$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft File: C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft (raw, json) Hash identifier: 1dKRySmiyNpyVYQc6pbyQEm4EP50P0w7bjhiZX1FSf8= Subject key identifier: C8:03:E3:DF:06:51:B7:CD:71:D5:68:9E:CB:91:74:B4:26:B5:82:21 Authority key identifier: C5:DD:2D:E8:A2:5B:2A:B9:DB:C2:98:28:C0:31:41:B2:6C:B7:40:69 Certificate issuer: /CN=C5DD2DE8A25B2AB9DBC29828C03141B26CB74069 Certificate serial: 3F6F1CEAF57FFDF1326AAB7A91924DA39D1CF0BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 05:49:56 +0000 Manifest this update: Wed 17 Jun 2026 05:44:56 +0000 Manifest next update: Thu 18 Jun 2026 08:57:56 +0000 Files and hashes: 1: C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl (hash: s9G1C2PvkdUjorGlxP2U+6SiagSOZ8tY+ozB1ZzeH34=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:6f:1c:ea:f5:7f:fd:f1:32:6a:ab:7a:91:92:4d:a3:9d:1c:f0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5DD2DE8A25B2AB9DBC29828C03141B26CB74069 Validity Not Before: Jun 17 05:44:56 2026 GMT Not After : Jun 18 08:57:56 2026 GMT Subject: CN=C803E3DF0651B7CD71D5689ECB9174B426B58221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5b:db:23:79:b6:cc:72:ef:e9:b3:cf:4e:49: da:b8:d9:9c:3a:cf:87:96:48:d7:6c:ad:1a:b7:fc: d4:7b:5e:73:74:55:93:d5:25:d8:88:dd:c5:13:f5: c6:6a:48:78:de:a7:af:c7:03:fc:1f:bc:0a:80:6c: 23:a5:6a:34:a3:8c:89:ed:b4:10:d0:e4:43:67:35: 20:e2:21:db:ea:c7:16:51:6a:7b:f4:27:e4:92:be: 3a:cf:40:e8:c7:48:c0:80:ca:b4:a8:be:e2:42:3b: f0:98:8b:65:8d:7f:92:2c:80:61:58:09:6c:d2:54: 02:8f:9a:d9:be:77:b3:8f:d4:a0:aa:fa:6f:dd:03: 8f:c0:d2:8b:56:0c:73:31:50:54:08:5d:01:b0:9a: d3:45:ae:4a:14:c3:7a:43:3e:ac:e2:77:e8:fd:16: 24:68:ed:d9:0e:ac:66:6f:31:66:bd:1d:f1:aa:35: 25:e4:fc:c8:ff:90:70:62:fb:7d:0d:b6:60:27:d7: 9e:e8:e6:ee:5e:e0:2a:c3:66:b8:ee:f9:33:1b:7b: 37:c3:cb:5e:42:49:ca:b7:ac:85:a2:5e:79:36:e6: 32:ad:91:23:83:6f:88:00:cc:bb:a0:da:4e:1f:aa: 42:db:88:e2:81:e7:62:79:23:43:7f:3a:4e:ce:f2: 4d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:03:E3:DF:06:51:B7:CD:71:D5:68:9E:CB:91:74:B4:26:B5:82:21 X509v3 Authority Key Identifier: keyid:C5:DD:2D:E8:A2:5B:2A:B9:DB:C2:98:28:C0:31:41:B2:6C:B7:40:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:03:49:76:2a:35:fa:4e:6c:c1:67:90:b1:b9:dd:ad:4f:79: 85:07:3f:0e:41:bf:da:d0:53:74:ab:e4:14:6c:33:fa:9b:04: e1:ce:54:47:22:c4:0c:aa:d1:af:4c:c6:d9:4d:2c:bb:02:49: df:6a:52:4c:30:0d:b2:6a:1a:a9:50:8e:07:39:54:2d:a8:1f: c5:84:16:74:60:ee:9f:68:a4:09:06:e7:c3:ba:1c:34:5d:20: 1f:66:a1:83:d9:06:6c:00:49:4f:20:fc:dc:79:49:57:05:89: cc:21:b8:df:7c:fb:aa:7e:a4:20:19:9a:73:5b:3e:61:03:82: 37:82:f9:00:8c:e6:6a:14:f0:64:a6:5d:96:a9:f6:65:43:d0: 43:87:90:bc:14:a2:75:7f:cb:da:ec:65:86:56:f5:12:13:87: df:1b:69:6b:6a:09:38:86:eb:dd:48:f3:00:5a:f7:b1:f4:b4: 2d:49:92:72:04:79:56:d2:68:c6:76:b3:c1:a3:61:78:b7:7a: a2:27:71:47:c0:de:05:d5:54:6f:3a:e7:d1:c9:85:ff:ae:a8: f4:42:36:02:8a:ac:3a:13:ca:15:03:d0:03:05:6a:16:56:70: 96:01:6e:10:7d:44:12:c9:7b:df:1e:21:89:f5:f7:47:23:87: 5e:cd:2b:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP28c6vV//fEyaqt6kZJNo50c8LwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVERDJERThBMjVCMkFCOURCQzI5ODI4QzAzMTQxQjI2 Q0I3NDA2OTAeFw0yNjA2MTcwNTQ0NTZaFw0yNjA2MTgwODU3NTZaMDMxMTAvBgNV BAMTKEM4MDNFM0RGMDY1MUI3Q0Q3MUQ1Njg5RUNCOTE3NEI0MjZCNTgyMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2W9sjebbMcu/ps89OSdq42Zw6 z4eWSNdsrRq3/NR7XnN0VZPVJdiI3cUT9cZqSHjep6/HA/wfvAqAbCOlajSjjInt tBDQ5ENnNSDiIdvqxxZRanv0J+SSvjrPQOjHSMCAyrSovuJCO/CYi2WNf5IsgGFY CWzSVAKPmtm+d7OP1KCq+m/dA4/A0otWDHMxUFQIXQGwmtNFrkoUw3pDPqzid+j9 FiRo7dkOrGZvMWa9HfGqNSXk/Mj/kHBi+30NtmAn157o5u5e4CrDZrju+TMbezfD y15CScq3rIWiXnk25jKtkSODb4gAzLug2k4fqkLbiOKB52J5I0N/Ok7O8k0HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyAPj3wZRt81x1Wiey5F0tCa1giEwHwYDVR0j BBgwFoAUxd0t6KJbKrnbwpgowDFBsmy3QGkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5ZTAxYmEtNTljOS00MDQ3LWFjMGItZTliMmZlNjU4NTNjLzAvQzVERDJERThB MjVCMkFCOURCQzI5ODI4QzAzMTQxQjI2Q0I3NDA2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNUREMkRFOEEyNUIyQUI5REJDMjk4MjhDMDMxNDFCMjZDQjc0 MDY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvQzVERDJERThBMjVCMkFCOURCQzI5ODI4QzAzMTQx QjI2Q0I3NDA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8DSXYqNfpObMFnkLG53a1PeYUHPw5Bv9rQ U3Sr5BRsM/qbBOHOVEcixAyq0a9MxtlNLLsCSd9qUkwwDbJqGqlQjgc5VC2oH8WE FnRg7p9opAkG58O6HDRdIB9moYPZBmwASU8g/Nx5SVcFicwhuN98+6p+pCAZmnNb PmEDgjeC+QCM5moU8GSmXZap9mVD0EOHkLwUonV/y9rsZYZW9RITh98baWtqCTiG 691I8wBa97H0tC1JknIEeVbSaMZ2s8GjYXi3eqIncUfA3gXVVG8659HJhf+uqPRC NgKKrDoTyhUD0AMFahZWcJYBbhB9RBLJe98eIYn190cjh17NKxc= -----END CERTIFICATE-----Generated at Wed Jun 17 12:18:10 2026 by rpki-client