$ rpki-client -vvf rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.mft File: 82B8687B1ED233C41017803198B332BD9A4DB403.mft (raw, json) Hash identifier: NzpwFltakL3k7PLZ9KLgpcmIfZCYatUqzc9CUDBgWKY= Subject key identifier: FD:CF:29:D4:ED:B4:5B:63:0B:B7:4F:61:17:7E:4B:C0:6C:26:09:87 Authority key identifier: 82:B8:68:7B:1E:D2:33:C4:10:17:80:31:98:B3:32:BD:9A:4D:B4:03 Certificate issuer: /CN=82B8687B1ED233C41017803198B332BD9A4DB403 Certificate serial: 39A5FA90E2786825715B010F109AA87A16797220 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82B8687B1ED233C41017803198B332BD9A4DB403.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.mft Manifest number: 0E Signing time: Tue 12 May 2026 11:47:25 +0000 Manifest this update: Tue 12 May 2026 11:42:25 +0000 Manifest next update: Wed 13 May 2026 13:39:25 +0000 Files and hashes: 1: 82B8687B1ED233C41017803198B332BD9A4DB403.crl (hash: 5pngFOkHeR5+CcK8SQUb7qxHHFSCYieB3bgQgcmkydw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.crl rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82B8687B1ED233C41017803198B332BD9A4DB403.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a5:fa:90:e2:78:68:25:71:5b:01:0f:10:9a:a8:7a:16:79:72:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82B8687B1ED233C41017803198B332BD9A4DB403 Validity Not Before: May 12 11:42:25 2026 GMT Not After : May 13 13:39:25 2026 GMT Subject: CN=FDCF29D4EDB45B630BB74F61177E4BC06C260987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d2:36:bb:ce:06:98:ca:43:75:78:cf:91:54: 89:58:e9:e9:ea:82:df:3e:0b:c3:cf:b3:1a:62:52: c2:0d:f4:da:fe:4b:6c:1e:3d:04:e9:de:9d:00:0e: 07:de:48:5b:f7:11:f1:11:d6:a2:3e:36:54:5a:a1: ce:3b:10:38:c7:b8:6e:e3:2b:73:31:88:b5:7b:67: e2:f4:26:b4:b2:97:ad:fc:96:af:2e:56:f9:1c:ac: f0:73:85:37:76:06:52:b8:55:29:71:72:ac:62:70: b7:af:0a:a6:5f:07:1a:61:70:8d:d9:77:d9:82:df: 3c:00:08:9d:5b:2e:fa:66:b9:0d:39:06:41:81:03: 29:2a:d5:65:ab:57:92:94:dc:3a:23:94:8e:18:f1: 6b:97:bf:11:25:00:ba:1d:20:87:15:b0:6e:fe:06: d5:4e:20:0f:5f:d8:98:02:98:a8:7f:84:f0:35:8f: 1a:88:c3:13:88:22:9e:99:33:68:8e:f0:41:81:fd: 2f:83:f4:86:47:97:69:89:d6:a3:bc:1b:a4:b1:3c: ff:fd:dd:af:32:80:f2:e1:c1:30:30:37:85:ce:50: e1:9d:3a:97:5c:43:47:14:62:5f:0a:b8:bd:cf:fb: 7c:b2:d2:19:e8:9b:d8:e3:ce:36:cc:e5:61:bd:d2: 0f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CF:29:D4:ED:B4:5B:63:0B:B7:4F:61:17:7E:4B:C0:6C:26:09:87 X509v3 Authority Key Identifier: keyid:82:B8:68:7B:1E:D2:33:C4:10:17:80:31:98:B3:32:BD:9A:4D:B4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82B8687B1ED233C41017803198B332BD9A4DB403.