$ rpki-client -vvf rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft File: 8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft (raw, json) Hash identifier: Eihs3WhKzOm6DF5ptkRsBUp0aGSBYVzOjSyGm/sfpF4= Subject key identifier: 39:B9:98:99:3A:0E:2B:E1:95:ED:E4:26:9F:1B:C3:86:E3:50:FC:9E Authority key identifier: 81:96:C7:6B:50:63:27:D7:DB:35:5D:5A:AF:2F:74:52:7A:5F:3E:50 Certificate issuer: /CN=8196C76B506327D7DB355D5AAF2F74527A5F3E50 Certificate serial: 0D5CCF9FD59F3E982E0F2D7D975DA6989AA69CA3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8196C76B506327D7DB355D5AAF2F74527A5F3E50.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft Manifest number: 0E Signing time: Tue 12 May 2026 22:20:33 +0000 Manifest this update: Tue 12 May 2026 22:15:33 +0000 Manifest next update: Wed 13 May 2026 22:31:33 +0000 Files and hashes: 1: 8196C76B506327D7DB355D5AAF2F74527A5F3E50.crl (hash: xG0FTdrON9jUoZoMmqwQ6nSzHMSaN+8PjiXImMnWk/I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.crl rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8196C76B506327D7DB355D5AAF2F74527A5F3E50.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:5c:cf:9f:d5:9f:3e:98:2e:0f:2d:7d:97:5d:a6:98:9a:a6:9c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8196C76B506327D7DB355D5AAF2F74527A5F3E50 Validity Not Before: May 12 22:15:33 2026 GMT Not After : May 13 22:31:33 2026 GMT Subject: CN=39B998993A0E2BE195EDE4269F1BC386E350FC9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:17:63:1c:42:ef:ab:27:d2:78:00:c2:e2:3f: 85:89:59:e5:77:1b:7b:79:30:f4:f7:9b:5c:88:03: 56:b6:62:0a:3b:e1:29:3a:00:f7:a1:64:ff:ae:02: f5:e8:83:d9:f9:2e:ee:9f:f9:59:97:6a:77:42:5f: dd:94:44:b2:fd:a7:7a:12:55:dd:15:06:9b:fe:39: 98:b8:5b:10:95:6e:4c:22:62:1d:2c:ff:c3:07:13: ca:b4:54:76:d7:f7:0d:a1:d9:46:ab:8c:40:f6:4a: 32:e3:6d:2c:2f:93:b2:d9:83:a0:83:d8:9c:66:1c: 6b:dd:35:ff:f3:86:e8:3e:74:54:35:14:26:17:f2: d4:d6:b6:c7:0b:ff:98:83:e3:e9:47:4e:dd:00:62: 8c:39:28:88:e4:3c:05:16:00:23:c9:66:eb:c8:fd: ce:e7:8d:2a:b5:b7:53:4b:26:e6:7f:7e:d6:f2:63: c4:6c:f8:57:91:4f:16:9e:61:c4:bf:d2:f8:f5:80: f6:01:d6:1e:ce:a1:af:40:87:39:e5:6b:66:20:37: bc:9a:81:c5:12:14:c6:ca:0b:fd:01:72:7b:5a:e1: c7:f1:f7:c5:d1:a6:7e:6a:2c:15:77:e5:e2:04:35: c6:65:7f:4e:87:57:a7:41:58:59:4b:a6:34:e8:15: 24:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B9:98:99:3A:0E:2B:E1:95:ED:E4:26:9F:1B:C3:86:E3:50:FC:9E X509v3 Authority Key Identifier: keyid:81:96:C7:6B:50:63:27:D7:DB:35:5D:5A:AF:2F:74:52:7A:5F:3E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8196C76B506327D7DB355D5AAF2F74527A5F3E50.