$ rpki-client -vvf rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft File: 5CB4B0C07702B8252693A6958EABDFD306B34D72.mft (raw, json) Hash identifier: 08or3M8OUXhwxG74ljFYYkKsU7QuoLGNE/llFKawM1g= Subject key identifier: 55:E8:67:3E:3A:BB:48:70:A8:16:38:39:93:E5:B5:A2:46:86:54:3D Authority key identifier: 5C:B4:B0:C0:77:02:B8:25:26:93:A6:95:8E:AB:DF:D3:06:B3:4D:72 Certificate issuer: /CN=5CB4B0C07702B8252693A6958EABDFD306B34D72 Certificate serial: 0ADD308FD52E845155B26A6A3FAD4CE481210650 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 18:21:19 +0000 Manifest this update: Tue 16 Jun 2026 18:16:19 +0000 Manifest next update: Wed 17 Jun 2026 19:35:19 +0000 Files and hashes: 1: 5CB4B0C07702B8252693A6958EABDFD306B34D72.crl (hash: V/KzIU/oFUCSHkr6XJoxq5O1J9kYVtmd2O/XGmRiEqM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.crl rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:dd:30:8f:d5:2e:84:51:55:b2:6a:6a:3f:ad:4c:e4:81:21:06:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CB4B0C07702B8252693A6958EABDFD306B34D72 Validity Not Before: Jun 16 18:16:19 2026 GMT Not After : Jun 17 19:35:19 2026 GMT Subject: CN=55E8673E3ABB4870A816383993E5B5A24686543D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7f:05:00:a4:ef:a1:dd:19:9d:ed:38:26:f3: 57:ce:08:30:8a:b8:22:fc:63:d2:b4:e3:b0:84:11: 58:32:42:e6:01:66:88:dc:cb:04:cc:5f:a5:12:86: 5f:9b:e3:30:bb:fb:2a:76:24:c4:c7:94:e3:81:a3: 2b:37:a4:e3:c4:42:a7:38:a6:fa:4f:41:0f:fd:5a: 1a:18:3a:1f:59:49:3d:5c:6f:30:62:49:dd:57:d8: 62:57:65:58:d1:72:c2:b8:16:93:4f:a6:d1:cb:92: 54:28:a0:35:f6:b3:24:16:95:41:76:cd:f3:d7:2c: 35:03:00:e4:2c:74:be:eb:1b:82:0b:5d:37:76:04: e7:33:d6:50:c6:08:21:4f:f9:fb:d8:38:ff:0d:21: 6c:ca:00:b1:dc:69:3a:3d:a4:b6:df:c2:18:7b:01: 16:b4:a0:3b:4c:c1:84:13:ba:ba:94:c5:ba:21:f7: fb:df:4e:c4:86:21:6c:e2:31:55:c2:5a:02:5d:7d: 5b:97:ca:bf:bf:ec:81:0f:fd:47:b9:10:62:02:cb: f5:0a:5f:92:51:a9:71:92:c2:a4:1d:bc:3e:ac:a5: 72:41:b4:c0:d9:de:29:4d:a5:30:d7:9b:b1:5b:84: 11:88:ca:e8:ff:e7:be:e8:6e:56:ff:e1:99:5f:fb: be:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E8:67:3E:3A:BB:48:70:A8:16:38:39:93:E5:B5:A2:46:86:54:3D X509v3 Authority Key Identifier: keyid:5C:B4:B0:C0:77:02:B8:25:26:93:A6:95:8E:AB:DF:D3:06:B3:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:bb:07:5a:af:6f:e9:3b:98:35:35:b7:90:28:c7:a8:a4:74: 4a:59:f8:aa:5c:3c:b4:dc:18:8a:8f:61:f1:c6:11:bb:0f:b2: