$ rpki-client -vvf rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.mft File: 0F839E8933417407BE7F5816D8EA6AF790E1362D.mft (raw, json) Hash identifier: YRPkMvRo61w3fyfQqOgyY4hcatfZSkDyhG7Xt9hh2Gc= Subject key identifier: E9:26:18:1F:55:D5:E9:A6:80:09:49:63:7C:A3:86:B6:C2:DA:35:C8 Authority key identifier: 0F:83:9E:89:33:41:74:07:BE:7F:58:16:D8:EA:6A:F7:90:E1:36:2D Certificate issuer: /CN=0F839E8933417407BE7F5816D8EA6AF790E1362D Certificate serial: 21B892B8B1BFF720AD88B38A845CDDE50B12DA9D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F839E8933417407BE7F5816D8EA6AF790E1362D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.mft Manifest number: 0E Signing time: Tue 12 May 2026 16:00:33 +0000 Manifest this update: Tue 12 May 2026 15:55:33 +0000 Manifest next update: Wed 13 May 2026 16:09:33 +0000 Files and hashes: 1: 0F839E8933417407BE7F5816D8EA6AF790E1362D.crl (hash: y1kTF0fhTNajJUXc6NTUx8DsrcC4AnC6VB2xHAoC1Hg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.crl rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F839E8933417407BE7F5816D8EA6AF790E1362D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b8:92:b8:b1:bf:f7:20:ad:88:b3:8a:84:5c:dd:e5:0b:12:da:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F839E8933417407BE7F5816D8EA6AF790E1362D Validity Not Before: May 12 15:55:33 2026 GMT Not After : May 13 16:09:33 2026 GMT Subject: CN=E926181F55D5E9A6800949637CA386B6C2DA35C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:96:f9:f8:f9:b8:be:d8:af:06:93:e6:27:9e: 4b:40:dc:28:7f:ef:b8:8d:a4:e4:e7:59:6f:8b:68: c3:84:2f:ae:82:1d:6a:71:f3:96:4b:5f:15:e9:48: 97:01:5a:c5:b6:a8:6e:82:4e:36:52:e1:58:bd:a0: 64:d6:9c:ab:86:74:09:ac:c1:4d:18:4f:f6:6d:4a: dd:50:ec:90:7b:16:59:29:1e:fd:96:f8:18:7d:40: 2f:38:ca:89:53:66:b8:96:3d:f7:93:eb:82:96:f5: 81:72:7a:4e:0a:e7:af:f3:53:b0:c0:7a:f0:14:97: 41:06:ac:2f:f7:b8:41:a4:2f:40:5c:6f:0e:4e:3b: 4b:ab:df:88:85:d5:ba:80:0b:7a:43:7f:0e:78:2c: 8b:24:94:0b:13:74:26:0d:a9:9d:52:50:a7:0d:f5: a7:6f:21:41:d0:96:e7:70:56:e4:40:45:d9:aa:3f: a1:25:fd:32:a9:82:55:71:ac:29:b1:90:48:9d:0e: 92:43:ef:4f:c2:fb:41:a1:61:d2:64:cc:05:26:db: 83:dd:89:e9:1f:79:50:f7:d3:e2:c7:00:b8:37:63: 9e:1d:9b:ac:1a:a0:2e:05:49:95:e8:7e:3f:a3:36: a9:7b:0d:ee:43:04:d1:77:94:1e:ce:43:2a:14:9a: 5e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:26:18:1F:55:D5:E9:A6:80:09:49:63:7C:A3:86:B6:C2:DA:35:C8 X509v3 Authority Key Identifier: keyid:0F:83:9E:89:33:41:74:07:BE:7F:58:16:D8:EA:6A:F7:90:E1:36:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F839E8933417407BE7F5816D8EA6AF790E1362D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:af:97:10:31:3f:3b:42:dc:64:14:af:d9:54:29:7c:db:05: 