$ rpki-client -vvf rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft File: 1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft (raw, json) Hash identifier: dDh7zPgW5eATE4WCYWp0tgsfWAGFUtHndFy9ojRKWVQ= Subject key identifier: 54:69:8F:0D:4A:4B:27:63:F6:61:21:28:E6:3A:F0:A4:4C:83:05:A2 Authority key identifier: 1A:84:6D:C7:EE:A8:A9:0C:9D:5E:86:7F:6C:C5:2E:B5:A5:F5:1E:CA Certificate issuer: /CN=1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA Certificate serial: 5C7D12F454D36F99B17E5F15F37A9AE85C558729 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft Manifest number: 0E Signing time: Tue 12 May 2026 14:24:11 +0000 Manifest this update: Tue 12 May 2026 14:19:11 +0000 Manifest next update: Wed 13 May 2026 17:28:11 +0000 Files and hashes: 1: 1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl (hash: gKul2ys+0rcXIU+pUTqDLReyQ7waOtcUAowmt9ah/Qw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:7d:12:f4:54:d3:6f:99:b1:7e:5f:15:f3:7a:9a:e8:5c:55:87:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA Validity Not Before: May 12 14:19:11 2026 GMT Not After : May 13 17:28:11 2026 GMT Subject: CN=54698F0D4A4B2763F6612128E63AF0A44C8305A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ce:42:8a:79:3e:59:08:a5:83:2b:6f:f6:c9: 9a:9b:08:a0:f6:7a:8d:a3:0a:ef:ac:d5:2c:da:bd: ee:f9:a1:ba:f2:8e:97:ed:ec:a9:71:e3:8e:43:01: f9:a3:c4:d4:82:f8:32:c0:d8:55:f0:d7:96:87:51: bb:d4:a3:85:9c:ea:22:b4:f1:7a:eb:1b:37:23:be: 5f:5f:8b:2d:5a:53:39:1c:3d:f4:1b:7d:ce:58:09: 54:b0:69:1f:2a:63:27:f6:a9:24:e7:22:9c:07:d1: 9d:c1:da:3a:31:74:f6:9f:4f:5d:76:cd:16:8d:7a: 17:b9:2c:44:4f:bc:e1:b3:6b:c5:70:dc:ac:84:0e: f2:62:68:43:de:2b:9a:84:13:48:7e:a6:b2:1e:17: 7c:3b:48:71:0b:6f:82:3c:38:01:2e:c1:67:d3:a1: d8:c5:44:ba:22:93:c4:7f:aa:e8:0a:c4:67:46:c2: 72:96:c5:79:98:70:de:97:7c:e9:48:dc:49:38:98: c9:6a:a1:d3:12:0e:d1:92:9b:ae:56:7a:5e:05:3c: da:f1:13:e5:db:ca:37:44:83:1a:1f:28:31:d2:68: 8f:36:e3:ff:3c:95:20:c1:2f:19:cb:5d:bb:a8:62: 8a:e9:eb:bc:5f:51:a5:e8:30:32:c8:c2:e4:01:c6: b0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:69:8F:0D:4A:4B:27:63:F6:61:21:28:E6:3A:F0:A4:4C:83:05:A2 X509v3 Authority Key Identifier: keyid:1A:84:6D:C7:EE:A8:A9:0C:9D:5E:86:7F:6C:C5:2E:B5:A5:F5:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:9a:dd:04:fd:a8:ec:2f:24:30:f7:d0:00:10:71:90:d3:65: f5:a6:1c:9f:e4:98:43:37:dd:88:cf:a6:c0:3e:8d:07:53:3b: 