$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft File: 4DD4106B03003D9C5B51BF893631C8E467E07F65.mft (raw, json) Hash identifier: 5MoUuGegT3aPanm3LA3M+KWB2MSEUQO/6OXvsqlIGbA= Subject key identifier: 6B:EA:F2:93:3B:0A:3D:9F:33:03:8E:A6:6F:D4:D6:63:B3:35:ED:6C Authority key identifier: 4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65 Certificate issuer: /CN=4DD4106B03003D9C5B51BF893631C8E467E07F65 Certificate serial: 699013AC4CFFD53E36EDE4A8014FA21859518FF3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:24:03 +0000 Manifest this update: Wed 13 May 2026 00:19:03 +0000 Manifest next update: Thu 14 May 2026 03:50:03 +0000 Files and hashes: 1: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: 1g+y0imkE46p3egXComeqIG0umuFfgQzJzzyy2lkq6g=) 2: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: vt8DYAXcs1pDLyawi9vIroRmMQYzGKkbfW81Knq/qWg=) 3: 4DD4106B03003D9C5B51BF893631C8E467E07F65.crl (hash: QMSlwBZoFq/1+WZtdZtGkpqtr3sHyC5laX/HzH5mOgo=) 4: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: 8wp+UX0eKC57lngDUIgSZuJvHJ5tDAZofYJHo8cFmpA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:90:13:ac:4c:ff:d5:3e:36:ed:e4:a8:01:4f:a2:18:59:51:8f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD4106B03003D9C5B51BF893631C8E467E07F65 Validity Not Before: May 13 00:19:03 2026 GMT Not After : May 14 03:50:03 2026 GMT Subject: CN=6BEAF2933B0A3D9F33038EA66FD4D663B335ED6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:55:b3:0e:c5:5b:ce:a7:fa:f2:54:92:d0:92: fe:7d:a0:60:71:47:bc:d5:a7:aa:d3:88:3e:ef:d6: 77:47:0d:8f:8b:a7:ea:f2:7e:38:4c:9a:77:41:9d: dd:b8:5e:69:36:80:2e:44:1b:50:c9:38:fc:cd:82: 90:60:c9:a7:00:47:24:d7:42:29:f5:f0:5a:72:ed: 4f:a1:42:e4:04:a3:be:c4:f0:e1:a5:72:da:a7:56: 21:57:30:42:91:23:c7:ca:32:41:ae:5d:0f:51:77: 7d:f7:0f:43:9b:76:61:23:89:87:f8:35:1d:c7:a2: 36:e9:00:db:5b:68:e8:90:09:53:7e:4b:e5:6f:a8: b7:f1:aa:75:04:3a:8b:04:91:18:b5:bc:47:62:37: 6b:4d:a4:7a:8f:6e:76:98:2a:67:b4:2d:07:b9:b7: 06:b1:17:77:e1:5f:e3:fa:bd:72:7b:f3:d2:c7:a8: 0b:c7:3f:45:62:c4:be:51:77:3c:c6:53:8e:3f:b9: 27:07:72:aa:5e:43:16:d4:f2:f0:4c:1f:f9:9b:07: 98:87:97:25:e0:09:db:07:46:a7:5f:af:a1:b0:52: 5b:81:44:70:5a:6f:65:55:4c:76:ba:e6:a6:51:59: 58:09:92:7e:21:bc:d0:83:b2:a0:b3:1a:9c:01:82: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EA:F2:93:3B:0A:3D:9F:33:03:8E:A6:6F:D4:D6:63:B3:35:ED:6C X509v3 Authority Key Identifier: keyid:4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:c4:d5:7e:d7:55:3a:63:56:18:92:3f:60:f3:b1:40:00:6c: 