$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft File: 4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft (raw, json) Hash identifier: grxPO3+PAyCWbc9B0VKJpIbcvHOpFUoGvzQPh/rYyWQ= Subject key identifier: B1:00:A0:8A:37:AC:5D:AC:1F:57:97:43:B1:26:D4:96:EA:A2:14:B5 Authority key identifier: 4E:74:77:DA:BC:79:30:FE:18:09:FE:CA:C0:EA:75:1E:02:71:CB:4D Certificate issuer: /CN=4E7477DABC7930FE1809FECAC0EA751E0271CB4D Certificate serial: 07E4B7E82C65DF75617A13FD1B39BF7DE41B9383 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:42:46 +0000 Manifest this update: Tue 12 May 2026 20:37:46 +0000 Manifest next update: Wed 13 May 2026 22:11:46 +0000 Files and hashes: 1: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: Zw4QmhGoJFSvupLpsnKhkJ+LH7pcQWGQYF42nA48zgM=) 2: 4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl (hash: Y4pB0tiOVqp4bG64+KqyZ78zn9aFSAuEAd7w9Ur44Os=) 3: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: 1TQlSvM9bM0BPJInGgS17LfSaiZ9EQP3P7+JjRlSEnE=) 4: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: 6Yw4zWSLXh3EP0vz7URtYM2sAyDkZxqfeg6Oy1ZSbCU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e4:b7:e8:2c:65:df:75:61:7a:13:fd:1b:39:bf:7d:e4:1b:93:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E7477DABC7930FE1809FECAC0EA751E0271CB4D Validity Not Before: May 12 20:37:46 2026 GMT Not After : May 13 22:11:46 2026 GMT Subject: CN=B100A08A37AC5DAC1F579743B126D496EAA214B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:55:86:a7:75:69:32:c2:0e:6b:2a:89:0f:90: e7:9f:f1:f8:68:85:1f:6c:a5:96:5a:a1:c2:de:93: 0d:58:e6:44:fe:57:76:37:d2:b4:b7:7e:cc:36:2f: 79:1a:de:4a:14:ca:dc:5b:92:42:4f:88:7f:e4:a8: 48:94:03:33:2f:34:52:50:73:9c:23:bb:a5:3b:42: 0f:f0:20:45:1e:2d:a4:ad:dc:3a:b7:53:69:59:6c: 48:20:c2:2a:fd:51:6e:f1:1c:f2:82:a4:ed:21:23: 76:72:58:9a:70:62:ec:10:7a:17:f5:9f:3d:f9:f8: 9e:1b:e8:6c:f9:df:bf:9a:b9:41:80:07:13:0d:a4: f4:ad:71:67:c4:9b:2d:c4:30:53:e9:c6:ce:2b:83: f4:29:7e:e4:4c:95:01:0a:04:32:be:4b:c2:a5:31: 72:44:df:c9:e2:33:ec:80:4c:99:05:aa:f3:f5:d6: 7e:ee:b4:e3:93:78:be:b6:59:6a:28:c3:a7:dd:7c: ee:84:89:e0:e0:85:ec:d5:99:7c:c8:42:59:a1:ea: 58:4c:36:ba:eb:2c:16:88:34:4b:1b:fe:54:0e:9d: 50:4f:4d:87:f5:a2:6f:2a:b3:3e:ab:44:e9:a5:42: 67:74:4e:c5:52:e0:1e:4c:d6:f0:3c:ad:25:d0:22: 5e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:00:A0:8A:37:AC:5D:AC:1F:57:97:43:B1:26:D4:96:EA:A2:14:B5 X509v3 Authority Key Identifier: keyid:4E:74:77:DA:BC:79:30:FE:18:09:FE:CA:C0:EA:75:1E:02:71:CB:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f3:c0:5f:c2:8a:ab:ba:61:5a:d1:49:ee:10:66:b0:99:f7: 60:e4:c3:73:bc:1e:85:a1:ed:aa:58:23:da:62:41:be:88:2c: 75:6c:5f:b1:db:23:7c:65:bb:61:18:c3:fa:42:85:eb:0c:06: ad:a7:17:41:95:b4:a4:c4:a2:06:cf:8e:56:22:4b:32:8a:5f: 04:91:de:c7:3a:36:dc:aa:5f:61:10:9a:78:fb:12:72:70:66: 2a:66:fa:05:a8:f6:0a:85:c7:f3:84:07:d1:66:57:48:c2:be: d5:e7:2e:ae:c7:5f:e5:35:df:b9:16:e6:51:16:99:9c:aa:76: 7a:ae:9d:c7:f0:a7:5e:d3:ca:8e:ff:6a:c6:b7:10:42:5e:f6: 0b:27:2b:80:14:e6:5e:37:ba:4f:96:e4:b9:c4:61:f9:66:9d: b2:03:78:cf:5e:3c:97:f0:b8:a3:5c:6d:7a:c0:99:0d:d8:7f: b1:b5:3e:5d:ba:e8:1d:81:1f:43:1a:0b:81:6f:dd:d3:50:4f: 4a:a7:7b:96:b5:48:de:d6:3b:34:e1:33:c1:bf:51:c7:70:f6: 5b:60:4f:d2:b5:ae:f5:f8:88:97:55:2e:a7:05:96:75:62:55: 5b:a4:63:cf:e1:f9:2b:d5:52:ca:b0:50:a0:cb:54:90:2e:f7: 6f:68:2b:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+S36Cxl33VhehP9Gzm/feQbk4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU3NDc3REFCQzc5MzBGRTE4MDlGRUNBQzBFQTc1MUUw MjcxQ0I0RDAeFw0yNjA1MTIyMDM3NDZaFw0yNjA1MTMyMjExNDZaMDMxMTAvBgNV BAMTKEIxMDBBMDhBMzdBQzVEQUMxRjU3OTc0M0IxMjZENDk2RUFBMjE0QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpVYandWkywg5rKokPkOef8fho hR9spZZaocLekw1Y5kT+V3Y30rS3fsw2L3ka3koUytxbkkJPiH/kqEiUAzMvNFJQ c5wju6U7Qg/wIEUeLaSt3Dq3U2lZbEggwir9UW7xHPKCpO0hI3ZyWJpwYuwQehf1 nz35+J4b6Gz537+auUGABxMNpPStcWfEmy3EMFPpxs4rg/QpfuRMlQEKBDK+S8Kl MXJE38niM+yATJkFqvP11n7utOOTeL62WWoow6fdfO6EieDghezVmXzIQlmh6lhM NrrrLBaINEsb/lQOnVBPTYf1om8qsz6rROmlQmd0TsVS4B5M1vA8rSXQIl5vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsQCgijesXawfV5dDsSbUluqiFLUwHwYDVR0j BBgwFoAUTnR32rx5MP4YCf7KwOp1HgJxy00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJjOGNkYTUtMzQ4My00MmIwLWIzODUtZmMwNzA3MTZmYmNjLzAvNEU3NDc3REFC Qzc5MzBGRTE4MDlGRUNBQzBFQTc1MUUwMjcxQ0I0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTc0NzdEQUJDNzkzMEZFMTgwOUZFQ0FDMEVBNzUxRTAyNzFD QjRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvNEU3NDc3REFCQzc5MzBGRTE4MDlGRUNBQzBFQTc1 MUUwMjcxQ0I0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvzwF/Ciqu6YVrRSe4QZrCZ92Dkw3O8HoWh 7apYI9piQb6ILHVsX7HbI3xlu2EYw/pChesMBq2nF0GVtKTEogbPjlYiSzKKXwSR 3sc6NtyqX2EQmnj7EnJwZipm+gWo9gqFx/OEB9FmV0jCvtXnLq7HX+U137kW5lEW mZyqdnquncfwp17Tyo7/asa3EEJe9gsnK4AU5l43uk+W5LnEYflmnbIDeM9ePJfw uKNcbXrAmQ3Yf7G1Pl266B2BH0MaC4Fv3dNQT0qne5a1SN7WOzThM8G/Ucdw9ltg T9K1rvX4iJdVLqcFlnViVVukY8/h+SvVUsqwUKDLVJAu929oK5A= -----END CERTIFICATE-----Generated at Wed May 13 05:43:03 2026 by rpki-client