$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft File: 4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft (raw, json) Hash identifier: 3yFtKWc29jetJgYTblkcKK2sip51fm7qiYhV5/jKYtQ= Subject key identifier: BF:08:9C:50:3B:95:FA:65:45:14:E4:A1:99:42:26:C1:AB:11:CD:61 Authority key identifier: 4F:9D:EF:EA:18:F9:7C:95:D8:6B:C7:B3:9D:B7:D8:00:C1:F1:92:0F Certificate issuer: /CN=4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F Certificate serial: 504D564D2B934B7BE3974EE1CDAFAE908200DA81 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:54:32 +0000 Manifest this update: Tue 12 May 2026 18:49:32 +0000 Manifest next update: Wed 13 May 2026 21:16:32 +0000 Files and hashes: 1: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: uBR3IGblPNZJ3jWpF0OXwKYD/CzwZlm+xMvRiWr2v+Q=) 2: 4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl (hash: EXFrWlWbQsEjTje7ZiJuyV1BB/BlGlrsrt7NS18GJlY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4d:56:4d:2b:93:4b:7b:e3:97:4e:e1:cd:af:ae:90:82:00:da:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F Validity Not Before: May 12 18:49:32 2026 GMT Not After : May 13 21:16:32 2026 GMT Subject: CN=BF089C503B95FA654514E4A1994226C1AB11CD61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:e7:4b:8c:53:de:0f:c6:5d:5b:b0:d9:d3: 88:c4:da:1f:59:81:a7:a5:e0:5b:c2:c0:88:1f:c8: f1:92:56:47:ed:f7:0c:9c:ae:45:d3:b6:b8:04:1e: bf:6c:24:24:fa:42:29:89:64:da:e7:98:bd:bb:07: 36:d5:24:08:19:23:a2:cd:89:e2:a2:ea:4f:c2:4d: 6a:e1:97:b0:05:a2:ee:c1:f8:b3:9a:9b:6a:a3:1c: cb:89:a3:9b:c9:9a:6c:6b:10:70:b4:3f:e8:15:36: 66:ec:ba:28:f4:5a:23:28:34:6c:c1:c7:9d:34:32: 35:87:68:5d:d4:4a:fd:be:ec:3d:1d:b8:84:98:a6: af:06:7d:3c:c6:b4:bf:49:51:a6:3f:3d:5c:45:77: de:b5:67:ae:8b:1e:b8:c0:01:5c:2a:96:e9:f8:5f: 2f:e3:e9:f8:6e:2d:d9:54:7d:90:15:fb:54:bd:87: da:3b:95:57:87:70:cf:38:6b:7e:b6:6f:6b:e1:94: 30:9d:fc:44:0a:a9:b5:98:e3:0f:30:11:4d:13:9d: c7:28:fa:bc:7c:43:be:77:eb:20:ea:0f:ed:d8:27: 6f:20:55:ce:74:a7:a0:92:3c:7e:ab:d9:c3:06:98: 0c:48:ab:14:48:a1:e2:72:ba:e0:a5:90:80:db:5c: e7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:08:9C:50:3B:95:FA:65:45:14:E4:A1:99:42:26:C1:AB:11:CD:61 X509v3 Authority Key Identifier: keyid:4F:9D:EF:EA:18:F9:7C:95:D8:6B:C7:B3:9D:B7:D8:00:C1:F1:92:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:fb:d8:12:f7:55:ed:d7:bf:02:96:6a:47:2b:c0:89:2c:d9: 