$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft File: D76923298A332CDB03F66375CE7D78C12CF624A8.mft (raw, json) Hash identifier: O+pSE8c4zyXYA/9ucWdgmP8YBnybuP9eSYPz+VqWie0= Subject key identifier: 8D:CD:B9:87:A3:15:6E:D0:34:A2:51:4B:3D:C0:8A:83:51:4A:D5:6A Authority key identifier: D7:69:23:29:8A:33:2C:DB:03:F6:63:75:CE:7D:78:C1:2C:F6:24:A8 Certificate issuer: /CN=D76923298A332CDB03F66375CE7D78C12CF624A8 Certificate serial: 68B01A045056B0BA70CE0C720955E8F2F88E4825 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D76923298A332CDB03F66375CE7D78C12CF624A8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft Manifest number: 0D Signing time: Tue 12 May 2026 14:59:38 +0000 Manifest this update: Tue 12 May 2026 14:54:38 +0000 Manifest next update: Wed 13 May 2026 18:18:38 +0000 Files and hashes: 1: D76923298A332CDB03F66375CE7D78C12CF624A8.crl (hash: AtAl+w2vmleQy9YUyeiSr4jMZH7M2LTjy7VyCDERbIs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.crl rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D76923298A332CDB03F66375CE7D78C12CF624A8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b0:1a:04:50:56:b0:ba:70:ce:0c:72:09:55:e8:f2:f8:8e:48:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76923298A332CDB03F66375CE7D78C12CF624A8 Validity Not Before: May 12 14:54:38 2026 GMT Not After : May 13 18:18:38 2026 GMT Subject: CN=8DCDB987A3156ED034A2514B3DC08A83514AD56A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:3f:35:86:41:df:3b:4a:63:f7:39:48:3f: 7f:2c:93:21:38:a8:65:1c:1f:c9:41:b1:00:15:49: 17:ab:69:2b:32:f7:ab:6a:02:c7:80:95:cb:b3:e8: 06:6f:84:c2:ed:f1:15:5b:6c:24:11:98:6e:e0:09: 75:24:8b:e3:ad:3f:5c:8f:cc:c5:6c:5e:45:bd:28: 79:0f:2c:9b:3d:ca:c6:b1:d8:f3:46:09:b9:56:00: c5:a8:36:51:ff:5d:0e:52:39:b0:ea:33:eb:5b:7e: 87:1c:86:06:dd:14:3b:76:f1:27:73:2f:8b:2d:6e: be:58:5f:69:2e:94:e7:f8:e6:1e:a9:f6:0c:c7:e7: 60:96:00:d7:76:14:48:66:34:89:0a:8b:79:82:9a: 93:87:81:37:93:22:5a:93:99:f3:c2:f9:af:34:a2: fb:4f:7a:32:ba:01:6e:f0:2d:1e:95:b5:2b:27:70: 15:8f:6b:01:51:d2:b1:4a:6b:1b:32:da:32:d2:af: cc:7b:0f:16:6e:61:58:77:2a:67:51:7a:92:1e:16: 9e:d7:c2:19:67:07:79:25:9f:54:aa:d4:00:3b:9c: bc:6c:f2:10:ba:77:c3:e2:42:23:27:39:17:84:f3: 0f:a7:dd:5b:45:40:57:a0:de:f1:24:a6:cd:78:f1: e5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CD:B9:87:A3:15:6E:D0:34:A2:51:4B:3D:C0:8A:83:51:4A:D5:6A X509v3 Authority Key Identifier: keyid:D7:69:23:29:8A:33:2C:DB:03:F6:63:75:CE:7D:78:C1:2C:F6:24:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D76923298A332CDB03F66375CE7D78C12CF624A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:81:78:c2:87:12:e8:d1:d8:ce:b7:1d:50:b8:67:8f:3e:cc: 