$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft File: A828948E5E3657BBBB02A70735E06754A306A511.mft (raw, json) Hash identifier: CqsGdQafQ/WUCDPUZXmprc08IrdUQ0Ykr+3fMd42V5A= Subject key identifier: 75:A9:BE:1B:93:58:C4:8D:22:9B:B3:66:52:78:A3:A7:E8:45:67:8A Authority key identifier: A8:28:94:8E:5E:36:57:BB:BB:02:A7:07:35:E0:67:54:A3:06:A5:11 Certificate issuer: /CN=A828948E5E3657BBBB02A70735E06754A306A511 Certificate serial: 24A8CEA6340FD121BBECAF0B8FD96D4431DCE205 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft Manifest number: 0E Signing time: Tue 12 May 2026 19:30:33 +0000 Manifest this update: Tue 12 May 2026 19:25:33 +0000 Manifest next update: Wed 13 May 2026 23:19:33 +0000 Files and hashes: 1: A828948E5E3657BBBB02A70735E06754A306A511.crl (hash: vYt3ccbZyT2DUjCZEWwzPP0xCkdxp56S3co9KlPgRxM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.crl rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a8:ce:a6:34:0f:d1:21:bb:ec:af:0b:8f:d9:6d:44:31:dc:e2:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A828948E5E3657BBBB02A70735E06754A306A511 Validity Not Before: May 12 19:25:33 2026 GMT Not After : May 13 23:19:33 2026 GMT Subject: CN=75A9BE1B9358C48D229BB3665278A3A7E845678A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0b:bb:32:70:89:53:c7:41:42:2b:45:b2:0a: 0f:e6:d0:3c:ea:12:d6:1e:0c:87:35:47:70:d7:87: 77:d7:68:e9:82:43:d0:8f:2c:ee:8a:01:2f:e8:4f: b7:c9:66:5b:e4:64:b3:14:89:4d:d6:1a:34:cf:b2: 90:21:81:b9:19:a4:21:ef:be:48:48:e2:63:6f:9b: 94:c5:da:cd:65:40:5c:5d:fa:28:92:ac:24:d1:0e: b9:6c:39:34:9e:6a:bd:cd:97:6b:d0:1d:50:d6:10: 59:2c:ee:a5:8f:75:78:80:a9:19:5a:f0:8d:4d:d5: 3a:bb:cc:d3:42:7d:cd:ef:c8:f2:4a:9e:ad:c0:a7: 1c:93:c8:09:be:0e:f3:c7:ab:dc:78:1f:50:7e:b4: 6f:fa:27:c1:e6:da:5d:bb:36:96:65:67:9b:4a:a3: d0:45:36:4d:be:2f:a6:6f:58:46:36:91:76:af:9c: c3:a0:d1:07:53:58:96:a0:5b:4d:37:53:15:d6:ba: d0:43:07:4c:9e:6b:94:af:ac:58:db:d5:c1:60:af: 24:38:6c:f5:02:2b:b6:5e:4c:cf:74:ae:22:a0:e0: 7d:70:e5:7d:c4:10:3e:3b:d2:c3:19:f6:ff:60:0f: bb:25:9e:c7:10:0b:05:57:46:c0:0b:e0:f5:dc:0e: 6e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A9:BE:1B:93:58:C4:8D:22:9B:B3:66:52:78:A3:A7:E8:45:67:8A X509v3 Authority Key Identifier: keyid:A8:28:94:8E:5E:36:57:BB:BB:02:A7:07:35:E0:67:54:A3:06:A5:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e3:3a:81:cc:4b:22:7f:25:99:d2:ec:67:d2:3e:45:16:41: 