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:13:04:ea:3d:8c:b4:3e:10:f8:11:bd:f8:0e:33:55:ce:72: af:c3:f3:81:0a:1c:1c:f1:ee:e9:01:66:cf:ed:82:15:b0:e7: 65:3f:0f:7d:68:1d:ab:2e:ce:7f:4c:db:b2:f8:0a:35:21:e0: 8b:dd:7e:55:be:35:4a:ab:32:71:a8:5c:fe:d4:78:45:c3:df: bc:da:5f:25:45:37:a3:24:03:61:32:65:06:12:8d:bf:2a:fd: b2:d3:74:c8:55:93:87:6e:ad:a3:6f:f5:48:a3:7a:bc:a3:d2: bd:8b:72:82:2a:12:2f:71:64:d3:cf:82:d7:c5:43:bf:d6:dd: 65:4b:e2:44:f4:7d:83:b9:62:5b:9b:d5:87:8d:81:d5:aa:3d: ac:8a:32:76:4f:4e:a2:78:eb:9e:72:b7:c1:83:66:c6:fb:40: 63:e9:ff:4c:70:3c:4e:d0:cf:ee:2a:67:6d:00:6d:bf:3a:e5: 34:58:7d:83:e6:69:e6:75:b7:05:96:98:8a:c0:22:e7:64:f7: c9:8f:84:d4:44:7b:a3:2e:19:65:d9:33:69:d3:ca:0e:df:6f: fb:d3:4c:21:1d:58:f5:7c:83:9c:21:5d:a3:fc:16:1f:81:1e: 2d:d4:86:f5:f4:68:cd:fb:cb:ea:2e:db:20:5e:cc:cc:02:0b: 47:02:4a:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOaX6kOJ4aCVxWwEPEJqoehZ5ciAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJCODY4N0IxRUQyMzNDNDEwMTc4MDMxOThCMzMyQkQ5 QTREQjQwMzAeFw0yNjA1MTIxMTQyMjVaFw0yNjA1MTMxMzM5MjVaMDMxMTAvBgNV BAMTKEZEQ0YyOUQ0RURCNDVCNjMwQkI3NEY2MTE3N0U0QkMwNkMyNjA5ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo0ja7zgaYykN1eM+RVIlY6enq gt8+C8PPsxpiUsIN9Nr+S2wePQTp3p0ADgfeSFv3EfER1qI+NlRaoc47EDjHuG7j K3MxiLV7Z+L0JrSyl638lq8uVvkcrPBzhTd2BlK4VSlxcqxicLevCqZfBxphcI3Z d9mC3zwACJ1bLvpmuQ05BkGBAykq1WWrV5KU3DojlI4Y8WuXvxElALodIIcVsG7+ BtVOIA9f2JgCmKh/hPA1jxqIwxOIIp6ZM2iO8EGB/S+D9IZHl2mJ1qO8G6SxPP/9 3a8ygPLhwTAwN4XOUOGdOpdcQ0cUYl8KuL3P+3yy0hnom9jjzjbM5WG90g+RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/c8p1O20W2MLt09hF35LwGwmCYcwHwYDVR0j BBgwFoAUgrhoex7SM8QQF4AxmLMyvZpNtAMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFjZjU2NTctZWNkYy00ZDk3LWE1OWMtYjY3NmNlNTNjOGExLzAvODJCODY4N0Ix RUQyMzNDNDEwMTc4MDMxOThCMzMyQkQ5QTREQjQwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MkI4Njg3QjFFRDIzM0M0MTAxNzgwMzE5OEIzMzJCRDlBNERC NDAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFjZjU2NTctZWNkYy00ZDk3LWE1 OWMtYjY3NmNlNTNjOGExLzAvODJCODY4N0IxRUQyMzNDNDEwMTc4MDMxOThCMzMy QkQ5QTREQjQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQTBOo9jLQ+EPgRvfgOM1XOcq/D84EKHBzx 7ukBZs/tghWw52U/D31oHasuzn9M27L4CjUh4IvdflW+NUqrMnGoXP7UeEXD37za XyVFN6MkA2EyZQYSjb8q/bLTdMhVk4duraNv9Uijeryj0r2LcoIqEi9xZNPPgtfF Q7/W3WVL4kT0fYO5Ylub1YeNgdWqPayKMnZPTqJ4655yt8GDZsb7QGPp/0xwPE7Q z+4qZ20Abb865TRYfYPmaeZ1twWWmIrAIudk98mPhNREe6MuGWXZM2nTyg7fb/vT TCEdWPV8g5whXaP8Fh+BHi3UhvX0aM37y+ou2yBezMwCC0cCStQ= -----END CERTIFICATE-----Generated at Wed May 13 01:11:14 2026 by rpki-client