$ rpki-client -vvf rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft File: C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft (raw, json) Hash identifier: jgpPqP8KGTKSZefzUZA3fynAAh5nlzXMwingG2Sk2fA= Subject key identifier: A2:24:ED:9F:05:F5:57:5C:9C:D7:02:D6:8D:EB:1D:FE:85:54:A6:43 Authority key identifier: C4:60:5A:0F:B7:F0:E2:C2:D0:54:43:3A:9E:4F:CB:C4:F1:5E:A4:F2 Certificate issuer: /CN=C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2 Certificate serial: 59313B229915EE08468D25896F7BCEBE2332DF14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:23:40 +0000 Manifest this update: Tue 12 May 2026 18:18:40 +0000 Manifest next update: Wed 13 May 2026 21:02:40 +0000 Files and hashes: 1: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: 3Y+Wkuip7kYwTNZB3EWxSZVFtVvvUlonF/rrTJ0WSdE=) 2: C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.crl (hash: qHHfSlNZwdODuxXFUnDoXkOvulPPbHMqNObjbrTebuI=) 3: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: mCuIl3B+Pq3Irur4J3MaaMeyRxcQ7JCNDx31iNrLDkc=) 4: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: 9sxhuASFKHOXbj0DOd/0uIHrTBma/ztKpCl/pA1bt+4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.crl rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:31:3b:22:99:15:ee:08:46:8d:25:89:6f:7b:ce:be:23:32:df:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2 Validity Not Before: May 12 18:18:40 2026 GMT Not After : May 13 21:02:40 2026 GMT Subject: CN=A224ED9F05F5575C9CD702D68DEB1DFE8554A643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a4:85:60:9f:e9:94:23:e8:4a:42:8f:cf:44: 3a:cd:34:11:c4:8a:78:d1:2b:37:53:76:45:71:e4: de:bf:8c:ef:b0:c6:1b:24:c7:fb:c4:50:d2:2e:15: 0e:b8:5b:21:84:59:62:49:2e:dc:00:00:08:11:c6: 10:09:bf:17:5c:0d:04:88:1c:a0:de:db:a6:7b:5c: e6:4e:1d:70:9c:a9:97:72:85:58:10:61:80:78:94: aa:4a:dd:21:75:d3:e9:65:2c:9a:81:11:47:54:e4: 89:f9:dd:36:09:c2:cf:a2:26:76:d7:af:a8:05:38: 7c:3d:2d:4b:15:6d:5c:e6:74:2c:7c:4a:9c:d8:2b: 86:47:9c:1a:27:61:ed:e9:e0:78:05:3f:a7:ed:93: d8:5b:d2:6e:ac:6a:9b:95:5c:f3:40:11:a5:cc:3c: 87:84:ad:7e:94:87:b0:0c:b1:e0:43:31:46:1c:9f: 17:e7:71:18:9a:61:90:e9:68:b8:f3:cf:be:f0:af: 00:21:ec:7d:5e:3c:e9:4c:c9:7b:a9:33:3f:12:c2: 85:82:df:2e:24:21:e5:83:a1:bc:bb:ae:59:75:56: d1:6c:b3:52:32:a2:6d:dd:21:25:11:1f:9e:08:bd: 91:2c:33:3b:c5:a6:e4:41:69:d0:0e:96:08:5f:54: e2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:24:ED:9F:05:F5:57:5C:9C:D7:02:D6:8D:EB:1D:FE:85:54:A6:43 X509v3 Authority Key Identifier: keyid:C4:60:5A:0F:B7:F0:E2:C2:D0:54:43:3A:9E:4F:CB:C4:F1:5E:A4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ef:e7:f9:f0:34:c7:4d:b0:6f:af:83:fa:52:31:23:64:f1: b6:da:d1:c7:a9:9e:4b:77:98:48:df:02:44:cf:af:a9:8f:dd: ac:57:44:bb:2e:e4:c0:cb:84:bf:06:3f:9e:04:bb:53:81:4c: 2d:b2:6c:73:6b:20:7c:d3:6d:58:f3:dd:d9:03:ae:00:0c:b5: 2a:70:41:b4:ed:6e:92:6e:10:cf:1b:17:07:0b:bf:93:6f:a2: 07:82:99:f2:11:3c:1f:f6:3e:f1:27:6a:72:6c:b9:1e:b7:de: ba:a4:36:52:de:3a:bf:0f:6f:ed:b4:93:f5:b6:50:a1:ea:c1: ea:9d:7a:f4:d8:f3:8b:35:30:b9:db:8a:76:8e:95:aa:7c:db: 6c:d4:ea:b2:2e:88:ee:ce:40:74:c5:22:b3:c2:3c:57:28:ef: 2a:2d:6a:b0:d1:71:8f:de:7d:73:42:6d:c5:4f:c1:2a:8f:3f: 9c:4e:47:40:12:1b:fd:04:4a:aa:76:b9:92:07:f1:ae:f5:69: 7c:23:60:e0:a4:5b:50:e7:1d:03:f8:af:f0:ad:f9:d3:75:85: 70:26:fd:82:fc:ce:64:bf:01:39:5c:90:ed:53:bb:5e:e2:38: 42:df:c0:85:b0:1c:50:74:22:07:b3:54:24:82:e5:dd:f2:43: f6:d3:ff:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWTE7IpkV7ghGjSWJb3vOviMy3xQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2MDVBMEZCN0YwRTJDMkQwNTQ0MzNBOUU0RkNCQzRG MTVFQTRGMjAeFw0yNjA1MTIxODE4NDBaFw0yNjA1MTMyMTAyNDBaMDMxMTAvBgNV BAMTKEEyMjRFRDlGMDVGNTU3NUM5Q0Q3MDJENjhERUIxREZFODU1NEE2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlpIVgn+mUI+hKQo/PRDrNNBHE injRKzdTdkVx5N6/jO+wxhskx/vEUNIuFQ64WyGEWWJJLtwAAAgRxhAJvxdcDQSI HKDe26Z7XOZOHXCcqZdyhVgQYYB4lKpK3SF10+llLJqBEUdU5In53TYJws+iJnbX r6gFOHw9LUsVbVzmdCx8SpzYK4ZHnBonYe3p4HgFP6ftk9hb0m6sapuVXPNAEaXM PIeErX6Uh7AMseBDMUYcnxfncRiaYZDpaLjzz77wrwAh7H1ePOlMyXupMz8SwoWC 3y4kIeWDoby7rll1VtFss1Iyom3dISURH54IvZEsMzvFpuRBadAOlghfVOLZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoiTtnwX1V1yc1wLWjesd/oVUpkMwHwYDVR0j BBgwFoAUxGBaD7fw4sLQVEM6nk/LxPFepPIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZjMWM1MjktNjI0NC00NTAzLWFmNTYtNjk0NTllNGE3NjBmLzAvQzQ2MDVBMEZC N0YwRTJDMkQwNTQ0MzNBOUU0RkNCQzRGMTVFQTRGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNDYwNUEwRkI3RjBFMkMyRDA1NDQzM0E5RTRGQ0JDNEYxNUVB NEYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZjMWM1MjktNjI0NC00NTAzLWFm NTYtNjk0NTllNGE3NjBmLzAvQzQ2MDVBMEZCN0YwRTJDMkQwNTQ0MzNBOUU0RkNC QzRGMTVFQTRGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPv5/nwNMdNsG+vg/pSMSNk8bba0cepnkt3 mEjfAkTPr6mP3axXRLsu5MDLhL8GP54Eu1OBTC2ybHNrIHzTbVjz3dkDrgAMtSpw QbTtbpJuEM8bFwcLv5NvogeCmfIRPB/2PvEnanJsuR633rqkNlLeOr8Pb+20k/W2 UKHqweqdevTY84s1MLnbinaOlap822zU6rIuiO7OQHTFIrPCPFco7yotarDRcY/e fXNCbcVPwSqPP5xOR0ASG/0ESqp2uZIH8a71aXwjYOCkW1DnHQP4r/Ct+dN1hXAm /YL8zmS/ATlckO1Tu17iOELfwIWwHFB0IgezVCSC5d3yQ/bT/3M= -----END CERTIFICATE-----Generated at Wed May 13 05:47:08 2026 by rpki-client