51:f1:21:20:cf:23:70:67:db:08:03:84:25:13:82:67:a1:43: f8:30:d1:bd:4e:10:a9:33:8f:d5:89:fa:d4:2b:01:11:78:e4: 8d:1f:87:53:c3:3f:c8:cd:07:fa:d6:3f:0f:81:ce:86:93:a2: a1:d3:f9:33:31:49:75:70:46:2d:10:af:e7:22:f4:59:ed:ee: 60:22:55:84:08:bc:31:81:32:07:d2:5e:65:8f:9c:cc:f8:fc: 7c:4b:94:da:c9:f5:3c:62:c2:59:08:b7:d8:1d:56:f9:11:22: 40:82:30:50:50:f0:ea:b0:5d:49:f5:ca:38:ab:f1:3c:7c:e6: cc:b1:35:ad:e0:26:99:15:56:70:95:27:b0:15:f1:d6:0f:54: 05:c5:66:c9:39:c7:2a:1f:c8:1a:60:1b:c7:7d:ca:02:c3:c5: 75:b0:c5:3f:81:c5:66:42:98:cf:ee:7e:ef:7c:f7:6d:aa:46: a5:1e:66:e9:c1:2d:7b:53:92:43:5a:9c:39:5d:7a:89:3e:f6: d7:21:ff:0a:42:09:d1:4a:4e:a3:94:22:2e:61:b9:fb:10:0b: 0d:0d:2a:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXH0S9FTTb5mxfl8V83qa6FxVhykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4NDZEQzdFRUE4QTkwQzlENUU4NjdGNkNDNTJFQjVB NUY1MUVDQTAeFw0yNjA1MTIxNDE5MTFaFw0yNjA1MTMxNzI4MTFaMDMxMTAvBgNV BAMTKDU0Njk4RjBENEE0QjI3NjNGNjYxMjEyOEU2M0FGMEE0NEM4MzA1QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1zkKKeT5ZCKWDK2/2yZqbCKD2 eo2jCu+s1Szave75obryjpft7Klx445DAfmjxNSC+DLA2FXw15aHUbvUo4Wc6iK0 8XrrGzcjvl9fiy1aUzkcPfQbfc5YCVSwaR8qYyf2qSTnIpwH0Z3B2joxdPafT112 zRaNehe5LERPvOGza8Vw3KyEDvJiaEPeK5qEE0h+prIeF3w7SHELb4I8OAEuwWfT odjFRLoik8R/qugKxGdGwnKWxXmYcN6XfOlI3Ek4mMlqodMSDtGSm65Wel4FPNrx E+XbyjdEgxofKDHSaI824/88lSDBLxnLXbuoYorp67xfUaXoMDLIwuQBxrAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVGmPDUpLJ2P2YSEo5jrwpEyDBaIwHwYDVR0j BBgwFoAUGoRtx+6oqQydXoZ/bMUutaX1HsowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk2NWRkMzktNDhkMC00NTc4LThmZTUtNjZkOTUzMzg0ZTUwLzAvMUE4NDZEQzdF RUE4QTkwQzlENUU4NjdGNkNDNTJFQjVBNUY1MUVDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTg0NkRDN0VFQThBOTBDOUQ1RTg2N0Y2Q0M1MkVCNUE1RjUx RUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvMUE4NDZEQzdFRUE4QTkwQzlENUU4NjdGNkNDNTJF QjVBNUY1MUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqa3QT9qOwvJDD30AAQcZDTZfWmHJ/kmEM3 3YjPpsA+jQdTO1HxISDPI3Bn2wgDhCUTgmehQ/gw0b1OEKkzj9WJ+tQrARF45I0f h1PDP8jNB/rWPw+BzoaToqHT+TMxSXVwRi0Qr+ci9Fnt7mAiVYQIvDGBMgfSXmWP nMz4/HxLlNrJ9TxiwlkIt9gdVvkRIkCCMFBQ8OqwXUn1yjir8Tx85syxNa3gJpkV VnCVJ7AV8dYPVAXFZsk5xyofyBpgG8d9ygLDxXWwxT+BxWZCmM/ufu98922qRqUe ZunBLXtTkkNanDldeok+9tch/wpCCdFKTqOUIi5hufsQCw0NKsY= -----END CERTIFICATE-----Generated at Wed May 13 03:16:33 2026 by rpki-client