$ rpki-client -vvf rpki-rsync.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/2262D2B74952F0176503770B9C0C005B5CF77FA2.mft File: 2262D2B74952F0176503770B9C0C005B5CF77FA2.mft (raw, json) Hash identifier: GNxG4MpdEObxEfrohVWNYzk30jWTdh4FDS2YpwYwVDM= Subject key identifier: 15:75:0E:4C:27:F5:A0:00:D0:77:55:72:52:45:46:88:1C:AB:A4:4B Authority key identifier: 22:62:D2:B7:49:52:F0:17:65:03:77:0B:9C:0C:00:5B:5C:F7:7F:A2 Certificate issuer: /CN=2262D2B74952F0176503770B9C0C005B5CF77FA2 Certificate serial: 026DDD4A4E74BD4D05D5546780F9FB4AD9901D2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2262D2B74952F0176503770B9C0C005B5CF77FA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/2262D2B74952F0176503770B9C0C005B5CF77FA2.mft Manifest number: 0E Signing time: Tue 12 May 2026 17:37:35 +0000 Manifest this update: Tue 12 May 2026 17:32:35 +0000 Manifest next update: Wed 13 May 2026 19:34:35 +0000 Files and hashes: 1: 2262D2B74952F0176503770B9C0C005B5CF77FA2.crl (hash: tJWiS5b9NKxEdVwjfmOWxocUFe5CGRzTMk/BsksyVCM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/2262D2B74952F0176503770B9C0C005B5CF77FA2.crl rsync://rpki-rsync.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/2262D2B74952F0176503770B9C0C005B5CF77FA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2262D2B74952F0176503770B9C0C005B5CF77FA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6d:dd:4a:4e:74:bd:4d:05:d5:54:67:80:f9:fb:4a:d9:90:1d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2262D2B74952F0176503770B9C0C005B5CF77FA2 Validity Not Before: May 12 17:32:35 2026 GMT Not After : May 13 19:34:35 2026 GMT Subject: CN=15750E4C27F5A000D0775572524546881CABA44B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:93:6c:1e:7a:fd:fb:b4:cd:db:2c:16:47:bd: e0:06:94:ee:02:e6:93:43:fb:0e:54:b7:01:af:48: 5f:10:e3:43:0a:0f:86:0c:84:50:2c:2f:30:9d:db: e1:22:f4:82:42:ce:5d:05:b4:df:71:d0:d9:68:5f: 63:49:de:88:9e:ab:ad:f1:04:59:52:80:fd:83:93: 6b:90:8c:f2:18:f9:d1:68:ac:29:3e:2c:8c:57:5c: fd:12:17:7d:f2:53:0e:8b:58:20:cb:49:c7:8d:48: f4:7d:dd:c6:ad:2b:5a:5d:fe:ea:af:05:14:b3:04: d7:ce:bb:9a:1a:1e:64:37:2a:24:42:0b:eb:97:68: 46:42:8a:a8:b6:c8:7f:97:4b:c0:63:7b:5b:3b:db: 52:a6:70:8e:ee:b9:e7:17:91:fa:5c:9c:72:1d:1a: 11:5f:7f:0d:2d:cb:5c:9f:01:ee:35:ef:d9:85:66: 1e:a8:b7:66:14:7b:51:e3:62:e2:7e:f7:24:00:c2: 8a:ae:68:3d:42:a4:30:be:19:e9:fc:e7:53:3a:5e: a1:08:ae:36:2b:54:a7:c9:64:7e:4a:7f:16:b2:ad: 2b:16:08:f1:cf:c7:ea:5a:d6:a3:09:4a:0f:0d:a6: a8:a1:be:88:29:bd:b0:ad:80:1d:77:ba:26:f6:81: 5b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:75:0E:4C:27:F5:A0:00:D0:77:55:72:52:45:46:88:1C:AB:A4:4B X509v3 Authority Key Identifier: keyid:22:62:D2:B7:49:52:F0:17:65:03:77:0B:9C:0C:00:5B:5C:F7:7F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/2262D2B74952F0176503770B9C0C005B5CF77FA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2262D2B74952F0176503770B9C0C005B5CF77FA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/2262D2B74952F0176503770B9C0C005B5CF77FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:93:dd:e8:9a:02:9b:88:7a:ba:6f:c1:d3:4d:5f:c4:f5:b1: 69:4c:be:5f:70:51:24:40:c1:a9:7c:32:a3:50:2f:81:15:b4: 29:37:2d:7f:d1:4e:70:b6:85:52:53:8f:62:79:33:ea:61:f5: f4:d0:46:4c:89:f6:3a:2c:2c:06:ad:df:e0:b6:ee:9e:ac:44: a3:e0:89:c5:0f:06:42:4a:7c:14:65:94:ec:d2:d0:2a:a0:bd: 80:67:02:ce:f0:45:55:ba:70:5b:ae:c3:d9:41:6e:2e:68:54: 19:6a:98:39:cc:16:09:87:2d:16:af:57:2e:d2:bf:cd:12:e0: af:b7:91:ce:7f:65:e6:f9:0e:ed:94:b2:0c:f8:94:19:1a:b1: 27:8a:40:d9:b4:65:47:0e:b5:1e:63:28:b9:71:cb:31:67:3f: a0:ad:a0:96:17:0a:77:90:b3:4f:48:93:7f:00:75:88:ce:2b: 59:0b:70:48:fc:f7:8e:df:74:88:29:61:68:96:64:6f:dd:e9: c5:f7:46:6f:2e:ab:b0:bf:79:b6:f1:03:d4:e4:3f:d6:0c:58: 8a:be:11:a2:e1:21:f3:ef:5b:ca:bb:58:67:8d:72:94:55:a7: cb:dd:55:4c:61:85:df:a4:ca:c2:f5:64:c7:42:9a:ff:7f:38: 95:75:38:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAm3dSk50vU0F1VRngPn7StmQHS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2MkQyQjc0OTUyRjAxNzY1MDM3NzBCOUMwQzAwNUI1 Q0Y3N0ZBMjAeFw0yNjA1MTIxNzMyMzVaFw0yNjA1MTMxOTM0MzVaMDMxMTAvBgNV BAMTKDE1NzUwRTRDMjdGNUEwMDBEMDc3NTU3MjUyNDU0Njg4MUNBQkE0NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNk2weev37tM3bLBZHveAGlO4C 5pND+w5UtwGvSF8Q40MKD4YMhFAsLzCd2+Ei9IJCzl0FtN9x0NloX2NJ3oieq63x BFlSgP2Dk2uQjPIY+dForCk+LIxXXP0SF33yUw6LWCDLSceNSPR93catK1pd/uqv BRSzBNfOu5oaHmQ3KiRCC+uXaEZCiqi2yH+XS8Bje1s721KmcI7uuecXkfpcnHId GhFffw0ty1yfAe4179mFZh6ot2YUe1HjYuJ+9yQAwoquaD1CpDC+Gen851M6XqEI rjYrVKfJZH5KfxayrSsWCPHPx+pa1qMJSg8NpqihvogpvbCtgB13uib2gVuTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFXUOTCf1oADQd1VyUkVGiByrpEswHwYDVR0j BBgwFoAUImLSt0lS8BdlA3cLnAwAW1z3f6IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMxMzI4Y2ItZGQ0OC00M2JiLWIzMWYtMDdlYjgwMzBjOGY0LzAvMjI2MkQyQjc0 OTUyRjAxNzY1MDM3NzBCOUMwQzAwNUI1Q0Y3N0ZBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjYyRDJCNzQ5NTJGMDE3NjUwMzc3MEI5QzBDMDA1QjVDRjc3 RkEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzMxMzI4Y2ItZGQ0OC00M2JiLWIz MWYtMDdlYjgwMzBjOGY0LzAvMjI2MkQyQjc0OTUyRjAxNzY1MDM3NzBCOUMwQzAw NUI1Q0Y3N0ZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaT3eiaApuIerpvwdNNX8T1sWlMvl9wUSRA wal8MqNQL4EVtCk3LX/RTnC2hVJTj2J5M+ph9fTQRkyJ9josLAat3+C27p6sRKPg icUPBkJKfBRllOzS0CqgvYBnAs7wRVW6cFuuw9lBbi5oVBlqmDnMFgmHLRavVy7S v80S4K+3kc5/Zeb5Du2Usgz4lBkasSeKQNm0ZUcOtR5jKLlxyzFnP6CtoJYXCneQ s09Ik38AdYjOK1kLcEj8947fdIgpYWiWZG/d6cX3Rm8uq7C/ebbxA9TkP9YMWIq+ EaLhIfPvW8q7WGeNcpRVp8vdVUxhhd+kysL1ZMdCmv9/OJV1ONc= -----END CERTIFICATE-----Generated at Tue May 12 23:20:34 2026 by rpki-client