$ rpki-client -vvf rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft File: 405E6B7463BC0531CCD985CD4D468E60B5078B16.mft (raw, json) Hash identifier: 84BZHwl8OmIANLkhBMDvrLh2ht2ULLtrlTot/VvKAGg= Subject key identifier: 32:89:A7:5E:C8:B7:33:82:32:E8:7A:B3:F1:C2:8C:45:94:42:F8:08 Authority key identifier: 40:5E:6B:74:63:BC:05:31:CC:D9:85:CD:4D:46:8E:60:B5:07:8B:16 Certificate issuer: /CN=405E6B7463BC0531CCD985CD4D468E60B5078B16 Certificate serial: 7E717F4207376A06273893E7D28740FEE61145BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft Manifest number: 0D Signing time: Tue 12 May 2026 06:27:20 +0000 Manifest this update: Tue 12 May 2026 06:22:20 +0000 Manifest next update: Wed 13 May 2026 10:25:20 +0000 Files and hashes: 1: 405E6B7463BC0531CCD985CD4D468E60B5078B16.crl (hash: baKz1cjGsbYawH6iHvEs4H0iB3ON7asQkB8e0HA/Fks=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.crl rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:71:7f:42:07:37:6a:06:27:38:93:e7:d2:87:40:fe:e6:11:45:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405E6B7463BC0531CCD985CD4D468E60B5078B16 Validity Not Before: May 12 06:22:20 2026 GMT Not After : May 13 10:25:20 2026 GMT Subject: CN=3289A75EC8B7338232E87AB3F1C28C459442F808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:de:8f:00:1b:4c:73:d5:8b:77:9a:c7:f6: 60:bb:98:b2:a0:2d:21:c4:37:f7:65:48:b4:e8:b3: 6f:0d:d9:06:d2:06:8f:31:c4:4e:4c:b8:f7:c4:e7: 2b:7a:29:72:b6:db:3f:27:50:ad:16:04:82:0f:43: ad:3a:15:ec:7d:b6:7a:68:6b:31:5e:61:92:e7:70: b7:72:b9:b3:95:91:82:02:ce:dd:e4:3c:0a:b9:c8: 2d:6a:eb:3d:21:40:7f:72:36:47:7f:37:08:b2:de: 64:c6:d9:1a:86:be:3f:1b:c4:be:c9:3f:a8:0a:79: c6:e9:51:bb:33:e2:e5:09:10:e2:75:e8:38:df:e7: 53:2c:9c:28:04:84:31:80:c6:56:39:45:33:38:d3: 45:8b:ea:8d:51:8f:a0:d5:a8:15:4f:ea:b8:90:35: c4:a8:f9:5b:a9:23:73:79:97:71:06:e9:9d:0f:01: d0:e0:4d:3d:ad:4e:af:74:c4:35:09:1c:9a:59:40: 5f:aa:28:71:60:26:2e:38:a9:99:31:38:83:c8:a2: 41:0c:df:8c:3a:6a:bc:5b:a0:55:8c:b2:a6:ce:c8: f2:e3:05:db:3d:ae:81:33:88:e5:6a:da:08:04:61: c4:54:eb:a5:cd:45:dc:74:4d:e3:bb:0a:ce:58:32: 87:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:89:A7:5E:C8:B7:33:82:32:E8:7A:B3:F1:C2:8C:45:94:42:F8:08 X509v3 Authority Key Identifier: keyid:40:5E:6B:74:63:BC:05:31:CC:D9:85:CD:4D:46:8E:60:B5:07:8B:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c2:b3:ac:99:3d:b0:54:15:14:9e:a7:ff:91:f2:08:56:86: 