76:99:ae:31:d5:d0:7c:82:c6:f1:c5:e6:b8:2f:4d:57:b0:f2: 47:62:f1:4a:2d:0e:6c:f9:63:cd:84:ec:fc:bf:21:8d:d4:e0: 01:b2:09:cf:d4:0c:cb:a5:6c:e9:ca:4d:c0:66:0a:c2:d2:70: c7:d8:2b:16:0e:0f:fb:8c:eb:d5:5c:d7:94:f1:e1:92:3c:ab: 01:d2:dd:b6:21:18:da:02:ec:6a:0b:08:55:d6:ef:7e:63:3a: 90:35:7c:ce:9d:68:56:f1:1e:08:71:8e:e6:28:11:4a:8a:45: 60:ea:78:6d:11:db:5a:09:39:2e:44:db:b8:68:66:7a:06:84: 66:85:c5:85:24:e1:50:4f:99:bb:63:0c:db:0c:e9:b3:11:bc: 3e:a4:d6:fa:d3:9e:b9:b4:4a:ee:fd:cb:54:eb:80:f9:c0:b8: af:7d:fd:a6:6c:9d:0b:f7:04:2f:09:06:f9:57:67:57:29:9d: 3e:40:b8:81:a1:64:77:4b:10:e5:09:af:1a:25:01:17:ec:10: 92:57:53:64:92:f8:f5:b5:c4:ef:8b:eb:c4:8d:02:55:3c:58: 13:5b:68:dd:98:e1:55:a7:47:a0:e9:a8:f8:22:00:dd:37:24: f7:a7:4d:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaLAaBFBWsLpwzgxyCVXo8viOSCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2OTIzMjk4QTMzMkNEQjAzRjY2Mzc1Q0U3RDc4QzEy Q0Y2MjRBODAeFw0yNjA1MTIxNDU0MzhaFw0yNjA1MTMxODE4MzhaMDMxMTAvBgNV BAMTKDhEQ0RCOTg3QTMxNTZFRDAzNEEyNTE0QjNEQzA4QTgzNTE0QUQ1NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCzz81hkHfO0pj9zlIP38skyE4 qGUcH8lBsQAVSReraSsy96tqAseAlcuz6AZvhMLt8RVbbCQRmG7gCXUki+OtP1yP zMVsXkW9KHkPLJs9ysax2PNGCblWAMWoNlH/XQ5SObDqM+tbfocchgbdFDt28Sdz L4stbr5YX2kulOf45h6p9gzH52CWANd2FEhmNIkKi3mCmpOHgTeTIlqTmfPC+a80 ovtPejK6AW7wLR6VtSsncBWPawFR0rFKaxsy2jLSr8x7DxZuYVh3KmdRepIeFp7X whlnB3kln1Sq1AA7nLxs8hC6d8PiQiMnOReE8w+n3VtFQFeg3vEkps148eXDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjc25h6MVbtA0olFLPcCKg1FK1WowHwYDVR0j BBgwFoAU12kjKYozLNsD9mN1zn14wSz2JKgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmMzBlMjctYjk1ZS00ZDc1LTk2OGQtNTM4ZmI3OTE4ODI5LzAvRDc2OTIzMjk4 QTMzMkNEQjAzRjY2Mzc1Q0U3RDc4QzEyQ0Y2MjRBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzY5MjMyOThBMzMyQ0RCMDNGNjYzNzVDRTdENzhDMTJDRjYy NEE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvRDc2OTIzMjk4QTMzMkNEQjAzRjY2Mzc1Q0U3RDc4 QzEyQ0Y2MjRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2BeMKHEujR2M63HVC4Z48+zHaZrjHV0HyC xvHF5rgvTVew8kdi8UotDmz5Y82E7Py/IY3U4AGyCc/UDMulbOnKTcBmCsLScMfY KxYOD/uM69Vc15Tx4ZI8qwHS3bYhGNoC7GoLCFXW735jOpA1fM6daFbxHghxjuYo EUqKRWDqeG0R21oJOS5E27hoZnoGhGaFxYUk4VBPmbtjDNsM6bMRvD6k1vrTnrm0 Su79y1TrgPnAuK99/aZsnQv3BC8JBvlXZ1cpnT5AuIGhZHdLEOUJrxolARfsEJJX U2SS+PW1xO+L68SNAlU8WBNbaN2Y4VWnR6DpqPgiAN03JPenTS4= -----END CERTIFICATE-----Generated at Tue May 12 22:19:44 2026 by rpki-client