$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft File: 5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft (raw, json) Hash identifier: l8yZWH1qmVQAmIsTGjkwM37ODhswNZODy6eujFiX7Jo= Subject key identifier: 13:3E:BF:24:91:67:CD:97:E7:6D:B3:B0:C0:D5:33:A7:CD:18:D6:09 Authority key identifier: 5A:A9:4F:74:20:AA:22:63:29:E6:9A:E8:CD:2E:C0:CE:60:D8:77:6A Certificate issuer: /CN=5AA94F7420AA226329E69AE8CD2EC0CE60D8776A Certificate serial: 572DB450242D1C82E47BE1E66FF2E39FD6465372 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft Manifest number: 0E Signing time: Tue 12 May 2026 13:48:46 +0000 Manifest this update: Tue 12 May 2026 13:43:46 +0000 Manifest next update: Wed 13 May 2026 15:43:46 +0000 Files and hashes: 1: 5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl (hash: 2Sx7Qze+mIVxDWRCIEPZRyogy+d/i/JHT5e78LBrq84=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:2d:b4:50:24:2d:1c:82:e4:7b:e1:e6:6f:f2:e3:9f:d6:46:53:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AA94F7420AA226329E69AE8CD2EC0CE60D8776A Validity Not Before: May 12 13:43:46 2026 GMT Not After : May 13 15:43:46 2026 GMT Subject: CN=133EBF249167CD97E76DB3B0C0D533A7CD18D609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c2:78:fe:57:ce:c3:b0:60:42:ae:2e:1a:16: ab:48:b6:f0:92:8a:1f:7e:fd:35:63:58:92:98:cc: c0:de:38:67:a9:85:86:60:b7:0c:46:d8:19:c3:be: 78:07:c6:98:b5:86:b1:b9:95:03:20:89:bf:24:b3: bc:c0:3a:cc:bd:92:78:ab:ce:b4:bb:02:28:96:3e: ad:db:4a:97:4e:69:ff:13:77:af:cd:22:1b:2f:cc: c3:9f:a6:20:cc:f6:9b:f3:91:9c:ad:e4:8c:2c:58: 4a:03:4f:93:21:f9:e8:5e:76:92:b2:74:87:7c:51: 96:74:61:24:d7:88:c4:b9:05:5d:38:a0:d6:7a:dc: ad:7d:9a:0d:9d:c2:6e:ac:fa:00:44:e7:da:c2:eb: da:6a:97:43:6e:fc:23:a7:36:cb:84:a1:bb:8d:3c: 8c:b3:ad:7e:e6:53:1a:49:66:23:1d:fc:b5:dd:f2: 6e:05:c7:e2:d9:0a:2c:85:f8:c2:2f:a8:c1:84:66: 22:8d:96:5c:0b:8f:3f:ef:ee:70:3a:24:8f:16:52: 23:0f:ea:df:79:9b:82:d0:ea:ad:0e:1d:eb:05:0c: 62:58:db:f6:6a:fe:ed:f8:04:1c:05:da:3c:ea:b9: ea:04:00:8b:3c:52:75:b7:cb:72:13:b5:69:22:bf: 0c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3E:BF:24:91:67:CD:97:E7:6D:B3:B0:C0:D5:33:A7:CD:18:D6:09 X509v3 Authority Key Identifier: keyid:5A:A9:4F:74:20:AA:22:63:29:E6:9A:E8:CD:2E:C0:CE:60:D8:77:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:38:f0:ba:25:11:80:1c:41:c2:fc:3e:f8:16:48:a5:33:7a: 4f:97:fa:e4:ba:71:88:68:6c:9b:f1:0f:2d:23:b7:71:7b:e9: 