$ rpki-client -vvf rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft File: 3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft (raw, json) Hash identifier: Ey7k8OqXRCgPQYm3+5887B5p1j1pOvXeDoF51BasxJc= Subject key identifier: E2:0A:21:D4:88:06:3A:12:2B:69:67:57:2D:EC:2D:F3:F6:11:33:1C Authority key identifier: 31:26:FC:86:C5:B0:75:41:73:EA:2F:94:CC:A9:C8:F9:A4:11:62:C4 Certificate issuer: /CN=3126FC86C5B0754173EA2F94CCA9C8F9A41162C4 Certificate serial: 18E6FD1BBB3C522A48ADC5DDF6B6A781DD39257C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:20:55 +0000 Manifest this update: Tue 12 May 2026 16:15:55 +0000 Manifest next update: Wed 13 May 2026 20:08:55 +0000 Files and hashes: 1: 3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl (hash: rbY7m4Cf+hvRr8JYEtrlGRDEa42XcEYgaXJAqs9vas4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:e6:fd:1b:bb:3c:52:2a:48:ad:c5:dd:f6:b6:a7:81:dd:39:25:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3126FC86C5B0754173EA2F94CCA9C8F9A41162C4 Validity Not Before: May 12 16:15:55 2026 GMT Not After : May 13 20:08:55 2026 GMT Subject: CN=E20A21D488063A122B6967572DEC2DF3F611331C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e6:9b:8c:86:00:03:71:f9:13:75:2b:62:4c: 07:74:65:67:4d:92:95:f8:aa:a6:34:d2:44:37:92: b8:34:7f:6b:b2:64:d4:80:e7:3d:ec:e3:06:92:57: db:15:4e:2c:7c:e5:d2:67:c5:e4:11:c2:ca:cd:18: ce:5a:df:0c:cc:0f:b3:5f:2e:f1:ce:02:12:6d:0a: f7:88:c6:a1:1e:70:61:09:fd:45:96:c5:8b:88:69: 63:df:59:a2:58:f3:1e:65:22:7a:61:f4:71:c2:a4: 26:39:02:c1:56:a8:10:76:d9:4c:5a:c0:f4:6b:0c: 92:ed:94:cd:8a:29:4b:c6:81:2f:f3:87:fb:9d:55: 4e:95:80:93:2b:76:d4:5a:87:95:fc:5d:4c:30:8c: 31:38:34:3a:0e:60:76:a3:b4:7f:4c:ca:ab:71:d4: cc:b3:2c:66:cd:f3:b6:62:fc:8f:41:85:e8:3d:fd: 6a:0e:93:1d:42:87:ce:0a:54:de:97:51:d6:da:f1: 04:59:0a:96:d3:5d:9a:28:83:44:f0:f1:5e:45:af: 5d:4f:81:aa:df:4f:aa:90:5b:9b:87:95:d5:28:d8: 33:da:43:c2:24:10:bf:ea:4d:e8:6a:59:8f:90:16: 7c:5f:ce:e7:64:e6:0e:96:00:4c:31:46:1e:57:55: d2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0A:21:D4:88:06:3A:12:2B:69:67:57:2D:EC:2D:F3:F6:11:33:1C X509v3 Authority Key Identifier: keyid:31:26:FC:86:C5:B0:75:41:73:EA:2F:94:CC:A9:C8:F9:A4:11:62:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:74:9c:c4:d1:c1:e8:13:fc:bc:9d:ea:33:6c:a8:04:41:73: d4:7b:5a:c1:9a:55:23:40:b7:ae:0f:2f:4c:a6:c2:03:69:b7: 