$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft File: C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft (raw, json) Hash identifier: JrQWCl2p9MbmNOMUeMdJnp5w7or6cpmRJ55g+Pj8108= Subject key identifier: DE:28:0F:0F:C9:8E:77:11:10:29:74:14:5B:BE:4C:DD:2D:32:07:A3 Authority key identifier: C2:C5:4E:9E:E3:0A:39:6F:CD:B6:D5:5D:F7:02:3A:19:B2:46:DE:8C Certificate issuer: /CN=C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C Certificate serial: 305D3218825BB5D3D670C3CE2C891DBF55625A16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft Manifest number: 0E Signing time: Tue 12 May 2026 22:25:42 +0000 Manifest this update: Tue 12 May 2026 22:20:42 +0000 Manifest next update: Wed 13 May 2026 23:07:42 +0000 Files and hashes: 1: C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.crl (hash: FcwfOtHrEFmegvdoA5t+0GF+fO9IHh9oPZoPhRPS8t4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.crl rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:5d:32:18:82:5b:b5:d3:d6:70:c3:ce:2c:89:1d:bf:55:62:5a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C Validity Not Before: May 12 22:20:42 2026 GMT Not After : May 13 23:07:42 2026 GMT Subject: CN=DE280F0FC98E7711102974145BBE4CDD2D3207A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c3:e7:77:54:cb:d1:cb:66:41:74:62:69:b1: a4:ef:5b:6d:0b:9a:fd:66:b2:5d:bf:44:b7:f1:62: 1b:50:f2:7b:22:52:b3:b1:18:9f:fe:7c:a5:3e:0d: 52:53:05:4a:bf:f4:e9:37:36:03:c6:de:69:83:be: 9e:68:77:fc:9a:c2:aa:e0:07:0d:65:31:ce:a8:b1: 94:22:33:a5:53:db:a4:0a:56:26:eb:95:fb:f8:a1: 4a:46:5a:cb:a9:e8:e8:25:69:f9:9b:5d:ca:af:bd: 6b:52:66:05:81:83:d3:f6:a2:0a:5f:44:a0:8e:b2: 1f:37:a9:10:02:3f:46:0e:e2:c5:af:52:ea:22:e3: 37:66:60:0f:2f:b9:a0:2a:eb:b3:f4:18:4d:65:a3: 3a:cc:a4:58:77:14:04:d4:0d:19:67:fe:89:58:cb: cd:a5:19:40:11:bc:13:98:6f:4e:cb:62:0c:0c:1e: 0c:56:eb:a1:02:da:4e:8d:66:a1:5e:f3:3c:ad:a0: e9:69:3e:20:1f:bc:28:29:43:5e:40:46:4d:63:42: 03:83:cb:9c:50:96:1d:c5:51:d2:2a:90:f5:85:73: 6c:70:87:4e:fe:23:17:0e:49:e5:fd:be:1e:d1:19: a3:14:bc:69:1a:e7:84:e3:fc:f1:c0:ef:bd:e6:a5: 72:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:28:0F:0F:C9:8E:77:11:10:29:74:14:5B:BE:4C:DD:2D:32:07:A3 X509v3 Authority Key Identifier: keyid:C2:C5:4E:9E:E3:0A:39:6F:CD:B6:D5:5D:F7:02:3A:19:B2:46:DE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:4c:49:24:a6:ea:a4:be:20:0e:e6:c5:55:14:fd:2d:14:88: a9:ac:29:af:52:2f:08:78:e6:38:4e:44:13:df:59:a0:f6:a5: be:28:fa:a0:02:3d:9f:bc:11:06:05:ab:87:be:29:06:2a:21: c1:16:a3:f9:b2:ad:c9:a3:b7:52:1b:75:a8:39:2d:49:7f:3e: 34:18:52:04:d0:2d:c6:ef:6c:f4:ef:3f:d1:c1:2c:84:98:30: ec:cc:d4:72:79:e6:be:cf:8c:56:1a:fb:d2:8b:d5:3f:54:e1: 87:8a:9b:09:ce:28:03:70:1b:11:fa:2c:ff:cc:50:73:f9:64: 45:f5:94:f9:d6:12:4d:fb:19:98:04:af:59:56:61:c4:1f:b1: d3:15:6e:cd:42:09:bf:ac:3c:6e:5d:bf:29:0e:92:a5:12:de: 1b:e3:81:63:b1:58:5e:60:d6:0a:b1:48:28:18:40:97:d5:da: 36:83:6d:c1:fa:c8:d4:d5:52:28:7a:8a:1d:7e:f4:9e:6d:68: 0e:8a:e0:00:f7:18:18:08:65:c8:e1:66:1c:f0:de:92:2f:8a: 8c:10:ab:32:33:c0:70:7e:52:f7:3f:2f:03:c7:ad:08:b2:48: dc:bb:86:0f:45:2d:44:7c:8c:e8:1d:32:73:78:46:38:50:fe: 19:79:c1:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMF0yGIJbtdPWcMPOLIkdv1ViWhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDNTRFOUVFMzBBMzk2RkNEQjZENTVERjcwMjNBMTlC MjQ2REU4QzAeFw0yNjA1MTIyMjIwNDJaFw0yNjA1MTMyMzA3NDJaMDMxMTAvBgNV BAMTKERFMjgwRjBGQzk4RTc3MTExMDI5NzQxNDVCQkU0Q0REMkQzMjA3QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvw+d3VMvRy2ZBdGJpsaTvW20L mv1msl2/RLfxYhtQ8nsiUrOxGJ/+fKU+DVJTBUq/9Ok3NgPG3mmDvp5od/yawqrg Bw1lMc6osZQiM6VT26QKVibrlfv4oUpGWsup6OglafmbXcqvvWtSZgWBg9P2ogpf RKCOsh83qRACP0YO4sWvUuoi4zdmYA8vuaAq67P0GE1lozrMpFh3FATUDRln/olY y82lGUARvBOYb07LYgwMHgxW66EC2k6NZqFe8zytoOlpPiAfvCgpQ15ARk1jQgOD y5xQlh3FUdIqkPWFc2xwh07+IxcOSeX9vh7RGaMUvGka54Tj/PHA773mpXIRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3igPD8mOdxEQKXQUW75M3S0yB6MwHwYDVR0j BBgwFoAUwsVOnuMKOW/NttVd9wI6GbJG3owwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNmM2MyMTEtMDY0NS00ODgyLWE0ZjEtNDZiZTg2N2I3OTgzLzAvQzJDNTRFOUVF MzBBMzk2RkNEQjZENTVERjcwMjNBMTlCMjQ2REU4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkM1NEU5RUUzMEEzOTZGQ0RCNkQ1NURGNzAyM0ExOUIyNDZE RThDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNmM2MyMTEtMDY0NS00ODgyLWE0 ZjEtNDZiZTg2N2I3OTgzLzAvQzJDNTRFOUVFMzBBMzk2RkNEQjZENTVERjcwMjNB MTlCMjQ2REU4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhMSSSm6qS+IA7mxVUU/S0UiKmsKa9SLwh4 5jhORBPfWaD2pb4o+qACPZ+8EQYFq4e+KQYqIcEWo/myrcmjt1Ibdag5LUl/PjQY UgTQLcbvbPTvP9HBLISYMOzM1HJ55r7PjFYa+9KL1T9U4YeKmwnOKANwGxH6LP/M UHP5ZEX1lPnWEk37GZgEr1lWYcQfsdMVbs1CCb+sPG5dvykOkqUS3hvjgWOxWF5g 1gqxSCgYQJfV2jaDbcH6yNTVUih6ih1+9J5taA6K4AD3GBgIZcjhZhzw3pIviowQ qzIzwHB+Uvc/LwPHrQiySNy7hg9FLUR8jOgdMnN4RjhQ/hl5wcU= -----END CERTIFICATE-----Generated at Wed May 13 02:40:25 2026 by rpki-client