9a:66:38:16:28:f1:cb:5b:35:5b:60:a5:1e:1d:37:2f:a5:26: ab:3b:f2:e0:1f:ab:30:55:12:e4:3f:23:41:91:64:65:40:11: 62:60:5e:7a:37:f7:ea:dd:70:16:a7:c8:f3:45:a2:f6:c2:b0: 63:be:ee:46:1d:4b:be:47:f4:21:3f:39:07:a8:63:c5:3d:c9: b8:51:75:ff:ca:8f:81:77:a9:9d:5e:60:f1:12:84:c7:e7:1d: 95:5e:86:bb:02:d4:ff:97:d7:44:5a:30:37:51:e5:c2:07:c6: d0:be:9d:48:c2:2f:19:de:c5:57:b9:f9:95:c9:e3:4b:c3:8d: dd:2e:c7:2c:ad:3b:ff:7f:41:73:5d:e6:25:f7:c3:f4:cc:2d: d0:27:a5:7f:f6:eb:3e:3a:cd:e0:60:5f:08:56:07:f6:57:89: 5e:89:ea:8b:b7:f5:8f:8c:88:a6:0b:b7:2d:52:29:8a:77:2a: 1c:80:89:a4:20:0a:d4:23:5b:97:50:60:5d:ec:7f:8f:60:b6: 40:92:13:84:60:be:28:45:c5:d6:3a:28:12:a3:7e:54:04:80: fb:68:50:8e:e5:c0:5d:d5:11:d0:7f:e5:2e:54:a2:b7:59:50: 0e:a7:b7:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnF/Qgc3agYnOJPn0odA/uYRRbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1RTZCNzQ2M0JDMDUzMUNDRDk4NUNENEQ0NjhFNjBC NTA3OEIxNjAeFw0yNjA1MTIwNjIyMjBaFw0yNjA1MTMxMDI1MjBaMDMxMTAvBgNV BAMTKDMyODlBNzVFQzhCNzMzODIzMkU4N0FCM0YxQzI4QzQ1OTQ0MkY4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5l96PABtMc9WLd5rH9mC7mLKg LSHEN/dlSLTos28N2QbSBo8xxE5MuPfE5yt6KXK22z8nUK0WBIIPQ606Fex9tnpo azFeYZLncLdyubOVkYICzt3kPAq5yC1q6z0hQH9yNkd/Nwiy3mTG2RqGvj8bxL7J P6gKecbpUbsz4uUJEOJ16Djf51MsnCgEhDGAxlY5RTM400WL6o1Rj6DVqBVP6riQ NcSo+VupI3N5l3EG6Z0PAdDgTT2tTq90xDUJHJpZQF+qKHFgJi44qZkxOIPIokEM 34w6arxboFWMsqbOyPLjBds9roEziOVq2ggEYcRU66XNRdx0TeO7Cs5YMoezAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMomnXsi3M4Iy6Hqz8cKMRZRC+AgwHwYDVR0j BBgwFoAUQF5rdGO8BTHM2YXNTUaOYLUHixYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTEzZGUzZWMtNGQzYy00NDAyLWE3YjgtOGExYjk2MjI2ZTc1LzEvNDA1RTZCNzQ2 M0JDMDUzMUNDRDk4NUNENEQ0NjhFNjBCNTA3OEIxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDVFNkI3NDYzQkMwNTMxQ0NEOTg1Q0Q0RDQ2OEU2MEI1MDc4 QjE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvNDA1RTZCNzQ2M0JDMDUzMUNDRDk4NUNENEQ0NjhF NjBCNTA3OEIxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInCs6yZPbBUFRSep/+R8ghWhppmOBYo8ctb NVtgpR4dNy+lJqs78uAfqzBVEuQ/I0GRZGVAEWJgXno39+rdcBanyPNFovbCsGO+ 7kYdS75H9CE/OQeoY8U9ybhRdf/Kj4F3qZ1eYPEShMfnHZVehrsC1P+X10RaMDdR 5cIHxtC+nUjCLxnexVe5+ZXJ40vDjd0uxyytO/9/QXNd5iX3w/TMLdAnpX/26z46 zeBgXwhWB/ZXiV6J6ou39Y+MiKYLty1SKYp3KhyAiaQgCtQjW5dQYF3sf49gtkCS E4RgvihFxdY6KBKjflQEgPtoUI7lwF3VEdB/5S5UordZUA6nt4Q= -----END CERTIFICATE-----Generated at Tue May 12 22:19:38 2026 by rpki-client