$ rpki-client -vvf rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft File: C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft (raw, json) Hash identifier: FDOTiyLquunTm2I3Aa3VBCf6TUZkR1ulOxPBiFKk6fU= Subject key identifier: B5:6D:E9:21:43:B0:A8:5B:8A:17:39:C4:1F:4D:A7:2C:1D:5E:BB:75 Authority key identifier: C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B Certificate issuer: /CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B Certificate serial: 59801C761F1316E71A0A125312985CC830D668BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:29:04 +0000 Manifest this update: Tue 12 May 2026 21:24:04 +0000 Manifest next update: Thu 14 May 2026 01:18:04 +0000 Files and hashes: 1: C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl (hash: PrQphqulqm8TGhZ9wi3mxgF97mte7ZyKZ7tQB9O8+XY=) 2: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: /TEOvHICrNlzqHKdTSQimWH4eZASaMfqjyKyEfSs2B4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:80:1c:76:1f:13:16:e7:1a:0a:12:53:12:98:5c:c8:30:d6:68:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B Validity Not Before: May 12 21:24:04 2026 GMT Not After : May 14 01:18:04 2026 GMT Subject: CN=B56DE92143B0A85B8A1739C41F4DA72C1D5EBB75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:90:ca:d5:c2:d4:a8:e2:24:a5:55:80:ad: cc:3a:e2:e7:f5:e7:b6:65:d8:ad:61:6d:7d:0f:a6: 73:f5:fc:03:e8:48:42:e5:5e:92:45:61:19:15:4b: fc:79:8a:c0:e4:34:d9:a8:a2:b1:f7:8c:20:95:d3: 9d:48:dc:10:32:07:8d:1d:93:8b:d5:f2:36:6a:ec: b3:b4:83:cc:f4:be:22:3c:b2:02:fe:70:a5:93:86: 09:35:f9:d9:9b:db:d5:0c:88:8b:39:aa:bf:91:90: 5e:b1:79:32:53:2d:83:82:27:34:77:72:36:9d:f4: e9:d0:f7:ca:c7:3c:1f:f6:28:a0:74:18:bf:c5:b8: db:2f:bf:46:81:cc:a3:56:9e:0a:59:1d:f8:a7:75: f3:f3:94:72:5e:41:39:4e:e1:31:b0:c1:38:2a:c0: 09:7e:71:3d:fb:53:31:30:88:08:5b:df:53:a5:0c: d8:36:99:a1:2e:7d:6e:55:1b:14:af:5a:e1:58:8e: d8:ad:f1:02:b7:76:df:61:0c:65:a2:48:4a:b5:ea: 50:f9:4e:c3:e2:09:90:8b:eb:b7:f1:e3:a9:dd:8e: f1:e8:f2:65:dd:ab:e7:aa:ab:94:a7:dd:02:01:29: 47:25:69:57:9d:65:7e:b8:2d:0b:87:97:f4:9d:7e: d3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6D:E9:21:43:B0:A8:5B:8A:17:39:C4:1F:4D:A7:2C:1D:5E:BB:75 X509v3 Authority Key Identifier: keyid:C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7e:82:62:1d:13:a7:62:8f:b1:26:ff:ff:fa:0b:8a:2d:ae: 04:33:2c:3f:eb:fa:6a:06:5b:14:4b:72:9c:93:ee:83:93:91: 