a7:48:a4:e4:37:85:a5:9c:f8:e3: ff:13:99:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcGKcOGXmHveINzFbMdfIUUK3yCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNCNEIwQzA3NzAyQjgyNTI2OTNBNjk1OEVBQkRGRDMw NkIzNEQ3MjAeFw0yNjA1MTIwNzE4NDBaFw0yNjA1MTMwOTQxNDBaMDMxMTAvBgNV BAMTKDk5Q0I0MDUxMjRFMTRERjdCNDYwOEEzRTc5RDc0OEU2MTJGQkE5QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNPpBIEwYjYkH+fXo6o21zP1YU vd+NZtOnXLGsAnarOZKNMV3UEtjzzI30n7uOP+SeFeHm3Yufs9AjD3tYgPt5c8j7 iOQXeFWQMLf0T0k1Ityz+ntVJP9/lU9Bu0n+UrQxs5TXSLeTglLk4EhfbtiJZ41j ww5toHsfjQyy11YCoWl/4gYjnjYjF8M2WZbQJ41HAf5Id9i0oXKe/TJ9d//QHGBJ IA3bwZtKi6HuUUA32CZj4R2DDVKAwe7gLBjcFj53olmgvh9S05TaLnzamiXWKEV5 8z5/y8EgexsUSkwQMBFY96uKgFrWZoKKTH71sLsWDCka/MVuw/JP47JpDiydAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmctAUSThTfe0YIo+eddI5hL7qcEwHwYDVR0j BBgwFoAUXLSwwHcCuCUmk6aVjqvf0wazTXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNiZGNiYWUtMmU5ZC00ZjNmLThhYjktMzQyNGU0NDg0ODRlLzAvNUNCNEIwQzA3 NzAyQjgyNTI2OTNBNjk1OEVBQkRGRDMwNkIzNEQ3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Q0I0QjBDMDc3MDJCODI1MjY5M0E2OTU4RUFCREZEMzA2QjM0 RDcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNiZGNiYWUtMmU5ZC00ZjNmLThh YjktMzQyNGU0NDg0ODRlLzAvNUNCNEIwQzA3NzAyQjgyNTI2OTNBNjk1OEVBQkRG RDMwNkIzNEQ3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVuk5nG66yMzpK2l8XREUOTgl+VZ+zrYQxO Bz5AyXEie93AUj2MeGyeQsbKXV+Os1Q2gBX+hq8wV6FD/zTRiklUCUUrX74AS5qM EtVvEJLmkODOI0qC1uA7kRAGynMhs2R46n4KRW3iAGG7WWVdXs+l+gwR4Jclt593 rhasTf2fevTcdEcbF5H2n7XUjoefImVESr88v++5huyRf2yiXaLnmvpO73rKQ6H/ gMWWPWE4ovGyxm1S2QYQl1YZlc1GZpdaGeLRQrgijTWSYBaw4iKemcDF/VTud+b7 3F83rj6epnzNPCTGrOeKDr3d8Crgvmjxp0ik5DeFpZz44/8TmYw= -----END CERTIFICATE-----Generated at Tue May 12 22:33:22 2026 by rpki-client