$ rpki-client -vvf rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft File: 4BEF373BC53710D136B40D9F928C485C94C670AC.mft (raw, json) Hash identifier: /PaMX1wdeb+xM+JBG36qf19AVlFOVeHStQneNVtgU5o= Subject key identifier: 9A:7C:35:99:AA:88:7B:78:99:75:89:CA:44:33:D2:B5:CA:E8:A1:33 Authority key identifier: 4B:EF:37:3B:C5:37:10:D1:36:B4:0D:9F:92:8C:48:5C:94:C6:70:AC Certificate issuer: /CN=4BEF373BC53710D136B40D9F928C485C94C670AC Certificate serial: 7A639461A90F440958191AC454C7877DDE856241 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:20:36 +0000 Manifest this update: Tue 12 May 2026 05:15:36 +0000 Manifest next update: Wed 13 May 2026 08:36:36 +0000 Files and hashes: 1: 4BEF373BC53710D136B40D9F928C485C94C670AC.crl (hash: mQgiywS+4iITIR5iYotggnWwJ/jcd1dxIrKOr9iFgwM=) 2: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: BeyFn4HdqSwVXnWm2K4O6j5GAQt7VRMXeOWfjpsb09s=) 3: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: u0AoFky6YChlG8p9ccsv4zHYDeuKyJl51gZR3MByaxM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.crl rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:63:94:61:a9:0f:44:09:58:19:1a:c4:54:c7:87:7d:de:85:62:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BEF373BC53710D136B40D9F928C485C94C670AC Validity Not Before: May 12 05:15:36 2026 GMT Not After : May 13 08:36:36 2026 GMT Subject: CN=9A7C3599AA887B78997589CA4433D2B5CAE8A133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:92:c5:c4:7e:fd:57:92:6c:58:4a:b8:ae:2e: 3e:09:f5:f8:8a:6d:7c:b4:b2:77:0c:eb:bb:d0:8f: 7c:31:3e:1e:f5:0c:c3:2e:49:36:6f:71:7e:40:77: 35:81:a6:34:8a:7e:57:2f:85:2f:94:73:e7:0d:ba: 2f:19:ee:8a:5f:9e:79:71:ed:cb:91:1b:01:00:9e: 5b:f9:fe:c0:63:27:0c:35:2a:56:b1:d3:02:99:56: 37:24:ff:2a:7e:42:c8:1b:de:d0:e6:49:71:e8:b5: 5d:c5:c6:3b:e9:ae:0b:39:19:a7:9e:41:0a:38:e7: 97:cf:d2:74:0b:bc:76:cd:0a:9d:b1:33:9f:ae:0a: 3b:95:5c:b9:f9:ba:f7:e2:34:34:a9:c7:a9:3d:36: 51:b6:85:58:4a:c9:52:0f:62:49:7c:75:58:57:57: 2b:56:18:57:fb:d9:62:5c:e5:97:4f:35:82:ac:32: 1e:00:d9:ea:30:8d:1f:55:84:27:e0:58:15:4d:74: 6e:9c:f2:62:07:d6:95:9c:03:16:2b:f9:10:d5:a2: d7:62:17:35:c3:95:8d:7b:ad:99:4d:02:ed:c8:dd: f9:e9:33:ea:77:cd:7b:3c:96:da:65:8e:38:b0:88: 48:f4:de:83:1f:aa:cc:c7:54:47:2f:86:a3:c5:fb: 03:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7C:35:99:AA:88:7B:78:99:75:89:CA:44:33:D2:B5:CA:E8:A1:33 X509v3 Authority Key Identifier: keyid:4B:EF:37:3B:C5:37:10:D1:36:B4:0D:9F:92:8C:48:5C:94:C6:70:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:08:3c:4f:3f:d9:97:03:7f:d0:c2:35:21:db:b4:d7:83:24: 