$ rpki-client -vvf rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft File: B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft (raw, json) Hash identifier: 72ZAPJOUUIdaELegC3Y6jZDBKbzMmEqf6CLii+T5d2U= Subject key identifier: FA:63:4E:90:AA:DD:D6:0E:F0:92:4B:80:FC:F9:6D:98:4E:52:F4:ED Authority key identifier: B4:11:1F:C0:D1:83:6A:54:CF:F3:50:9A:FF:A8:39:33:C2:45:1C:AF Certificate issuer: /CN=B4111FC0D1836A54CFF3509AFFA83933C2451CAF Certificate serial: 39BF67B1BE83BBB58838796D76A4CF7F33697921 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:09:32 +0000 Manifest this update: Tue 12 May 2026 08:04:32 +0000 Manifest next update: Wed 13 May 2026 10:53:32 +0000 Files and hashes: 1: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: 7ewRXVv5rl+QG1YNIYilvzKzYUQ3mx2Wk/pMwVKtEKI=) 2: B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl (hash: DM96Dtv8ig+1X7N/JPCdUjvIKMmT7hBlmJW2gLWCJUY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:bf:67:b1:be:83:bb:b5:88:38:79:6d:76:a4:cf:7f:33:69:79:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4111FC0D1836A54CFF3509AFFA83933C2451CAF Validity Not Before: May 12 08:04:32 2026 GMT Not After : May 13 10:53:32 2026 GMT Subject: CN=FA634E90AADDD60EF0924B80FCF96D984E52F4ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:51:0c:26:83:37:18:a8:2c:e9:84:86:83: 8f:04:02:3a:59:b0:35:27:36:1d:a4:61:d7:a7:ae: 03:58:e8:d7:25:85:2b:54:bd:06:24:3c:35:01:22: 1c:21:86:a3:0f:6b:de:a2:44:b8:00:b9:c8:8c:13: 19:7d:74:f0:dd:40:58:a4:51:45:ee:e4:ca:9b:1d: ba:9b:5b:2c:72:dc:58:d0:54:77:ef:a2:78:ad:9a: f1:b3:73:57:64:00:c3:23:bf:b1:1b:f3:c9:57:22: a0:f6:a1:6e:ed:75:fc:d4:1e:82:b6:c7:43:bf:d6: 0d:e9:a9:82:a9:ce:3e:e0:e6:5c:8f:2e:6d:20:98: 8b:5c:f3:04:65:e0:64:63:45:ff:af:6f:18:87:b6: 9d:9f:51:7d:17:6e:01:6c:ad:28:bd:1b:05:8c:f5: 04:8d:31:54:93:51:14:4d:a0:95:5f:ee:5f:b1:27: d2:25:21:7b:19:ca:6d:7b:ad:0d:11:2f:6f:90:f0: 10:33:6a:ff:bc:b4:fe:c6:a8:cb:25:98:39:87:c9: 52:27:1e:7c:b3:48:42:f9:39:79:82:97:34:b4:95: 3a:2c:67:db:b3:4a:6a:5e:24:b7:3f:e3:80:ad:82: 1d:b9:48:aa:88:af:19:6c:6a:57:02:97:16:87:94: e3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:63:4E:90:AA:DD:D6:0E:F0:92:4B:80:FC:F9:6D:98:4E:52:F4:ED X509v3 Authority Key Identifier: keyid:B4:11:1F:C0:D1:83:6A:54:CF:F3:50:9A:FF:A8:39:33:C2:45:1C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:94:ec:1b:5e:24:c3:de:a3:24:a5:74:9b:44:ab:86:ff:0c: f1:65:29:e2:e1:21:dd:09:44:7d:4d:63:c9:f3:36:a6:47:db: 9b:b7:2b:c3:b0:34:0f:a7:fd:a7:55:f7:26:01:e7:ff:75:ff: 59:a1:2f:d2:ff:b0:70:7b:54:1b:65:f9:eb:c9:9d:0f:6f:a6: a7:fd:39:7a:f7:fa:e5:be:60:65:fc:cc:cf:ef:3b:55:eb:2b: 63:92:93:6f:dc:e0:e3:e7:e5:ec:25:6c:22:fb:10:80:e1:7b: 70:6c:a4:9c:db:d0:da:ae:c7:8c:21:cd:ae:0f:08:fd:a1:b1: 98:e5:7c:e4:1d:59:14:8f:5c:3f:b5:f5:37:b2:a6:25:e1:dd: 5c:2e:69:96:b9:09:5b:59:76:cd:4c:9b:e7:64:78:78:fe:f7: 4e:84:af:15:6f:06:7c:c5:4d:42:ec:2a:0b:db:61:08:b4:43: 66:7b:7d:84:83:b8:d8:8c:b5:71:cc:86:5a:e2:aa:da:af:3c: 04:a8:a2:bf:ad:d2:3c:85:12:6f:af:0d:63:6c:85:09:7b:aa: d6:28:06:41:2d:5d:c1:74:af:80:fe:c7:44:7e:de:71:7c:f2: 72:6e:74:64:4c:84:06:5e:5b:3d:f4:2d:07:4b:78:46:ac:42: e9:b7:32:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOb9nsb6Du7WIOHltdqTPfzNpeSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQxMTFGQzBEMTgzNkE1NENGRjM1MDlBRkZBODM5MzND MjQ1MUNBRjAeFw0yNjA1MTIwODA0MzJaFw0yNjA1MTMxMDUzMzJaMDMxMTAvBgNV BAMTKEZBNjM0RTkwQUFEREQ2MEVGMDkyNEI4MEZDRjk2RDk4NEU1MkY0RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHOlEMJoM3GKgs6YSGg48EAjpZ sDUnNh2kYdenrgNY6NclhStUvQYkPDUBIhwhhqMPa96iRLgAuciMExl9dPDdQFik UUXu5MqbHbqbWyxy3FjQVHfvonitmvGzc1dkAMMjv7Eb88lXIqD2oW7tdfzUHoK2 x0O/1g3pqYKpzj7g5lyPLm0gmItc8wRl4GRjRf+vbxiHtp2fUX0XbgFsrSi9GwWM 9QSNMVSTURRNoJVf7l+xJ9IlIXsZym17rQ0RL2+Q8BAzav+8tP7GqMslmDmHyVIn HnyzSEL5OXmClzS0lTosZ9uzSmpeJLc/44Ctgh25SKqIrxlsalcClxaHlOO7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+mNOkKrd1g7wkkuA/PltmE5S9O0wHwYDVR0j BBgwFoAUtBEfwNGDalTP81Ca/6g5M8JFHK8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ3NThlOGUtNDljOC00OGI4LWJkY2ItMzUzMzllMmFlNjAxLzAvQjQxMTFGQzBE MTgzNkE1NENGRjM1MDlBRkZBODM5MzNDMjQ1MUNBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNDExMUZDMEQxODM2QTU0Q0ZGMzUwOUFGRkE4MzkzM0MyNDUx Q0FGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUtNDljOC00OGI4LWJk Y2ItMzUzMzllMmFlNjAxLzAvQjQxMTFGQzBEMTgzNkE1NENGRjM1MDlBRkZBODM5 MzNDMjQ1MUNBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWU7BteJMPeoySldJtEq4b/DPFlKeLhId0J RH1NY8nzNqZH25u3K8OwNA+n/adV9yYB5/91/1mhL9L/sHB7VBtl+evJnQ9vpqf9 OXr3+uW+YGX8zM/vO1XrK2OSk2/c4OPn5ewlbCL7EIDhe3BspJzb0Nqux4whza4P CP2hsZjlfOQdWRSPXD+19TeypiXh3VwuaZa5CVtZds1Mm+dkeHj+906ErxVvBnzF TULsKgvbYQi0Q2Z7fYSDuNiMtXHMhlriqtqvPASoor+t0jyFEm+vDWNshQl7qtYo BkEtXcF0r4D+x0R+3nF88nJudGRMhAZeWz30LQdLeEasQum3Mtg= -----END CERTIFICATE-----Generated at Tue May 12 22:31:53 2026 by rpki-client