$ rpki-client -vvf rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft File: 673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft (raw, json) Hash identifier: lSlCoYTGeMuQ3G63uPY42u+KckwcpEpv7jWcO1xq7Iw= Subject key identifier: 08:89:F5:4E:0A:F7:06:80:81:50:DE:2C:C3:A3:04:D4:15:45:27:7F Authority key identifier: 67:3A:5D:51:1F:DC:C0:A4:98:DE:9E:34:28:D3:5C:44:EB:25:AF:BB Certificate issuer: /CN=673A5D511FDCC0A498DE9E3428D35C44EB25AFBB Certificate serial: 036E02A45194667C345C0FA15FD0F72472599EE9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft Manifest number: 0E Signing time: Tue 12 May 2026 21:44:41 +0000 Manifest this update: Tue 12 May 2026 21:39:41 +0000 Manifest next update: Wed 13 May 2026 21:47:41 +0000 Files and hashes: 1: 673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl (hash: gh8bw3Ox/9aP1tSgBUpMH8TGwBaqoEiBPa5/woxAg8c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6e:02:a4:51:94:66:7c:34:5c:0f:a1:5f:d0:f7:24:72:59:9e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673A5D511FDCC0A498DE9E3428D35C44EB25AFBB Validity Not Before: May 12 21:39:41 2026 GMT Not After : May 13 21:47:41 2026 GMT Subject: CN=0889F54E0AF706808150DE2CC3A304D41545277F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ed:18:1a:69:81:4d:db:9f:0e:6f:45:13:eb: 61:c0:8c:62:43:d0:3c:a7:2f:06:fb:c8:86:54:46: 1f:96:3c:6d:b3:ef:b6:7f:09:99:6a:62:1a:9f:37: 61:11:92:6a:43:42:9a:10:b1:73:2d:c8:7c:eb:3f: 72:fa:3f:5a:48:b4:f9:14:0b:cd:e1:c2:be:b2:16: 70:1c:da:7b:86:1c:a0:ff:d8:d6:a9:1e:f7:96:cc: f3:95:2b:83:31:d8:09:7a:18:8c:9b:79:cf:a6:5a: 2d:e9:16:d2:ba:5c:e6:77:8e:9b:10:73:cd:06:c9: d5:3e:06:cf:70:5e:fe:ca:bf:ed:56:62:fd:45:83: 30:c9:0e:70:75:93:6d:c8:af:3d:26:7f:a2:67:da: a2:f9:88:7a:8f:d7:56:79:8a:a5:b5:b7:ea:b9:20: 39:81:84:3c:c7:27:68:ad:cf:b7:a4:5c:19:d5:18: 28:c5:d7:22:8c:5d:59:d5:52:d7:66:c5:9a:9a:8c: 8b:9c:69:eb:50:1c:d8:c9:6c:79:01:31:9d:c8:1d: 54:df:fa:39:58:74:db:ff:0a:44:34:33:c7:a4:08: 35:32:49:e4:5e:ab:b3:6a:28:ec:3c:cb:f7:94:53: e5:9d:e9:10:21:47:8a:60:2f:63:c1:39:f9:aa:c0: 8f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:89:F5:4E:0A:F7:06:80:81:50:DE:2C:C3:A3:04:D4:15:45:27:7F X509v3 Authority Key Identifier: keyid:67:3A:5D:51:1F:DC:C0:A4:98:DE:9E:34:28:D3:5C:44:EB:25:AF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d5:97:f5:25:5f:73:26:c8:4a:61:3c:01:0d:36:a0:01:08: a2:66:3a:7b:cb:f6:ab:4e:79:dc:59:8b:90:57:a6:a3:45:9a: e7:16:25:02:49:a0:54:1a:32:87:fe:bb:3e:70:df:c0:ed:7c: 9a:fb:b2:97:28:4a:01:49:21:12:0f:53:61:83:31:73:d2:13: cc:aa:71:7b:bf:84:b8:5f:93:57:6d:0f:cd:ea:71:5f:86:6a: b7:88:f6:6c:f7:3f:74:48:c1:79:45:2f:d8:a7:60:67:61:e6: 17:56:96:fe:a9:02:53:9b:3f:86:00:57:36:6d:56:a8:24:21: cc:13:b1:e6:a6:1c:ab:03:f9:8a:4f:ea:3f:98:2f:2d:06:8c: a7:c5:9e:0f:af:01:a8:6c:9a:d5:e8:c5:80:50:63:26:6b:c3: 92:d9:47:cc:d0:10:56:27:9b:77:0c:71:c2:22:a9:c4:d8:85: 96:d6:17:79:c2:d7:cf:00:81:3c:a4:e5:c7:fd:94:1a:e0:4e: 2d:fb:a1:c8:c9:bf:c0:4e:10:f3:f0:a4:ee:cd:69:f6:7a:5c: ee:48:4e:b2:06:31:41:48:41:92:e5:8f:58:f3:b0:7a:4b:6e: 20:3d:96:74:42:14:ab:c6:02:e0:a1:a4:f0:74:f1:69:c9:fa: e6:0a:1f:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA24CpFGUZnw0XA+hX9D3JHJZnukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjczQTVENTExRkRDQzBBNDk4REU5RTM0MjhEMzVDNDRF QjI1QUZCQjAeFw0yNjA1MTIyMTM5NDFaFw0yNjA1MTMyMTQ3NDFaMDMxMTAvBgNV BAMTKDA4ODlGNTRFMEFGNzA2ODA4MTUwREUyQ0MzQTMwNEQ0MTU0NTI3N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM7RgaaYFN258Ob0UT62HAjGJD 0DynLwb7yIZURh+WPG2z77Z/CZlqYhqfN2ERkmpDQpoQsXMtyHzrP3L6P1pItPkU C83hwr6yFnAc2nuGHKD/2NapHveWzPOVK4Mx2Al6GIybec+mWi3pFtK6XOZ3jpsQ c80GydU+Bs9wXv7Kv+1WYv1FgzDJDnB1k23Irz0mf6Jn2qL5iHqP11Z5iqW1t+q5 IDmBhDzHJ2itz7ekXBnVGCjF1yKMXVnVUtdmxZqajIucaetQHNjJbHkBMZ3IHVTf +jlYdNv/CkQ0M8ekCDUySeReq7NqKOw8y/eUU+Wd6RAhR4pgL2PBOfmqwI99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCIn1Tgr3BoCBUN4sw6ME1BVFJ38wHwYDVR0j BBgwFoAUZzpdUR/cwKSY3p40KNNcROslr7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjUwNGU0YzctN2EyZC00ZDY2LThmYjQtMjA1NTY1Nzg3ZjI0LzAvNjczQTVENTEx RkRDQzBBNDk4REU5RTM0MjhEMzVDNDRFQjI1QUZCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzNBNUQ1MTFGRENDMEE0OThERTlFMzQyOEQzNUM0NEVCMjVB RkJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvNjczQTVENTExRkRDQzBBNDk4REU5RTM0MjhEMzVD NDRFQjI1QUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLVl/UlX3MmyEphPAENNqABCKJmOnvL9qtO edxZi5BXpqNFmucWJQJJoFQaMof+uz5w38DtfJr7spcoSgFJIRIPU2GDMXPSE8yq cXu/hLhfk1dtD83qcV+GareI9mz3P3RIwXlFL9inYGdh5hdWlv6pAlObP4YAVzZt VqgkIcwTseamHKsD+YpP6j+YLy0GjKfFng+vAahsmtXoxYBQYyZrw5LZR8zQEFYn m3cMccIiqcTYhZbWF3nC188AgTyk5cf9lBrgTi37ocjJv8BOEPPwpO7NafZ6XO5I TrIGMUFIQZLlj1jzsHpLbiA9lnRCFKvGAuChpPB08WnJ+uYKHy0= -----END CERTIFICATE-----Generated at Wed May 13 01:45:02 2026 by rpki-client