$ rpki-client -vvf rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft File: 2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft (raw, json) Hash identifier: iZv2PiTxEde6Z0xWp0HiWliSow1PsAv5Jhq3htP40fw= Subject key identifier: 5C:25:03:BB:65:31:EF:07:51:4C:C6:B3:27:28:BA:5A:EA:1B:A1:4F Authority key identifier: 23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91 Certificate issuer: /CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891 Certificate serial: 4CCB06DD0C2E13D914705C18B73D858C583EF24D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft Manifest number: 0E Signing time: Tue 12 May 2026 15:14:54 +0000 Manifest this update: Tue 12 May 2026 15:09:54 +0000 Manifest next update: Wed 13 May 2026 15:42:54 +0000 Files and hashes: 1: 2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl (hash: fAXRcNUSMwCHr2Nx+9aJmI8ZDNJ4tvv8mSlNuPCEkVM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:cb:06:dd:0c:2e:13:d9:14:70:5c:18:b7:3d:85:8c:58:3e:f2:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891 Validity Not Before: May 12 15:09:54 2026 GMT Not After : May 13 15:42:54 2026 GMT Subject: CN=5C2503BB6531EF07514CC6B32728BA5AEA1BA14F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a2:7a:3b:55:d7:a4:41:ae:52:e6:39:80:36: 9a:e9:8d:18:dd:6c:7c:78:fe:e0:e6:e2:56:aa:33: 6f:6d:ad:84:b2:32:89:c3:82:c9:89:d7:c6:35:1d: 9a:78:ba:20:18:bb:53:af:a3:6d:a1:19:eb:7a:50: ea:15:15:e2:cf:80:cb:c8:ea:7d:04:cf:a5:b4:a4: 47:4b:b4:ce:65:2b:0c:0e:e2:d0:ec:c2:ec:d2:86: 3c:54:9e:90:5b:f9:82:64:47:98:71:48:4b:9b:23: df:c4:36:7b:83:d2:45:73:38:e9:14:ca:65:9f:ba: b7:dd:7d:ef:28:6b:5d:17:96:18:77:94:f6:3b:30: f6:49:05:74:70:69:eb:73:7e:6c:b8:cb:ab:e3:10: ff:ee:a6:c6:86:2e:3a:0c:d9:ae:93:be:e5:dd:96: 6e:fa:ba:2a:77:98:4c:68:a3:32:83:e6:02:4d:98: 18:43:33:10:0f:1f:4b:96:a3:27:78:bc:8a:5d:e2: f7:71:b7:74:b9:08:de:62:6c:0e:7a:72:89:d6:98: ac:7b:1e:f1:04:b3:71:1d:26:c4:3d:3d:15:b1:ef: 31:c0:56:b9:82:50:d9:a2:d1:94:e7:b4:4d:43:2e: 6d:f5:79:78:2c:bc:15:98:c8:6f:06:41:74:4e:ab: e1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:25:03:BB:65:31:EF:07:51:4C:C6:B3:27:28:BA:5A:EA:1B:A1:4F X509v3 Authority Key Identifier: keyid:23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:7f:c6:70:61:e5:f0:a6:c8:8f:48:ef:c6:28:4e:43:f5:4a: d0:64:6a:c2:44:c2:1b:dd:9b:50:82:e6:4a:d2:a0:11:5b:b6: b7:28:14:16:22:4c:df:1a:8c:0f:1c:63:49:9c:56:25:9f:69: 36:25:be:9f:2c:ea:99:6b:c1:34:45:e5:be:f7:bf:d3:96:1c: 17:7b:02:91:ea:e3:bd:72:f6:8a:73:5b:17:56:30:35:cf:39: d8:c7:43:8d:93:70:74:c6:df:04:7e:13:b1:a0:08:c4:db:9c: 66:b5:1f:97:cb:5e:ed:fc:ee:2f:e4:8a:f4:f3:93:36:7b:7c: 33:c3:39:6f:0f:f9:39:af:6e:f2:5c:31:c7:22:31:d7:24:e8: bd:30:33:3e:2c:cc:59:54:9b:d4:09:7d:5b:b9:ee:0f:87:b4: 60:bd:27:55:50:b4:40:d0:d8:a8:4d:15:f9:aa:b9:18:f6:79: c4:95:c6:36:23:10:0a:5d:9d:e3:0b:8d:df:72:18:22:84:a7: 64:45:f1:0f:42:2b:d6:fc:b6:d9:da:14:3c:da:f9:8a:d9:fc: 99:7f:e2:d6:39:b7:5e:1c:8d:38:ff:55:a1:b9:34:5b:0b:85: 76:ce:21:fe:da:c4:ea:96:23:a2:97:7e:77:fd:39:de:ca:74: bf:33:d0:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTMsG3QwuE9kUcFwYtz2FjFg+8k0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQwREND QUQ4MTg5MTAeFw0yNjA1MTIxNTA5NTRaFw0yNjA1MTMxNTQyNTRaMDMxMTAvBgNV BAMTKDVDMjUwM0JCNjUzMUVGMDc1MTRDQzZCMzI3MjhCQTVBRUExQkExNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnono7VdekQa5S5jmANprpjRjd bHx4/uDm4laqM29trYSyMonDgsmJ18Y1HZp4uiAYu1Ovo22hGet6UOoVFeLPgMvI 6n0Ez6W0pEdLtM5lKwwO4tDswuzShjxUnpBb+YJkR5hxSEubI9/ENnuD0kVzOOkU ymWfurfdfe8oa10Xlhh3lPY7MPZJBXRwaetzfmy4y6vjEP/upsaGLjoM2a6TvuXd lm76uip3mExoozKD5gJNmBhDMxAPH0uWoyd4vIpd4vdxt3S5CN5ibA56conWmKx7 HvEEs3EdJsQ9PRWx7zHAVrmCUNmi0ZTntE1DLm31eXgsvBWYyG8GQXROq+F7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXCUDu2Ux7wdRTMazJyi6WuoboU8wHwYDVR0j BBgwFoAUIzLo3GAvF0qfYyrmH3bQ3MrYGJEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQ3YzZlY2ItMGJhZS00NWMzLWFhZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2 MDJGMTc0QTlGNjMyQUU2MUY3NkQwRENDQUQ4MTg5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzMyRThEQzYwMkYxNzRBOUY2MzJBRTYxRjc2RDBEQ0NBRDgx ODkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQw RENDQUQ4MTg5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHN/xnBh5fCmyI9I78YoTkP1StBkasJEwhvd m1CC5krSoBFbtrcoFBYiTN8ajA8cY0mcViWfaTYlvp8s6plrwTRF5b73v9OWHBd7 ApHq471y9opzWxdWMDXPOdjHQ42TcHTG3wR+E7GgCMTbnGa1H5fLXu387i/kivTz kzZ7fDPDOW8P+TmvbvJcMcciMdck6L0wMz4szFlUm9QJfVu57g+HtGC9J1VQtEDQ 2KhNFfmquRj2ecSVxjYjEApdneMLjd9yGCKEp2RF8Q9CK9b8ttnaFDza+YrZ/Jl/ 4tY5t14cjTj/VaG5NFsLhXbOIf7axOqWI6KXfnf9Od7KdL8z0BI= -----END CERTIFICATE-----Generated at Wed May 13 00:34:27 2026 by rpki-client