$ rpki-client -vvf rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft File: A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft (raw, json) Hash identifier: CrBVGoXIEWBNta9IdG46YHC8PSqClDK8B9dZUef2srA= Subject key identifier: 94:BF:73:54:CC:1A:4F:F7:8E:99:E8:41:16:B5:E3:45:59:F6:DB:94 Authority key identifier: A2:B3:83:F9:8D:09:D3:C4:43:CA:2D:F5:56:F6:4F:98:BB:68:B1:E2 Certificate issuer: /CN=A2B383F98D09D3C443CA2DF556F64F98BB68B1E2 Certificate serial: 2D2066775FC2E9912ACA8A487D958B7A79DC8B12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft Manifest number: 0D Signing time: Tue 12 May 2026 12:27:48 +0000 Manifest this update: Tue 12 May 2026 12:22:48 +0000 Manifest next update: Wed 13 May 2026 13:06:48 +0000 Files and hashes: 1: A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl (hash: bea4m484oy7qDaRRzv+dvWF2RNggdc/q0FaK1r2YFMU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:20:66:77:5f:c2:e9:91:2a:ca:8a:48:7d:95:8b:7a:79:dc:8b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2B383F98D09D3C443CA2DF556F64F98BB68B1E2 Validity Not Before: May 12 12:22:48 2026 GMT Not After : May 13 13:06:48 2026 GMT Subject: CN=94BF7354CC1A4FF78E99E84116B5E34559F6DB94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d3:f4:66:91:e6:da:9c:fc:1e:4d:d8:9c:38: 42:b0:87:f8:f1:d9:4f:90:da:6a:bb:20:0b:94:9b: 5c:27:98:a5:9c:28:e4:3e:fb:a6:d2:3b:7f:36:24: 80:ae:c3:d4:e2:7a:88:7b:34:49:e2:75:18:02:b3: 3d:3f:ac:21:17:cd:0b:a2:ff:d8:a7:5a:bf:8e:e2: e8:34:ff:30:68:c3:9b:20:87:ac:65:77:06:88:45: 80:63:d2:e6:dd:ae:d5:29:73:38:8b:b8:e6:06:4a: 62:1b:ad:7e:f4:2f:7e:3f:c7:1b:28:af:a2:02:5e: 6a:db:15:99:44:33:3a:9b:3c:f5:7d:b2:1a:bf:b8: 5d:b4:aa:14:86:6c:ac:32:28:dc:52:42:62:65:e9: f6:3e:54:77:9e:72:e7:a8:d8:48:40:16:8b:ac:4e: 12:5c:46:1c:4a:b9:f7:03:b9:13:6d:4b:09:cb:ee: 58:82:61:8b:52:9d:7b:cb:c7:ba:64:28:7f:c1:8e: 80:73:ad:15:d6:d0:fe:b6:c7:8f:a5:d8:b2:4c:3e: 34:09:1a:6a:8b:dc:e0:86:07:30:6d:34:77:94:82: 06:20:ec:21:c4:fb:2f:ef:3b:da:88:0e:a9:ff:db: d3:91:21:76:f0:66:d9:00:e1:f7:ca:94:23:71:5a: ad:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BF:73:54:CC:1A:4F:F7:8E:99:E8:41:16:B5:E3:45:59:F6:DB:94 X509v3 Authority Key Identifier: keyid:A2:B3:83:F9:8D:09:D3:C4:43:CA:2D:F5:56:F6:4F:98:BB:68:B1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c6:7f:ca:e2:b3:c8:50:b6:c1:a5:c4:28:95:b5:b3:37:82: 55:7a:33:44:9f:64:07:10:c7:2a:f7:d0:38:d2:55:9d:c3:5a: c4:4b:1b:2d:26:78:57:b1:23:19:0e:bf:fc:05:fd:b3:af:97: 59:c2:42:75:09:f9:29:03:15:42:59:9d:ec:b6:99:b7:75:83: 1c:2c:f9:e5:ab:8c:38:7a:51:7a:1c:20:d6:cf:19:5c:46:72: ed:6f:ae:4c:0a:2a:b7:65:ea:65:6f:75:b8:ff:4c:0c:05:f0: 62:d0:5b:63:fc:c5:1f:ab:e0:ec:09:74:be:b4:42:9f:6d:25: 1f:66:ee:0d:f3:6f:91:b0:5d:90:13:8c:ff:41:0f:2e:a3:a7: 32:15:81:4a:92:1f:b7:0c:5e:89:6c:3d:e4:91:02:1a:fe:dd: a8:61:81:b0:16:0b:18:9d:eb:80:8b:53:c9:8c:22:2d:61:d3: 18:96:57:c6:4e:a6:a8:44:86:c0:0e:d9:ee:6f:85:a2:f5:b3: c1:73:ad:06:42:43:a3:c3:d0:37:02:30:35:cb:48:9b:f9:e4: 14:19:54:4a:ea:5b:b7:23:26:d3:29:23:53:df:84:5f:d8:6b: 74:1b:a3:cf:ac:c4:35:8e:37:b9:4d:ce:50:42:11:ab:54:7b: 9c:db:8d:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSBmd1/C6ZEqyopIfZWLenncixIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJCMzgzRjk4RDA5RDNDNDQzQ0EyREY1NTZGNjRGOThC QjY4QjFFMjAeFw0yNjA1MTIxMjIyNDhaFw0yNjA1MTMxMzA2NDhaMDMxMTAvBgNV BAMTKDk0QkY3MzU0Q0MxQTRGRjc4RTk5RTg0MTE2QjVFMzQ1NTlGNkRCOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV0/RmkebanPweTdicOEKwh/jx 2U+Q2mq7IAuUm1wnmKWcKOQ++6bSO382JICuw9Tieoh7NEnidRgCsz0/rCEXzQui /9inWr+O4ug0/zBow5sgh6xldwaIRYBj0ubdrtUpcziLuOYGSmIbrX70L34/xxso r6ICXmrbFZlEMzqbPPV9shq/uF20qhSGbKwyKNxSQmJl6fY+VHeecueo2EhAFous ThJcRhxKufcDuRNtSwnL7liCYYtSnXvLx7pkKH/BjoBzrRXW0P62x4+l2LJMPjQJ GmqL3OCGBzBtNHeUggYg7CHE+y/vO9qIDqn/29ORIXbwZtkA4ffKlCNxWq39AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlL9zVMwaT/eOmehBFrXjRVn225QwHwYDVR0j BBgwFoAUorOD+Y0J08RDyi31VvZPmLtoseIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU1NjRlNzktYjY3OS00NmQ1LWIxZmQtMDI4ZDE3N2I2OGMwLzAvQTJCMzgzRjk4 RDA5RDNDNDQzQ0EyREY1NTZGNjRGOThCQjY4QjFFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMkIzODNGOThEMDlEM0M0NDNDQTJERjU1NkY2NEY5OEJCNjhC MUUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU1NjRlNzktYjY3OS00NmQ1LWIx ZmQtMDI4ZDE3N2I2OGMwLzAvQTJCMzgzRjk4RDA5RDNDNDQzQ0EyREY1NTZGNjRG OThCQjY4QjFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnGf8ris8hQtsGlxCiVtbM3glV6M0SfZAcQ xyr30DjSVZ3DWsRLGy0meFexIxkOv/wF/bOvl1nCQnUJ+SkDFUJZney2mbd1gxws +eWrjDh6UXocINbPGVxGcu1vrkwKKrdl6mVvdbj/TAwF8GLQW2P8xR+r4OwJdL60 Qp9tJR9m7g3zb5GwXZATjP9BDy6jpzIVgUqSH7cMXolsPeSRAhr+3ahhgbAWCxid 64CLU8mMIi1h0xiWV8ZOpqhEhsAO2e5vhaL1s8FzrQZCQ6PD0DcCMDXLSJv55BQZ VErqW7cjJtMpI1PfhF/Ya3Qbo8+sxDWON7lNzlBCEatUe5zbjaQ= -----END CERTIFICATE-----Generated at Wed May 13 01:37:07 2026 by rpki-client