fc:37:41:fb:e6:db:ce:15:b6:94:6d:9e:2e:fd:83:d1:20:1f: b3:cf:c3:24:52:5a:38:2b:07:09:12:89:e4:61:1b:fb:e3:a4: 79:29:09:75:86:8e:23:a1:70:4d:aa:db:56:a2:3b:4f:9e:7a: 86:a6:f1:a4:6b:65:e6:6b:25:61:15:79:67:e0:e0:1b:a5:90: 59:88:2e:69:63:78:ae:f4:93:6c:81:fb:33:0e:0f:8e:0b:53: e1:26:1e:28:b9:09:e7:b0:0d:d8:b9:5e:dd:f4:99:4d:55:8d: 5b:4a:ab:4d:97:39:2f:d6:87:11:2f:1d:a6:43:35:88:5d:7e: d7:1e:66:f4:dc:9f:89:8e:5f:28:82:7f:f4:64:f2:5a:60:7e: 3d:08:34:b2:1e:0f:eb:63:31:c7:e5:a8:1f:ca:07:f8:3f:0b: b2:45:ba:56:6c:ed:4a:94:55:17:10:81:27:be:9d:95:45:74: 56:bc:ac:e6:cd:41:3e:15:3d:5b:aa:95:5d:9c:d3:ac:a8:a7: 21:84:d9:21:09:ad:a0:6c:06:0f:24:a7:60:71:69:90:5c:50: 36:51:16:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCt0wj9UuhFFVsmpqP61M5IEhBlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNCNEIwQzA3NzAyQjgyNTI2OTNBNjk1OEVBQkRGRDMw NkIzNEQ3MjAeFw0yNjA2MTYxODE2MTlaFw0yNjA2MTcxOTM1MTlaMDMxMTAvBgNV BAMTKDU1RTg2NzNFM0FCQjQ4NzBBODE2MzgzOTkzRTVCNUEyNDY4NjU0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSfwUApO+h3Rmd7Tgm81fOCDCK uCL8Y9K047CEEVgyQuYBZojcywTMX6UShl+b4zC7+yp2JMTHlOOBoys3pOPEQqc4 pvpPQQ/9WhoYOh9ZST1cbzBiSd1X2GJXZVjRcsK4FpNPptHLklQooDX2syQWlUF2 zfPXLDUDAOQsdL7rG4ILXTd2BOcz1lDGCCFP+fvYOP8NIWzKALHcaTo9pLbfwhh7 ARa0oDtMwYQTurqUxboh9/vfTsSGIWziMVXCWgJdfVuXyr+/7IEP/Ue5EGICy/UK X5JRqXGSwqQdvD6spXJBtMDZ3ilNpTDXm7FbhBGIyuj/577oblb/4Zlf+76NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVehnPjq7SHCoFjg5k+W1okaGVD0wHwYDVR0j BBgwFoAUXLSwwHcCuCUmk6aVjqvf0wazTXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNiZGNiYWUtMmU5ZC00ZjNmLThhYjktMzQyNGU0NDg0ODRlLzAvNUNCNEIwQzA3 NzAyQjgyNTI2OTNBNjk1OEVBQkRGRDMwNkIzNEQ3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Q0I0QjBDMDc3MDJCODI1MjY5M0E2OTU4RUFCREZEMzA2QjM0 RDcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNiZGNiYWUtMmU5ZC00ZjNmLThh YjktMzQyNGU0NDg0ODRlLzAvNUNCNEIwQzA3NzAyQjgyNTI2OTNBNjk1OEVBQkRG RDMwNkIzNEQ3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHW7B1qvb+k7mDU1t5Aox6ikdEpZ+KpcPLTc GIqPYfHGEbsPsvw3Qfvm284VtpRtni79g9EgH7PPwyRSWjgrBwkSieRhG/vjpHkp CXWGjiOhcE2q21aiO0+eeoam8aRrZeZrJWEVeWfg4BulkFmILmljeK70k2yB+zMO D44LU+EmHii5CeewDdi5Xt30mU1VjVtKq02XOS/WhxEvHaZDNYhdftceZvTcn4mO XyiCf/Rk8lpgfj0INLIeD+tjMcflqB/KB/g/C7JFulZs7UqUVRcQgSe+nZVFdFa8 rObNQT4VPVuqlV2c06yopyGE2SEJraBsBg8kp2BxaZBcUDZRFtE= -----END CERTIFICATE-----Generated at Wed Jun 17 11:05:01 2026 by rpki-client