$ rpki-client -vvf rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft File: 4A690EC844644FC7C72921E7FA9D8B8827A68133.mft (raw, json) Hash identifier: UcTfq5d/H+hp9M1O7N5HQDodjGnWZK78heOyJob8Dvw= Subject key identifier: D6:9D:31:FC:37:0B:5E:EC:D2:7E:7A:8A:EE:96:7D:F2:D4:F6:B4:5F Authority key identifier: 4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33 Certificate issuer: /CN=4A690EC844644FC7C72921E7FA9D8B8827A68133 Certificate serial: 0178029EAB280F53A8364866ECCD923B8940D1B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:05:38 +0000 Manifest this update: Tue 12 May 2026 16:00:38 +0000 Manifest next update: Wed 13 May 2026 16:18:38 +0000 Files and hashes: 1: 3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa (hash: pESLqdHWwG9pCnMMcNgeB95CfcGiK8SY4ni1NsaDZJU=) 2: 323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (hash: UugzJo0XG4CnPFobTcgFSX6/vfuVvh/vQ7HS0KjLKPQ=) 3: 4A690EC844644FC7C72921E7FA9D8B8827A68133.crl (hash: DmIWlVN8s1Q78pToIwS+2YmYs322cQd4Z6IDJ3pro0U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:78:02:9e:ab:28:0f:53:a8:36:48:66:ec:cd:92:3b:89:40:d1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A690EC844644FC7C72921E7FA9D8B8827A68133 Validity Not Before: May 12 16:00:38 2026 GMT Not After : May 13 16:18:38 2026 GMT Subject: CN=D69D31FC370B5EECD27E7A8AEE967DF2D4F6B45F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7a:5e:e8:ea:7d:f6:4c:57:8f:8d:96:25:3e: a3:62:6c:d0:ac:8d:2f:7f:38:30:2b:6a:8a:6c:c8: 1b:ca:67:ab:17:84:a4:d4:8d:9a:21:65:b3:86:e1: 4d:b5:5c:10:f9:90:72:b7:7d:ca:48:c6:c1:76:f2: 26:57:87:74:47:5e:44:22:ac:89:a3:0d:e0:3a:b8: 3f:f9:25:ea:86:4b:19:9b:8c:9b:90:b2:b1:a2:ba: 27:76:0e:7e:b6:d0:2a:a2:39:45:e2:77:a0:19:71: dc:f6:6a:1f:2a:17:30:49:94:89:32:0b:15:34:23: cb:f1:76:2e:d9:ef:ce:dc:84:12:cc:dd:b2:be:f0: 1b:9d:44:01:45:e0:39:fa:8e:59:bb:d8:55:cf:78: 56:66:25:83:97:a5:f3:7c:01:b5:ed:8f:6f:e5:56: af:f6:43:d8:76:be:38:21:66:cf:98:14:f9:3d:5e: d1:74:b3:2d:95:63:66:20:9b:35:b5:ba:fb:38:81: dc:73:32:94:1f:b5:3a:67:6a:ff:c2:e7:6d:5a:e5: 19:ad:af:d3:75:ae:0a:ca:28:e2:d1:da:e9:d5:79: 6f:f3:88:3b:4e:74:62:af:57:e8:5e:18:2d:9d:f4: 6b:81:cc:c8:4c:4e:8c:f1:15:ba:f3:47:a4:bd:f2: e1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9D:31:FC:37:0B:5E:EC:D2:7E:7A:8A:EE:96:7D:F2:D4:F6:B4:5F X509v3 Authority Key Identifier: keyid:4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:18:1c:b5:a1:fd:9b:bb:04:63:37:69:c2:32:54:96:41:71: