$ rpki-client -vvf rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft File: 7168844A5B4818230195B100CFC496E3E99AE5A0.mft (raw, json) Hash identifier: xtXNciwESDP9oxEZplCyW9tvJPflYulAHh1prcimiNg= Subject key identifier: A4:74:8B:44:26:CF:36:34:79:A4:DE:3F:98:6B:3A:53:66:F8:17:2C Authority key identifier: 71:68:84:4A:5B:48:18:23:01:95:B1:00:CF:C4:96:E3:E9:9A:E5:A0 Certificate issuer: /CN=7168844A5B4818230195B100CFC496E3E99AE5A0 Certificate serial: 6468A78151359C1B9AD62C1F952529FBBE03C1E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft Manifest number: 0D Signing time: Tue 12 May 2026 06:11:53 +0000 Manifest this update: Tue 12 May 2026 06:06:53 +0000 Manifest next update: Wed 13 May 2026 08:38:53 +0000 Files and hashes: 1: 7168844A5B4818230195B100CFC496E3E99AE5A0.crl (hash: YLvooXJPT+oSG8AivyOwuweNO1WTIJZz8NVyCMlKP2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.crl rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:68:a7:81:51:35:9c:1b:9a:d6:2c:1f:95:25:29:fb:be:03:c1:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7168844A5B4818230195B100CFC496E3E99AE5A0 Validity Not Before: May 12 06:06:53 2026 GMT Not After : May 13 08:38:53 2026 GMT Subject: CN=A4748B4426CF363479A4DE3F986B3A5366F8172C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:2c:c5:9d:af:b1:a4:c7:9d:e8:66:12:23: 0f:32:dc:67:c8:7d:bc:40:e8:8b:7c:bc:ed:dc:7c: 6e:ee:1e:21:84:53:aa:86:55:c3:22:3d:cd:85:8d: ba:70:b4:ce:45:70:95:4a:50:3a:19:b5:a0:77:6d: 01:21:d5:35:b8:a4:01:88:2e:fc:6d:64:99:8d:43: db:6c:07:a5:6a:2c:d2:96:91:ae:64:47:8f:ee:76: f2:de:1e:b4:68:25:97:c5:fd:c7:19:06:8e:42:dd: 30:f6:95:50:b3:ef:28:1b:2c:c6:e2:87:93:fb:4b: 6e:7d:d8:dd:8e:12:da:98:a9:a4:f9:d2:ee:d3:d5: 66:65:13:21:8b:81:d5:e5:fe:f4:c4:70:1d:12:1b: a2:de:f4:07:26:92:d1:c9:64:ec:bb:87:e2:74:f7: 1d:11:76:16:00:d6:e5:8e:ef:be:27:d0:5a:2b:1b: 5e:4e:51:fd:c7:68:4a:57:3c:76:f7:eb:2c:16:fc: 06:e7:67:7f:9a:b3:78:bd:93:d5:34:cf:09:53:46: 8e:8c:13:bc:64:ee:52:0a:98:50:d2:66:4b:0e:6c: 24:d2:03:bd:1f:77:6d:08:b4:39:fa:f1:ab:04:f4: 87:ad:ec:bc:07:53:35:7c:e1:30:b3:02:d0:92:06: cb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:74:8B:44:26:CF:36:34:79:A4:DE:3F:98:6B:3A:53:66:F8:17:2C X509v3 Authority Key Identifier: keyid:71:68:84:4A:5B:48:18:23:01:95:B1:00:CF:C4:96:E3:E9:9A:E5:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d1:78:8e:7f:52:86:c5:de:69:7e:1f:25:bf:f7:50:55:3f: bd:77:2a:69:85:2d:b2:1a:58:db:b0:5f:a6:f3:a0:de:8f:95: ad:9e:b0:c2:81:cd:4b:32:8d:16:59:0a:75:4a:44:80:2d:56: 73:95:a6:a4:8b:2d:5e:cb:4f:13:58:24:8c:e5:9c:1d:8b:73: aa:6b:bc:2c:8d:0a:10:e7:ba:36:de:9c:fc:e7:89:17:cf:ca: 46:fe:09:ea:72:17:aa:aa:57:7c:8a:70:60:1e:ba:f0:56:93: bd:31:af:28:69:18:58:f5:ac:e8:99:67:d7:f0:ba:b1:64:74: 96:26:06:1e:1d:5d:43:3f:c7:7c:04:15:16:53:3b:52:75:a4: 1c:2a:b6:e6:8e:fc:bc:de:7f:39:de:9d:0b:29:9a:0a:86:38: 61:cd:67:fb:b3:ed:fd:4b:91:2b:80:72:71:03:24:b1:ba:50: f4:45:d7:30:c3:2d:47:d8:9b:13:ea:e5:54:90:6a:52:4e:fa: 32:b9:2f:fd:2c:9a:36:4e:8f:82:73:b4:35:c5:98:96:87:7d: 37:d5:13:76:e4:71:97:21:03:0f:81:f1:98:c6:c2:30:b2:96: 32:23:9a:31:cc:c6:b9:fe:a8:fb:19:1e:4a:07:62:72:da:bf: 2e:e7:b6:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZGingVE1nBua1iwflSUp+74DweUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2ODg0NEE1QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2RTNF OTlBRTVBMDAeFw0yNjA1MTIwNjA2NTNaFw0yNjA1MTMwODM4NTNaMDMxMTAvBgNV BAMTKEE0NzQ4QjQ0MjZDRjM2MzQ3OUE0REUzRjk4NkIzQTUzNjZGODE3MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXyzFna+xpMed6GYSIw8y3GfI fbxA6It8vO3cfG7uHiGEU6qGVcMiPc2FjbpwtM5FcJVKUDoZtaB3bQEh1TW4pAGI LvxtZJmNQ9tsB6VqLNKWka5kR4/udvLeHrRoJZfF/ccZBo5C3TD2lVCz7ygbLMbi h5P7S2592N2OEtqYqaT50u7T1WZlEyGLgdXl/vTEcB0SG6Le9AcmktHJZOy7h+J0 9x0RdhYA1uWO774n0ForG15OUf3HaEpXPHb36ywW/AbnZ3+as3i9k9U0zwlTRo6M E7xk7lIKmFDSZksObCTSA70fd20ItDn68asE9Iet7LwHUzV84TCzAtCSBstHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpHSLRCbPNjR5pN4/mGs6U2b4FywwHwYDVR0j BBgwFoAUcWiESltIGCMBlbEAz8SW4+ma5aAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODg4ZDBiNmUtYjJlZC00OWM4LWE0OTgtOGZkMjk5YWZiNzAxLzAvNzE2ODg0NEE1 QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2RTNFOTlBRTVBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTY4ODQ0QTVCNDgxODIzMDE5NUIxMDBDRkM0OTZFM0U5OUFF NUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvNzE2ODg0NEE1QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2 RTNFOTlBRTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDReI5/UobF3ml+HyW/91BVP713KmmFLbIa WNuwX6bzoN6Pla2esMKBzUsyjRZZCnVKRIAtVnOVpqSLLV7LTxNYJIzlnB2Lc6pr vCyNChDnujbenPzniRfPykb+CepyF6qqV3yKcGAeuvBWk70xryhpGFj1rOiZZ9fw urFkdJYmBh4dXUM/x3wEFRZTO1J1pBwqtuaO/LzefznenQspmgqGOGHNZ/uz7f1L kSuAcnEDJLG6UPRF1zDDLUfYmxPq5VSQalJO+jK5L/0smjZOj4JztDXFmJaHfTfV E3bkcZchAw+B8ZjGwjCyljIjmjHMxrn+qPsZHkoHYnLavy7nthI= -----END CERTIFICATE-----Generated at Wed May 13 02:37:06 2026 by rpki-client