$ rpki-client -vvf rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft File: D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft (raw, json) Hash identifier: kSZNh+2EN1XNkZ5gMDxd/K7I3OYNIMGIAl93pUJMHl0= Subject key identifier: 5C:23:4E:13:C9:C5:0D:67:CD:30:AC:73:F6:22:D2:DB:83:59:53:7B Authority key identifier: D5:A9:D1:A5:8E:3E:E4:57:41:AF:FD:59:7F:03:CB:F6:34:91:22:3C Certificate issuer: /CN=D5A9D1A58E3EE45741AFFD597F03CBF63491223C Certificate serial: 2DA6A68F3B52DDF4268401731436217EC37C4160 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft Manifest number: 0E Signing time: Wed 13 May 2026 01:09:59 +0000 Manifest this update: Wed 13 May 2026 01:04:59 +0000 Manifest next update: Thu 14 May 2026 03:41:59 +0000 Files and hashes: 1: D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl (hash: G7c7nm+BoP9+pSAmSICZlZXtlceDxYU94ecvzTHAIGs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a6:a6:8f:3b:52:dd:f4:26:84:01:73:14:36:21:7e:c3:7c:41:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5A9D1A58E3EE45741AFFD597F03CBF63491223C Validity Not Before: May 13 01:04:59 2026 GMT Not After : May 14 03:41:59 2026 GMT Subject: CN=5C234E13C9C50D67CD30AC73F622D2DB8359537B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d2:78:14:21:f3:b2:23:a3:e1:58:ef:78:a3: 13:0d:6e:bc:9c:93:27:bb:ea:cf:b2:02:bf:01:2e: ea:86:d9:30:37:34:a5:14:39:43:b2:13:21:c7:66: 09:a4:d0:d1:59:dd:80:51:44:36:8d:45:71:81:fc: 7a:b9:f3:a5:9c:c5:7d:f7:ad:35:0e:a5:46:7c:0b: b6:63:50:42:a1:73:97:06:56:3f:35:f6:1b:45:cc: 89:b3:dd:9f:14:41:a0:70:ca:d5:7b:d8:4d:54:4a: 20:f2:3d:07:8e:2f:08:31:18:bf:2a:dc:99:fb:82: ba:40:9a:8b:3f:e7:d3:a6:83:01:42:b9:38:2f:c6: 03:52:47:41:3f:0c:0f:3c:26:06:69:29:d9:97:3b: 4b:5a:86:26:8b:8d:17:83:ea:6f:98:d3:39:76:f1: 5f:b6:b1:9a:82:05:af:2a:ff:d9:5f:2a:8c:2b:e2: d6:78:cf:0c:47:82:9b:99:37:b7:5a:80:d0:b7:5d: b5:ef:bf:a9:8b:f8:62:71:e0:d1:ee:96:33:60:e7: df:83:90:3c:48:80:01:bd:ee:b8:14:f8:89:8b:15: 35:74:f0:fe:d3:9d:03:83:9f:1b:3c:21:db:43:62: 42:21:08:e7:9a:87:9f:3c:8f:dc:fd:ee:f5:3b:91: 7f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:23:4E:13:C9:C5:0D:67:CD:30:AC:73:F6:22:D2:DB:83:59:53:7B X509v3 Authority Key Identifier: keyid:D5:A9:D1:A5:8E:3E:E4:57:41:AF:FD:59:7F:03:CB:F6:34:91:22:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:67:6f:be:0f:04:a8:db:df:47:b8:47:a6:b6:b9:b6:62:c6: 