$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft File: 10B2C61A3BF002D69AD557B8392E1F340162A168.mft (raw, json) Hash identifier: 43GTSFOGAmcjbAjgh3aO8rNCmBgkhrKNrvslimsz9I4= Subject key identifier: 86:89:61:2C:00:5F:D5:77:38:F8:C2:5D:C7:AC:53:3D:FA:62:4B:5D Authority key identifier: 10:B2:C6:1A:3B:F0:02:D6:9A:D5:57:B8:39:2E:1F:34:01:62:A1:68 Certificate issuer: /CN=10B2C61A3BF002D69AD557B8392E1F340162A168 Certificate serial: 28D4D28E98C47301B9D678B9D41433BFD0B1DA96 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft Manifest number: 04 Signing time: Tue 05 May 2026 03:41:30 +0000 Manifest this update: Tue 05 May 2026 03:36:30 +0000 Manifest next update: Wed 06 May 2026 06:51:30 +0000 Files and hashes: 1: 10B2C61A3BF002D69AD557B8392E1F340162A168.crl (hash: 2f7d8dmuPzdVQJYvYbSMCxEeCXl8gCtLmOPnn3k7ujE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.crl rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 06:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d4:d2:8e:98:c4:73:01:b9:d6:78:b9:d4:14:33:bf:d0:b1:da:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B2C61A3BF002D69AD557B8392E1F340162A168 Validity Not Before: May 5 03:36:30 2026 GMT Not After : May 6 06:51:30 2026 GMT Subject: CN=8689612C005FD57738F8C25DC7AC533DFA624B5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b9:6c:ce:bc:45:be:58:f9:7e:1a:df:8b:9a: da:9b:bf:34:6f:64:68:a1:20:83:20:02:0c:a6:3b: 8c:47:1b:29:de:00:27:3a:68:82:c6:f9:17:8d:e8: 96:ad:54:ec:99:8e:f6:27:78:b7:4c:33:cc:9c:04: 7e:90:84:c4:f3:56:68:bd:4d:98:3f:de:1a:0a:a8: 03:b0:84:64:23:34:c3:eb:ed:8a:00:67:c3:3c:e1: 72:c3:a0:de:f8:7e:42:26:a7:5f:d0:70:4b:c8:1f: 86:1e:4d:7e:4f:ac:3d:fb:b4:0a:3d:a8:6f:27:ce: 9e:e5:8f:c9:1e:28:26:b1:63:a2:b2:d7:e7:5e:bd: b3:00:be:ad:ec:0c:c8:3f:af:c7:5c:8b:f6:1e:e6: 6a:a7:64:05:41:d2:1c:de:f2:0d:8f:e8:26:26:51: 71:ef:45:9d:ad:6b:a4:3d:ed:f6:24:42:06:e9:10: 65:1d:fe:8b:44:36:37:7f:0e:3a:eb:5c:1e:45:be: 38:80:d5:82:28:7d:56:54:c0:ab:68:5a:81:e5:e6: d5:b8:95:1b:48:4f:d1:c0:9f:a0:05:a1:aa:e9:a3: 89:f0:a2:db:a3:1a:a4:26:ac:a8:2e:22:25:37:d7: f4:8f:a8:43:0e:04:ec:8e:df:38:b0:d5:0c:15:8e: 8c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:89:61:2C:00:5F:D5:77:38:F8:C2:5D:C7:AC:53:3D:FA:62:4B:5D X509v3 Authority Key Identifier: keyid:10:B2:C6:1A:3B:F0:02:D6:9A:D5:57:B8:39:2E:1F:34:01:62:A1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:7a:3c:be:09:62:10:81:28:28:22:31:5f:c8:cd:02:c0:4d: