$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft File: C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft (raw, json) Hash identifier: nG9fM7dEyAPCQMfimIzUT3PtdZXJ24lxDiaFVVssgbo= Subject key identifier: 54:96:34:3C:89:3D:E3:99:27:47:A9:BC:AB:67:2D:58:4F:BB:E7:76 Authority key identifier: C5:DD:2D:E8:A2:5B:2A:B9:DB:C2:98:28:C0:31:41:B2:6C:B7:40:69 Certificate issuer: /CN=C5DD2DE8A25B2AB9DBC29828C03141B26CB74069 Certificate serial: 5340A1E8CDE928930791C717F703E721A375F3FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft Manifest number: 0E Signing time: Tue 12 May 2026 19:46:06 +0000 Manifest this update: Tue 12 May 2026 19:41:06 +0000 Manifest next update: Wed 13 May 2026 22:27:06 +0000 Files and hashes: 1: C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl (hash: u5fmemhtL10Mqfq0ir26cej3tPalybeYu8Lt5Bi0VNo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:40:a1:e8:cd:e9:28:93:07:91:c7:17:f7:03:e7:21:a3:75:f3:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5DD2DE8A25B2AB9DBC29828C03141B26CB74069 Validity Not Before: May 12 19:41:06 2026 GMT Not After : May 13 22:27:06 2026 GMT Subject: CN=5496343C893DE3992747A9BCAB672D584FBBE776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:16:a4:3a:3d:2c:1b:d9:39:b9:b1:5d:7f:a0: 7f:6c:6b:64:e7:b7:10:27:ba:70:82:18:8f:83:45: 93:65:5f:3f:76:5a:39:d0:7e:b4:f7:de:72:11:4e: 56:96:df:a4:1e:47:c9:56:ab:15:8c:60:a7:18:78: 44:95:ab:44:68:4e:6d:43:79:5d:54:61:ff:ec:d7: 1a:9c:3b:db:b9:48:8f:f9:92:7e:6c:c9:0c:77:61: ba:a5:e3:16:8f:fb:56:4e:66:b6:c7:c1:67:a1:c6: b5:da:07:1c:a3:cc:7f:b4:ec:65:4b:8a:b1:d9:b3: 5d:58:f2:bf:3e:31:c9:93:62:24:af:81:e0:4c:9b: de:ee:ef:ba:2d:89:07:26:01:48:13:94:e2:67:9f: b6:22:33:f2:2a:7f:5e:bf:11:fb:0d:89:6e:e1:59: f5:84:0f:66:b2:cc:41:f5:5a:c3:c2:71:8c:a6:50: c5:24:68:3a:28:e1:f4:be:7c:3d:61:4b:18:11:75: 10:5d:3a:c2:74:a7:a9:81:58:1c:33:8e:c9:71:a9: 5b:74:14:82:45:99:3a:88:43:9d:9c:9d:67:14:13: 40:46:86:ff:56:28:e1:61:34:d7:1f:ba:4e:90:90: 27:fe:dc:77:9e:65:e0:58:e9:aa:82:f5:04:21:99: b6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:96:34:3C:89:3D:E3:99:27:47:A9:BC:AB:67:2D:58:4F:BB:E7:76 X509v3 Authority Key Identifier: keyid:C5:DD:2D:E8:A2:5B:2A:B9:DB:C2:98:28:C0:31:41:B2:6C:B7:40:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:22:68:8c:04:a4:3b:ad:90:d3:fa:e3:71:b3:84:8d:eb:93: 9f:8c:c1:cd:0f:5f:10:2e:c7:0b:42:21:36:9a:1e:50:2c:c0: d2:f5:7d:fe:4b:4f:68:01:4f:38:ad:99:7c:75:bd:d7:69:a8: 7c:11:9a:37:3f:79:d9:0a:8e:41:1e:56:1e:24:fe:a7:07:b3: 9e:06:fe:e7:8e:b0:e9:11:8e:af:37:ff:96:c5:8c:7c:66:29: 47:d7:31:8c:d2:b0:49:ab:6b:30:90:02:e5:79:47:ee:09:9c: 79:3a:03:74:7f:7f:90:a1:74:4f:a2:08:f4:6a:5a:52:5b:45: 81:99:94:b3:68:42:a4:06:b7:05:8c:b6:03:51:13:53:b3:1c: 76:e1:43:0c:1e:1e:40:9c:3e:63:6f:87:3c:a0:fa:77:d9:a1: d8:10:ea:d6:8e:c0:70:af:16:4b:e9:e8:4a:5f:9e:a6:9e:93: 1b:17:67:cc:b0:e4:a9:78:af:11:17:01:0b:ec:a9:76:2e:bd: 71:5c:7a:90:4f:25:e2:2b:80:c8:97:d9:88:2c:2c:be:db:3d: a1:3c:43:39:cc:3b:32:16:08:0f:6f:fe:0a:5c:1e:79:d5:e2: 7a:19:b6:b1:fb:a7:ae:f9:eb:5a:fb:9d:17:a3:2c:6e:e9:5d: 98:9b:83:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU0Ch6M3pKJMHkccX9wPnIaN18/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVERDJERThBMjVCMkFCOURCQzI5ODI4QzAzMTQxQjI2 Q0I3NDA2OTAeFw0yNjA1MTIxOTQxMDZaFw0yNjA1MTMyMjI3MDZaMDMxMTAvBgNV BAMTKDU0OTYzNDNDODkzREUzOTkyNzQ3QTlCQ0FCNjcyRDU4NEZCQkU3NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpFqQ6PSwb2Tm5sV1/oH9sa2Tn txAnunCCGI+DRZNlXz92WjnQfrT33nIRTlaW36QeR8lWqxWMYKcYeESVq0RoTm1D eV1UYf/s1xqcO9u5SI/5kn5syQx3Ybql4xaP+1ZOZrbHwWehxrXaBxyjzH+07GVL irHZs11Y8r8+McmTYiSvgeBMm97u77otiQcmAUgTlOJnn7YiM/Iqf16/EfsNiW7h WfWED2ayzEH1WsPCcYymUMUkaDoo4fS+fD1hSxgRdRBdOsJ0p6mBWBwzjslxqVt0 FIJFmTqIQ52cnWcUE0BGhv9WKOFhNNcfuk6QkCf+3HeeZeBY6aqC9QQhmbbpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVJY0PIk945knR6m8q2ctWE+753YwHwYDVR0j BBgwFoAUxd0t6KJbKrnbwpgowDFBsmy3QGkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5ZTAxYmEtNTljOS00MDQ3LWFjMGItZTliMmZlNjU4NTNjLzAvQzVERDJERThB MjVCMkFCOURCQzI5ODI4QzAzMTQxQjI2Q0I3NDA2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNUREMkRFOEEyNUIyQUI5REJDMjk4MjhDMDMxNDFCMjZDQjc0 MDY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvQzVERDJERThBMjVCMkFCOURCQzI5ODI4QzAzMTQx QjI2Q0I3NDA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgiaIwEpDutkNP643GzhI3rk5+Mwc0PXxAu xwtCITaaHlAswNL1ff5LT2gBTzitmXx1vddpqHwRmjc/edkKjkEeVh4k/qcHs54G /ueOsOkRjq83/5bFjHxmKUfXMYzSsEmrazCQAuV5R+4JnHk6A3R/f5ChdE+iCPRq WlJbRYGZlLNoQqQGtwWMtgNRE1OzHHbhQwweHkCcPmNvhzyg+nfZodgQ6taOwHCv Fkvp6EpfnqaekxsXZ8yw5Kl4rxEXAQvsqXYuvXFcepBPJeIrgMiX2YgsLL7bPaE8 QznMOzIWCA9v/gpcHnnV4noZtrH7p67561r7nRejLG7pXZibgy0= -----END CERTIFICATE-----Generated at Tue May 12 22:13:16 2026 by rpki-client