78:16:f1:99:25:04:97:b0:26:06:4f:27:b7:46:c5:ae:3e:fc: 4a:6c:bc:5c:0f:61:35:b6:d4:4c:12:67:76:c6:0f:dc:57:14: 1f:93:6c:9f:9f:b3:f1:89:ec:5e:d4:9c:68:a0:a5:e0:70:60: c7:63:9e:d4:dd:51:a6:bd:8c:88:bf:ed:59:65:2f:56:da:5c: 31:2e:4e:4f:3b:b5:9b:bf:30:d9:e7:f6:df:94:13:46:01:91: 96:04:53:db:af:80:0c:9c:66:a8:47:ec:f8:e1:6e:ff:03:99: 60:e5:c3:67:46:f8:66:38:12:ad:c4:c4:f7:db:3e:5c:ff:50: 7c:44:6a:a2:b0:7d:59:f5:2c:62:24:1f:ce:53:be:2a:fd:3c: c9:c7:3a:91:40:f9:37:73:16:ab:de:98:a4:54:2b:eb:68:03: 93:12:fb:b8:94:00:dd:70:28:85:b4:df:c6:81:8f:76:16:84: 8f:1c:5d:dc:1d:1f:24:0c:20:f3:03:df:27:af:d6:53:79:9b: 08:8f:0f:3a:df:20:27:31:b2:70:65:f8:fc:ca:b1:1e:dd:47: 15:2b:8d:cd:79:9c:87:71:3b:ce:12:22:c2:3d:eb:de:3a:68: 14:1d:b0:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIbiSuLG/9yCtiLOKhFzd5QsS2p0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY4MzlFODkzMzQxNzQwN0JFN0Y1ODE2RDhFQTZBRjc5 MEUxMzYyRDAeFw0yNjA1MTIxNTU1MzNaFw0yNjA1MTMxNjA5MzNaMDMxMTAvBgNV BAMTKEU5MjYxODFGNTVENUU5QTY4MDA5NDk2MzdDQTM4NkI2QzJEQTM1QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMlvn4+bi+2K8Gk+YnnktA3Ch/ 77iNpOTnWW+LaMOEL66CHWpx85ZLXxXpSJcBWsW2qG6CTjZS4Vi9oGTWnKuGdAms wU0YT/ZtSt1Q7JB7FlkpHv2W+Bh9QC84yolTZriWPfeT64KW9YFyek4K56/zU7DA evAUl0EGrC/3uEGkL0Bcbw5OO0ur34iF1bqAC3pDfw54LIsklAsTdCYNqZ1SUKcN 9advIUHQludwVuRARdmqP6El/TKpglVxrCmxkEidDpJD70/C+0GhYdJkzAUm24Pd iekfeVD30+LHALg3Y54dm6waoC4FSZXofj+jNql7De5DBNF3lB7OQyoUml53AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6SYYH1XV6aaACUljfKOGtsLaNcgwHwYDVR0j BBgwFoAUD4OeiTNBdAe+f1gW2Opq95DhNi0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTc0ZDIwYTMtM2Q4My00YzRmLTkxMzgtNzZiYzdjNTEwZWI5LzAvMEY4MzlFODkz MzQxNzQwN0JFN0Y1ODE2RDhFQTZBRjc5MEUxMzYyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjgzOUU4OTMzNDE3NDA3QkU3RjU4MTZEOEVBNkFGNzkwRTEz NjJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTc0ZDIwYTMtM2Q4My00YzRmLTkx MzgtNzZiYzdjNTEwZWI5LzAvMEY4MzlFODkzMzQxNzQwN0JFN0Y1ODE2RDhFQTZB Rjc5MEUxMzYyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJavlxAxPztC3GQUr9lUKXzbBXgW8ZklBJew JgZPJ7dGxa4+/EpsvFwPYTW21EwSZ3bGD9xXFB+TbJ+fs/GJ7F7UnGigpeBwYMdj ntTdUaa9jIi/7VllL1baXDEuTk87tZu/MNnn9t+UE0YBkZYEU9uvgAycZqhH7Pjh bv8DmWDlw2dG+GY4Eq3ExPfbPlz/UHxEaqKwfVn1LGIkH85Tvir9PMnHOpFA+Tdz FqvemKRUK+toA5MS+7iUAN1wKIW038aBj3YWhI8cXdwdHyQMIPMD3yev1lN5mwiP DzrfICcxsnBl+PzKsR7dRxUrjc15nIdxO84SIsI96946aBQdsHg= -----END CERTIFICATE-----Generated at Wed May 13 05:25:05 2026 by rpki-client