67:5e:6f:55:c4:00:86:d7:db:1d:87:00:e9:ed:2a:16:59:81: 9f:47:37:e8:2c:c1:94:79:0b:53:ca:a1:41:e6:23:2d:b3:46: e8:69:1a:fc:5f:6b:33:3c:c6:94:59:42:c1:f8:3a:b1:5b:9f: 0f:b9:7f:85:2f:68:02:51:db:46:ca:b1:e9:c5:e9:a6:e0:58: 63:38:72:fa:67:de:ec:e9:91:ba:50:28:f2:9b:e1:35:5f:c2: 42:17:7d:3a:f8:2e:ef:2b:25:6c:e1:f8:b8:ed:83:c9:0a:5b: 57:29:7b:ba:3c:c6:fa:b8:6c:29:e6:5e:f8:b2:86:46:18:c3: 65:ae:58:1d:45:3b:1f:bf:a4:53:89:2d:3b:89:a0:57:64:13: 34:8f:23:4d:78:41:64:6d:15:16:5e:26:8f:01:8b:c4:6c:ad: 21:40:2c:45:da:18:0c:6a:74:ba:71:9c:f3:0c:d1:72:6e:88: eb:c6:b5:f9:a2:4f:67:09:2a:83:e6:fe:af:26:66:92:0c:e9: 4b:ef:27:6e:78:47:c3:e2:44:bd:57:c8:84:dc:29:99:4b:bb: d8:9d:8e:e3:57:44:37:f1:26:18:56:47:09:58:c0:98:d4:63: 0f:af:62:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUE1WTSuTS3vjl07hza+ukIIA2oEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY5REVGRUExOEY5N0M5NUQ4NkJDN0IzOURCN0Q4MDBD MUYxOTIwRjAeFw0yNjA1MTIxODQ5MzJaFw0yNjA1MTMyMTE2MzJaMDMxMTAvBgNV BAMTKEJGMDg5QzUwM0I5NUZBNjU0NTE0RTRBMTk5NDIyNkMxQUIxMUNENjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC81OdLjFPeD8ZdW7DZ04jE2h9Z gael4FvCwIgfyPGSVkft9wycrkXTtrgEHr9sJCT6QimJZNrnmL27BzbVJAgZI6LN ieKi6k/CTWrhl7AFou7B+LOam2qjHMuJo5vJmmxrEHC0P+gVNmbsuij0WiMoNGzB x500MjWHaF3USv2+7D0duISYpq8GfTzGtL9JUaY/PVxFd961Z66LHrjAAVwqlun4 Xy/j6fhuLdlUfZAV+1S9h9o7lVeHcM84a362b2vhlDCd/EQKqbWY4w8wEU0Tncco +rx8Q7536yDqD+3YJ28gVc50p6CSPH6r2cMGmAxIqxRIoeJyuuClkIDbXOeNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvwicUDuV+mVFFOShmUImwasRzWEwHwYDVR0j BBgwFoAUT53v6hj5fJXYa8eznbfYAMHxkg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE4ZjA0MzUtNGQzOC00N2VmLTg1MGYtNTFiYTQ2MTdmYjNkLzAvNEY5REVGRUEx OEY5N0M5NUQ4NkJDN0IzOURCN0Q4MDBDMUYxOTIwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RjlERUZFQTE4Rjk3Qzk1RDg2QkM3QjM5REI3RDgwMEMxRjE5 MjBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvNEY5REVGRUExOEY5N0M5NUQ4NkJDN0IzOURCN0Q4 MDBDMUYxOTIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADT72BL3Ve3XvwKWakcrwIks2Wdeb1XEAIbX 2x2HAOntKhZZgZ9HN+gswZR5C1PKoUHmIy2zRuhpGvxfazM8xpRZQsH4OrFbnw+5 f4UvaAJR20bKsenF6abgWGM4cvpn3uzpkbpQKPKb4TVfwkIXfTr4Lu8rJWzh+Ljt g8kKW1cpe7o8xvq4bCnmXviyhkYYw2WuWB1FOx+/pFOJLTuJoFdkEzSPI014QWRt FRZeJo8Bi8RsrSFALEXaGAxqdLpxnPMM0XJuiOvGtfmiT2cJKoPm/q8mZpIM6Uvv J254R8PiRL1XyITcKZlLu9idjuNXRDfxJhhWRwlYwJjUYw+vYhI= -----END CERTIFICATE-----Generated at Wed May 13 00:21:47 2026 by rpki-client