24:e4:7e:84:d6:19:c7:81:ab:d8:b3:92:ca:d8:af:32:4e:ce: 3f:6d:2f:ca:86:10:27:e3:92:d2:83:b5:c8:57:08:fd:0e:78: ec:bc:cc:f1:f0:c6:8b:a0:f1:f8:03:15:be:40:13:73:8c:70: 64:c1:9a:3f:63:70:2e:57:1f:24:c6:c7:9c:dd:72:72:5c:47: 06:8b:90:64:ae:6b:82:08:cf:58:73:d6:37:3c:ca:06:43:91: be:81:d4:5b:86:cc:f5:8b:2c:19:3c:ab:34:56:96:94:ca:b1: 89:1b:7a:db:5b:7f:fd:d6:83:47:e1:92:8a:d1:82:ce:c9:c8: 39:5a:cb:5e:55:cb:af:dd:96:4e:c1:2e:c4:14:21:80:b8:a3: b9:9c:30:12:35:7b:68:02:40:c2:0a:e5:9c:a0:28:be:0e:00: fe:a4:5a:39:47:1f:75:e1:93:27:35:26:0b:10:85:73:c7:76: fa:e4:17:5d:45:12:41:4c:bd:b1:a5:ac:1d:3d:26:19:c9:34: 29:a6:b4:f9:3b:45:a4:bd:2d:08:e5:74:2e:7a:57:f7:47:10: 12:9a:ad:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGOb9G7s8UipIrcXd9rangd05JXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyNkZDODZDNUIwNzU0MTczRUEyRjk0Q0NBOUM4RjlB NDExNjJDNDAeFw0yNjA1MTIxNjE1NTVaFw0yNjA1MTMyMDA4NTVaMDMxMTAvBgNV BAMTKEUyMEEyMUQ0ODgwNjNBMTIyQjY5Njc1NzJERUMyREYzRjYxMTMzMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj5puMhgADcfkTdStiTAd0ZWdN kpX4qqY00kQ3krg0f2uyZNSA5z3s4waSV9sVTix85dJnxeQRwsrNGM5a3wzMD7Nf LvHOAhJtCveIxqEecGEJ/UWWxYuIaWPfWaJY8x5lInph9HHCpCY5AsFWqBB22Uxa wPRrDJLtlM2KKUvGgS/zh/udVU6VgJMrdtRah5X8XUwwjDE4NDoOYHajtH9Myqtx 1MyzLGbN87Zi/I9Bheg9/WoOkx1Ch84KVN6XUdba8QRZCpbTXZoog0Tw8V5Fr11P garfT6qQW5uHldUo2DPaQ8IkEL/qTehqWY+QFnxfzudk5g6WAEwxRh5XVdItAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4goh1IgGOhIraWdXLewt8/YRMxwwHwYDVR0j BBgwFoAUMSb8hsWwdUFz6i+UzKnI+aQRYsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTliODE1MmUtYWE4Ni00ZDhhLTgxZGEtZTcxMDg2YjI5NTZjLzEvMzEyNkZDODZD NUIwNzU0MTczRUEyRjk0Q0NBOUM4RjlBNDExNjJDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMTI2RkM4NkM1QjA3NTQxNzNFQTJGOTRDQ0E5QzhGOUE0MTE2 MkM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzEvMzEyNkZDODZDNUIwNzU0MTczRUEyRjk0Q0NBOUM4 RjlBNDExNjJDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFl0nMTRwegT/Lyd6jNsqARBc9R7WsGaVSNA t64PL0ymwgNptyTkfoTWGceBq9izksrYrzJOzj9tL8qGECfjktKDtchXCP0OeOy8 zPHwxoug8fgDFb5AE3OMcGTBmj9jcC5XHyTGx5zdcnJcRwaLkGSua4IIz1hz1jc8 ygZDkb6B1FuGzPWLLBk8qzRWlpTKsYkbettbf/3Wg0fhkorRgs7JyDlay15Vy6/d lk7BLsQUIYC4o7mcMBI1e2gCQMIK5ZygKL4OAP6kWjlHH3Xhkyc1JgsQhXPHdvrk F11FEkFMvbGlrB09JhnJNCmmtPk7RaS9LQjldC56V/dHEBKarY8= -----END CERTIFICATE-----Generated at Tue May 12 22:13:26 2026 by rpki-client