$ rpki-client -vvf rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft File: 4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft (raw, json) Hash identifier: +RFoCbwW92dJuUW2/Nxsqaut8Sy5Ut/1ivvHrI0ZB5w= Subject key identifier: 7E:36:1D:23:27:2C:01:0F:25:5A:0B:C7:CF:04:C8:07:2A:D3:01:F3 Authority key identifier: 4A:18:E5:54:0F:B9:CF:E0:7A:95:ED:F8:9B:AF:7C:E9:78:E9:42:58 Certificate issuer: /CN=4A18E5540FB9CFE07A95EDF89BAF7CE978E94258 Certificate serial: 76425D487F330889271C611CEE774AC32446212E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:11:49 +0000 Manifest this update: Tue 12 May 2026 20:06:49 +0000 Manifest next update: Wed 13 May 2026 20:48:49 +0000 Files and hashes: 1: 4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl (hash: cz1gtQm1VN6b5JQuVbF1OsRyDao2qC2ZyTO8r+oz8L8=) 2: 3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa (hash: CHd91Km0nR+qP58cZt8MMTA3jronphrVjPNjJ4FduNs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:42:5d:48:7f:33:08:89:27:1c:61:1c:ee:77:4a:c3:24:46:21:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A18E5540FB9CFE07A95EDF89BAF7CE978E94258 Validity Not Before: May 12 20:06:49 2026 GMT Not After : May 13 20:48:49 2026 GMT Subject: CN=7E361D23272C010F255A0BC7CF04C8072AD301F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:19:04:15:76:c4:31:e8:e2:b4:fa:60:05:86: 38:a4:1e:32:3b:e1:f6:fb:84:93:fd:25:11:62:e6: 91:20:d7:b6:28:a9:d7:c5:71:40:af:9d:d9:84:bb: 0d:f1:c8:95:bd:d2:76:91:91:b7:a9:5c:2c:84:2a: c8:53:cf:09:db:d9:f4:10:d2:5e:3f:fb:1f:86:0d: f8:7d:58:8c:93:ba:ca:f8:ff:cd:f5:a9:41:be:2d: 96:97:51:48:ef:06:53:73:3f:39:bf:bc:07:50:ee: f3:e8:5a:0a:c9:a4:c6:5e:28:b6:f5:7e:73:70:6f: c3:25:14:d1:40:cb:c9:be:e0:aa:0a:14:8d:01:88: 0f:2a:8c:9a:b3:83:07:7c:c0:90:69:39:f8:9a:e9: 00:ce:8f:88:97:f5:2a:f8:1f:8d:f3:9d:ab:2e:ca: 6f:1b:7f:3c:81:13:4a:38:74:e7:e5:a2:c3:d2:97: f9:2c:55:00:86:cd:e1:5b:c9:a1:d9:f3:0e:7e:eb: 0b:57:45:3e:4e:b9:e6:1a:cd:6e:13:11:0d:0d:f0: c2:26:b4:c1:ee:47:9f:df:85:4e:1b:f6:d3:f6:0f: 77:8e:bf:85:a9:fb:db:d2:db:aa:e2:8b:38:fc:f4: b5:83:55:06:ab:84:b9:13:a5:07:9c:c5:7e:c9:5e: 95:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:36:1D:23:27:2C:01:0F:25:5A:0B:C7:CF:04:C8:07:2A:D3:01:F3 X509v3 Authority Key Identifier: keyid:4A:18:E5:54:0F:B9:CF:E0:7A:95:ED:F8:9B:AF:7C:E9:78:E9:42:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:bc:5e:56:7e:31:9c:27:e2:38:cb:a0:28:b2:aa:11:36:04: dc:39:f3:13:11:e7:73:e1:cf:05:2f:71:8b:eb:60:9a:e8:e5: e9:c1:82:71:07:a6:5e:f8:39:85:b9:66:96:bd:33:66:78:1c: b9:ab:84:69:1d:56:0d:da:7a:ac:e8:40:d1:9a:d6:20:9b:9c: 44:65:63:2e:b5:a8:4a:c3:82:24:f6:90:ae:a7:16:50:15:45: c3:b5:77:5c:cf:20:4f:89:41:cd:57:f9:c6:66:f8:ac:bd:9f: 60:70:ed:ef:bb:55:6e:2f:a6:75:36:b1:09:3f:2a:8d:c1:9b: ad:07:e2:61:18:cd:41:8f:08:97:1b:46:d6:94:ad:6d:9f:18: 61:98:da:cd:95:1d:71:98:bd:c5:84:aa:1e:88:20:f3:f4:7f: 91:60:c5:7f:b4:5e:5d:4e:0f:7d:64:c8:e9:41:93:67:20:c6: 9c:aa:62:64:19:3e:33:24:17:6a:d7:06:4f:28:58:71:b2:ff: a7:0a:5f:52:46:3e:89:c0:62:46:0c:a2:bd:c8:e9:26:5d:d7: 6b:e5:56:31:9d:0e:71:62:d8:84:8e:3e:e6:07:e3:8e:e5:a0: f6:4b:e2:34:93:7a:c9:50:c1:bc:88:71:a6:fc:74:a1:0a:89: ff:d8:67:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdkJdSH8zCIknHGEc7ndKwyRGIS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEExOEU1NTQwRkI5Q0ZFMDdBOTVFREY4OUJBRjdDRTk3 OEU5NDI1ODAeFw0yNjA1MTIyMDA2NDlaFw0yNjA1MTMyMDQ4NDlaMDMxMTAvBgNV BAMTKDdFMzYxRDIzMjcyQzAxMEYyNTVBMEJDN0NGMDRDODA3MkFEMzAxRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3GQQVdsQx6OK0+mAFhjikHjI7 4fb7hJP9JRFi5pEg17YoqdfFcUCvndmEuw3xyJW90naRkbepXCyEKshTzwnb2fQQ 0l4/+x+GDfh9WIyTusr4/831qUG+LZaXUUjvBlNzPzm/vAdQ7vPoWgrJpMZeKLb1 fnNwb8MlFNFAy8m+4KoKFI0BiA8qjJqzgwd8wJBpOfia6QDOj4iX9Sr4H43znasu ym8bfzyBE0o4dOflosPSl/ksVQCGzeFbyaHZ8w5+6wtXRT5OueYazW4TEQ0N8MIm tMHuR5/fhU4b9tP2D3eOv4Wp+9vS26riizj89LWDVQarhLkTpQecxX7JXpUvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfjYdIycsAQ8lWgvHzwTIByrTAfMwHwYDVR0j BBgwFoAUShjlVA+5z+B6le34m6986XjpQlgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjlmYzk5NmYtNzJjYS00ZDZiLWEwZTctZmY1YmM0MmIwNTg5LzAvNEExOEU1NTQw RkI5Q0ZFMDdBOTVFREY4OUJBRjdDRTk3OEU5NDI1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTE4RTU1NDBGQjlDRkUwN0E5NUVERjg5QkFGN0NFOTc4RTk0 MjU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjlmYzk5NmYtNzJjYS00ZDZiLWEw ZTctZmY1YmM0MmIwNTg5LzAvNEExOEU1NTQwRkI5Q0ZFMDdBOTVFREY4OUJBRjdD RTk3OEU5NDI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEe8XlZ+MZwn4jjLoCiyqhE2BNw58xMR53Ph zwUvcYvrYJro5enBgnEHpl74OYW5Zpa9M2Z4HLmrhGkdVg3aeqzoQNGa1iCbnERl Yy61qErDgiT2kK6nFlAVRcO1d1zPIE+JQc1X+cZm+Ky9n2Bw7e+7VW4vpnU2sQk/ Ko3Bm60H4mEYzUGPCJcbRtaUrW2fGGGY2s2VHXGYvcWEqh6IIPP0f5FgxX+0Xl1O D31kyOlBk2cgxpyqYmQZPjMkF2rXBk8oWHGy/6cKX1JGPonAYkYMor3I6SZd12vl VjGdDnFi2ISOPuYH447loPZL4jSTeslQwbyIcab8dKEKif/YZ9I= -----END CERTIFICATE-----Generated at Tue May 12 23:27:38 2026 by rpki-client