$ rpki-client -vvf rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft File: 4D687A8309B055D62F3035664A59E96297B81009.mft (raw, json) Hash identifier: sghl2iDpIJFNk/AEiX9RfO2gEnAvMBKU8P3BT39FEJY= Subject key identifier: 50:86:D0:5F:2B:05:A3:03:19:D1:CC:6B:8D:49:FB:61:BF:09:1F:F8 Authority key identifier: 4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 Certificate issuer: /CN=4D687A8309B055D62F3035664A59E96297B81009 Certificate serial: 3AB551CA3673D180FE0929B7E21FB415620396B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:59:48 +0000 Manifest this update: Wed 13 May 2026 00:54:48 +0000 Manifest next update: Thu 14 May 2026 04:43:48 +0000 Files and hashes: 1: 4D687A8309B055D62F3035664A59E96297B81009.crl (hash: 5dnZmZvqe94Ce/pXr8h3VX1CM+ujJHeUtoSJRI0NAGI=) 2: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: qwKrohM8yd0iJN/MCZ42zzEDzwWYAIoaAZk2ayeImcw=) 3: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: tjAZ37II5WIJfFalAyrLUGpbSIz9sgJWYsOEq442hNI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b5:51:ca:36:73:d1:80:fe:09:29:b7:e2:1f:b4:15:62:03:96:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D687A8309B055D62F3035664A59E96297B81009 Validity Not Before: May 13 00:54:48 2026 GMT Not After : May 14 04:43:48 2026 GMT Subject: CN=5086D05F2B05A30319D1CC6B8D49FB61BF091FF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:dc:f9:47:a0:55:c9:b8:0b:2a:10:da:b6:d2: 6a:8c:fe:f8:df:80:e8:77:c3:a1:c0:53:99:45:61: 0b:c5:3a:bc:9a:51:f6:c9:91:4c:bc:65:c1:f6:92: 2b:d9:b5:b6:a9:7b:9d:0b:2e:5f:ea:d9:36:c7:04: bb:aa:de:4b:b6:1c:bd:ed:b6:2b:b3:5f:d7:44:e8: 02:49:50:da:7f:92:53:26:8b:b6:1b:f3:54:b9:30: e8:d5:a3:e6:e4:71:d1:af:b5:ea:7e:8f:d1:4f:f4: 20:e1:2d:5c:17:63:93:ba:4c:c6:72:a2:ed:26:50: 23:5e:e9:54:a5:16:cb:05:e4:65:20:1a:94:e9:21: 8c:a6:ca:18:78:63:76:ef:e8:02:e8:d9:bc:a0:df: a5:29:9d:b7:bf:c6:0f:c6:f3:35:1f:55:f6:a5:92: a1:fb:57:8b:87:90:b2:5b:2b:d2:87:f3:58:1d:4d: 9d:82:8e:35:f4:fd:71:ce:01:f1:59:60:2b:68:82: a7:3e:89:47:4e:46:bb:f0:a8:53:04:28:ca:5b:2e: b4:03:ca:a2:85:e5:5a:89:65:ca:f2:69:c3:e7:d1: c3:23:2c:a4:e2:39:9a:f0:53:f6:24:e2:67:4e:75: 83:f9:7d:5f:23:3a:b3:b1:a4:7c:89:70:f6:d8:c0: 31:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:86:D0:5F:2B:05:A3:03:19:D1:CC:6B:8D:49:FB:61:BF:09:1F:F8 X509v3 Authority Key Identifier: keyid:4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:af:63:fa:cb:68:06:20:58:43:e2:f3:05:db:25:cd:b3:65: 2b:cc:e9:7d:c6:30:5f:b7:10:84:15:35:ab:07:34:07:61:76: 87:63:2d:fc:b1:69:1f:01:2a:30:a6:74:9e:c8:35:37:2d:54: 84:fc:a4:81:6f:10:a9:c9:98:dd:df:ac:fe:47:d8:2b:5b:69: 4a:eb:41:33:ba:42:8a:e3:b2:6e:03:d3:79:be:26:a2:ff:45: a5:0e:3c:03:3d:27:3a:6a:43:27:7c:87:fb:11:e1:7a:d3:ce: 7b:b3:e9:44:a4:00:ab:81:8e:1b:16:3f:7f:4f:80:1c:ce:52: 56:90:5b:9b:6d:bc:f5:6f:8f:22:02:e9:8e:64:63:09:1e:75: 12:43:0d:7c:b6:bd:73:4c:1a:e0:d3:2e:51:6a:7e:94:1e:6e: 03:d3:ac:7b:10:c1:3d:ae:e9:65:a8:cc:0d:d2:98:2c:16:16: f4:48:77:95:14:6e:8c:a4:7f:53:2e:99:8a:87:e2:85:8e:bc: 46:fe:51:6e:51:92:29:df:9b:2f:55:1f:b7:00:e7:c5:30:7c: 5a:e7:20:c3:ce:32:e1:f6:bb:cd:29:70:4e:08:db:6a:a6:bb: 0a:0c:d4:41:9e:fd:9f:34:96:18:81:1b:4f:2c:72:81:be:27: 44:b1:1d:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrVRyjZz0YD+CSm34h+0FWIDlrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5 N0I4MTAwOTAeFw0yNjA1MTMwMDU0NDhaFw0yNjA1MTQwNDQzNDhaMDMxMTAvBgNV BAMTKDUwODZEMDVGMkIwNUEzMDMxOUQxQ0M2QjhENDlGQjYxQkYwOTFGRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm3PlHoFXJuAsqENq20mqM/vjf gOh3w6HAU5lFYQvFOryaUfbJkUy8ZcH2kivZtbape50LLl/q2TbHBLuq3ku2HL3t tiuzX9dE6AJJUNp/klMmi7Yb81S5MOjVo+bkcdGvtep+j9FP9CDhLVwXY5O6TMZy ou0mUCNe6VSlFssF5GUgGpTpIYymyhh4Y3bv6ALo2byg36Upnbe/xg/G8zUfVfal kqH7V4uHkLJbK9KH81gdTZ2CjjX0/XHOAfFZYCtogqc+iUdORrvwqFMEKMpbLrQD yqKF5VqJZcryacPn0cMjLKTiOZrwU/Yk4mdOdYP5fV8jOrOxpHyJcPbYwDFBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUIbQXysFowMZ0cxrjUn7Yb8JH/gwHwYDVR0j BBgwFoAUTWh6gwmwVdYvMDVmSlnpYpe4EAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg5MTM4OTMtNWY2NC00YTVlLWE4ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMw OUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5N0I4MTAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80RDY4N0E4MzA5QjA1NUQ2MkYzMDM1NjY0QTU5RTk2Mjk3Qjgx MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5 NjI5N0I4MTAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCvY/rLaAYgWEPi8wXbJc2zZSvM6X3GMF+3 EIQVNasHNAdhdodjLfyxaR8BKjCmdJ7INTctVIT8pIFvEKnJmN3frP5H2CtbaUrr QTO6Qorjsm4D03m+JqL/RaUOPAM9JzpqQyd8h/sR4XrTznuz6USkAKuBjhsWP39P gBzOUlaQW5ttvPVvjyIC6Y5kYwkedRJDDXy2vXNMGuDTLlFqfpQebgPTrHsQwT2u 6WWozA3SmCwWFvRId5UUboykf1MumYqH4oWOvEb+UW5Rkinfmy9VH7cA58UwfFrn IMPOMuH2u80pcE4I22qmuwoM1EGe/Z80lhiBG08scoG+J0SxHac= -----END CERTIFICATE-----Generated at Wed May 13 06:19:03 2026 by rpki-client