$ rpki-client -vvf rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft File: 479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft (raw, json) Hash identifier: toBxinswGawRxtYQgCCYUBpPfiw7l7tpg7k5dnpGXN0= Subject key identifier: EC:C9:54:08:B2:1E:C1:DB:47:31:58:E4:A8:2A:D8:0F:6A:19:23:C4 Authority key identifier: 47:9B:92:8D:BE:E9:00:1B:99:B2:1F:C3:CA:0B:A5:F3:7D:10:CC:A6 Certificate issuer: /CN=479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6 Certificate serial: 3F93CC785340B01612672EF85875AA048FEB45C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:51:23 +0000 Manifest this update: Tue 12 May 2026 05:46:23 +0000 Manifest next update: Wed 13 May 2026 08:42:23 +0000 Files and hashes: 1: 3130332e332e3233332e302f32342d3234203d3e203538343837.roa (hash: Cw+u02HjQBz4UCjHcubQmRW6z/LpqGrri/10Si/nkow=) 2: 479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl (hash: B7AO72S+utgFlvQHbyMb5PYSr5iI1CM93041ZeS5ASY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:93:cc:78:53:40:b0:16:12:67:2e:f8:58:75:aa:04:8f:eb:45:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6 Validity Not Before: May 12 05:46:23 2026 GMT Not After : May 13 08:42:23 2026 GMT Subject: CN=ECC95408B21EC1DB473158E4A82AD80F6A1923C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:18:68:17:49:81:ce:48:96:38:f9:46:f1:81: 48:b6:0e:78:38:b9:f4:91:4e:3a:08:0c:b4:9b:ff: cc:4e:e5:ad:bb:f4:35:9d:03:57:d0:d0:c9:7e:72: 91:62:6f:5b:5e:21:32:c5:42:f7:62:0b:20:7b:60: 86:d3:e9:d0:97:e7:54:94:8e:9c:83:d1:79:9e:ac: 1e:5c:f5:2f:10:7e:a4:90:7d:5a:80:cc:c2:b0:10: f8:85:35:66:9b:0f:a9:48:39:0e:06:db:64:67:87: 5f:c4:a7:bc:16:99:d7:b4:21:f2:3b:bb:8c:c6:d8: 70:8c:45:fd:f6:b6:39:86:d7:b4:ac:94:a4:f7:8f: 59:b1:70:6d:28:9a:22:4a:fc:5c:35:39:38:4e:29: ca:63:83:fe:87:6c:59:5c:7c:f5:64:2c:10:ef:02: dc:6e:9a:91:c1:62:23:0e:bd:0c:7a:d3:46:96:6c: 7c:58:db:db:b6:bd:65:52:a2:82:a5:2e:f2:80:99: 7b:17:88:cd:47:4b:7f:cb:ce:80:97:b6:95:47:46: 1b:ed:26:ff:c4:ec:a8:a8:ad:b7:44:67:c6:bf:69: 9d:23:21:57:3d:da:5c:a1:b6:ce:66:41:0b:38:19: 83:2b:bd:8b:46:e8:d1:94:75:93:46:de:9b:db:be: d6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C9:54:08:B2:1E:C1:DB:47:31:58:E4:A8:2A:D8:0F:6A:19:23:C4 X509v3 Authority Key Identifier: keyid:47:9B:92:8D:BE:E9:00:1B:99:B2:1F:C3:CA:0B:A5:F3:7D:10:CC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:06:97:94:42:f8:fc:2e:16:34:8e:4c:c4:d4:5c:c8:0a:5a: c5:fd:ef:72:7d:ac:09:1a:f3:03:f7:8b:f0:60:32:fb:21:18: 