ce:cd:ff:ef:9b:0f:58:4d:42:93:82:40:98:7b:2f:c0:25:52: 27:29:0a:c6:b1:82:cb:6d:55:0b:7c:c5:50:34:b7:10:a2:9e: 0b:42:3d:01:0d:1b:d9:cc:c8:1e:93:94:49:6f:ae:c0:40:f6: 82:9e:cd:da:4d:22:a1:4b:5b:8f:f0:63:6d:e5:ff:75:f4:70: 07:e6:5a:78:11:08:5f:a6:8c:6c:1f:b5:8d:53:bb:e5:5e:36: 35:a8:13:79:b2:38:a9:52:5a:33:96:d4:07:71:d1:a9:48:11: 08:1b:a2:17:50:67:49:c8:70:7c:6d:e4:38:dd:f4:7c:ee:94: dc:15:30:3d:b6:ce:70:fc:cf:c2:f8:98:d1:87:d0:06:4b:fc: ab:29:a0:69:c2:d3:e5:07:43:6f:fa:8b:a6:39:27:6f:65:60: 3c:eb:29:74:e5:2c:60:58:b1:eb:62:ec:c2:b0:e6:76:81:3d: fa:71:86:d0:9b:0b:59:45:16:0e:b3:e6:d5:72:3a:33:1e:da: 11:64:b1:aa:f9:9d:6d:04:8d:34:fc:d0:29:0a:05:35:df:55: f9:a8:50:2c:b6:38:ee:f6:14:b7:d9:8a:e1:23:67:3f:fe:a0: 97:3a:73:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKNTSjpjEcwG51ni51BQzv9Cx2pYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCMkM2MUEzQkYwMDJENjlBRDU1N0I4MzkyRTFGMzQw MTYyQTE2ODAeFw0yNjA1MDUwMzM2MzBaFw0yNjA1MDYwNjUxMzBaMDMxMTAvBgNV BAMTKDg2ODk2MTJDMDA1RkQ1NzczOEY4QzI1REM3QUM1MzNERkE2MjRCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCouWzOvEW+WPl+Gt+LmtqbvzRv ZGihIIMgAgymO4xHGyneACc6aILG+ReN6JatVOyZjvYneLdMM8ycBH6QhMTzVmi9 TZg/3hoKqAOwhGQjNMPr7YoAZ8M84XLDoN74fkImp1/QcEvIH4YeTX5PrD37tAo9 qG8nzp7lj8keKCaxY6Ky1+devbMAvq3sDMg/r8dci/Ye5mqnZAVB0hze8g2P6CYm UXHvRZ2ta6Q97fYkQgbpEGUd/otENjd/DjrrXB5FvjiA1YIofVZUwKtoWoHl5tW4 lRtIT9HAn6AFoarpo4nwotujGqQmrKguIiU31/SPqEMOBOyO3ziw1QwVjowvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUholhLABf1Xc4+MJdx6xTPfpiS10wHwYDVR0j BBgwFoAUELLGGjvwAtaa1Ve4OS4fNAFioWgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ1YTAzZWItYTNlMS00ODc5LTg1YmYtMmJlYTAzNTU1OGRkLzEvMTBCMkM2MUEz QkYwMDJENjlBRDU1N0I4MzkyRTFGMzQwMTYyQTE2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy8xMEIyQzYxQTNCRjAwMkQ2OUFENTU3QjgzOTJFMUYzNDAxNjJB MTY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ1YTAzZWItYTNlMS00ODc5LTg1 YmYtMmJlYTAzNTU1OGRkLzEvMTBCMkM2MUEzQkYwMDJENjlBRDU1N0I4MzkyRTFG MzQwMTYyQTE2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADR6PL4JYhCBKCgiMV/IzQLATc7N/++bD1hN QpOCQJh7L8AlUicpCsaxgsttVQt8xVA0txCingtCPQENG9nMyB6TlElvrsBA9oKe zdpNIqFLW4/wY23l/3X0cAfmWngRCF+mjGwftY1Tu+VeNjWoE3myOKlSWjOW1Adx 0alIEQgbohdQZ0nIcHxt5Djd9HzulNwVMD22znD8z8L4mNGH0AZL/KspoGnC0+UH Q2/6i6Y5J29lYDzrKXTlLGBYseti7MKw5naBPfpxhtCbC1lFFg6z5tVyOjMe2hFk sar5nW0EjTT80CkKBTXfVfmoUCy2OO72FLfZiuEjZz/+oJc6cw4= -----END CERTIFICATE-----Generated at Tue May 5 15:37:44 2026 by rpki-client