$ rpki-client -vvf rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft File: 4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft (raw, json) Hash identifier: QJqekMKZymdGskY9N52ClISSbIfUFQelEHvEOem1pzU= Subject key identifier: 1B:6E:E6:1D:88:71:9F:D5:93:94:F5:19:46:B3:71:F9:95:8F:BA:E5 Authority key identifier: 4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83 Certificate issuer: /CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83 Certificate serial: 58A1A9ABFA98A6D006146F922E72DB032ED76F5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:24:02 +0000 Manifest this update: Tue 12 May 2026 21:19:02 +0000 Manifest next update: Wed 13 May 2026 21:42:02 +0000 Files and hashes: 1: 3132322e3230302e3134342e302f32312d3234203d3e203338313438.roa (hash: wZnkGHXuoZIhhXDMd29VyKe8jWbDQIfBiqevRGFYhXw=) 2: 3130332e33302e3232312e302f32342d3234203d3e203338313438.roa (hash: 4Qok18i+EI2L8O6uVAPOVAbbB1P+8P/IPIRW3fo/nPM=) 3: 3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (hash: FAVDk3FaWOdSpOkw9ME+3ZGQ0KQHtVqOC+nSGAGC2Kw=) 4: 4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl (hash: MTTwREpAzuANFiXgHVYJuFBrXnkxZ8rdw7yGJurZHQw=) 5: 3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (hash: JJjFiNRoaXtW7r6WlFCed+2DZ0XR/8IciP9txj6h+7U=) 6: 3130332e33302e3232332e302f32342d3234203d3e203338313438.roa (hash: qdqJ7c5Hmo5/x5QxaNzAn2E9rlL9+lJv31VY+Z/Gpyo=) 7: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (hash: cgIEuYKpgRxefyDoprlhU36lSQZoW3T5mu05arwSfsg=) 8: 3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (hash: 4wluMrlK+jd2rPJTz82Wk6jGjGeMH7puimCIfaMcuQc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a1:a9:ab:fa:98:a6:d0:06:14:6f:92:2e:72:db:03:2e:d7:6f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83 Validity Not Before: May 12 21:19:02 2026 GMT Not After : May 13 21:42:02 2026 GMT Subject: CN=1B6EE61D88719FD59394F51946B371F9958FBAE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:20:69:89:75:ee:34:f9:a0:7e:23:ea:f9:77: ef:97:d6:65:2f:68:4c:68:56:e9:e6:16:c6:c7:28: a7:bc:6d:07:60:95:2d:40:a9:e7:d2:f8:a9:ff:fd: 36:0d:60:cc:28:19:ae:df:28:e7:3e:79:cd:e6:1d: 32:09:bd:e2:c2:60:43:91:ef:7f:a1:28:35:ec:8e: 14:83:eb:d1:01:03:61:95:f3:1b:3d:e2:2c:9f:44: b1:94:e2:31:9f:9f:da:64:2a:a4:08:2b:b7:e2:99: 6c:cc:c1:8b:90:86:72:50:fb:87:9c:75:2b:e1:f4: 83:fc:41:16:e6:b6:ac:74:cb:bc:4b:b9:4a:97:44: c5:e4:56:73:25:5f:36:28:51:db:9a:0f:b9:d3:57: ad:3e:13:4d:61:39:46:7a:fb:ee:3d:22:d3:0e:f7: dd:49:18:5e:37:5e:dd:00:dc:c1:e7:69:fe:71:6a: 7b:e5:98:6c:70:72:b3:16:74:eb:9b:7d:39:29:43: 3f:b6:19:d8:87:bf:96:0e:8f:ba:fe:d1:0a:9a:07: d8:b5:f6:5b:33:d0:7f:49:94:32:91:c6:ee:d1:89: 13:53:4e:a8:16:8e:ae:99:49:7a:71:7f:74:a5:91: 15:13:91:a2:9c:95:cc:b5:df:61:65:80:df:d9:64: 34:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6E:E6:1D:88:71:9F:D5:93:94:F5:19:46:B3:71:F9:95:8F:BA:E5 X509v3 Authority Key Identifier: keyid:4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:be:c1:77:a9:aa:86:9a:10:42:06:c3:15:e1:67:7b:c1:5c: 42:63:97:35:03:b3:fe:c8:8a:98:24:2b:8c:76:c9:cb:5d:af: 79:11:56:e1:00:0b:0d:5b:81:e6:e0:14:70:24:bb:43:ae:b1: 21:8a:2b:fd:e1:69:7d:0b:fe:0e:af:91:a3:06:3a:19:ff:41: 21:d3:06:63:28:d2:74:5e:33:5f:08:43:ed:90:bb:28:70:17: 2a:5b:6e:f3:c8:9d:42:3d:a7:d4:96:b3:82:3d:1b:01:bb:d6: db:62:64:9f:2e:40:21:05:5b:da:63:53:86:ea:45:7f:1b:52: 34:f2:43:c6:ab:09:9c:3c:21:68:fb:7c:88:f2:c8:ee:c4:b3: 92:70:69:82:67:7d:d3:e1:3d:ea:6c:53:22:dc:56:82:ef:6e: ee:a8:fe:8b:f4:71:94:ad:99:d5:84:f8:ac:0c:cf:61:59:f1: 3c:a2:03:89:e0:2c:b0:cd:c9:16:64:2d:42:4f:52:6c:d4:3e: a5:58:f1:07:0c:3a:60:99:3b:b7:3a:16:a3:f6:0c:35:f7:02: 9b:82:11:1e:c4:89:b4:c6:46:5d:73:96:a8:6c:87:76:8f:f8: 99:4b:52:76:60:d4:2c:1b:d6:c2:3d:a1:37:05:4b:f7:e7:2e: 47:0c:31:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKGpq/qYptAGFG+SLnLbAy7Xb1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEOUM0Q0I2MjQwODFDRUM0Nzc0OEEwQUI2N0JFMjdC Q0RGOEI4MzAeFw0yNjA1MTIyMTE5MDJaFw0yNjA1MTMyMTQyMDJaMDMxMTAvBgNV BAMTKDFCNkVFNjFEODg3MTlGRDU5Mzk0RjUxOTQ2QjM3MUY5OTU4RkJBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOIGmJde40+aB+I+r5d++X1mUv aExoVunmFsbHKKe8bQdglS1AqefS+Kn//TYNYMwoGa7fKOc+ec3mHTIJveLCYEOR 73+hKDXsjhSD69EBA2GV8xs94iyfRLGU4jGfn9pkKqQIK7fimWzMwYuQhnJQ+4ec dSvh9IP8QRbmtqx0y7xLuUqXRMXkVnMlXzYoUduaD7nTV60+E01hOUZ6++49ItMO 991JGF43Xt0A3MHnaf5xanvlmGxwcrMWdOubfTkpQz+2GdiHv5YOj7r+0QqaB9i1 9lsz0H9JlDKRxu7RiRNTTqgWjq6ZSXpxf3SlkRUTkaKclcy132FlgN/ZZDSlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG27mHYhxn9WTlPUZRrNx+ZWPuuUwHwYDVR0j BBgwFoAUT9nEy2JAgc7Ed0igq2e+J7zfi4MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTU5MmMyNzQtMTFkYi00MTI3LWJhYmItYWVhZTk5Mjg0YjAwLzAvNEZEOUM0Q0I2 MjQwODFDRUM0Nzc0OEEwQUI2N0JFMjdCQ0RGOEI4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkQ5QzRDQjYyNDA4MUNFQzQ3NzQ4QTBBQjY3QkUyN0JDREY4 QjgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTU5MmMyNzQtMTFkYi00MTI3LWJh YmItYWVhZTk5Mjg0YjAwLzAvNEZEOUM0Q0I2MjQwODFDRUM0Nzc0OEEwQUI2N0JF MjdCQ0RGOEI4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL++wXepqoaaEEIGwxXhZ3vBXEJjlzUDs/7I ipgkK4x2yctdr3kRVuEACw1bgebgFHAku0OusSGKK/3haX0L/g6vkaMGOhn/QSHT BmMo0nReM18IQ+2QuyhwFypbbvPInUI9p9SWs4I9GwG71ttiZJ8uQCEFW9pjU4bq RX8bUjTyQ8arCZw8IWj7fIjyyO7Es5JwaYJnfdPhPepsUyLcVoLvbu6o/ov0cZSt mdWE+KwMz2FZ8TyiA4ngLLDNyRZkLUJPUmzUPqVY8QcMOmCZO7c6FqP2DDX3ApuC ER7EibTGRl1zlqhsh3aP+JlLUnZg1Cwb1sI9oTcFS/fnLkcMMQk= -----END CERTIFICATE-----Generated at Wed May 13 02:13:18 2026 by rpki-client