ee:96:93:ac:46:e8:65:77:6a:ed:01:1f:4c:17:e7:48:0e:c6: 11:f9:44:48:55:1b:85:49:a9:7c:40:05:74:a6:06:77:98:33: 05:3e:79:66:7f:23:cf:1c:cb:b9:39:d6:b1:f1:33:8e:1a:2a: 42:03:b1:96:7e:79:3c:b1:75:0c:17:86:98:7b:32:c9:3c:19: 08:f3:82:4a:fc:3a:3c:a1:c5:48:25:00:2b:d5:fc:e8:0c:14: dd:72:35:1a:41:24:89:15:af:f3:2b:a0:54:73:7a:14:d2:df: 4f:9b:40:e4:48:15:1d:26:fb:16:be:a9:78:aa:19:34:d7:ac: 73:70:dd:4e:1e:a3:5c:9a:ce:84:aa:ae:19:df:23:59:b0:ba: 9f:6c:27:aa:2f:17:42:59:e4:bd:1c:b7:5b:57:7c:c6:df:ee: 90:f8:80:63:50:e8:f6:ba:41:85:23:fb:92:ac:f3:1e:ef:d0: 2f:ad:ad:9e:a0:21:be:a7:20:93:aa:39:25:3e:99:15:da:7e: 3f:cb:c8:02:81:25:a0:54:68:1e:f5:18:11:6c:08:d3:6b:53: 55:18:2a:34:93:00:86:cb:fb:bd:98:8c:65:53:43:d7:bf:0d: 08:23:fa:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAXgCnqsoD1OoNkhm7M2SO4lA0bQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2OTBFQzg0NDY0NEZDN0M3MjkyMUU3RkE5RDhCODgy N0E2ODEzMzAeFw0yNjA1MTIxNjAwMzhaFw0yNjA1MTMxNjE4MzhaMDMxMTAvBgNV BAMTKEQ2OUQzMUZDMzcwQjVFRUNEMjdFN0E4QUVFOTY3REYyRDRGNkI0NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpel7o6n32TFePjZYlPqNibNCs jS9/ODAraopsyBvKZ6sXhKTUjZohZbOG4U21XBD5kHK3fcpIxsF28iZXh3RHXkQi rImjDeA6uD/5JeqGSxmbjJuQsrGiuid2Dn620CqiOUXid6AZcdz2ah8qFzBJlIky CxU0I8vxdi7Z787chBLM3bK+8BudRAFF4Dn6jlm72FXPeFZmJYOXpfN8AbXtj2/l Vq/2Q9h2vjghZs+YFPk9XtF0sy2VY2YgmzW1uvs4gdxzMpQftTpnav/C521a5Rmt r9N1rgrKKOLR2unVeW/ziDtOdGKvV+heGC2d9GuBzMhMTozxFbrzR6S98uG5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1p0x/DcLXuzSfnqK7pZ98tT2tF8wHwYDVR0j BBgwFoAUSmkOyERkT8fHKSHn+p2LiCemgTMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTBmZjAyMmEtOWIxNi00YjRjLTk4YTItNTM0OTk0ZjU4OWQwLzAvNEE2OTBFQzg0 NDY0NEZDN0M3MjkyMUU3RkE5RDhCODgyN0E2ODEzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTY5MEVDODQ0NjQ0RkM3QzcyOTIxRTdGQTlEOEI4ODI3QTY4 MTMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTBmZjAyMmEtOWIxNi00YjRjLTk4 YTItNTM0OTk0ZjU4OWQwLzAvNEE2OTBFQzg0NDY0NEZDN0M3MjkyMUU3RkE5RDhC ODgyN0E2ODEzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIYHLWh/Zu7BGM3acIyVJZBce6Wk6xG6GV3 au0BH0wX50gOxhH5REhVG4VJqXxABXSmBneYMwU+eWZ/I88cy7k51rHxM44aKkID sZZ+eTyxdQwXhph7Msk8GQjzgkr8OjyhxUglACvV/OgMFN1yNRpBJIkVr/MroFRz ehTS30+bQORIFR0m+xa+qXiqGTTXrHNw3U4eo1yazoSqrhnfI1mwup9sJ6ovF0JZ 5L0ct1tXfMbf7pD4gGNQ6Pa6QYUj+5Ks8x7v0C+trZ6gIb6nIJOqOSU+mRXafj/L yAKBJaBUaB71GBFsCNNrU1UYKjSTAIbL+72YjGVTQ9e/DQgj+tY= -----END CERTIFICATE-----Generated at Wed May 13 04:19:25 2026 by rpki-client