$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft File: D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft (raw, json) Hash identifier: 8m2QlxEQyBc/kitFo/8XeYljt8+fgzbeleLBeYC23sY= Subject key identifier: E3:89:8E:A1:F1:1A:D6:FF:A0:E3:E1:7B:7A:76:12:70:1B:29:BD:EA Authority key identifier: D4:72:A5:0C:7F:11:26:F1:D9:7E:8E:98:16:4A:7C:5D:00:12:E4:AB Certificate issuer: /CN=D472A50C7F1126F1D97E8E98164A7C5D0012E4AB Certificate serial: 56AF4C5846DB294B725C93E97FCD2D51EB31502D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft Manifest number: 0E Signing time: Wed 13 May 2026 02:41:41 +0000 Manifest this update: Wed 13 May 2026 02:36:41 +0000 Manifest next update: Thu 14 May 2026 05:15:41 +0000 Files and hashes: 1: D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl (hash: ZK1i1vzBYki6XdvHKaRxXsSnHeOf2xlru5JLUTOzQuQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:af:4c:58:46:db:29:4b:72:5c:93:e9:7f:cd:2d:51:eb:31:50:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D472A50C7F1126F1D97E8E98164A7C5D0012E4AB Validity Not Before: May 13 02:36:41 2026 GMT Not After : May 14 05:15:41 2026 GMT Subject: CN=E3898EA1F11AD6FFA0E3E17B7A7612701B29BDEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:98:ae:06:3e:80:91:4f:9e:06:e2:b1:2b:fb: 80:de:95:6f:79:c9:84:43:9a:da:45:4f:72:68:e4: 23:25:bb:ac:75:0d:ab:fb:cc:e7:31:d8:28:e3:cc: e7:cf:3b:2c:d9:d6:b3:1e:fa:82:35:da:5d:d4:b2: 7a:b5:ae:b4:21:8e:06:98:5b:fe:c9:e8:96:2a:17: d2:09:e2:44:36:80:53:f9:ce:7b:19:66:11:e2:38: 5a:a3:b1:9e:f7:51:4e:c4:c5:bc:8d:2e:ff:20:57: 4b:5f:eb:58:e7:e4:6c:75:d3:5b:df:c0:a7:bf:98: 1c:94:78:53:1e:5d:19:6e:4b:08:26:1c:b7:68:1f: 6a:c3:78:01:54:46:c5:da:76:a3:45:30:c1:b7:a6: 91:ea:4f:08:62:36:6b:ff:e4:18:06:73:0a:cf:7b: b6:2c:a9:ac:d0:f3:67:68:9d:89:b7:ad:7f:17:be: 3d:41:ad:72:ce:db:c4:28:8a:f8:44:ac:8e:c5:30: 65:65:b0:3c:52:5b:97:83:50:e9:fa:e4:69:e6:44: 73:77:11:7c:1f:d1:f9:3f:30:a6:fc:38:04:78:15: 5d:e7:8f:d4:37:86:9c:43:51:4e:12:83:bb:cf:47: a9:de:a4:0f:74:c1:42:ad:29:3c:cf:49:04:29:77: 85:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:89:8E:A1:F1:1A:D6:FF:A0:E3:E1:7B:7A:76:12:70:1B:29:BD:EA X509v3 Authority Key Identifier: keyid:D4:72:A5:0C:7F:11:26:F1:D9:7E:8E:98:16:4A:7C:5D:00:12:E4:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e9:68:ee:6e:51:73:5b:cb:7e:66:67:a4:4d:8c:4e:35:64: 81:49:b1:5b:e0:82:78:cd:4a:00:4a:13:46:99:eb:87:4f:34: e3:75:41:68:e5:92:e9:e1:8b:a9:fc:d2:d1:51:96:b2:d0:b3: 9e:6e:39:57:29:1e:62:7d:53:ba:6c:f3:f6:e2:33:f3:0b:d7: 9d:c6:98:1d:bc:5d:86:b7:df:d3:67:8f:7a:c4:23:c7:86:20: e0:c9:7b:e7:21:49:7c:19:f6:6c:88:74:ba:b1:5b:8d:13:4e: 0c:76:94:c5:7b:79:fa:7d:1d:cd:6c:68:40:42:96:4f:56:bf: ae:61:6b:3a:2d:31:f7:e1:37:97:68:ae:8c:80:0c:75:52:3d: 0d:90:e9:1f:8c:47:60:5c:47:ad:3f:ac:b5:33:aa:6d:ab:64: 45:23:f7:6a:ac:0e:c5:be:25:c3:3b:9b:82:30:36:55:83:10: 00:55:c3:c7:4c:1f:96:88:ef:4b:8e:63:57:ee:3c:cd:29:16: 7a:16:d0:5f:4c:2a:80:f4:6f:59:4a:88:2e:71:03:9e:06:6f: a3:5c:9a:6b:7a:dd:7c:df:30:ed:5c:9a:5d:65:13:15:58:34: d8:aa:1b:b8:a1:cc:29:27:13:80:38:4d:11:02:e5:69:a2:94: 48:f7:91:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVq9MWEbbKUtyXJPpf80tUesxUC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ3MkE1MEM3RjExMjZGMUQ5N0U4RTk4MTY0QTdDNUQw MDEyRTRBQjAeFw0yNjA1MTMwMjM2NDFaFw0yNjA1MTQwNTE1NDFaMDMxMTAvBgNV BAMTKEUzODk4RUExRjExQUQ2RkZBMEUzRTE3QjdBNzYxMjcwMUIyOUJERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWmK4GPoCRT54G4rEr+4DelW95 yYRDmtpFT3Jo5CMlu6x1Dav7zOcx2CjjzOfPOyzZ1rMe+oI12l3Usnq1rrQhjgaY W/7J6JYqF9IJ4kQ2gFP5znsZZhHiOFqjsZ73UU7ExbyNLv8gV0tf61jn5Gx101vf wKe/mByUeFMeXRluSwgmHLdoH2rDeAFURsXadqNFMMG3ppHqTwhiNmv/5BgGcwrP e7YsqazQ82donYm3rX8Xvj1BrXLO28QoivhErI7FMGVlsDxSW5eDUOn65GnmRHN3 EXwf0fk/MKb8OAR4FV3nj9Q3hpxDUU4Sg7vPR6nepA90wUKtKTzPSQQpd4V9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU44mOofEa1v+g4+F7enYScBspveowHwYDVR0j BBgwFoAU1HKlDH8RJvHZfo6YFkp8XQAS5KswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFlNDYzNjUtNzRkMy00ZTYwLTk1MmEtZjk0MjgwOTYwMDFkLzAvRDQ3MkE1MEM3 RjExMjZGMUQ5N0U4RTk4MTY0QTdDNUQwMDEyRTRBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENDcyQTUwQzdGMTEyNkYxRDk3RThFOTgxNjRBN0M1RDAwMTJF NEFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFlNDYzNjUtNzRkMy00ZTYwLTk1 MmEtZjk0MjgwOTYwMDFkLzAvRDQ3MkE1MEM3RjExMjZGMUQ5N0U4RTk4MTY0QTdD NUQwMDEyRTRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfpaO5uUXNby35mZ6RNjE41ZIFJsVvggnjN SgBKE0aZ64dPNON1QWjlkunhi6n80tFRlrLQs55uOVcpHmJ9U7ps8/biM/ML153G mB28XYa339Nnj3rEI8eGIODJe+chSXwZ9myIdLqxW40TTgx2lMV7efp9Hc1saEBC lk9Wv65hazotMffhN5doroyADHVSPQ2Q6R+MR2BcR60/rLUzqm2rZEUj92qsDsW+ JcM7m4IwNlWDEABVw8dMH5aI70uOY1fuPM0pFnoW0F9MKoD0b1lKiC5xA54Gb6Nc mmt63XzfMO1cml1lExVYNNiqG7ihzCknE4A4TREC5WmilEj3kUE= -----END CERTIFICATE-----Generated at Wed May 13 11:35:23 2026 by rpki-client