$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft File: 4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft (raw, json) Hash identifier: +Tst0vgma0fYuc/mdr1m1M90Sac/tKfFDuPSfBs2EUA= Subject key identifier: 63:A5:22:2D:24:9D:9C:2B:7F:E8:E3:33:E6:37:D1:23:BC:5A:75:B4 Authority key identifier: 4A:CA:AD:0A:28:A6:50:A9:BD:65:B0:A6:E1:90:57:F4:7B:DB:94:2F Certificate issuer: /CN=4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F Certificate serial: 436B505FC59665616269670F44A2FE384E8DFA1D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:59:39 +0000 Manifest this update: Tue 12 May 2026 14:54:39 +0000 Manifest next update: Wed 13 May 2026 16:41:39 +0000 Files and hashes: 1: 3130332e3136332e3234302e302f32342d3234203d3e20313431383837.roa (hash: 5Ssmm5grz5Tl3MtkZw82jMEzuLc9usDz6SBlVHYxN7U=) 2: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (hash: 7y1kc2AMpxx6evn2aDQV63VxhXeky0gM842l022bSD4=) 3: 4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl (hash: Wl12l7KUh/+ItAfJdx3YFPTQqszOXbBuZLLZTK6u0SU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:6b:50:5f:c5:96:65:61:62:69:67:0f:44:a2:fe:38:4e:8d:fa:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F Validity Not Before: May 12 14:54:39 2026 GMT Not After : May 13 16:41:39 2026 GMT Subject: CN=63A5222D249D9C2B7FE8E333E637D123BC5A75B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f9:e0:69:76:56:ba:9a:79:b0:fe:ef:e3:27: a7:44:e4:af:c8:7f:8e:1c:08:b6:32:17:90:6e:ce: 5a:6f:08:99:cb:d6:4c:52:e6:e0:d4:71:c6:05:7d: bc:cc:46:30:19:b8:35:b3:89:1b:91:71:9e:e4:d5: 62:fb:be:a3:54:54:14:0d:78:ac:24:87:52:05:27: eb:d9:5b:e9:de:78:82:01:a8:18:72:63:af:e2:73: aa:5d:3c:8b:1f:08:89:03:e7:19:f3:f7:3d:cf:b6: 98:ed:4c:46:31:5c:ff:9e:18:0e:ec:1a:e0:03:b4: e8:4e:01:dc:ce:4e:7b:19:df:40:b5:3a:74:83:bd: c4:bd:b2:ea:5b:93:94:f1:29:4b:42:d0:ca:e5:7c: dd:12:e0:f2:87:6f:09:3d:70:1a:8e:46:ce:f8:0b: 2f:22:71:48:df:45:de:db:7a:cd:7b:90:d2:99:49: e0:70:7a:b2:d8:f8:a7:7d:34:93:38:7a:7f:89:a8: 54:12:cf:8d:7a:67:b2:9d:6c:2f:d2:08:a2:ae:75: 91:4b:bf:18:38:21:01:6d:5f:d7:2b:1b:f0:d6:74: 89:d9:57:9b:e1:d6:68:b4:92:c4:e1:9a:df:12:02: e6:fe:96:3e:40:39:b6:a5:27:01:4e:32:2b:b1:c4: 8b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A5:22:2D:24:9D:9C:2B:7F:E8:E3:33:E6:37:D1:23:BC:5A:75:B4 X509v3 Authority Key Identifier: keyid:4A:CA:AD:0A:28:A6:50:A9:BD:65:B0:A6:E1:90:57:F4:7B:DB:94:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:48:cb:89:0e:5c:dd:96:d5:54:52:7d:03:5f:c2:69:94:65: 