$ rpki-client -vvf rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft File: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft (raw, json) Hash identifier: 1jlq+U4zvXGeZZ96i+JEogSTrRT76VUj6ZrPCm6JwPw= Subject key identifier: 10:EF:E6:B7:ED:73:7C:A0:23:6D:75:34:43:63:3A:8A:35:9C:9A:13 Authority key identifier: DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E Certificate issuer: /CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Certificate serial: 4FAE0748689D8803A3B46735E3E48C159BCC497E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft Manifest number: 0E Signing time: Tue 12 May 2026 13:03:14 +0000 Manifest this update: Tue 12 May 2026 12:58:14 +0000 Manifest next update: Wed 13 May 2026 16:37:14 +0000 Files and hashes: 1: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl (hash: 7sVzW5XJi0VK/Y7v0fQvLv+LoYaaug2GI889Y04EcjQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ae:07:48:68:9d:88:03:a3:b4:67:35:e3:e4:8c:15:9b:cc:49:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Validity Not Before: May 12 12:58:14 2026 GMT Not After : May 13 16:37:14 2026 GMT Subject: CN=10EFE6B7ED737CA0236D753443633A8A359C9A13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ad:ec:3d:e3:3d:42:83:3b:d0:75:c3:e0:fe: df:eb:f1:96:d9:e0:ee:98:fe:16:a5:7b:42:bd:af: e5:c9:f4:7a:a3:14:ab:b6:02:60:10:7b:23:4c:b9: ed:24:10:61:fa:cb:af:01:a4:73:91:f8:99:0a:3b: 7d:62:53:0e:fc:f1:d5:10:c8:19:21:34:11:c7:6d: fa:bb:f1:8f:d4:50:ea:8e:f8:66:45:9d:74:68:68: d8:d5:a1:b4:6e:ed:11:99:5a:c6:f0:ee:2d:51:33: 78:82:a8:f6:c7:30:b5:08:b0:6b:55:2a:5d:22:61: cb:3b:bf:b9:cd:09:ae:40:7b:47:ca:8d:c8:fa:5d: 15:10:9d:62:f6:3b:d5:ea:1d:6c:17:11:94:47:2f: 8f:ad:70:a3:3c:d6:8a:26:9d:f1:15:fa:75:d3:c4: 5a:af:ae:45:f6:ad:d6:87:7d:61:92:c0:ca:6c:b9: 3d:a1:f1:92:37:e4:e0:70:8a:a6:88:25:32:33:7b: f4:4e:75:9c:15:98:72:70:cb:38:aa:d6:f5:8d:d2: 1c:41:b4:90:72:ce:73:c9:a9:45:0d:e1:74:4c:b4: 2d:df:be:1a:ec:c8:f4:8a:d5:ef:dc:ab:48:95:00: 4f:4d:2b:43:42:5c:96:8c:a9:cb:ec:0a:27:f1:6e: 1a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EF:E6:B7:ED:73:7C:A0:23:6D:75:34:43:63:3A:8A:35:9C:9A:13 X509v3 Authority Key Identifier: keyid:DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:61:52:0d:bc:37:c5:10:48:cc:f3:6c:f6:30:dd:cd:98:92: 89:8d:fc:f8:0e:bd:ff:1a:b7:76:3b:5d:02:fb:e2:69:61:d2: ae:58:0f:7b:f1:49:29:fd:17:42:c3:2b:cb:22:b7:dd:8b:df: f6:8c:0b:1e:0c:26:91:40:4b:e2:75:26:1b:07:78:1b:d4:f8: e1:e9:0d:73:fe:70:09:80:a3:b8:00:27:51:45:7b:d2:f9:87: 07:fc:5b:1b:5d:47:2f:bc:ac:6f:8e:4d:c4:ae:d6:d4:19:11: 2e:d2:60:d3:52:44:17:a1:cf:51:0d:1e:ea:87:d4:dc:50:af: 02:dd:05:86:00:1f:52:29:27:60:64:57:e5:8d:f5:7b:79:6f: 73:d8:13:fd:ea:97:d5:99:43:55:c1:33:01:07:24:14:e9:9d: 4c:bc:81:04:10:07:08:8c:e0:ad:84:18:17:d8:c5:2a:20:6f: cb:65:c4:6c:45:dd:31:4b:6d:ac:92:6a:00:91:6c:86:65:7d: ff:f7:f9:7b:aa:ed:0a:5f:3a:3a:d9:1e:28:32:1c:a7:36:00: 78:39:32:fb:f0:a5:9b:22:5c:5c:42:ec:7a:93:4d:a5:70:cb: 02:6e:56:08:a2:bc:ef:a6:9c:3a:fe:95:7b:ad:82:1c:a4:51: 9f:c8:91:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT64HSGidiAOjtGc14+SMFZvMSX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2NkJC OEY5MkEzRTAeFw0yNjA1MTIxMjU4MTRaFw0yNjA1MTMxNjM3MTRaMDMxMTAvBgNV BAMTKDEwRUZFNkI3RUQ3MzdDQTAyMzZENzUzNDQzNjMzQThBMzU5QzlBMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJrew94z1CgzvQdcPg/t/r8ZbZ 4O6Y/hale0K9r+XJ9HqjFKu2AmAQeyNMue0kEGH6y68BpHOR+JkKO31iUw788dUQ yBkhNBHHbfq78Y/UUOqO+GZFnXRoaNjVobRu7RGZWsbw7i1RM3iCqPbHMLUIsGtV Kl0iYcs7v7nNCa5Ae0fKjcj6XRUQnWL2O9XqHWwXEZRHL4+tcKM81oomnfEV+nXT xFqvrkX2rdaHfWGSwMpsuT2h8ZI35OBwiqaIJTIze/ROdZwVmHJwyziq1vWN0hxB tJByznPJqUUN4XRMtC3fvhrsyPSK1e/cq0iVAE9NK0NCXJaMqcvsCifxbhrdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEO/mt+1zfKAjbXU0Q2M6ijWcmhMwHwYDVR0j BBgwFoAU29WY4bt0l4Ld5jk9Q7gGa7j5Kj4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjIzOGU1NmUtZWRhNS00MDVhLWFiYmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFC Qjc0OTc4MkRERTYzOTNENDNCODA2NkJCOEY5MkEzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQkQ1OThFMUJCNzQ5NzgyRERFNjM5M0Q0M0I4MDY2QkI4Rjky QTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjIzOGU1NmUtZWRhNS00MDVhLWFi YmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2 NkJCOEY5MkEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJhUg28N8UQSMzzbPYw3c2YkomN/PgOvf8a t3Y7XQL74mlh0q5YD3vxSSn9F0LDK8sit92L3/aMCx4MJpFAS+J1JhsHeBvU+OHp DXP+cAmAo7gAJ1FFe9L5hwf8WxtdRy+8rG+OTcSu1tQZES7SYNNSRBehz1ENHuqH 1NxQrwLdBYYAH1IpJ2BkV+WN9Xt5b3PYE/3ql9WZQ1XBMwEHJBTpnUy8gQQQBwiM 4K2EGBfYxSogb8tlxGxF3TFLbaySagCRbIZlff/3+Xuq7QpfOjrZHigyHKc2AHg5 MvvwpZsiXFxC7HqTTaVwywJuVgiivO+mnDr+lXutghykUZ/IkRI= -----END CERTIFICATE-----Generated at Tue May 12 23:25:44 2026 by rpki-client