$ rpki-client -vvf rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft File: 4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft (raw, json) Hash identifier: lVagzuYxprz8nxE+EBK2RHun3DEWmfJzCzPElW8kRvI= Subject key identifier: 76:AC:BB:78:6E:01:E6:B1:F0:D9:31:64:AB:0E:AE:9A:81:28:46:82 Authority key identifier: 4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD Certificate issuer: /CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Certificate serial: 4C125AA008FCABFCD7E297A987018D6196803A3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:11:55 +0000 Manifest this update: Tue 12 May 2026 06:06:55 +0000 Manifest next update: Wed 13 May 2026 10:06:55 +0000 Files and hashes: 1: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: ZfYq00HTDjpvUdw6nAEEEqjvY8Q+YEiON1rQ+odVxcw=) 2: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: NuzvjRElosYE2UG7+eZwvvIrrAeM5hY3Zl0vPo88tlQ=) 3: 4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl (hash: yw6sXhJOWCzD3i0T5xFi8nkohOow5sZPnjd2FMqKccU=) 4: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: OQGBTyYct40Pw4G0aqEIxJAdvOkNRB0tfWNHiKyDkc0=) 5: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: JeyiXx4erlba3GA8MtFHqgBMpzij5IWYDmBP3qqgmrQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:12:5a:a0:08:fc:ab:fc:d7:e2:97:a9:87:01:8d:61:96:80:3a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Validity Not Before: May 12 06:06:55 2026 GMT Not After : May 13 10:06:55 2026 GMT Subject: CN=76ACBB786E01E6B1F0D93164AB0EAE9A81284682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bc:d0:49:8b:1f:e1:7c:a1:a5:1d:12:0f:9b: e0:e4:f1:14:ef:e0:ff:db:df:8f:ce:34:64:6c:7a: 3f:42:82:04:ce:6b:24:b4:7e:60:c2:0b:78:b5:c2: 1b:07:b0:47:f7:80:6f:3d:20:87:a4:bc:ae:73:48: f6:51:a1:f3:33:d1:0c:b7:e3:37:c0:25:99:1d:c9: fd:df:7d:b7:4a:0d:38:32:e4:1b:3d:1b:80:38:68: 94:26:58:4c:78:f7:07:65:be:36:af:82:23:95:b8: 98:fe:df:9b:c7:47:ec:a2:1b:9c:19:60:62:d3:40: 61:c8:40:1d:cd:04:81:7d:e3:83:6f:ac:b0:d7:a7: d5:c0:e5:24:fa:99:6c:7a:ef:9e:4d:dd:32:92:88: 4a:20:2d:d6:c0:b1:60:d1:ce:fc:08:13:a1:55:40: 8e:7b:9c:1a:ff:d9:be:44:29:09:44:14:c3:e0:22: 61:c0:2f:01:38:77:5b:cc:c4:7c:f9:62:4e:9d:ab: 77:91:4f:16:2d:a0:5a:a8:33:8f:1f:82:11:78:62: 83:da:6b:07:6d:54:d2:f6:0e:ea:0f:03:c6:60:c4: a2:94:c7:e8:62:b8:15:b1:03:2f:53:84:23:2d:da: 04:67:97:0c:b7:9d:6e:07:6c:f7:7e:e3:70:c6:08: 7b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AC:BB:78:6E:01:E6:B1:F0:D9:31:64:AB:0E:AE:9A:81:28:46:82 X509v3 Authority Key Identifier: keyid:4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:66:bc:de:d7:20:31:b1:f8:61:6a:18:5e:b2:58:da:d1:1a: 8b:f0:52:71:5f:12:d3:5d:ba:e2:9b:d8:61:b5:12:d8:ce:c0: a1:9f:7a:df:df:5f:65:95:df:86:54:f0:d2:30:d4:3a:fa:b0: e5:d7:fa:ae:75:f7:1d:21:33:ba:a3:3d:8d:5e:ad:74:16:78: 16:d9:27:bb:08:2b:b8:f1:28:e3:ba:14:fd:b3:04:c0:71:25: 6c:77:66:56:39:2e:ba:a6:0a:cc:4f:ca:50:35:4b:60:27:45: 04:7a:7d:59:9c:ff:fc:df:a7:9d:56:dc:9e:d9:c0:6e:50:16: 16:ef:69:4d:42:7c:4d:3e:e8:81:b0:cf:98:31:a4:85:52:1c: 9a:e4:b2:2a:e8:43:b6:6b:32:fc:06:23:90:57:6c:1c:b3:ec: eb:67:4d:6e:13:60:b5:df:4e:4a:29:af:7b:a9:81:4b:71:b2: 8e:55:6b:4c:6e:f6:25:7c:e9:53:47:85:79:58:63:6e:6f:23: 1b:54:80:89:ce:46:c7:ac:f3:68:fd:87:5e:29:a7:36:67:76: 18:89:f9:8b:f9:4f:a9:0d:12:eb:b0:50:5a:2d:34:bf:c3:d7: 85:0d:9e:75:84:4b:88:8a:4e:d1:9d:2f:9f:fb:9d:57:54:83: d0:da:4e:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTBJaoAj8q/zX4pephwGNYZaAOj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBQzRCMDVDNjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYz MkIzNkRDRDAeFw0yNjA1MTIwNjA2NTVaFw0yNjA1MTMxMDA2NTVaMDMxMTAvBgNV BAMTKDc2QUNCQjc4NkUwMUU2QjFGMEQ5MzE2NEFCMEVBRTlBODEyODQ2ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTvNBJix/hfKGlHRIPm+Dk8RTv 4P/b34/ONGRsej9CggTOayS0fmDCC3i1whsHsEf3gG89IIekvK5zSPZRofMz0Qy3 4zfAJZkdyf3ffbdKDTgy5Bs9G4A4aJQmWEx49wdlvjavgiOVuJj+35vHR+yiG5wZ YGLTQGHIQB3NBIF944NvrLDXp9XA5ST6mWx6755N3TKSiEogLdbAsWDRzvwIE6FV QI57nBr/2b5EKQlEFMPgImHALwE4d1vMxHz5Yk6dq3eRTxYtoFqoM48fghF4YoPa awdtVNL2DuoPA8ZgxKKUx+hiuBWxAy9ThCMt2gRnlwy3nW4HbPd+43DGCHt3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdqy7eG4B5rHw2TFkqw6umoEoRoIwHwYDVR0j BBgwFoAUTKxLBcYiClqRf+qRfTR2bzKzbc0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZTljOWYtZDYwNy00NDk3LWFmMjgtNGQyYjkwOTJkNWE2LzAvNENBQzRCMDVD NjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYzMkIzNkRDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0FDNEIwNUM2MjIwQTVBOTE3RkVBOTE3RDM0NzY2RjMyQjM2 RENELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvNENBQzRCMDVDNjIyMEE1QTkxN0ZFQTkxN0QzNDc2 NkYzMkIzNkRDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFmvN7XIDGx+GFqGF6yWNrRGovwUnFfEtNd uuKb2GG1EtjOwKGfet/fX2WV34ZU8NIw1Dr6sOXX+q519x0hM7qjPY1erXQWeBbZ J7sIK7jxKOO6FP2zBMBxJWx3ZlY5LrqmCsxPylA1S2AnRQR6fVmc//zfp51W3J7Z wG5QFhbvaU1CfE0+6IGwz5gxpIVSHJrksiroQ7ZrMvwGI5BXbByz7OtnTW4TYLXf Tkopr3upgUtxso5Va0xu9iV86VNHhXlYY25vIxtUgInORses82j9h14ppzZndhiJ +Yv5T6kNEuuwUFotNL/D14UNnnWES4iKTtGdL5/7nVdUg9DaTuM= -----END CERTIFICATE-----Generated at Wed May 13 02:12:30 2026 by rpki-client