$ rpki-client -vvf rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/C75B176F51C97718668FEDA09720687C8DBF14CD.mft File: C75B176F51C97718668FEDA09720687C8DBF14CD.mft (raw, json) Hash identifier: SwpRCHHYZ42HLF6jilAVP3ZqcGyXFpo99a1cMAo6Pv4= Subject key identifier: AD:3A:7C:29:59:AA:6D:79:11:7D:45:7C:80:CD:9B:04:8E:AF:92:8C Authority key identifier: C7:5B:17:6F:51:C9:77:18:66:8F:ED:A0:97:20:68:7C:8D:BF:14:CD Certificate issuer: /CN=C75B176F51C97718668FEDA09720687C8DBF14CD Certificate serial: 17E7AC7B784D92B0C4530371D2C6EFEF64F541AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C75B176F51C97718668FEDA09720687C8DBF14CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/C75B176F51C97718668FEDA09720687C8DBF14CD.mft Manifest number: 0E Signing time: Tue 12 May 2026 15:25:00 +0000 Manifest this update: Tue 12 May 2026 15:20:00 +0000 Manifest next update: Wed 13 May 2026 18:07:00 +0000 Files and hashes: 1: C75B176F51C97718668FEDA09720687C8DBF14CD.crl (hash: hkfXmZxttwumm7AjOkZI9LnP41zFB6NTJU39EeQ74Qk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/C75B176F51C97718668FEDA09720687C8DBF14CD.crl rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/C75B176F51C97718668FEDA09720687C8DBF14CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C75B176F51C97718668FEDA09720687C8DBF14CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e7:ac:7b:78:4d:92:b0:c4:53:03:71:d2:c6:ef:ef:64:f5:41:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C75B176F51C97718668FEDA09720687C8DBF14CD Validity Not Before: May 12 15:20:00 2026 GMT Not After : May 13 18:07:00 2026 GMT Subject: CN=AD3A7C2959AA6D79117D457C80CD9B048EAF928C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ce:47:0a:d3:87:03:d7:79:f4:df:e1:98:7a: 0d:fe:bc:ea:e4:f5:bb:51:43:be:92:01:69:f6:05: 32:1a:12:4b:24:05:63:47:1a:fa:7d:4d:79:c5:4a: ca:56:16:d4:73:1a:6a:69:f1:d2:57:90:5a:b3:de: ba:7e:29:37:6c:24:d5:c6:17:b5:e0:fd:6a:78:59: 0c:27:ed:97:e6:d4:97:55:86:9c:d6:63:f9:95:0a: d4:f0:7e:d4:5d:62:d7:ed:a1:76:6f:e6:5d:be:db: b1:55:a2:4a:e4:02:38:2c:52:0f:d3:f2:19:9b:ea: 1d:25:f8:d1:d7:5d:a3:95:cb:85:95:f5:df:59:8a: e4:cd:77:4a:a9:1f:c6:0d:5d:e9:38:81:4c:f9:1d: a0:70:de:ce:0e:ce:e9:c3:df:be:d2:70:3c:cd:a0: 35:e7:18:24:fa:de:8a:01:66:ba:f0:76:ec:aa:ac: 33:dd:54:33:b6:7f:a1:46:b6:99:97:76:d8:e4:e4: b8:d7:b4:c5:ef:1e:f0:e7:33:36:28:09:90:a7:36: 86:8f:78:b2:38:d6:cb:d2:3e:3a:5a:ba:18:69:8e: d6:8d:9b:d8:a7:30:92:66:1f:e3:ad:c9:08:e8:cd: 21:73:0a:87:64:2f:d2:25:ef:8b:e0:54:ae:5f:4b: f1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3A:7C:29:59:AA:6D:79:11:7D:45:7C:80:CD:9B:04:8E:AF:92:8C X509v3 Authority Key Identifier: keyid:C7:5B:17:6F:51:C9:77:18:66:8F:ED:A0:97:20:68:7C:8D:BF:14:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/C75B176F51C97718668FEDA09720687C8DBF14CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C75B176F51C97718668FEDA09720687C8DBF14CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/C75B176F51C97718668FEDA09720687C8DBF14CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:90:06:43:4d:4c:d8:58:2a:54:e2:73:41:08:d6:b8:fe:50: a7:5a:c6:de:70:7f:7e:df:17:64:63:66:8f:53:8b:3e:cd:6e: df:0c:0d:8a:4e:c4:09:c7:e6:dc:98:e3:63:43:9b:48:cf:da: 7c:35:09:0b:a9:73:4e:79:36:e1:b7:8e:e1:e1:51:67:53:63: a7:21:c4:1a:56:a9:3b:74:26:1a:5b:af:f8:23:27:f9:cd:16: 45:6c:f6:83:d5:69:b0:80:25:f8:2f:39:20:13:0c:3c:44:b3: f8:2f:51:7a:ce:e7:c4:d8:c8:87:08:48:f3:d4:ce:64:ec:90: e7:e7:81:29:4f:86:ea:d7:f7:09:ef:54:56:17:54:6d:55:fb: 28:46:2e:55:65:c4:3a:1f:4b:d7:8a:f9:cf:a0:07:90:b4:84: 94:95:80:c3:35:8d:0b:d2:c5:d8:37:07:42:1a:11:49:38:87: 02:6a:48:0f:d2:4d:a8:f2:8b:08:22:17:5c:10:95:c4:6f:30: 93:a9:72:97:17:23:49:14:9e:1a:80:4a:f7:58:84:65:2f:16: 39:43:70:38:c7:35:be:b2:39:27:af:08:d6:94:a5:f0:a0:73: 4f:41:63:5b:20:5a:bb:78:9d:38:ce:70:9c:e1:fe:35:d5:aa: 8c:52:de:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF+ese3hNkrDEUwNx0sbv72T1QawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc1QjE3NkY1MUM5NzcxODY2OEZFREEwOTcyMDY4N0M4 REJGMTRDRDAeFw0yNjA1MTIxNTIwMDBaFw0yNjA1MTMxODA3MDBaMDMxMTAvBgNV BAMTKEFEM0E3QzI5NTlBQTZENzkxMTdENDU3QzgwQ0Q5QjA0OEVBRjkyOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1zkcK04cD13n03+GYeg3+vOrk 9btRQ76SAWn2BTIaEkskBWNHGvp9TXnFSspWFtRzGmpp8dJXkFqz3rp+KTdsJNXG F7Xg/Wp4WQwn7Zfm1JdVhpzWY/mVCtTwftRdYtftoXZv5l2+27FVokrkAjgsUg/T 8hmb6h0l+NHXXaOVy4WV9d9ZiuTNd0qpH8YNXek4gUz5HaBw3s4OzunD377ScDzN oDXnGCT63ooBZrrwduyqrDPdVDO2f6FGtpmXdtjk5LjXtMXvHvDnMzYoCZCnNoaP eLI41svSPjpauhhpjtaNm9inMJJmH+OtyQjozSFzCodkL9Il74vgVK5fS/ETAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrTp8KVmqbXkRfUV8gM2bBI6vkowwHwYDVR0j BBgwFoAUx1sXb1HJdxhmj+2glyBofI2/FM0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA2NDllZjUtYzQ4NC00ZjQxLWEwNTQtZDZjZTM5YzFmNTA2LzAvQzc1QjE3NkY1 MUM5NzcxODY2OEZFREEwOTcyMDY4N0M4REJGMTRDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzVCMTc2RjUxQzk3NzE4NjY4RkVEQTA5NzIwNjg3QzhEQkYx NENELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA2NDllZjUtYzQ4NC00ZjQxLWEw NTQtZDZjZTM5YzFmNTA2LzAvQzc1QjE3NkY1MUM5NzcxODY2OEZFREEwOTcyMDY4 N0M4REJGMTRDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmQBkNNTNhYKlTic0EI1rj+UKdaxt5wf37f F2RjZo9Tiz7Nbt8MDYpOxAnH5tyY42NDm0jP2nw1CQupc055NuG3juHhUWdTY6ch xBpWqTt0Jhpbr/gjJ/nNFkVs9oPVabCAJfgvOSATDDxEs/gvUXrO58TYyIcISPPU zmTskOfngSlPhurX9wnvVFYXVG1V+yhGLlVlxDofS9eK+c+gB5C0hJSVgMM1jQvS xdg3B0IaEUk4hwJqSA/STajyiwgiF1wQlcRvMJOpcpcXI0kUnhqASvdYhGUvFjlD cDjHNb6yOSevCNaUpfCgc09BY1sgWrt4nTjOcJzh/jXVqoxS3pM= -----END CERTIFICATE-----Generated at Tue May 12 22:19:36 2026 by rpki-client