11:77:31:fa:bd:65:ef:23:e5:01:9d:12:39:9d:57:14:1f:a9: 14:7b:ae:bb:89:71:34:c9:89:ad:53:79:fc:d1:21:83:4c:eb: e0:b6:cc:61:67:ff:a4:74:53:9c:fa:cf:37:c5:2a:e1:d4:b9: 78:d8:cb:2b:a3:8e:18:40:84:bc:83:1b:22:7b:c6:ec:f4:f1: 09:1f:48:d6:cd:00:48:fd:69:e4:ea:07:41:66:e1:60:eb:7e: 49:d0:4d:1d:f7:6b:a9:94:75:af:d3:76:10:a2:ae:ae:89:db: 42:6b:a0:43:84:6a:10:8f:70:aa:7a:ea:fd:a2:ce:c6:f4:6e: fd:e6:00:9b:26:eb:a8:0e:36:55:8a:b4:bc:47:a7:e2:a0:b6: 4c:91:58:18:94:88:73:74:49:b0:2a:93:10:38:7f:66:4f:01: f6:46:e6:40:dd:1c:e6:37:fd:0e:87:6d:8f:6e:23:44:8c:b3: c1:7a:e8:ed:fe:4d:42:41:bd:39:16:c2:51:44:89:f2:5e:87: 35:70:4f:93:4a:03:93:d6:21:7e:2e:81:e1:53:b4:50:e0:d8: 9e:7a:60:bf:bd:80:0c:11:d7:46:53:ea:d0:08:60:ad:21:c4: 56:4f:5e:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUemOUYakPRAlYGRrEVMeHfd6FYkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFRjM3M0JDNTM3MTBEMTM2QjQwRDlGOTI4QzQ4NUM5 NEM2NzBBQzAeFw0yNjA1MTIwNTE1MzZaFw0yNjA1MTMwODM2MzZaMDMxMTAvBgNV BAMTKDlBN0MzNTk5QUE4ODdCNzg5OTc1ODlDQTQ0MzNEMkI1Q0FFOEExMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQksXEfv1XkmxYSriuLj4J9fiK bXy0sncM67vQj3wxPh71DMMuSTZvcX5AdzWBpjSKflcvhS+Uc+cNui8Z7opfnnlx 7cuRGwEAnlv5/sBjJww1Klax0wKZVjck/yp+Qsgb3tDmSXHotV3Fxjvprgs5Gaee QQo455fP0nQLvHbNCp2xM5+uCjuVXLn5uvfiNDSpx6k9NlG2hVhKyVIPYkl8dVhX VytWGFf72WJc5ZdPNYKsMh4A2eowjR9VhCfgWBVNdG6c8mIH1pWcAxYr+RDVotdi FzXDlY17rZlNAu3I3fnpM+p3zXs8ltpljjiwiEj03oMfqszHVEcvhqPF+wP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmnw1maqIe3iZdYnKRDPStcrooTMwHwYDVR0j BBgwFoAUS+83O8U3ENE2tA2fkoxIXJTGcKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDNhZGU5YzAtY2RlMS00N2YwLTljZDItNGE1N2JkZGUxNGU4LzAvNEJFRjM3M0JD NTM3MTBEMTM2QjQwRDlGOTI4QzQ4NUM5NEM2NzBBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkVGMzczQkM1MzcxMEQxMzZCNDBEOUY5MjhDNDg1Qzk0QzY3 MEFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvNEJFRjM3M0JDNTM3MTBEMTM2QjQwRDlGOTI4QzQ4 NUM5NEM2NzBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwIPE8/2ZcDf9DCNSHbtNeDJBF3Mfq9Ze8j 5QGdEjmdVxQfqRR7rruJcTTJia1TefzRIYNM6+C2zGFn/6R0U5z6zzfFKuHUuXjY yyujjhhAhLyDGyJ7xuz08QkfSNbNAEj9aeTqB0Fm4WDrfknQTR33a6mUda/TdhCi rq6J20JroEOEahCPcKp66v2izsb0bv3mAJsm66gONlWKtLxHp+KgtkyRWBiUiHN0 SbAqkxA4f2ZPAfZG5kDdHOY3/Q6HbY9uI0SMs8F66O3+TUJBvTkWwlFEifJehzVw T5NKA5PWIX4ugeFTtFDg2J56YL+9gAwR10ZT6tAIYK0hxFZPXgE= -----END CERTIFICATE-----Generated at Tue May 12 22:19:55 2026 by rpki-client