$ rpki-client -vvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft File: 681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft (raw, json) Hash identifier: c49Fs6D5cHuVC+1WNXs6/LtgMc2YyTQAhiwrtNXajtw= Subject key identifier: 3F:DD:58:A3:F0:EB:39:58:1D:54:6B:83:E5:30:80:3F:78:4F:FC:B2 Authority key identifier: 68:1B:E3:4D:FA:90:CE:2B:D9:87:C1:F7:72:EA:7B:05:E5:70:83:E2 Certificate issuer: /CN=681BE34DFA90CE2BD987C1F772EA7B05E57083E2 Certificate serial: 61F431FFED41016CD4FCD548A5DFB1843856C405 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft Manifest number: 0E Signing time: Tue 12 May 2026 13:23:26 +0000 Manifest this update: Tue 12 May 2026 13:18:26 +0000 Manifest next update: Wed 13 May 2026 14:53:26 +0000 Files and hashes: 1: 681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl (hash: 3eB6Q+oe/4j1VmSwDdmJW+ruuRbilm5SgEHUD3qIQvA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f4:31:ff:ed:41:01:6c:d4:fc:d5:48:a5:df:b1:84:38:56:c4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=681BE34DFA90CE2BD987C1F772EA7B05E57083E2 Validity Not Before: May 12 13:18:26 2026 GMT Not After : May 13 14:53:26 2026 GMT Subject: CN=3FDD58A3F0EB39581D546B83E530803F784FFCB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4d:ad:b6:c8:99:ee:7e:66:f7:ea:77:97:e5: 65:a6:ea:88:34:02:0f:09:da:d0:15:04:88:68:81: 2d:74:7d:f1:40:bb:da:09:8c:a1:33:d8:00:73:5e: 1f:4c:60:2d:96:40:c3:da:e6:d9:cc:13:88:cc:38: 9c:3c:ba:48:ee:b0:17:e4:24:da:10:f0:32:ef:33: b5:ac:14:d5:bc:43:ee:eb:a0:2c:7f:1c:a2:85:1b: db:30:a7:3b:d3:5b:75:12:2d:63:32:33:b9:bc:66: 26:c7:4c:cf:86:10:04:c3:01:e4:4e:79:e0:21:e6: de:72:7f:b4:35:54:9f:b6:d6:61:bd:e2:03:0b:bc: c1:13:72:41:4a:d2:be:d2:8a:b3:b2:21:bb:e3:b2: 07:93:a6:6d:60:ba:b7:89:5d:99:8a:f9:39:25:ab: e5:c0:1d:89:a4:68:6e:9b:3b:33:6e:bd:38:64:fe: 59:c5:7a:be:f9:b6:37:e3:b0:8f:19:d8:3f:45:3a: 55:05:3f:99:e9:ad:d6:2b:71:92:01:0d:f1:da:f3: 07:41:a6:35:8e:40:18:ca:a5:11:c0:d4:65:88:cd: 88:3f:d6:65:e9:7a:12:d3:5d:d6:ce:fe:87:56:30: ba:df:8e:31:ee:7c:aa:5b:db:08:8c:4b:be:4f:8d: ed:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DD:58:A3:F0:EB:39:58:1D:54:6B:83:E5:30:80:3F:78:4F:FC:B2 X509v3 Authority Key Identifier: keyid:68:1B:E3:4D:FA:90:CE:2B:D9:87:C1:F7:72:EA:7B:05:E5:70:83:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:59:a6:de:73:6e:9d:fb:d0:5a:9a:b9:57:c3:60:fd:61:da: 