5d:fc:cc:c7:ea:4b:54:78:21:36:c3:63:83:c8:7c:8a:8a:7a: 34:36:b3:3b:3b:79:e7:76:34:36:27:37:7a:b7:2a:72:54:78: ee:bf:d9:84:8a:fc:20:80:cb:b7:88:74:65:05:de:e0:69:ef: cd:90:5f:0a:3a:2d:89:7f:17:ef:fc:78:53:d8:7e:1e:6d:4d: a3:1b:c2:b2:53:94:0a:da:a9:b7:25:44:27:11:06:fd:26:00: bf:20:39:f2:c7:52:d5:7f:2f:d6:10:aa:a6:4d:ed:6f:aa:93: ff:6b:ce:a6:99:b6:b8:a4:0b:cf:d2:81:fc:f3:47:27:45:44: 1d:75:3b:c9:0d:12:56:bd:6a:c2:b5:ea:e0:28:ed:d5:a7:20: 0a:1a:0e:57:6d:66:9f:fe:55:35:a5:4b:65:e3:e5:3e:01:b3: 8f:7d:a5:a5:43:cc:c9:43:71:80:75:9e:b8:21:24:b0:65:e1: 2a:2c:25:5a:c0:64:2c:9a:7c:13:59:e5:a9:48:b7:4d:15:15: d8:9f:b1:16:1f:73:d1:84:03:61:9c:85:90:26:59:41:c6:36: e2:05:7b:0a:28:bf:03:3d:39:fc:6f:91:f0:d6:b1:da:0a:1d: b8:89:cd:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ2tQX8WWZWFiaWcPRKL+OE6N+h0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDQUFEMEEyOEE2NTBBOUJENjVCMEE2RTE5MDU3RjQ3 QkRCOTQyRjAeFw0yNjA1MTIxNDU0MzlaFw0yNjA1MTMxNjQxMzlaMDMxMTAvBgNV BAMTKDYzQTUyMjJEMjQ5RDlDMkI3RkU4RTMzM0U2MzdEMTIzQkM1QTc1QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+eBpdla6mnmw/u/jJ6dE5K/I f44cCLYyF5BuzlpvCJnL1kxS5uDUccYFfbzMRjAZuDWziRuRcZ7k1WL7vqNUVBQN eKwkh1IFJ+vZW+neeIIBqBhyY6/ic6pdPIsfCIkD5xnz9z3PtpjtTEYxXP+eGA7s GuADtOhOAdzOTnsZ30C1OnSDvcS9supbk5TxKUtC0MrlfN0S4PKHbwk9cBqORs74 Cy8icUjfRd7bes17kNKZSeBwerLY+Kd9NJM4en+JqFQSz416Z7KdbC/SCKKudZFL vxg4IQFtX9crG/DWdInZV5vh1mi0ksThmt8SAub+lj5AObalJwFOMiuxxItHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY6UiLSSdnCt/6OMz5jfRI7xadbQwHwYDVR0j BBgwFoAUSsqtCiimUKm9ZbCm4ZBX9HvblC8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M1Yjc4NWQtODMwMy00NWM1LTlhNTgtZWMxMjg4NzQwODY2LzAvNEFDQUFEMEEy OEE2NTBBOUJENjVCMEE2RTE5MDU3RjQ3QkRCOTQyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUNBQUQwQTI4QTY1MEE5QkQ2NUIwQTZFMTkwNTdGNDdCREI5 NDJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvNEFDQUFEMEEyOEE2NTBBOUJENjVCMEE2RTE5MDU3 RjQ3QkRCOTQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBIy4kOXN2W1VRSfQNfwmmUZV38zMfqS1R4 ITbDY4PIfIqKejQ2szs7eed2NDYnN3q3KnJUeO6/2YSK/CCAy7eIdGUF3uBp782Q Xwo6LYl/F+/8eFPYfh5tTaMbwrJTlAraqbclRCcRBv0mAL8gOfLHUtV/L9YQqqZN 7W+qk/9rzqaZtrikC8/SgfzzRydFRB11O8kNEla9asK16uAo7dWnIAoaDldtZp/+ VTWlS2Xj5T4Bs499paVDzMlDcYB1nrghJLBl4SosJVrAZCyafBNZ5alIt00VFdif sRYfc9GEA2GchZAmWUHGNuIFewoovwM9OfxvkfDWsdoKHbiJzcM= -----END CERTIFICATE-----Generated at Wed May 13 08:39:20 2026 by rpki-client