$ rpki-client -vvf rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft File: 4887E721DA907B8223025FFDE0F11420EEFD8351.mft (raw, json) Hash identifier: CGYVIqIuH7iTVWt5DU9/ybsMwrS2FLauA5DHk0AgDOY= Subject key identifier: 4D:FE:DE:EB:8A:E8:55:01:07:D5:33:09:C2:B8:95:DC:0A:2F:85:F0 Authority key identifier: 48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51 Certificate issuer: /CN=4887E721DA907B8223025FFDE0F11420EEFD8351 Certificate serial: 5BF724511378EFC9AE6AC2A9989DE0BF6647050C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft Manifest number: 0E Signing time: Tue 12 May 2026 01:39:08 +0000 Manifest this update: Tue 12 May 2026 01:34:08 +0000 Manifest next update: Wed 13 May 2026 05:33:08 +0000 Files and hashes: 1: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: S7aZljmglE5xN0p6gxyZ/h445nngm6FqwRnmfuS0RS0=) 2: 4887E721DA907B8223025FFDE0F11420EEFD8351.crl (hash: ivxUwNnVjFzigz8VwcLNdgXs7aPJvAVcGknH7bmHJ4c=) 3: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: 4n1fjzMSG2wHW3ycKcIEduoFrdhB7CHV6B09r5tY0kg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f7:24:51:13:78:ef:c9:ae:6a:c2:a9:98:9d:e0:bf:66:47:05:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4887E721DA907B8223025FFDE0F11420EEFD8351 Validity Not Before: May 12 01:34:08 2026 GMT Not After : May 13 05:33:08 2026 GMT Subject: CN=4DFEDEEB8AE8550107D53309C2B895DC0A2F85F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:d5:e7:e1:46:ff:3f:15:55:1f:f9:e9:73: b8:43:8a:18:89:ab:23:92:46:01:4b:7d:43:0f:0e: 9c:ab:a3:2b:59:50:40:64:9a:a7:ea:9c:7a:07:fe: 74:ca:da:86:b0:e0:5a:c5:13:bd:67:9b:f2:aa:28: 1e:1b:5d:74:99:20:43:f3:11:d1:ea:f4:95:95:4e: c0:b5:80:f5:b3:c2:07:0b:25:ee:60:d4:d8:bf:a9: 10:0b:f4:6e:b6:bc:63:88:1c:3b:e9:50:f3:a0:a9: a8:b5:63:95:d6:b4:30:45:38:4e:8e:77:5c:ef:3d: fd:30:4e:16:c6:18:0e:db:b9:db:ea:54:d1:87:ee: e7:59:01:b6:2a:96:3d:66:6c:58:29:87:5e:0b:ec: 54:2c:69:f4:e3:dc:38:50:95:c5:9e:05:fc:fe:26: aa:c1:91:cf:64:c6:46:9b:27:77:0c:74:9b:7e:61: cf:b0:d7:2b:d5:35:b7:9a:dc:d9:12:31:ce:9b:ab: ce:2a:49:0c:a8:3a:12:b6:65:bd:42:7e:cf:a9:d6: e0:01:4c:c6:a4:a1:a7:0b:23:70:d7:1d:6f:8d:80: 78:a3:04:44:74:ca:87:86:fe:15:7f:d8:e7:28:fc: 42:9b:10:08:6b:d2:51:d9:36:f1:91:22:bd:d6:db: b6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FE:DE:EB:8A:E8:55:01:07:D5:33:09:C2:B8:95:DC:0A:2F:85:F0 X509v3 Authority Key Identifier: keyid:48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ff:3c:c0:8a:a4:fa:5d:d6:9d:2d:bf:e5:2b:39:21:18:54: 