09:01:b9:df:5c:13:f1:38:c2:bd:0a:c8:ed:88:fa:fd:cc:e7: 4b:41:00:24:87:4e:12:8d:af:b8:fb:66:b5:bb:35:b7:ac:16: 52:13:3f:03:74:66:f7:36:38:4b:62:cb:90:3d:0a:9d:d7:e3: eb:b7:4b:44:f6:74:0f:d7:af:d8:42:ae:49:53:a2:6b:3b:07: 70:2b:19:0a:b8:65:9b:27:18:8a:ec:52:01:7b:f4:24:23:19: d1:b9:e2:6f:4d:15:c0:56:0c:b2:36:74:cf:9f:02:73:a7:c1: fc:37:4e:61:ff:31:13:49:db:9f:d9:03:7d:12:2b:f9:38:85: 90:30:25:e0:b4:63:e2:94:ee:0d:ba:6d:51:3f:30:7d:b4:49: d5:c0:fc:16:c4:58:ba:ba:cb:67:c6:43:f1:22:8c:41:f7:34: cb:f3:c1:cd:ae:77:e7:4f:f9:b0:f3:4d:a2:8a:b6:59:14:73: a0:9b:b1:91:ef:24:1d:5d:a4:65:d3:26:3b:07:a2:cc:e5:df: ce:f4:65:ad:c8:27:62:9d:8c:1e:09:70:31:b5:cf:88:78:4a: 50:ce:6c:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWYAcdh8TFucaChJTEphcyDDWaL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY4NUVGODZDM0VFRDM2NDZCMjZEREE3MTc5NTJDREJD MUFGOTM4QjAeFw0yNjA1MTIyMTI0MDRaFw0yNjA1MTQwMTE4MDRaMDMxMTAvBgNV BAMTKEI1NkRFOTIxNDNCMEE4NUI4QTE3MzlDNDFGNERBNzJDMUQ1RUJCNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr1ZDK1cLUqOIkpVWArcw64uf1 57Zl2K1hbX0PpnP1/APoSELlXpJFYRkVS/x5isDkNNmoorH3jCCV051I3BAyB40d k4vV8jZq7LO0g8z0viI8sgL+cKWThgk1+dmb29UMiIs5qr+RkF6xeTJTLYOCJzR3 cjad9OnQ98rHPB/2KKB0GL/FuNsvv0aBzKNWngpZHfindfPzlHJeQTlO4TGwwTgq wAl+cT37UzEwiAhb31OlDNg2maEufW5VGxSvWuFYjtit8QK3dt9hDGWiSEq16lD5 TsPiCZCL67fx46ndjvHo8mXdq+eqq5Sn3QIBKUclaVedZX64LQuHl/SdftONAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtW3pIUOwqFuKFznEH02nLB1eu3UwHwYDVR0j BBgwFoAUxoXvhsPu02RrJt2nF5Us28Gvk4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU3ZTViMGUtNTk2NC00NjNmLTgwNDEtMzM3ZjgwNTU2NDNjLzAvQzY4NUVGODZD M0VFRDM2NDZCMjZEREE3MTc5NTJDREJDMUFGOTM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjg1RUY4NkMzRUVEMzY0NkIyNkREQTcxNzk1MkNEQkMxQUY5 MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU3ZTViMGUtNTk2NC00NjNmLTgw NDEtMzM3ZjgwNTU2NDNjLzAvQzY4NUVGODZDM0VFRDM2NDZCMjZEREE3MTc5NTJD REJDMUFGOTM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJp+gmIdE6dij7Em///6C4otrgQzLD/r+moG WxRLcpyT7oOTkQkBud9cE/E4wr0KyO2I+v3M50tBACSHThKNr7j7ZrW7NbesFlIT PwN0Zvc2OEtiy5A9Cp3X4+u3S0T2dA/Xr9hCrklToms7B3ArGQq4ZZsnGIrsUgF7 9CQjGdG54m9NFcBWDLI2dM+fAnOnwfw3TmH/MRNJ25/ZA30SK/k4hZAwJeC0Y+KU 7g26bVE/MH20SdXA/BbEWLq6y2fGQ/EijEH3NMvzwc2ud+dP+bDzTaKKtlkUc6Cb sZHvJB1dpGXTJjsHoszl3870Za3IJ2KdjB4JcDG1z4h4SlDObBU= -----END CERTIFICATE-----Generated at Wed May 13 00:34:29 2026 by rpki-client