$ rpki-client -vvf rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft File: 5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft (raw, json) Hash identifier: wo/DONyy+MnqsMIq1nZy2rdZRNRPaMr7TlYlHgqMJOw= Subject key identifier: 04:D1:F8:78:1A:81:1E:9F:E6:47:8A:52:A3:9A:6A:B0:D8:97:26:E4 Authority key identifier: 5D:7C:FA:91:FB:D3:09:B4:50:5F:E1:D6:16:62:F4:AE:1F:4F:02:6F Certificate issuer: /CN=5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F Certificate serial: 3056F463D240C8F0B85B9865D0E0237FBA58A930 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft Manifest number: 0E Signing time: Tue 12 May 2026 19:35:42 +0000 Manifest this update: Tue 12 May 2026 19:30:42 +0000 Manifest next update: Wed 13 May 2026 20:04:42 +0000 Files and hashes: 1: 5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl (hash: fQ9TzuxPMvnPTRt/CTUthQpcFWuVLZEwFQdVetxDkOs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:56:f4:63:d2:40:c8:f0:b8:5b:98:65:d0:e0:23:7f:ba:58:a9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F Validity Not Before: May 12 19:30:42 2026 GMT Not After : May 13 20:04:42 2026 GMT Subject: CN=04D1F8781A811E9FE6478A52A39A6AB0D89726E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9d:75:05:0f:42:47:49:d5:58:44:93:69:bd: a2:38:ca:ee:c5:5e:fc:76:b6:72:db:f2:e4:b8:1f: 36:00:a9:87:f0:8a:0f:2f:70:b2:84:17:ee:e3:47: fd:a8:d4:94:47:70:27:84:b0:d3:69:d6:32:95:1e: f2:f0:c8:e3:61:ff:ec:22:29:cf:fd:5d:51:1b:53: e9:18:94:0d:de:b0:90:82:03:54:23:67:1d:63:5d: 8c:47:54:ea:f2:24:61:5e:8d:e1:65:a4:9d:87:cc: 12:c2:7f:d9:70:e6:cc:5b:60:9f:f7:08:c0:73:be: 18:20:78:a4:61:66:ec:04:58:1a:bc:80:9c:c4:33: 69:ef:34:bd:5b:ec:69:d7:a0:cd:c6:80:8f:85:6a: c2:97:ea:2a:d6:12:24:7d:a8:92:a8:99:7b:fb:a4: b6:9a:df:21:7b:68:8c:04:f9:ee:2c:7e:c1:26:c8: 0e:ed:4d:e5:fe:99:4e:a4:78:bf:77:55:0e:76:40: 17:eb:85:4f:6b:08:93:04:27:e3:a5:ae:fe:33:2a: 2f:3b:65:68:b9:c8:60:ff:d4:5e:35:ce:60:1d:3a: e8:98:00:c3:81:08:19:49:c6:b3:46:49:bc:f2:f0: cf:c0:0b:4e:1b:be:56:ab:d9:2b:06:ba:37:c6:cf: 23:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D1:F8:78:1A:81:1E:9F:E6:47:8A:52:A3:9A:6A:B0:D8:97:26:E4 X509v3 Authority Key Identifier: keyid:5D:7C:FA:91:FB:D3:09:B4:50:5F:E1:D6:16:62:F4:AE:1F:4F:02:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d4:77:12:eb:db:ea:7f:4a:d5:7b:28:c7:1c:b3:39:9a:26: b6:ec:84:cf:9c:02:a5:42:d7:c2:c5:96:54:fa:0a:49:eb:35: 