$ rpki-client -vvf rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft File: 13E8109758E3F09B256C9654C5812DA9993E9D23.mft (raw, json) Hash identifier: KBR4fI9H3WkEiT4DQhXQu6KIN++TqGHhZpVLbOlpczE= Subject key identifier: D1:F8:F8:47:E0:A3:FF:46:F9:FC:F7:E2:C1:C1:EC:4D:10:65:30:83 Authority key identifier: 13:E8:10:97:58:E3:F0:9B:25:6C:96:54:C5:81:2D:A9:99:3E:9D:23 Certificate issuer: /CN=13E8109758E3F09B256C9654C5812DA9993E9D23 Certificate serial: 2F2AA613D8C7F4EAFF4797FAA02FCCC08A7D1222 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:18:29 +0000 Manifest this update: Tue 12 May 2026 18:13:29 +0000 Manifest next update: Wed 13 May 2026 21:47:29 +0000 Files and hashes: 1: 13E8109758E3F09B256C9654C5812DA9993E9D23.crl (hash: WKik16DJTemWFXcaOQt7ryhTlxBJCxqTy8bu9EWZNY4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.crl rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:2a:a6:13:d8:c7:f4:ea:ff:47:97:fa:a0:2f:cc:c0:8a:7d:12:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E8109758E3F09B256C9654C5812DA9993E9D23 Validity Not Before: May 12 18:13:29 2026 GMT Not After : May 13 21:47:29 2026 GMT Subject: CN=D1F8F847E0A3FF46F9FCF7E2C1C1EC4D10653083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4c:05:67:c1:9a:04:cd:b0:c8:7d:f0:54:3d: 54:1c:c5:ea:97:e5:dd:f2:6c:ac:92:00:e7:7d:91: 3c:fa:26:7b:4d:41:c2:b0:c7:67:c7:ee:8a:6c:68: 56:19:61:e6:be:0a:25:2c:12:0e:d0:41:db:83:ab: 40:2d:f2:4d:b1:49:94:dc:90:fc:85:e3:5b:df:20: c5:e2:9c:60:4f:85:3d:8c:3f:00:b9:96:6f:e5:c8: 93:09:6f:51:e9:99:72:7a:ec:9c:00:0b:53:98:7f: 8f:d3:7b:b6:57:b6:44:47:3e:d3:a0:da:97:e8:04: 6a:11:09:b4:60:8c:b3:ea:fc:27:33:23:26:97:17: a2:a2:c5:a5:05:5b:b5:8c:c3:7e:f3:98:98:6a:a8: 08:4a:f9:3b:f0:51:2c:ea:b7:10:4b:20:8e:00:d0: 0d:75:1c:c1:d3:28:d2:77:c7:83:10:56:45:46:19: 7f:19:66:60:e1:da:a4:d0:e2:93:53:9b:77:97:84: ad:8f:b4:6a:94:c4:59:7a:02:82:cf:53:f1:07:e4: c3:d5:59:33:57:c1:54:68:82:92:aa:8c:d5:b5:00: 88:13:a2:0e:23:09:9f:e9:80:48:3f:84:46:6d:8f: 94:8d:6b:c1:84:a3:9a:36:cc:4a:f2:18:54:86:31: 14:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F8:F8:47:E0:A3:FF:46:F9:FC:F7:E2:C1:C1:EC:4D:10:65:30:83 X509v3 Authority Key Identifier: keyid:13:E8:10:97:58:E3:F0:9B:25:6C:96:54:C5:81:2D:A9:99:3E:9D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b3:09:e3:79:64:b9:6e:09:41:c0:5c:ce:a3:9d:f8:b0:e6: 4e:9f:a3:64:17:16:8b:bb:d5:66:30:fd:40:0d:20:0f:26:a4: 