$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft File: 4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft (raw, json) Hash identifier: J+Nl7ZRN8Onyvun3WPEKwrsXIYQ/1aRHzogA3PsbDl0= Subject key identifier: 0B:21:37:17:28:E9:9B:4B:1B:3C:DD:46:28:8D:1E:8B:91:CE:89:EC Authority key identifier: 4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE Certificate issuer: /CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Certificate serial: 079FB87D1F347AF348269656241B162C8160C09A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:22:09 +0000 Manifest this update: Tue 12 May 2026 20:17:09 +0000 Manifest next update: Wed 13 May 2026 21:30:09 +0000 Files and hashes: 1: 3130332e3232342e36372e302f32342d3234203d3e203539313538.roa (hash: Aw8k55kVz/A5ACNLxhHkCsixHFEWcXHRzRLrIEuRqgk=) 2: 4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl (hash: 98L6N0oaE1/5WMWwPVx6cl4CRN/ZI1UAlOvN0f03RYU=) 3: 3130332e3232342e36352e302f32342d3234203d3e203539313538.roa (hash: h0Ywdp2xV/0uaBG2V+ZPA5ElWunEb3BnR0JL9D5MtcM=) 4: 3130332e3232342e36362e302f32342d3234203d3e203539313538.roa (hash: CaktXeTtnkylUI+n1xZGKMIR5SWqXLjJULrGhcPeRfc=) 5: 3130332e3232342e36342e302f32342d3234203d3e203539313538.roa (hash: vQnWFglYbzJwVQsCkKEdFaQ62I0WzkhSOu2hoX2jL1c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9f:b8:7d:1f:34:7a:f3:48:26:96:56:24:1b:16:2c:81:60:c0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Validity Not Before: May 12 20:17:09 2026 GMT Not After : May 13 21:30:09 2026 GMT Subject: CN=0B21371728E99B4B1B3CDD46288D1E8B91CE89EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:eb:80:ea:55:bd:6a:85:04:8e:a7:16:28:d9: 9c:26:64:7b:e9:92:cb:e1:8b:b2:82:0c:4f:89:6b: b0:41:10:80:a0:21:7f:fe:fb:27:96:2a:73:32:bc: ce:d5:50:75:07:2d:81:2b:cf:93:a8:13:b6:a6:c3: e1:fb:ad:44:b1:27:75:91:05:52:41:19:5c:9c:54: 39:07:d9:05:a7:50:3a:e7:98:8d:66:bd:89:93:9e: c9:f4:9e:20:a2:83:02:57:de:23:d6:d1:05:bc:4b: 2f:b2:b3:77:79:23:0e:dc:43:7f:ba:26:71:e1:57: c3:6e:a1:2b:16:d2:94:7f:e4:2d:25:5e:e5:66:f0: e0:9a:7e:78:7f:dd:30:37:06:ad:6e:4c:ec:6e:17: 19:c6:4b:4e:b9:48:cc:d4:f8:11:cd:52:fc:92:7f: 37:2c:7c:4d:6e:28:e4:8c:82:07:2d:26:cd:12:9b: fe:02:66:02:c9:a4:a2:2a:cd:5d:88:ce:34:3d:83: 0c:9c:ad:f8:8a:90:fb:91:7b:f8:37:be:40:cd:3b: e8:bc:f5:95:aa:d4:0f:98:22:51:80:ca:42:4e:e9: 30:08:bf:43:c1:09:00:7e:c3:af:64:9e:1e:a1:ae: ab:00:71:90:7e:f6:8e:f4:8b:7b:ed:89:f4:35:7e: 13:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:21:37:17:28:E9:9B:4B:1B:3C:DD:46:28:8D:1E:8B:91:CE:89:EC X509v3 Authority Key Identifier: keyid:4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:2f:8b:5d:d8:52:c3:b9:0d:c9:a7:15:d8:61:ca:dc:6f:81: ea:a0:f7:c2:ca:f4:33:1d:5d:c3:71:1c:a3:96:9e:0d:fe:0a: 50:4a:12:6e:aa:34:19:5a:28:7a:7f:69:8e:9d:35:6c:97:22: e8:62:dd:f3:d5:e1:89:74:95:7d:8a:03:63:a3:35:71:de:ac: a3:3d:11:5c:80:0b:ab:8c:05:c6:2b:ac:80:59:3d:d6:6f:03: 70:ce:ff:24:be:fc:24:b9:a2:d1:e8:32:26:35:f3:78:a4:0d: 22:2d:a8:8e:45:70:f0:cb:93:7b:93:1e:b3:51:0c:79:c4:f0: 31:06:66:c7:32:20:a3:5a:ee:66:7f:69:55:3e:75:8d:65:3c: 58:d4:ff:95:22:11:ea:c3:15:4e:6e:00:20:ef:3d:2f:7b:ca: 24:65:e3:d6:32:7c:d8:33:af:8a:65:40:cf:5c:99:23:1b:ee: 50:cc:c5:1e:ef:0e:06:4f:99:65:cb:2e:0f:12:3a:45:52:0b: ce:f8:01:08:4f:97:32:2f:f0:f8:f2:39:e4:05:95:d9:72:38: 85:e3:dd:34:c0:89:4a:b1:36:8f:33:32:c0:30:cd:b8:97:14: 5a:c2:7c:a6:3f:cc:67:21:31:0f:7c:2f:d7:e1:3c:81:5b:d4: da:bd:1c:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB5+4fR80evNIJpZWJBsWLIFgwJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNG Q0Q5QThBRTAeFw0yNjA1MTIyMDE3MDlaFw0yNjA1MTMyMTMwMDlaMDMxMTAvBgNV BAMTKDBCMjEzNzE3MjhFOTlCNEIxQjNDREQ0NjI4OEQxRThCOTFDRTg5RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD964DqVb1qhQSOpxYo2ZwmZHvp ksvhi7KCDE+Ja7BBEICgIX/++yeWKnMyvM7VUHUHLYErz5OoE7amw+H7rUSxJ3WR BVJBGVycVDkH2QWnUDrnmI1mvYmTnsn0niCigwJX3iPW0QW8Sy+ys3d5Iw7cQ3+6 JnHhV8NuoSsW0pR/5C0lXuVm8OCafnh/3TA3Bq1uTOxuFxnGS065SMzU+BHNUvyS fzcsfE1uKOSMggctJs0Sm/4CZgLJpKIqzV2IzjQ9gwycrfiKkPuRe/g3vkDNO+i8 9ZWq1A+YIlGAykJO6TAIv0PBCQB+w69knh6hrqsAcZB+9o70i3vtifQ1fhMnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCyE3Fyjpm0sbPN1GKI0ei5HOiewwHwYDVR0j BBgwFoAUTL6OBwyTDnsCvlZXxVKObPzZqK4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4ZDU0YWUtODcwZC00MzQ4LWFiNTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcw QzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNGQ0Q5QThBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0JFOEUwNzBDOTMwRTdCMDJCRTU2NTdDNTUyOEU2Q0ZDRDlB OEFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE4ZDU0YWUtODcwZC00MzQ4LWFi NTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhF NkNGQ0Q5QThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgvi13YUsO5DcmnFdhhytxvgeqg98LK9DMd XcNxHKOWng3+ClBKEm6qNBlaKHp/aY6dNWyXIuhi3fPV4Yl0lX2KA2OjNXHerKM9 EVyAC6uMBcYrrIBZPdZvA3DO/yS+/CS5otHoMiY183ikDSItqI5FcPDLk3uTHrNR DHnE8DEGZscyIKNa7mZ/aVU+dY1lPFjU/5UiEerDFU5uACDvPS97yiRl49YyfNgz r4plQM9cmSMb7lDMxR7vDgZPmWXLLg8SOkVSC874AQhPlzIv8PjyOeQFldlyOIXj 3TTAiUqxNo8zMsAwzbiXFFrCfKY/zGchMQ98L9fhPIFb1Nq9HJw= -----END CERTIFICATE-----Generated at Wed May 13 04:16:40 2026 by rpki-client