$ rpki-client -vvf rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft File: D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft (raw, json) Hash identifier: 3CxunU/R0M1LD6GGgoLKXcxMyUGYzPMckVuNK+yUB04= Subject key identifier: 9A:B4:77:EB:BC:B0:6F:98:2C:CC:D8:D8:10:1E:12:F5:A2:65:6D:A4 Authority key identifier: D4:1E:F4:7F:23:FE:51:C0:A3:8F:09:E4:EB:23:30:83:B3:00:FA:F6 Certificate issuer: /CN=D41EF47F23FE51C0A38F09E4EB233083B300FAF6 Certificate serial: 7B47D3875D6F49A8935AF4AFE11F11ECAAA08497 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft Manifest number: 0E Signing time: Tue 12 May 2026 14:49:30 +0000 Manifest this update: Tue 12 May 2026 14:44:30 +0000 Manifest next update: Wed 13 May 2026 17:05:30 +0000 Files and hashes: 1: D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl (hash: +HkaaOyOJg2xurtdRgRXujfLqXE/7GqUrwC5vL1cn0E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:47:d3:87:5d:6f:49:a8:93:5a:f4:af:e1:1f:11:ec:aa:a0:84:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D41EF47F23FE51C0A38F09E4EB233083B300FAF6 Validity Not Before: May 12 14:44:30 2026 GMT Not After : May 13 17:05:30 2026 GMT Subject: CN=9AB477EBBCB06F982CCCD8D8101E12F5A2656DA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a3:e4:22:40:29:53:51:18:3e:d0:30:ab:be: 4b:3e:a0:66:22:4f:bd:0c:30:b4:b8:4a:71:dc:a2: f5:1d:5c:57:a5:86:9d:62:80:0b:a4:33:24:35:8e: 24:48:2f:11:d8:8c:5e:15:10:b7:4b:11:b2:4f:4e: 2b:73:7e:d0:6c:e9:d4:70:73:99:b0:df:ce:bc:5b: 96:4c:a3:a2:80:f7:b1:38:a9:08:ef:4e:43:88:ea: 96:9b:39:e6:da:c4:6e:31:93:f4:0c:85:7a:50:ee: 76:b6:85:4f:86:3f:64:d4:25:a4:ee:bb:90:26:1a: 81:61:12:04:e4:52:7c:09:d6:80:00:1e:90:89:46: a5:35:a8:04:6d:5f:8e:6b:bf:4f:1f:3d:27:67:8b: 08:4a:0c:44:bc:5e:66:cc:95:03:fe:a8:b4:d4:26: 35:23:f8:67:aa:dc:07:8c:fc:b8:27:53:33:5d:65: db:45:6d:39:92:08:9e:b5:b7:84:66:ac:c0:9e:bf: 79:0e:38:50:15:de:2c:73:90:a3:6d:19:ca:af:16: ef:96:d7:85:f3:eb:bb:85:c8:0b:d6:e2:cd:da:bc: fa:c6:6a:e3:6c:16:61:51:f0:4d:41:6a:6f:7d:87: 58:79:2f:ee:0e:5a:be:57:69:8b:0a:15:c7:eb:e6: ec:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B4:77:EB:BC:B0:6F:98:2C:CC:D8:D8:10:1E:12:F5:A2:65:6D:A4 X509v3 Authority Key Identifier: keyid:D4:1E:F4:7F:23:FE:51:C0:A3:8F:09:E4:EB:23:30:83:B3:00:FA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:7f:ba:0c:57:84:5d:69:f4:a2:b7:ca:6e:66:08:a2:35:d3: 1b:6d:b5:5d:cd:1e:3a:52:16:88:df:89:0c:ba:bb:3a:66:b2: a2:af:bf:59:aa:c9:8c:d9:12:d9:e0:b5:da:1c:03:d8:a5:32: 9d:91:d7:26:0b:8b:30:c6:82:0c:7d:a4:83:01:b9:69:a3:14: c0:d2:c2:eb:ad:02:de:33:cd:1d:fe:a6:7d:3a:17:65:83:69: 93:a6:36:b3:51:44:12:be:e8:f1:d1:51:a6:33:90:3b:f5:34: 39:2e:0c:72:21:46:b5:98:5c:5e:26:38:60:0a:47:db:9b:90: db:dc:43:19:35:c8:22:d1:04:92:f5:a6:fe:f1:40:d0:0d:50: 8b:08:3b:49:5b:a2:24:80:81:7b:59:f5:19:70:7c:36:3b:62: 3f:d1:3b:15:6d:1d:23:ae:90:1b:6b:f0:c3:08:46:31:26:62: f7:89:e2:fe:a2:f0:f0:8a:52:22:52:dc:f3:f4:85:ef:00:17: dd:d7:fe:51:f1:e2:08:7a:ff:5a:77:53:fe:4f:56:68:e0:45: 79:ce:0e:bb:ff:aa:67:c3:e3:ad:7d:4a:bc:e9:a1:f3:93:83: 88:67:3b:cf:04:26:e4:ec:a0:f4:08:79:51:1a:89:7b:62:9b: 6e:1b:37:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe0fTh11vSaiTWvSv4R8R7KqghJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQxRUY0N0YyM0ZFNTFDMEEzOEYwOUU0RUIyMzMwODNC MzAwRkFGNjAeFw0yNjA1MTIxNDQ0MzBaFw0yNjA1MTMxNzA1MzBaMDMxMTAvBgNV BAMTKDlBQjQ3N0VCQkNCMDZGOTgyQ0NDRDhEODEwMUUxMkY1QTI2NTZEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXo+QiQClTURg+0DCrvks+oGYi T70MMLS4SnHcovUdXFelhp1igAukMyQ1jiRILxHYjF4VELdLEbJPTitzftBs6dRw c5mw3868W5ZMo6KA97E4qQjvTkOI6pabOebaxG4xk/QMhXpQ7na2hU+GP2TUJaTu u5AmGoFhEgTkUnwJ1oAAHpCJRqU1qARtX45rv08fPSdniwhKDES8XmbMlQP+qLTU JjUj+Geq3AeM/LgnUzNdZdtFbTmSCJ61t4RmrMCev3kOOFAV3ixzkKNtGcqvFu+W 14Xz67uFyAvW4s3avPrGauNsFmFR8E1Bam99h1h5L+4OWr5XaYsKFcfr5uyXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmrR367ywb5gszNjYEB4S9aJlbaQwHwYDVR0j BBgwFoAU1B70fyP+UcCjjwnk6yMwg7MA+vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg1NDc3Y2UtMDcxNy00N2MwLTg3NjYtOGI5YmVjMGMwODZjLzAvRDQxRUY0N0Yy M0ZFNTFDMEEzOEYwOUU0RUIyMzMwODNCMzAwRkFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENDFFRjQ3RjIzRkU1MUMwQTM4RjA5RTRFQjIzMzA4M0IzMDBG QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg1NDc3Y2UtMDcxNy00N2MwLTg3 NjYtOGI5YmVjMGMwODZjLzAvRDQxRUY0N0YyM0ZFNTFDMEEzOEYwOUU0RUIyMzMw ODNCMzAwRkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFR/ugxXhF1p9KK3ym5mCKI10xtttV3NHjpS FojfiQy6uzpmsqKvv1mqyYzZEtngtdocA9ilMp2R1yYLizDGggx9pIMBuWmjFMDS wuutAt4zzR3+pn06F2WDaZOmNrNRRBK+6PHRUaYzkDv1NDkuDHIhRrWYXF4mOGAK R9ubkNvcQxk1yCLRBJL1pv7xQNANUIsIO0lboiSAgXtZ9RlwfDY7Yj/ROxVtHSOu kBtr8MMIRjEmYveJ4v6i8PCKUiJS3PP0he8AF93X/lHx4gh6/1p3U/5PVmjgRXnO Drv/qmfD4619SrzpofOTg4hnO88EJuTsoPQIeVEaiXtim24bNz0= -----END CERTIFICATE-----Generated at Wed May 13 05:14:46 2026 by rpki-client