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ec:c0:85:0f:cc:13:fd:93:1c:0c:26:0a:bc:43:86:f4:28: a7:d8:1d:35:ca:52:aa:d1:c5:dc:04:4f:0a:ee:88:3f:be:4d: 55:0e:41:b7:53:ca:4e:cf:0e:bf:67:91:82:69:7f:91:ea:d6: 76:7c:af:36:1f:f3:7f:9c:e3:c7:98:27:87:af:65:f7:82:07: bd:b9:4a:aa:d9:7a:aa:39:4b:a0:7f:e5:af:67:58:a9:73:1d: 31:6e:a0:c2:f4:41:bf:9d:66:f6:a7:8f:dd:13:49:99:e6:ea: ab:dc:7b:ec:a7:07:8e:70:d1:2c:21:be:f3:08:c5:2d:57:0e: 4a:8e:59:fb:c2:58:c8:43:c1:29:02:43:7a:b0:2f:51:a5:45: 84:b5:e1:ff:65:46:7a:cf:a4:b5:52:85:51:56:09:08:18:2f: c4:7d:09:42:63:76:b2:d2:63:d6:90:55:c3:e1:dd:c5:ff:78: 6c:52:83:f5:48:b0:63:df:8c:48:ba:a8:9e:8f:41:a0:f4:44: d0:89:db:81:95:00:c4:48:4b:27:c9:99:32:ff:fd:ef:20:83: fa:58:7c:b1:bd:33:32:db:ce:0a:a6:06:b3:b5:13:4b:ed:ab: d0:27:7f:f8:a2:ca:72:03:bc:04:52:58:12:db:fe:03:f2:34: 63:cd:ff:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDVzPn9WfPpguDy19l12mmJqmnKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5NkM3NkI1MDYzMjdEN0RCMzU1RDVBQUYyRjc0NTI3 QTVGM0U1MDAeFw0yNjA1MTIyMjE1MzNaFw0yNjA1MTMyMjMxMzNaMDMxMTAvBgNV BAMTKDM5Qjk5ODk5M0EwRTJCRTE5NUVERTQyNjlGMUJDMzg2RTM1MEZDOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEF2McQu+rJ9J4AMLiP4WJWeV3 G3t5MPT3m1yIA1a2Ygo74Sk6APehZP+uAvXog9n5Lu6f+VmXandCX92URLL9p3oS Vd0VBpv+OZi4WxCVbkwiYh0s/8MHE8q0VHbX9w2h2UarjED2SjLjbSwvk7LZg6CD 2JxmHGvdNf/zhug+dFQ1FCYX8tTWtscL/5iD4+lHTt0AYow5KIjkPAUWACPJZuvI /c7njSq1t1NLJuZ/ftbyY8Rs+FeRTxaeYcS/0vj1gPYB1h7Ooa9Ahznla2YgN7ya gcUSFMbKC/0Bcnta4cfx98XRpn5qLBV35eIENcZlf06HV6dBWFlLpjToFSRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUObmYmToOK+GV7eQmnxvDhuNQ/J4wHwYDVR0j BBgwFoAUgZbHa1BjJ9fbNV1ary90UnpfPlAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlhZDMxNGEtNzY1Ny00OTAxLWI3ZGQtM2I5YTliZmM2ZTljLzAvODE5NkM3NkI1 MDYzMjdEN0RCMzU1RDVBQUYyRjc0NTI3QTVGM0U1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTk2Qzc2QjUwNjMyN0Q3REIzNTVENUFBRjJGNzQ1MjdBNUYz RTUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlhZDMxNGEtNzY1Ny00OTAxLWI3 ZGQtM2I5YTliZmM2ZTljLzAvODE5NkM3NkI1MDYzMjdEN0RCMzU1RDVBQUYyRjc0 NTI3QTVGM0U1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/swIUPzBP9kxwMJgq8Q4b0KKfYHTXKUqrR xdwETwruiD++TVUOQbdTyk7PDr9nkYJpf5Hq1nZ8rzYf83+c48eYJ4evZfeCB725 SqrZeqo5S6B/5a9nWKlzHTFuoML0Qb+dZvanj90TSZnm6qvce+ynB45w0SwhvvMI xS1XDkqOWfvCWMhDwSkCQ3qwL1GlRYS14f9lRnrPpLVShVFWCQgYL8R9CUJjdrLS Y9aQVcPh3cX/eGxSg/VIsGPfjEi6qJ6PQaD0RNCJ24GVAMRISyfJmTL//e8gg/pY fLG9MzLbzgqmBrO1E0vtq9Anf/iiynIDvARSWBLb/gPyNGPN/7M= -----END CERTIFICATE-----Generated at Wed May 13 00:34:08 2026 by rpki-client