0b:5c:43:72:c8:22:35:a3:a2:70:bf:be:ff:f5:e8:90:bb:e9: 16:06:7e:5d:8d:b0:5d:76:ef:26:3a:be:7e:8a:de:82:94:d0: 4d:32:a6:9b:d0:c8:a3:96:b7:96:68:18:f0:f0:98:8b:2c:60: 30:d8:13:32:52:73:92:65:ff:d0:21:9c:18:61:fb:23:d5:d6: 17:2f:03:2d:0a:ed:36:9c:ba:1d:13:43:52:ec:e0:c5:78:2a: a9:fe:c3:a8:b1:cf:41:d3:ae:34:9a:1f:d9:ea:b3:9c:fa:b0: 62:7f:3b:25:17:a9:28:0b:b0:a3:fe:c1:f3:7a:d7:2e:93:88: 08:02:0d:e3:2f:fd:00:0f:15:06:c7:ef:b9:b2:95:3c:e7:f6: 85:d7:6c:b1:5e:71:e7:47:ba:8b:21:18:67:be:6d:9a:7c:d5: 89:09:6d:6a:7b:46:3f:a0:bd:29:b3:27:82:27:f0:4c:5e:1e: 5f:5e:af:f9:cb:bd:ea:0c:86:83:6b:a8:4e:31:12:22:5b:02: 78:3b:f6:97:d5:43:8a:62:06:60:d9:9d:e8:f1:ff:cd:6d:7d: c3:ce:8d:c6:b2:51:0b:0f:1a:93:3e:e8:04:8a:a6:a8:1c:86: 5e:44:80:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJKjOpjQP0SG77K8Lj9ltRDHc4gUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgyODk0OEU1RTM2NTdCQkJCMDJBNzA3MzVFMDY3NTRB MzA2QTUxMTAeFw0yNjA1MTIxOTI1MzNaFw0yNjA1MTMyMzE5MzNaMDMxMTAvBgNV BAMTKDc1QTlCRTFCOTM1OEM0OEQyMjlCQjM2NjUyNzhBM0E3RTg0NTY3OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRC7sycIlTx0FCK0WyCg/m0Dzq EtYeDIc1R3DXh3fXaOmCQ9CPLO6KAS/oT7fJZlvkZLMUiU3WGjTPspAhgbkZpCHv vkhI4mNvm5TF2s1lQFxd+iiSrCTRDrlsOTSear3Nl2vQHVDWEFks7qWPdXiAqRla 8I1N1Tq7zNNCfc3vyPJKnq3ApxyTyAm+DvPHq9x4H1B+tG/6J8Hm2l27NpZlZ5tK o9BFNk2+L6ZvWEY2kXavnMOg0QdTWJagW003UxXWutBDB0yea5SvrFjb1cFgryQ4 bPUCK7ZeTM90riKg4H1w5X3EED470sMZ9v9gD7slnscQCwVXRsAL4PXcDm7ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdam+G5NYxI0im7NmUnijp+hFZ4owHwYDVR0j BBgwFoAUqCiUjl42V7u7AqcHNeBnVKMGpREwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGJhNmQwNzItODM2MS00ZGRmLTgwMGEtMWNlMTVjNDc1OTJjLzAvQTgyODk0OEU1 RTM2NTdCQkJCMDJBNzA3MzVFMDY3NTRBMzA2QTUxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODI4OTQ4RTVFMzY1N0JCQkIwMkE3MDczNUUwNjc1NEEzMDZB NTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvQTgyODk0OEU1RTM2NTdCQkJCMDJBNzA3MzVFMDY3 NTRBMzA2QTUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbjOoHMSyJ/JZnS7GfSPkUWQQtcQ3LIIjWj onC/vv/16JC76RYGfl2NsF127yY6vn6K3oKU0E0yppvQyKOWt5ZoGPDwmIssYDDY EzJSc5Jl/9AhnBhh+yPV1hcvAy0K7Tacuh0TQ1Ls4MV4Kqn+w6ixz0HTrjSaH9nq s5z6sGJ/OyUXqSgLsKP+wfN61y6TiAgCDeMv/QAPFQbH77mylTzn9oXXbLFecedH uoshGGe+bZp81YkJbWp7Rj+gvSmzJ4In8ExeHl9er/nLveoMhoNrqE4xEiJbAng7 9pfVQ4piBmDZnejx/81tfcPOjcayUQsPGpM+6ASKpqgchl5EgA0= -----END CERTIFICATE-----Generated at Wed May 13 09:14:56 2026 by rpki-client