91:9c:05:3b:3a:89:3a:da:03:88:d0:6f:fa:43:e5:f3:a8:12: 9f:b1:31:4b:22:4e:a0:68:9c:18:83:d9:3b:8a:5b:af:66:ef: 04:67:ed:9a:e9:a4:4f:9c:54:6c:52:ef:cc:3e:cb:81:5a:23: 3c:8d:4b:35:9e:b3:02:01:26:61:bd:2e:ca:35:87:f2:ea:44: 7b:32:97:ab:36:75:91:cb:4d:f5:fe:eb:23:ce:e3:ce:4f:1e: 09:6f:23:79:7f:7d:68:5a:4c:92:4f:0b:38:bc:66:35:93:1d: 1c:1f:f1:e0:90:54:77:87:e3:23:ef:fa:b3:a8:cc:6c:79:e4: e9:ae:43:ac:3b:23:30:62:54:78:43:a4:c0:01:bb:72:43:e3: 8a:91:b9:cb:8b:48:67:07:55:c4:f9:71:bc:60:e9:42:8b:57: 5b:26:aa:a5:b6:b9:1c:27:d4:d3:24:9b:b5:5c:eb:7a:76:62: 08:08:bf:5d:45:cf:b1:61:e4:ca:ee:0a:10:14:c0:d1:77:29: e3:03:fa:d5:a4:c9:12:d3:71:99:6a:a1:ec:34:b9:bb:6a:94: 32:39:c6:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVy20UCQtHILke+Hmb/Ljn9ZGU3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFBOTRGNzQyMEFBMjI2MzI5RTY5QUU4Q0QyRUMwQ0U2 MEQ4Nzc2QTAeFw0yNjA1MTIxMzQzNDZaFw0yNjA1MTMxNTQzNDZaMDMxMTAvBgNV BAMTKDEzM0VCRjI0OTE2N0NEOTdFNzZEQjNCMEMwRDUzM0E3Q0QxOEQ2MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgwnj+V87DsGBCri4aFqtItvCS ih9+/TVjWJKYzMDeOGephYZgtwxG2BnDvngHxpi1hrG5lQMgib8ks7zAOsy9knir zrS7AiiWPq3bSpdOaf8Td6/NIhsvzMOfpiDM9pvzkZyt5IwsWEoDT5Mh+ehedpKy dId8UZZ0YSTXiMS5BV04oNZ63K19mg2dwm6s+gBE59rC69pql0Nu/COnNsuEobuN PIyzrX7mUxpJZiMd/LXd8m4Fx+LZCiyF+MIvqMGEZiKNllwLjz/v7nA6JI8WUiMP 6t95m4LQ6q0OHesFDGJY2/Zq/u34BBwF2jzqueoEAIs8UnW3y3ITtWkivwyDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEz6/JJFnzZfnbbOwwNUzp80Y1gkwHwYDVR0j BBgwFoAUWqlPdCCqImMp5prozS7AzmDYd2owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ1MDA4YTAtMGFjMy00OThlLThjYmYtZjMxMTJiOTFiZGY0LzAvNUFBOTRGNzQy MEFBMjI2MzI5RTY5QUU4Q0QyRUMwQ0U2MEQ4Nzc2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUE5NEY3NDIwQUEyMjYzMjlFNjlBRThDRDJFQzBDRTYwRDg3 NzZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ1MDA4YTAtMGFjMy00OThlLThj YmYtZjMxMTJiOTFiZGY0LzAvNUFBOTRGNzQyMEFBMjI2MzI5RTY5QUU4Q0QyRUMw Q0U2MEQ4Nzc2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHc48LolEYAcQcL8PvgWSKUzek+X+uS6cYho bJvxDy0jt3F76ZGcBTs6iTraA4jQb/pD5fOoEp+xMUsiTqBonBiD2TuKW69m7wRn 7ZrppE+cVGxS78w+y4FaIzyNSzWeswIBJmG9Lso1h/LqRHsyl6s2dZHLTfX+6yPO 485PHglvI3l/fWhaTJJPCzi8ZjWTHRwf8eCQVHeH4yPv+rOozGx55OmuQ6w7IzBi VHhDpMABu3JD44qRucuLSGcHVcT5cbxg6UKLV1smqqW2uRwn1NMkm7Vc63p2YggI v11Fz7Fh5MruChAUwNF3KeMD+tWkyRLTcZlqoew0ubtqlDI5xu4= -----END CERTIFICATE-----Generated at Wed May 13 03:53:15 2026 by rpki-client