55:68:8f:dd:6d:74:c0:ec:74:bd:eb:0c:21:e2:01:ee:e2:fa: e2:8a:3c:a9:97:1f:1b:1a:12:f6:a9:2a:84:f6:e8:47:3a:09: 77:e5:ee:f9:3a:f3:8f:68:ec:92:05:22:e9:67:ac:5d:48:2d: 45:41:c5:2d:c8:6a:8f:c7:d8:7a:46:65:c8:e8:c4:76:d8:cc: 59:32:07:f6:79:3d:52:7e:f5:c8:e8:38:19:8d:a7:42:d6:2c: 4f:b8:a2:ef:1c:1c:21:a9:13:ed:da:6f:7d:4e:3e:78:be:e1: c5:da:4a:3f:32:e5:3a:86:15:c9:27:8d:85:68:8c:5e:1d:06: 9f:3a:e3:3b:4e:11:3d:b4:f9:5a:5b:23:3f:57:24:70:43:20: 29:ac:7b:77:6c:1f:4d:c9:be:70:2b:e1:31:42:9d:ef:ea:2a: a3:5a:c7:47:74:47:f7:05:5a:bc:37:b4:c2:cd:48:82:d5:f8: 2a:af:b9:63:f8:fa:69:93:78:31:cc:55:1c:8e:8b:44:d1:ad: 6c:0c:97:ef:18:fc:de:ee:98:b7:e1:04:23:60:49:75:66:aa: 56:ae:45:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFb0Y9JAyPC4W5hl0OAjf7pYqTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ3Q0ZBOTFGQkQzMDlCNDUwNUZFMUQ2MTY2MkY0QUUx RjRGMDI2RjAeFw0yNjA1MTIxOTMwNDJaFw0yNjA1MTMyMDA0NDJaMDMxMTAvBgNV BAMTKDA0RDFGODc4MUE4MTFFOUZFNjQ3OEE1MkEzOUE2QUIwRDg5NzI2RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtnXUFD0JHSdVYRJNpvaI4yu7F Xvx2tnLb8uS4HzYAqYfwig8vcLKEF+7jR/2o1JRHcCeEsNNp1jKVHvLwyONh/+wi Kc/9XVEbU+kYlA3esJCCA1QjZx1jXYxHVOryJGFejeFlpJ2HzBLCf9lw5sxbYJ/3 CMBzvhggeKRhZuwEWBq8gJzEM2nvNL1b7GnXoM3GgI+FasKX6irWEiR9qJKomXv7 pLaa3yF7aIwE+e4sfsEmyA7tTeX+mU6keL93VQ52QBfrhU9rCJMEJ+Olrv4zKi87 ZWi5yGD/1F41zmAdOuiYAMOBCBlJxrNGSbzy8M/AC04bvlar2SsGujfGzyOZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBNH4eBqBHp/mR4pSo5pqsNiXJuQwHwYDVR0j BBgwFoAUXXz6kfvTCbRQX+HWFmL0rh9PAm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhhOGVhN2YtMmY2MS00NDZiLThiNTEtNTE5NDViMDgyZmFhLzAvNUQ3Q0ZBOTFG QkQzMDlCNDUwNUZFMUQ2MTY2MkY0QUUxRjRGMDI2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDdDRkE5MUZCRDMwOUI0NTA1RkUxRDYxNjYyRjRBRTFGNEYw MjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvNUQ3Q0ZBOTFGQkQzMDlCNDUwNUZFMUQ2MTY2MkY0 QUUxRjRGMDI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELUdxLr2+p/StV7KMccszmaJrbshM+cAqVC 18LFllT6CknrNVVoj91tdMDsdL3rDCHiAe7i+uKKPKmXHxsaEvapKoT26Ec6CXfl 7vk6849o7JIFIulnrF1ILUVBxS3Iao/H2HpGZcjoxHbYzFkyB/Z5PVJ+9cjoOBmN p0LWLE+4ou8cHCGpE+3ab31OPni+4cXaSj8y5TqGFcknjYVojF4dBp864ztOET20 +VpbIz9XJHBDICmse3dsH03JvnAr4TFCne/qKqNax0d0R/cFWrw3tMLNSILV+Cqv uWP4+mmTeDHMVRyOi0TRrWwMl+8Y/N7umLfhBCNgSXVmqlauRS8= -----END CERTIFICATE-----Generated at Wed May 13 00:45:11 2026 by rpki-client