67:a7:33:36:8a:e1:44:6d:94:3a:8b:6a:de:65:0c:25:a1:ad: 22:49:c7:5d:20:bb:da:44:1d:ae:97:16:ef:b0:07:57:da:78: 0f:aa:08:10:65:6d:b6:d4:ba:de:cd:3f:89:a8:d9:c4:d9:59: 8b:ba:c9:cd:b9:f3:d0:5b:64:a4:89:60:e4:b4:d5:4d:d9:8a: 8c:fb:2f:37:b6:1a:cf:98:6e:bf:1a:85:2f:b7:19:97:78:81: 25:ed:05:80:91:bd:aa:e2:4f:0e:a2:d6:df:2d:79:df:41:f4: 1d:59:c4:85:90:2e:ec:fa:07:48:0f:cf:70:a0:5d:a2:85:f4: dd:57:7a:9d:7a:35:83:d8:0e:12:cd:03:58:92:e1:8a:88:f2: b7:0b:0e:ed:fd:8e:c8:bd:6c:e5:79:32:d1:2a:e9:e9:5c:89: 39:fa:f0:b2:f2:cc:5e:47:30:e2:96:e9:19:df:77:a0:7f:68: 8a:7d:2e:dd:0c:9f:54:c0:99:49:e3:c6:38:66:a7:1e:5c:3f: e8:a1:04:0e:b4:69:d1:26:d6:f3:56:31:b1:42:b8:03:78:14: 8f:bf:01:3e:fe:0a:98:63:a2:22:89:f3:b1:43:9f:70:00:5f: 02:e1:72:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULaamjztS3fQmhAFzFDYhfsN8QWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVBOUQxQTU4RTNFRTQ1NzQxQUZGRDU5N0YwM0NCRjYz NDkxMjIzQzAeFw0yNjA1MTMwMTA0NTlaFw0yNjA1MTQwMzQxNTlaMDMxMTAvBgNV BAMTKDVDMjM0RTEzQzlDNTBENjdDRDMwQUM3M0Y2MjJEMkRCODM1OTUzN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp0ngUIfOyI6PhWO94oxMNbryc kye76s+yAr8BLuqG2TA3NKUUOUOyEyHHZgmk0NFZ3YBRRDaNRXGB/Hq586WcxX33 rTUOpUZ8C7ZjUEKhc5cGVj819htFzImz3Z8UQaBwytV72E1USiDyPQeOLwgxGL8q 3Jn7grpAmos/59OmgwFCuTgvxgNSR0E/DA88JgZpKdmXO0tahiaLjReD6m+Y0zl2 8V+2sZqCBa8q/9lfKowr4tZ4zwxHgpuZN7dagNC3XbXvv6mL+GJx4NHuljNg59+D kDxIgAG97rgU+ImLFTV08P7TnQODnxs8IdtDYkIhCOeah588j9z97vU7kX+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXCNOE8nFDWfNMKxz9iLS24NZU3swHwYDVR0j BBgwFoAU1anRpY4+5FdBr/1ZfwPL9jSRIjwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIxNjQ2YmUtM2Q2YS00MjU3LWI3N2MtYjMzYzEwZjM1ZDMyLzAvRDVBOUQxQTU4 RTNFRTQ1NzQxQUZGRDU5N0YwM0NCRjYzNDkxMjIzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUE5RDFBNThFM0VFNDU3NDFBRkZENTk3RjAzQ0JGNjM0OTEy MjNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvRDVBOUQxQTU4RTNFRTQ1NzQxQUZGRDU5N0YwM0NC RjYzNDkxMjIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBnb74PBKjb30e4R6a2ubZixmenMzaK4URt lDqLat5lDCWhrSJJx10gu9pEHa6XFu+wB1faeA+qCBBlbbbUut7NP4mo2cTZWYu6 yc2589BbZKSJYOS01U3Zioz7Lze2Gs+Ybr8ahS+3GZd4gSXtBYCRvariTw6i1t8t ed9B9B1ZxIWQLuz6B0gPz3CgXaKF9N1Xep16NYPYDhLNA1iS4YqI8rcLDu39jsi9 bOV5MtEq6elciTn68LLyzF5HMOKW6Rnfd6B/aIp9Lt0Mn1TAmUnjxjhmpx5cP+ih BA60adEm1vNWMbFCuAN4FI+/AT7+CphjoiKJ87FDn3AAXwLhcss= -----END CERTIFICATE-----Generated at Wed May 13 10:20:09 2026 by rpki-client