$ rpki-client -vvf rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft File: 5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft (raw, json) Hash identifier: YPqCkXfgcLJbh1Gv9FGw0VIaDQdpieFZThZ0N8Je8PY= Subject key identifier: D3:63:38:2F:0C:36:FF:64:65:A5:58:F3:47:88:82:B3:B7:85:1F:F7 Authority key identifier: 5F:66:F5:BF:93:48:D5:B5:A6:31:CE:B1:00:F2:02:65:EB:D8:BE:57 Certificate issuer: /CN=5F66F5BF9348D5B5A631CEB100F20265EBD8BE57 Certificate serial: 67536289B18485F6610A8141DFA2CEE37A9EF04B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft Manifest number: 0E Signing time: Tue 12 May 2026 19:25:20 +0000 Manifest this update: Tue 12 May 2026 19:20:20 +0000 Manifest next update: Wed 13 May 2026 22:03:20 +0000 Files and hashes: 1: 5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.crl (hash: BAQqnhQBzFnbYfVKeBxeS4a4rYzPYHXO0rnD08/d8q8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.crl rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:53:62:89:b1:84:85:f6:61:0a:81:41:df:a2:ce:e3:7a:9e:f0:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F66F5BF9348D5B5A631CEB100F20265EBD8BE57 Validity Not Before: May 12 19:20:20 2026 GMT Not After : May 13 22:03:20 2026 GMT Subject: CN=D363382F0C36FF6465A558F3478882B3B7851FF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b0:aa:77:30:d5:b5:47:f8:cd:22:0e:57:79: 7e:2f:f4:33:2a:74:6d:26:50:b2:66:ef:07:8e:d7: bf:0f:41:93:c6:95:ea:2b:39:2d:79:bf:21:37:f2: 41:df:08:47:ac:c2:c2:28:d1:9d:2f:df:26:98:c9: af:4e:ee:77:57:9a:1b:ac:7c:f5:7d:ba:0c:34:dd: 79:e6:27:4f:87:82:61:d1:78:3a:88:60:ff:ba:3d: 92:1f:73:72:fa:da:47:0e:c4:27:28:42:71:d8:29: 9a:9a:87:a1:20:94:1e:b3:1c:31:85:c3:c5:ef:b6: e0:4b:c9:20:38:74:cb:1a:06:5a:cc:04:ab:94:96: b6:da:c9:2c:b4:d6:a3:19:8a:23:bc:15:e0:cb:49: 12:f4:d5:d4:62:e3:17:2f:91:cf:56:08:d9:c2:96: ea:17:22:f5:fc:84:16:43:69:99:22:bb:cb:3d:6d: bb:00:28:c5:b9:39:ed:53:9a:80:bf:65:13:a9:67: 3d:2e:4c:cb:d5:fe:f9:e9:ef:d1:b6:aa:59:0e:a5: 3c:4b:15:ab:92:99:96:cb:f4:c1:ec:c0:60:8c:9e: 3e:44:78:5d:48:72:95:44:55:16:c7:33:00:e2:a5: f3:f4:12:da:89:b1:bc:67:12:2e:f3:7e:22:c1:83: 69:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:63:38:2F:0C:36:FF:64:65:A5:58:F3:47:88:82:B3:B7:85:1F:F7 X509v3 Authority Key Identifier: keyid:5F:66:F5:BF:93:48:D5:B5:A6:31:CE:B1:00:F2:02:65:EB:D8:BE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:54:30:ed:29:91:e4:07:cf:6f:5a:1a:48:a5:3d:e5:22:fc: cb:27:25:b2:9c:c2:fa:9f:4a:20:de:58:e3:59:6d:bf:a0:06: 89:9b:59:f3:59:91:3b:7c:5e:d3:8b:31:e8:bc:24:67:f5:95: c6:c9:b8:87:44:73:4f:35:03:64:fb:f4:d8:ee:44:ec:55:88: bb:ba:5c:17:be:77:f0:83:42:88:cf:c5:c0:af:53:51:91:1f: 09:ea:52:5a:8e:51:ca:6f:18:cf:71:dd:03:b3:b5:ea:1b:48: db:eb:93:4b:e7:69:35:37:d6:6d:6d:27:54:45:e2:8d:79:f7: 7a:9c:0b:d6:0a:bc:07:6d:60:b3:45:b7:b2:ec:50:a2:8e:b9: 28:7f:66:98:1a:65:00:89:dd:3b:91:b1:55:6e:c6:0e:3d:f4: d3:1d:32:07:51:6e:c4:81:42:b1:59:d5:dc:25:d3:a3:7b:dc: cc:19:6b:86:a1:bc:b8:0a:38:b0:67:8d:21:57:98:f5:be:df: 04:29:24:99:a2:4b:ef:ff:8a:3a:e4:b7:ca:0a:f4:27:77:6f: eb:5e:e0:f6:84:45:b3:c9:43:c2:68:ad:87:ab:30:cf:b1:68: 4a:31:bd:e4:0f:6f:6b:5c:29:db:f8:29:01:f5:e8:cd:83:5b: 7a:ca:cb:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ1NiibGEhfZhCoFB36LO43qe8EswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY2NkY1QkY5MzQ4RDVCNUE2MzFDRUIxMDBGMjAyNjVF QkQ4QkU1NzAeFw0yNjA1MTIxOTIwMjBaFw0yNjA1MTMyMjAzMjBaMDMxMTAvBgNV BAMTKEQzNjMzODJGMEMzNkZGNjQ2NUE1NThGMzQ3ODg4MkIzQjc4NTFGRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdsKp3MNW1R/jNIg5XeX4v9DMq dG0mULJm7weO178PQZPGleorOS15vyE38kHfCEeswsIo0Z0v3yaYya9O7ndXmhus fPV9ugw03XnmJ0+HgmHReDqIYP+6PZIfc3L62kcOxCcoQnHYKZqah6EglB6zHDGF w8XvtuBLySA4dMsaBlrMBKuUlrbaySy01qMZiiO8FeDLSRL01dRi4xcvkc9WCNnC luoXIvX8hBZDaZkiu8s9bbsAKMW5Oe1TmoC/ZROpZz0uTMvV/vnp79G2qlkOpTxL FauSmZbL9MHswGCMnj5EeF1IcpVEVRbHMwDipfP0EtqJsbxnEi7zfiLBg2mxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU02M4Lww2/2RlpVjzR4iCs7eFH/cwHwYDVR0j BBgwFoAUX2b1v5NI1bWmMc6xAPICZevYvlcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODJmYTNhMzktZTBlYy00ZmMxLTliNTQtMzUzZTA3ZjAwNWRkLzAvNUY2NkY1QkY5 MzQ4RDVCNUE2MzFDRUIxMDBGMjAyNjVFQkQ4QkU1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjY2RjVCRjkzNDhENUI1QTYzMUNFQjEwMEYyMDI2NUVCRDhC RTU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODJmYTNhMzktZTBlYy00ZmMxLTli NTQtMzUzZTA3ZjAwNWRkLzAvNUY2NkY1QkY5MzQ4RDVCNUE2MzFDRUIxMDBGMjAy NjVFQkQ4QkU1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZUMO0pkeQHz29aGkilPeUi/MsnJbKcwvqf SiDeWONZbb+gBombWfNZkTt8XtOLMei8JGf1lcbJuIdEc081A2T79NjuROxViLu6 XBe+d/CDQojPxcCvU1GRHwnqUlqOUcpvGM9x3QOzteobSNvrk0vnaTU31m1tJ1RF 4o1593qcC9YKvAdtYLNFt7LsUKKOuSh/ZpgaZQCJ3TuRsVVuxg499NMdMgdRbsSB QrFZ1dwl06N73MwZa4ahvLgKOLBnjSFXmPW+3wQpJJmiS+//ijrkt8oK9Cd3b+te 4PaERbPJQ8JorYerMM+xaEoxveQPb2tcKdv4KQH16M2DW3rKy/k= -----END CERTIFICATE-----Generated at Wed May 13 00:21:40 2026 by rpki-client