66:63:8b:8a:fa:db:4d:59:c4:6d:bb:95:3b:55:b3:c1:75:85: b8:57:a7:f0:ca:92:53:c7:fb:fb:83:e6:db:57:02:7d:21:c3: 4a:13:f5:ff:2a:4f:69:dd:26:22:56:86:c0:2c:a4:1b:c7:b3: 5f:21:03:4a:4f:8c:a8:5a:11:6c:5c:67:21:79:0e:41:18:1c: 36:8d:76:bb:b9:dc:a9:cb:d4:4c:45:00:81:44:69:05:8a:77: 78:3b:93:d2:dd:fd:24:61:02:85:11:ce:12:7e:c1:37:7e:a9: ef:42:2d:48:63:a4:d5:53:25:d2:ae:3b:37:8a:6c:f0:eb:f8: 58:98:5b:e6:47:9f:cf:51:2b:a6:fa:ef:da:0a:95:bf:74:ce: 05:28:bd:cc:60:65:5a:23:bd:49:6b:21:bb:75:47:81:38:c6: f7:6f:38:d9:5c:4c:f0:50:50:09:16:02:b8:f5:e9:57:08:b4: e9:93:97:50:19:ff:5f:93:7e:31:d8:9e:50:28:25:eb:24:15: 40:c5:3c:60:95:91:d1:a1:ec:29:4b:86:e4:d7:8d:cf:8d:ff: ae:92:bf:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULyqmE9jH9Or/R5f6oC/MwIp9EiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFODEwOTc1OEUzRjA5QjI1NkM5NjU0QzU4MTJEQTk5 OTNFOUQyMzAeFw0yNjA1MTIxODEzMjlaFw0yNjA1MTMyMTQ3MjlaMDMxMTAvBgNV BAMTKEQxRjhGODQ3RTBBM0ZGNDZGOUZDRjdFMkMxQzFFQzREMTA2NTMwODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdTAVnwZoEzbDIffBUPVQcxeqX 5d3ybKySAOd9kTz6JntNQcKwx2fH7opsaFYZYea+CiUsEg7QQduDq0At8k2xSZTc kPyF41vfIMXinGBPhT2MPwC5lm/lyJMJb1HpmXJ67JwAC1OYf4/Te7ZXtkRHPtOg 2pfoBGoRCbRgjLPq/CczIyaXF6KixaUFW7WMw37zmJhqqAhK+TvwUSzqtxBLII4A 0A11HMHTKNJ3x4MQVkVGGX8ZZmDh2qTQ4pNTm3eXhK2PtGqUxFl6AoLPU/EH5MPV WTNXwVRogpKqjNW1AIgTog4jCZ/pgEg/hEZtj5SNa8GEo5o2zEryGFSGMRRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0fj4R+Cj/0b5/PfiwcHsTRBlMIMwHwYDVR0j BBgwFoAUE+gQl1jj8JslbJZUxYEtqZk+nSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGM0MDk0ZDItZTE4ZC00ODQwLTg0ZmEtYzU3NTdhZjU4MGYxLzEvMTNFODEwOTc1 OEUzRjA5QjI1NkM5NjU0QzU4MTJEQTk5OTNFOUQyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xM0U4MTA5NzU4RTNGMDlCMjU2Qzk2NTRDNTgxMkRBOTk5M0U5 RDIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzEvMTNFODEwOTc1OEUzRjA5QjI1NkM5NjU0QzU4MTJE QTk5OTNFOUQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKzCeN5ZLluCUHAXM6jnfiw5k6fo2QXFou7 1WYw/UANIA8mpGZji4r6201ZxG27lTtVs8F1hbhXp/DKklPH+/uD5ttXAn0hw0oT 9f8qT2ndJiJWhsAspBvHs18hA0pPjKhaEWxcZyF5DkEYHDaNdru53KnL1ExFAIFE aQWKd3g7k9Ld/SRhAoURzhJ+wTd+qe9CLUhjpNVTJdKuOzeKbPDr+FiYW+ZHn89R K6b679oKlb90zgUovcxgZVojvUlrIbt1R4E4xvdvONlcTPBQUAkWArj16VcItOmT l1AZ/1+TfjHYnlAoJeskFUDFPGCVkdGh7ClLhuTXjc+N/66Sv+Y= -----END CERTIFICATE-----Generated at Wed May 13 02:33:40 2026 by rpki-client