5c:89:35:e5:ce:b3:0f:8e:4d:11:7c:3f:09:b3:c1:03:97:b5: 9d:2a:7c:d5:34:d6:e6:ac:e6:9e:ef:4a:2d:9b:f1:f6:a1:6b: 8b:32:19:9e:ff:0b:74:78:14:c7:ca:00:f8:48:53:1c:74:07: 7c:e0:12:51:ef:26:2b:a2:06:62:80:9e:67:b5:9c:dc:9f:cd: fa:60:2d:0a:9f:46:5c:16:68:7d:64:4f:ca:8e:23:52:f2:0a: c6:a4:bf:92:19:13:96:97:7e:6d:55:3d:cd:a9:17:5c:81:cc: d2:52:64:00:f4:58:b4:bb:2d:b1:ba:ac:f8:ef:da:3c:1f:be: aa:c3:05:5c:05:a6:59:4f:3b:03:4e:45:73:05:32:42:6a:e8: 9a:71:9a:b1:86:03:95:17:08:fc:95:44:05:63:69:08:3d:8e: 42:b7:bc:54:de:93:b4:b4:53:9d:28:cc:14:35:17:57:c9:e5: a1:fe:3e:21:16:70:c6:fd:09:fc:be:59:6c:f3:a3:d3:1a:bd: 27:ba:e0:21:73:55:00:7d:60:af:96:77:6f:6c:24:4e:4d:46: d4:ee:9a:96:dc:7e:80:0f:b0:9f:a2:0b:16:c1:e5:6d:c6:0d: e5:d0:12:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZATrEz/1T427eSoAU+iGFlRj/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERENDEwNkIwMzAwM0Q5QzVCNTFCRjg5MzYzMUM4RTQ2 N0UwN0Y2NTAeFw0yNjA1MTMwMDE5MDNaFw0yNjA1MTQwMzUwMDNaMDMxMTAvBgNV BAMTKDZCRUFGMjkzM0IwQTNEOUYzMzAzOEVBNjZGRDRENjYzQjMzNUVENkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRVbMOxVvOp/ryVJLQkv59oGBx R7zVp6rTiD7v1ndHDY+Lp+ryfjhMmndBnd24Xmk2gC5EG1DJOPzNgpBgyacARyTX Qin18Fpy7U+hQuQEo77E8OGlctqnViFXMEKRI8fKMkGuXQ9Rd333D0ObdmEjiYf4 NR3HojbpANtbaOiQCVN+S+VvqLfxqnUEOosEkRi1vEdiN2tNpHqPbnaYKme0LQe5 twaxF3fhX+P6vXJ789LHqAvHP0VixL5RdzzGU44/uScHcqpeQxbU8vBMH/mbB5iH lyXgCdsHRqdfr6GwUluBRHBab2VVTHa65qZRWVgJkn4hvNCDsqCzGpwBgvHVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa+rykzsKPZ8zA46mb9TWY7M17WwwHwYDVR0j BBgwFoAUTdQQawMAPZxbUb+JNjHI5Gfgf2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkZTkzNmItNTNjZi00YjA4LWI1ZjctMmI5MGRlMjFmZTk0LzAvNERENDEwNkIw MzAwM0Q5QzVCNTFCRjg5MzYzMUM4RTQ2N0UwN0Y2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REQ0MTA2QjAzMDAzRDlDNUI1MUJGODkzNjMxQzhFNDY3RTA3 RjY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvNERENDEwNkIwMzAwM0Q5QzVCNTFCRjg5MzYzMUM4 RTQ2N0UwN0Y2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvE1X7XVTpjVhiSP2DzsUAAbFyJNeXOsw+O TRF8PwmzwQOXtZ0qfNU01uas5p7vSi2b8faha4syGZ7/C3R4FMfKAPhIUxx0B3zg ElHvJiuiBmKAnme1nNyfzfpgLQqfRlwWaH1kT8qOI1LyCsakv5IZE5aXfm1VPc2p F1yBzNJSZAD0WLS7LbG6rPjv2jwfvqrDBVwFpllPOwNORXMFMkJq6JpxmrGGA5UX CPyVRAVjaQg9jkK3vFTek7S0U50ozBQ1F1fJ5aH+PiEWcMb9Cfy+WWzzo9MavSe6 4CFzVQB9YK+Wd29sJE5NRtTumpbcfoAPsJ+iCxbB5W3GDeXQEtc= -----END CERTIFICATE-----Generated at Wed May 13 02:39:55 2026 by rpki-client