$ rpki-client -vvf rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft File: A5251C27E1AF09AE2F28618250807EA4D573694B.mft (raw, json) Hash identifier: UOWgXqhGzZVJmhzd4/c+Uo1vdrtgIbndkIGmz36oSWQ= Subject key identifier: CC:51:05:16:F3:60:DB:79:75:65:AC:15:7D:93:F9:81:95:23:C2:6B Authority key identifier: A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B Certificate issuer: /CN=A5251C27E1AF09AE2F28618250807EA4D573694B Certificate serial: 633EDB2E71C8020F43086D56B45BD2CD9584D868 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:46:08 +0000 Manifest this update: Tue 12 May 2026 19:41:08 +0000 Manifest next update: Wed 13 May 2026 21:36:08 +0000 Files and hashes: 1: A5251C27E1AF09AE2F28618250807EA4D573694B.crl (hash: qVp5o2imAA43iQMagkhMPKc65LJ8k5hrWY5z1baFk+A=) 2: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: 8PPdaCX6mIjApYArjunSo3wNOsnTma7JcAZ0c6t+SzU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:3e:db:2e:71:c8:02:0f:43:08:6d:56:b4:5b:d2:cd:95:84:d8:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5251C27E1AF09AE2F28618250807EA4D573694B Validity Not Before: May 12 19:41:08 2026 GMT Not After : May 13 21:36:08 2026 GMT Subject: CN=CC510516F360DB797565AC157D93F9819523C26B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6c:b1:0f:c9:aa:f7:03:2c:a6:09:79:ee:29: 2e:f0:f3:9b:17:a0:30:d1:a4:ec:7d:81:92:08:17: 1b:57:ed:55:75:25:f4:18:d9:57:d2:84:42:68:0c: 26:46:48:d5:ba:4f:47:7c:1e:f5:c6:52:a1:5e:c0: 5e:a0:4c:39:ed:4a:ad:31:87:f3:3a:08:38:62:60: 95:7d:b1:cb:78:ce:13:e3:9a:e5:75:fb:89:47:1e: 86:d5:f0:9c:1a:1d:a9:a1:31:39:84:44:7f:2f:72: e7:a5:44:4d:2c:0c:35:36:af:8e:9a:9e:22:e5:18: 6f:56:3a:0d:34:ca:1d:1b:b7:57:fb:d9:5e:04:9b: 3c:fd:79:fb:80:a6:1a:d1:27:0c:3e:29:0b:c5:1b: 8f:6b:d1:33:1b:4d:25:c1:53:cb:f3:cb:32:8f:e0: cd:96:68:3f:03:de:84:98:a0:19:37:a9:91:45:fd: 14:34:5b:79:aa:79:3a:e8:aa:cc:a5:a6:5b:71:75: ec:d8:32:d5:c0:10:53:ec:86:e2:d4:d4:ac:16:ba: 30:bf:f6:96:f1:2d:85:95:71:6f:23:85:cc:f2:f9: 55:39:92:1b:b8:35:1a:ef:60:47:17:1a:85:53:91: 48:91:b4:19:dd:90:df:e7:fe:d6:04:33:aa:48:4c: 70:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:51:05:16:F3:60:DB:79:75:65:AC:15:7D:93:F9:81:95:23:C2:6B X509v3 Authority Key Identifier: keyid:A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:2d:5d:b1:5c:cc:78:a7:df:9c:f3:a7:03:18:5c:c7:e4:23: 61:02:84:e9:2d:95:09:51:4b:7f:80:2f:f8:a2:d4:35:31:79: 