87:01:44:9b:d3:3b:ff:2e:37:64:33:13:1b:f5:85:c6:f2:30: 7e:56:78:e0:cd:5b:a1:96:25:5d:0e:52:6b:a1:8a:ee:92:9a: 5b:b8:af:b7:d8:0c:45:d7:06:3e:64:1e:b9:87:54:dd:14:ea: df:8b:48:22:9c:72:37:28:4d:ff:f9:59:17:1f:d2:8b:7a:a2: d3:d0:c4:14:f6:07:77:71:67:3c:a2:0e:c1:1e:ac:be:14:c5: 3f:d9:7d:f6:fc:d3:32:4a:68:30:15:9c:40:eb:1c:ad:f7:95: 69:ad:fa:71:d6:ab:9e:b0:a5:14:0e:f4:50:69:b4:48:64:34: 76:16:38:ab:35:32:ca:a9:f2:72:e4:16:0e:4e:60:bd:60:68: 18:e7:3c:29:76:5e:8e:a7:e2:f8:92:7f:16:2e:04:80:1c:22: 83:e1:7f:32:85:7e:af:0e:a0:ed:fa:70:28:4e:ee:f9:bd:96: 5a:9c:8d:cb:d4:34:86:f3:a2:f4:3a:46:ab:ee:74:7c:e2:bb: de:cb:80:a1:fe:a9:a2:ce:20:e0:f6:ce:46:83:6c:88:89:df: 21:45:b3:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP5PMeFNAsBYSZy74WHWqBI/rRcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc5QjkyOERCRUU5MDAxQjk5QjIxRkMzQ0EwQkE1RjM3 RDEwQ0NBNjAeFw0yNjA1MTIwNTQ2MjNaFw0yNjA1MTMwODQyMjNaMDMxMTAvBgNV BAMTKEVDQzk1NDA4QjIxRUMxREI0NzMxNThFNEE4MkFEODBGNkExOTIzQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgGGgXSYHOSJY4+UbxgUi2Dng4 ufSRTjoIDLSb/8xO5a279DWdA1fQ0Ml+cpFib1teITLFQvdiCyB7YIbT6dCX51SU jpyD0XmerB5c9S8QfqSQfVqAzMKwEPiFNWabD6lIOQ4G22Rnh1/Ep7wWmde0IfI7 u4zG2HCMRf32tjmG17SslKT3j1mxcG0omiJK/Fw1OThOKcpjg/6HbFlcfPVkLBDv AtxumpHBYiMOvQx600aWbHxY29u2vWVSooKlLvKAmXsXiM1HS3/LzoCXtpVHRhvt Jv/E7KiorbdEZ8a/aZ0jIVc92lyhts5mQQs4GYMrvYtG6NGUdZNG3pvbvtYRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7MlUCLIewdtHMVjkqCrYD2oZI8QwHwYDVR0j BBgwFoAUR5uSjb7pABuZsh/Dygul830QzKYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQzZjI5ZWEtODc0YS00ZDFhLWFiY2MtNzUyOTNjYjUxYTZkLzAvNDc5QjkyOERC RUU5MDAxQjk5QjIxRkMzQ0EwQkE1RjM3RDEwQ0NBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzlCOTI4REJFRTkwMDFCOTlCMjFGQzNDQTBCQTVGMzdEMTBD Q0E2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQzZjI5ZWEtODc0YS00ZDFhLWFi Y2MtNzUyOTNjYjUxYTZkLzAvNDc5QjkyOERCRUU5MDAxQjk5QjIxRkMzQ0EwQkE1 RjM3RDEwQ0NBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcGl5RC+PwuFjSOTMTUXMgKWsX973J9rAka 8wP3i/BgMvshGIcBRJvTO/8uN2QzExv1hcbyMH5WeODNW6GWJV0OUmuhiu6Smlu4 r7fYDEXXBj5kHrmHVN0U6t+LSCKccjcoTf/5WRcf0ot6otPQxBT2B3dxZzyiDsEe rL4UxT/Zffb80zJKaDAVnEDrHK33lWmt+nHWq56wpRQO9FBptEhkNHYWOKs1Msqp 8nLkFg5OYL1gaBjnPCl2Xo6n4viSfxYuBIAcIoPhfzKFfq8OoO36cChO7vm9llqc jcvUNIbzovQ6RqvudHziu97LgKH+qaLOIOD2zkaDbIiJ3yFFs/g= -----END CERTIFICATE-----Generated at Wed May 13 00:13:45 2026 by rpki-client