$ rpki-client -vvf rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft File: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft (raw, json) Hash identifier: dGMLv1poq29aw98YCurlwReyTNgeY6ht4tA+9wzUTrc= Subject key identifier: 87:35:FB:AB:A9:0E:6D:4D:B8:2C:B2:F9:A7:51:59:CA:53:D9:0E:48 Authority key identifier: 5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D Certificate issuer: /CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Certificate serial: 4CBD01A7FA532B468C3D53914B57F4E01B9CE4CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft Manifest number: 0E Signing time: Tue 12 May 2026 18:33:59 +0000 Manifest this update: Tue 12 May 2026 18:28:59 +0000 Manifest next update: Wed 13 May 2026 20:54:59 +0000 Files and hashes: 1: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl (hash: Qabl5VAhPNnMKBFnIOstP0e3TMwJoJdJc84bHMkim3I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:bd:01:a7:fa:53:2b:46:8c:3d:53:91:4b:57:f4:e0:1b:9c:e4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Validity Not Before: May 12 18:28:59 2026 GMT Not After : May 13 20:54:59 2026 GMT Subject: CN=8735FBABA90E6D4DB82CB2F9A75159CA53D90E48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5b:74:97:d7:06:3d:da:b0:21:9e:5c:d9:be: 13:44:81:eb:e1:25:bf:79:d7:d3:21:7f:dd:04:6c: 45:f7:9a:7f:0c:4a:62:c9:48:01:e5:60:a9:a8:f9: 26:a4:8a:03:04:eb:b9:72:3a:13:c7:50:5c:22:76: 9a:51:bc:f3:e4:b1:51:6e:0a:fa:05:76:c9:22:2f: 4b:54:24:fc:eb:68:33:ac:c3:e2:c4:39:39:49:86: 48:73:e8:4e:9a:7e:6b:3f:fc:b4:96:bb:98:cd:8f: 9c:b4:57:19:e2:b9:8f:9b:11:f7:f0:a8:cc:76:b2: 93:e1:6e:06:87:07:35:23:de:a1:9e:90:ca:62:16: 00:a8:3d:15:ce:cd:0e:62:b5:51:4c:4e:00:b3:ac: 89:b1:72:75:b3:0c:6b:49:a2:f8:a9:27:36:cd:c1: c4:8e:b2:e0:34:b8:23:e4:ea:dc:6f:bd:68:72:2f: 0c:9a:a9:3b:4e:4e:ab:e3:11:5d:26:cb:95:cb:d3: bc:b0:dd:1e:b2:aa:07:ee:3b:f5:ca:35:d8:7b:09: 67:18:e4:75:54:2d:98:40:58:d5:28:7e:c3:bb:93: 68:e6:95:90:b6:9c:02:f7:28:c4:b4:c6:d4:89:cd: d9:76:1c:5a:e8:1e:91:ea:17:ab:f9:7b:47:18:91: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:35:FB:AB:A9:0E:6D:4D:B8:2C:B2:F9:A7:51:59:CA:53:D9:0E:48 X509v3 Authority Key Identifier: keyid:5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e6:3f:da:5e:6b:01:4d:07:75:1f:2f:26:d1:c5:79:dd:96: 7e:48:58:22:e7:02:17:02:2e:84:cf:58:6f:66:42:bc:6d:99: a3:b3:4f:51:47:7a:44:41:ba:5c:61:ab:10:f5:87:8a:96:2d: 75:23:04:af:4b:fe:e0:ea:14:34:d4:de:15:9c:aa:d5:3d:2b: eb:6e:64:0f:e3:9f:9d:ff:2d:d5:0b:66:65:43:08:8b:1d:9b: 8a:06:b1:b1:bd:64:e8:df:7d:60:97:7d:a0:35:bb:49:35:c0: f8:e1:c0:9f:89:1d:73:be:d8:8d:ea:8d:5c:26:bc:be:cc:b6: c4:d6:85:d6:03:99:76:8b:7a:10:e0:c4:18:8d:8d:a8:6f:e5: 4e:64:da:6b:20:75:d6:38:8a:da:1b:33:c4:55:2c:26:87:98: 1d:90:14:a6:81:b4:22:37:ea:09:7c:b6:b7:4b:bd:db:8f:5c: f3:68:39:b0:62:9a:ba:76:43:0e:55:41:2b:39:fb:0f:9b:b7: e8:04:53:18:63:d8:eb:26:5b:b8:4e:02:a1:26:00:ac:9e:d5: 2f:c4:a4:d6:14:5a:16:a0:e2:60:fb:00:75:e5:88:33:f6:d9: 7a:6d:d5:d6:74:91:54:30:0d:fe:4b:94:2a:4d:13:4e:f4:c0: 1f:96:d8:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTL0Bp/pTK0aMPVORS1f04Buc5M4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1 QTE2ODA0RDAeFw0yNjA1MTIxODI4NTlaFw0yNjA1MTMyMDU0NTlaMDMxMTAvBgNV BAMTKDg3MzVGQkFCQTkwRTZENERCODJDQjJGOUE3NTE1OUNBNTNEOTBFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMW3SX1wY92rAhnlzZvhNEgevh Jb9519Mhf90EbEX3mn8MSmLJSAHlYKmo+SakigME67lyOhPHUFwidppRvPPksVFu CvoFdskiL0tUJPzraDOsw+LEOTlJhkhz6E6afms//LSWu5jNj5y0VxniuY+bEffw qMx2spPhbgaHBzUj3qGekMpiFgCoPRXOzQ5itVFMTgCzrImxcnWzDGtJovipJzbN wcSOsuA0uCPk6txvvWhyLwyaqTtOTqvjEV0my5XL07yw3R6yqgfuO/XKNdh7CWcY 5HVULZhAWNUofsO7k2jmlZC2nAL3KMS0xtSJzdl2HFroHpHqF6v5e0cYkZ97AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhzX7q6kObU24LLL5p1FZylPZDkgwHwYDVR0j BBgwFoAUX/ajp8MEnWezbNeWmR5c5FoWgE0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM3ZjE5NWEtMzY5ZS00NGJhLTgwY2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdD MzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1QTE2ODA0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RkY2QTNBN0MzMDQ5RDY3QjM2Q0Q3OTY5OTFFNUNFNDVBMTY4 MDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM3ZjE5NWEtMzY5ZS00NGJhLTgw Y2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVD RTQ1QTE2ODA0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3mP9peawFNB3UfLybRxXndln5IWCLnAhcC LoTPWG9mQrxtmaOzT1FHekRBulxhqxD1h4qWLXUjBK9L/uDqFDTU3hWcqtU9K+tu ZA/jn53/LdULZmVDCIsdm4oGsbG9ZOjffWCXfaA1u0k1wPjhwJ+JHXO+2I3qjVwm vL7MtsTWhdYDmXaLehDgxBiNjahv5U5k2msgddY4itobM8RVLCaHmB2QFKaBtCI3 6gl8trdLvduPXPNoObBimrp2Qw5VQSs5+w+bt+gEUxhj2OsmW7hOAqEmAKye1S/E pNYUWhag4mD7AHXliDP22Xpt1dZ0kVQwDf5LlCpNE070wB+W2Eg= -----END CERTIFICATE-----Generated at Wed May 13 06:11:48 2026 by rpki-client