86:6c:43:65:b9:b3:b3:ee:b2:e9:69:6b:14:72:e3:5d:65:44: 8a:3a:de:bb:59:da:b1:da:be:b7:56:36:41:6a:f4:11:ec:cb: ec:a8:9d:21:db:86:62:71:30:d9:8e:20:bb:52:10:bb:f5:d1: c7:d3:25:74:7a:87:4d:2c:38:a9:7a:13:5f:17:e8:23:18:a0: f4:6a:68:86:12:1c:b2:5c:3b:f8:fd:6b:a8:21:24:85:f7:40: 6a:87:6c:ff:da:6c:f0:21:37:ab:6a:ae:81:d4:c9:a7:d6:80: aa:b7:b4:90:2b:62:27:3d:11:c4:c6:b6:e2:5f:b5:65:0d:07: bb:d0:8e:02:7e:6a:17:1c:f1:8f:f3:ec:99:a4:e8:3b:9b:bc: d7:f6:26:e3:c9:4d:12:a5:9b:9e:52:61:25:ff:fb:2c:bc:69: fb:09:49:c4:f2:bb:ea:1d:3a:d9:5a:ec:3e:67:79:27:98:30: 0e:01:68:3f:cd:68:61:08:b7:6c:b7:ff:9b:81:9c:06:69:25: fc:b5:55:6f:59:f4:1f:b3:c1:44:a2:23:32:e2:d2:a2:12:44: 6a:5b:8f:7b:03:e9:08:97:3c:17:9c:e2:ac:76:c9:43:c8:31: f7:6e:b3:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYfQx/+1BAWzU/NVIpd+xhDhWxAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgxQkUzNERGQTkwQ0UyQkQ5ODdDMUY3NzJFQTdCMDVF NTcwODNFMjAeFw0yNjA1MTIxMzE4MjZaFw0yNjA1MTMxNDUzMjZaMDMxMTAvBgNV BAMTKDNGREQ1OEEzRjBFQjM5NTgxRDU0NkI4M0U1MzA4MDNGNzg0RkZDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQTa22yJnufmb36neX5WWm6og0 Ag8J2tAVBIhogS10ffFAu9oJjKEz2ABzXh9MYC2WQMPa5tnME4jMOJw8ukjusBfk JNoQ8DLvM7WsFNW8Q+7roCx/HKKFG9swpzvTW3USLWMyM7m8ZibHTM+GEATDAeRO eeAh5t5yf7Q1VJ+21mG94gMLvMETckFK0r7SirOyIbvjsgeTpm1gureJXZmK+Tkl q+XAHYmkaG6bOzNuvThk/lnFer75tjfjsI8Z2D9FOlUFP5nprdYrcZIBDfHa8wdB pjWOQBjKpRHA1GWIzYg/1mXpehLTXdbO/odWMLrfjjHufKpb2wiMS75Pje25AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP91Yo/DrOVgdVGuD5TCAP3hP/LIwHwYDVR0j BBgwFoAUaBvjTfqQzivZh8H3cup7BeVwg+IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzEvNjgxQkUzNERG QTkwQ0UyQkQ5ODdDMUY3NzJFQTdCMDVFNTcwODNFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODFCRTM0REZBOTBDRTJCRDk4N0MxRjc3MkVBN0IwNUU1NzA4 M0UyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzEvNjgxQkUzNERGQTkwQ0UyQkQ5ODdDMUY3NzJFQTdC MDVFNTcwODNFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFZpt5zbp370FqauVfDYP1h2oZsQ2W5s7Pu sulpaxRy411lRIo63rtZ2rHavrdWNkFq9BHsy+yonSHbhmJxMNmOILtSELv10cfT JXR6h00sOKl6E18X6CMYoPRqaIYSHLJcO/j9a6ghJIX3QGqHbP/abPAhN6tqroHU yafWgKq3tJArYic9EcTGtuJftWUNB7vQjgJ+ahcc8Y/z7Jmk6DubvNf2JuPJTRKl m55SYSX/+yy8afsJScTyu+odOtla7D5neSeYMA4BaD/NaGEIt2y3/5uBnAZpJfy1 VW9Z9B+zwUSiIzLi0qISRGpbj3sD6QiXPBec4qx2yUPIMfdusyE= -----END CERTIFICATE-----Generated at Wed May 13 02:59:43 2026 by rpki-client