$ rpki-client -vvf rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft File: E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft (raw, json) Hash identifier: gqcZ4TOI4gbZ0V79R4TroE3aK06erb1Zk2hd7BU4rys= Subject key identifier: B9:32:D8:FF:48:A4:71:8E:57:A0:87:B1:91:A7:2E:02:16:E0:FF:E9 Authority key identifier: E0:63:3F:E9:AA:4E:1B:B8:C1:4C:B8:76:4B:6A:FA:38:FD:0C:A7:88 Certificate issuer: /CN=E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788 Certificate serial: 19AE39DB3882DAD0732E797C36C667FFAC0C00AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft Manifest number: 0E Signing time: Tue 12 May 2026 21:03:23 +0000 Manifest this update: Tue 12 May 2026 20:58:23 +0000 Manifest next update: Wed 13 May 2026 23:46:23 +0000 Files and hashes: 1: E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.crl (hash: fpyW21172MrXKl7K1Xqr6qbZlWfIsYmSKQARCfprUUA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.crl rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ae:39:db:38:82:da:d0:73:2e:79:7c:36:c6:67:ff:ac:0c:00:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788 Validity Not Before: May 12 20:58:23 2026 GMT Not After : May 13 23:46:23 2026 GMT Subject: CN=B932D8FF48A4718E57A087B191A72E0216E0FFE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3c:f9:8f:2f:d9:e9:4c:98:15:4e:c0:28:7d: 9a:43:1a:de:5f:97:97:84:80:3d:c3:c3:39:18:36: d1:2a:14:72:e6:88:50:1f:09:86:c2:b3:97:ca:1b: 58:1b:99:e9:18:c2:e8:13:d8:19:3f:1b:98:01:6c: c5:8a:97:c0:6f:e6:49:fe:75:85:4f:b4:7f:3b:9a: d2:89:89:ba:d5:00:a4:60:79:2a:6c:b3:a9:91:8a: bf:6c:6d:dd:ba:c5:66:c7:fa:1d:a8:cb:4e:1e:15: 56:32:7f:17:27:9a:08:94:ac:a9:fe:0a:d4:92:00: b1:d1:a1:6d:a4:31:38:5f:e9:0f:3c:18:68:0c:e6: c1:83:b6:37:80:f1:30:50:64:04:9e:37:d3:7f:62: 34:c4:9b:5b:44:75:ca:f9:7b:d8:ce:d5:66:9f:d3: 84:38:e6:53:7d:0c:e2:57:37:ae:0c:e8:f3:6e:38: 88:79:8f:34:43:88:8b:25:95:c6:4d:44:29:32:d5: f0:4a:ce:52:2d:69:00:66:37:e0:bb:ab:1d:a1:de: f6:b6:1d:ae:fe:69:2a:92:f5:70:b2:ce:3f:41:bb: 52:18:45:8b:b8:fc:96:d5:c6:c9:7f:e0:19:9b:32: 2a:2e:a4:db:31:5c:64:39:bb:4d:56:41:46:a2:fa: 74:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:32:D8:FF:48:A4:71:8E:57:A0:87:B1:91:A7:2E:02:16:E0:FF:E9 X509v3 Authority Key Identifier: keyid:E0:63:3F:E9:AA:4E:1B:B8:C1:4C:B8:76:4B:6A:FA:38:FD:0C:A7:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e5:7c:30:21:7e:22:dd:15:78:94:a5:d5:07:33:23:2a:7b: c3:e2:ee:21:40:a6:eb:8f:ce:d6:b3:e3:8b:fd:16:5f:e9:1b: 96:a2:aa:d7:fe:b7:03:b8:5a:d5:cd:ab:af:c0:b5:80:3f:30: 2c:c1:44:10:e8:42:97:0e:57:fe:a1:14:93:b5:91:8c:d1:ce: 10:b8:af:b3:d3:8e:1e:4a:19:33:fb:40:a3:81:d9:9c:10:44: 90:83:fe:6a:19:c6:d1:66:9a:cd:40:c6:85:f9:2a:dd:ba:11: 29:2d:8e:1c:e7:8a:b5:b8:d3:40:d2:89:89:88:4d:04:39:43: 87:74:cc:e8:dc:de:53:ee:44:b4:36:1e:c4:96:1f:5e:22:c0: f5:9c:01:71:ce:c9:28:00:20:6d:d4:de:b9:6e:91:f2:aa:e8: 9a:fe:59:53:fb:f7:03:f1:c5:e5:ba:6a:94:a0:63:9d:44:33: 05:24:c0:07:4d:0d:f7:14:02:aa:51:ed:17:db:f3:41:97:c3: dd:16:c9:78:49:4c:2a:4f:90:f6:84:92:d1:b2:ff:cf:48:1e: 15:84:d4:ff:25:fa:ea:5e:4f:25:3c:76:d8:43:e1:9c:6d:43: 07:55:4a:cf:57:7a:bf:d5:ef:ce:45:e4:2e:5a:bb:d6:bf:6c: fa:42:13:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGa452ziC2tBzLnl8NsZn/6wMAK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA2MzNGRTlBQTRFMUJCOEMxNENCODc2NEI2QUZBMzhG RDBDQTc4ODAeFw0yNjA1MTIyMDU4MjNaFw0yNjA1MTMyMzQ2MjNaMDMxMTAvBgNV BAMTKEI5MzJEOEZGNDhBNDcxOEU1N0EwODdCMTkxQTcyRTAyMTZFMEZGRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPPmPL9npTJgVTsAofZpDGt5f l5eEgD3DwzkYNtEqFHLmiFAfCYbCs5fKG1gbmekYwugT2Bk/G5gBbMWKl8Bv5kn+ dYVPtH87mtKJibrVAKRgeSpss6mRir9sbd26xWbH+h2oy04eFVYyfxcnmgiUrKn+ CtSSALHRoW2kMThf6Q88GGgM5sGDtjeA8TBQZASeN9N/YjTEm1tEdcr5e9jO1Waf 04Q45lN9DOJXN64M6PNuOIh5jzRDiIsllcZNRCky1fBKzlItaQBmN+C7qx2h3va2 Ha7+aSqS9XCyzj9Bu1IYRYu4/JbVxsl/4BmbMioupNsxXGQ5u01WQUai+nShAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuTLY/0ikcY5XoIexkacuAhbg/+kwHwYDVR0j BBgwFoAU4GM/6apOG7jBTLh2S2r6OP0Mp4gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWYyYjE3ODYtMTgzMy00ZDBhLWExMzktNDY0NDMzMzkzZDc4LzAvRTA2MzNGRTlB QTRFMUJCOEMxNENCODc2NEI2QUZBMzhGRDBDQTc4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDYzM0ZFOUFBNEUxQkI4QzE0Q0I4NzY0QjZBRkEzOEZEMENB Nzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvRTA2MzNGRTlBQTRFMUJCOEMxNENCODc2NEI2QUZB MzhGRDBDQTc4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXlfDAhfiLdFXiUpdUHMyMqe8Pi7iFApuuP ztaz44v9Fl/pG5aiqtf+twO4WtXNq6/AtYA/MCzBRBDoQpcOV/6hFJO1kYzRzhC4 r7PTjh5KGTP7QKOB2ZwQRJCD/moZxtFmms1AxoX5Kt26ESktjhznirW400DSiYmI TQQ5Q4d0zOjc3lPuRLQ2HsSWH14iwPWcAXHOySgAIG3U3rlukfKq6Jr+WVP79wPx xeW6apSgY51EMwUkwAdNDfcUAqpR7Rfb80GXw90WyXhJTCpPkPaEktGy/89IHhWE 1P8l+upeTyU8dthD4ZxtQwdVSs9Xer/V785F5C5au9a/bPpCE/0= -----END CERTIFICATE-----Generated at Wed May 13 07:35:05 2026 by rpki-client