48:28:d3:a1:47:55:20:97:f7:0e:e4:82:25:cf:aa:1b:d2:8a: 1b:c7:d1:76:70:cf:13:4c:2b:b6:96:26:5d:22:3d:3a:e8:e4: eb:d0:55:ce:03:6b:71:c4:21:93:81:c1:e2:04:cb:7c:1b:4f: c0:1c:27:84:df:d8:b8:04:c3:83:42:b9:a4:41:8e:f6:7f:75: 65:c5:74:03:2a:2c:0d:3e:39:7b:02:1a:a0:39:b5:c0:67:ae: a1:b7:65:3f:95:17:bc:c6:a9:d1:b0:98:20:19:24:3f:6e:9a: 9f:36:90:7b:3c:23:f4:49:8f:18:66:ed:60:bc:55:2e:2b:a8: d6:f3:b5:bc:b4:74:cf:5c:b7:b9:96:1e:1a:99:9e:7c:f3:80: 1f:97:08:82:94:f6:37:9b:7d:29:7a:b1:85:39:d6:90:65:35: 87:aa:23:8e:82:17:fe:02:20:c4:bb:8e:3c:51:1c:44:21:85: b7:40:93:6c:93:dd:87:53:39:21:d0:3d:57:96:1e:4a:30:20: 0a:3c:b0:80:fc:34:86:9e:31:93:ce:93:ca:72:5b:bb:47:93: a4:70:9d:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYz7bLnHIAg9DCG1WtFvSzZWE2GgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUyNTFDMjdFMUFGMDlBRTJGMjg2MTgyNTA4MDdFQTRE NTczNjk0QjAeFw0yNjA1MTIxOTQxMDhaFw0yNjA1MTMyMTM2MDhaMDMxMTAvBgNV BAMTKENDNTEwNTE2RjM2MERCNzk3NTY1QUMxNTdEOTNGOTgxOTUyM0MyNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqbLEPyar3AyymCXnuKS7w85sX oDDRpOx9gZIIFxtX7VV1JfQY2VfShEJoDCZGSNW6T0d8HvXGUqFewF6gTDntSq0x h/M6CDhiYJV9sct4zhPjmuV1+4lHHobV8JwaHamhMTmERH8vcuelRE0sDDU2r46a niLlGG9WOg00yh0bt1f72V4Emzz9efuAphrRJww+KQvFG49r0TMbTSXBU8vzyzKP 4M2WaD8D3oSYoBk3qZFF/RQ0W3mqeTroqsylpltxdezYMtXAEFPshuLU1KwWujC/ 9pbxLYWVcW8jhczy+VU5khu4NRrvYEcXGoVTkUiRtBndkN/n/tYEM6pITHD9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzFEFFvNg23l1ZawVfZP5gZUjwmswHwYDVR0j BBgwFoAUpSUcJ+GvCa4vKGGCUIB+pNVzaUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ3ZjZjZjYtZGQyYi00ODIzLWIyNjQtZTJiZjRmMzBhYmZlLzAvQTUyNTFDMjdF MUFGMDlBRTJGMjg2MTgyNTA4MDdFQTRENTczNjk0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNTI1MUMyN0UxQUYwOUFFMkYyODYxODI1MDgwN0VBNEQ1NzM2 OTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvQTUyNTFDMjdFMUFGMDlBRTJGMjg2MTgyNTA4MDdF QTRENTczNjk0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJstXbFczHin35zzpwMYXMfkI2EChOktlQlR S3+AL/ii1DUxeUgo06FHVSCX9w7kgiXPqhvSihvH0XZwzxNMK7aWJl0iPTro5OvQ Vc4Da3HEIZOBweIEy3wbT8AcJ4Tf2LgEw4NCuaRBjvZ/dWXFdAMqLA0+OXsCGqA5 tcBnrqG3ZT+VF7zGqdGwmCAZJD9ump82kHs8I/RJjxhm7WC8VS4rqNbztby0dM9c t7mWHhqZnnzzgB+XCIKU9jebfSl6sYU51pBlNYeqI46CF/4CIMS7jjxRHEQhhbdA k2yT3YdTOSHQPVeWHkowIAo8sID8NIaeMZPOk8pyW7tHk6Rwnc4= -----END CERTIFICATE-----Generated at Tue May 12 22:13:28 2026 by rpki-client