87:98:92:34:43:72:4c:62:68:0e:9f:fb:0e:2e:55:dc:e1:a6: 96:a7:1e:f7:ad:40:2f:40:51:30:62:8a:05:c1:11:f8:58:22: 64:5a:0f:32:12:12:95:98:90:b9:fa:e5:26:61:21:3e:ba:f2: f9:f2:7f:68:5c:f9:94:d8:c7:0d:51:ba:ec:ce:d6:9e:23:2b: 93:ae:6e:3c:a3:17:7e:d1:54:7a:c4:65:24:4b:52:04:2f:c6: 7e:d0:6f:3e:e4:49:9e:46:a1:e4:05:81:50:55:91:83:c8:c8: ae:c7:b3:c7:5e:e2:38:a1:ab:1b:17:7c:dc:28:33:48:24:92: 85:10:b9:c5:4e:6a:ca:f8:53:4b:63:b3:10:4d:0e:73:71:07: 39:51:c5:5e:31:b4:b1:6e:ea:8a:e8:ff:e1:a2:1f:53:3f:16: 83:9f:ef:1c:61:60:63:4d:3b:07:3a:7e:5b:e2:bb:37:63:14: 60:cd:3d:25:cd:a9:ed:dd:ea:dc:89:17:24:27:d3:77:11:c9: 3f:01:f6:8d:bd:e4:28:9e:33:8e:4e:d7:c2:3d:25:a9:5c:fa: 23:15:a2:a9:4a:b2:5b:53:71:58:de:6e:91:69:ac:26:8b:25: da:07:34:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/ckURN478muasKpmJ3gv2ZHBQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4N0U3MjFEQTkwN0I4MjIzMDI1RkZERTBGMTE0MjBF RUZEODM1MTAeFw0yNjA1MTIwMTM0MDhaFw0yNjA1MTMwNTMzMDhaMDMxMTAvBgNV BAMTKDRERkVERUVCOEFFODU1MDEwN0Q1MzMwOUMyQjg5NURDMEEyRjg1RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1iNXn4Ub/PxVVH/npc7hDihiJ qyOSRgFLfUMPDpyroytZUEBkmqfqnHoH/nTK2oaw4FrFE71nm/KqKB4bXXSZIEPz EdHq9JWVTsC1gPWzwgcLJe5g1Ni/qRAL9G62vGOIHDvpUPOgqai1Y5XWtDBFOE6O d1zvPf0wThbGGA7budvqVNGH7udZAbYqlj1mbFgph14L7FQsafTj3DhQlcWeBfz+ JqrBkc9kxkabJ3cMdJt+Yc+w1yvVNbea3NkSMc6bq84qSQyoOhK2Zb1Cfs+p1uAB TMakoacLI3DXHW+NgHijBER0yoeG/hV/2Oco/EKbEAhr0lHZNvGRIr3W27ZfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTf7e64roVQEH1TMJwriV3AovhfAwHwYDVR0j BBgwFoAUSIfnIdqQe4IjAl/94PEUIO79g1EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM0MGRmMTMtYzRlOS00MjE4LWIxMTQtZGVhZDE2NDgyODVjLzAvNDg4N0U3MjFE QTkwN0I4MjIzMDI1RkZERTBGMTE0MjBFRUZEODM1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg3RTcyMURBOTA3QjgyMjMwMjVGRkRFMEYxMTQyMEVFRkQ4 MzUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvNDg4N0U3MjFEQTkwN0I4MjIzMDI1RkZERTBGMTE0 MjBFRUZEODM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIT/PMCKpPpd1p0tv+UrOSEYVIeYkjRDckxi aA6f+w4uVdzhppanHvetQC9AUTBiigXBEfhYImRaDzISEpWYkLn65SZhIT668vny f2hc+ZTYxw1RuuzO1p4jK5OubjyjF37RVHrEZSRLUgQvxn7Qbz7kSZ5GoeQFgVBV kYPIyK7Hs8de4jihqxsXfNwoM0gkkoUQucVOasr4U0tjsxBNDnNxBzlRxV4xtLFu 6oro/+GiH1M/FoOf7xxhYGNNOwc6flviuzdjFGDNPSXNqe3d6tyJFyQn03cRyT8B 9o295CieM45O18I9Jalc+iMVoqlKsltTcVjebpFprCaLJdoHNCg= -----END CERTIFICATE-----Generated at Tue May 12 22:19:31 2026 by rpki-client