$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft File: 14649B106FA0C411D7FCD73A4B0147226E8A8454.mft (raw, json) Hash identifier: 2yOHUEDMpawsLfimd/JXJGGdNDSknXCM/2Zpz9fUrHc= Subject key identifier: C8:0F:B2:2A:74:85:12:9B:58:0A:3A:30:1B:A8:A7:22:34:19:4B:42 Authority key identifier: 14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54 Certificate issuer: /CN=14649B106FA0C411D7FCD73A4B0147226E8A8454 Certificate serial: 598C54F923D5D3668940FAEF864FC1D773173B9D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:53:10 +0000 Manifest this update: Tue 12 May 2026 20:48:10 +0000 Manifest next update: Wed 13 May 2026 22:57:10 +0000 Files and hashes: 1: 14649B106FA0C411D7FCD73A4B0147226E8A8454.crl (hash: L//+C7yMiXMOeL9TFeqMX1JgKy2bhjLEhqc5ypmHjWo=) 2: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (hash: j+ssfk4JgFO6Pb/CGHEOZfos8czQhoSwZB6YERcUzUI=) 3: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (hash: O5MLHMcohhvApO1/L1RvpM2jYbsZVQ8eLBzNQkddTHQ=) 4: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (hash: HpCznd8LAemIm49TlwLV1GhAVKIU4sZ5BY+7TeR1EA4=) 5: 3130332e38392e3136342e302f32342d3234203d3e20313333383030.roa (hash: eR7s3iDJUbgwn7vG0iEll3YQrHiAYjHNsvD28zhjxXY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:8c:54:f9:23:d5:d3:66:89:40:fa:ef:86:4f:c1:d7:73:17:3b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14649B106FA0C411D7FCD73A4B0147226E8A8454 Validity Not Before: May 12 20:48:10 2026 GMT Not After : May 13 22:57:10 2026 GMT Subject: CN=C80FB22A7485129B580A3A301BA8A72234194B42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:26:ab:87:0a:64:1f:4e:0f:34:ab:1c:77:9f: 93:b7:81:7b:ab:19:5e:f8:0e:5a:d2:fc:94:20:a0: 27:eb:b5:d1:23:6e:fc:ba:7c:78:04:32:9f:b0:11: e6:53:88:c5:21:0b:30:9b:29:3c:00:c6:76:88:ab: d8:7e:1f:d7:a9:96:4e:18:c1:7b:79:da:6c:f2:4d: 3c:37:4f:29:7b:0d:3f:db:27:fb:c0:e0:04:5e:e4: f3:14:1c:72:89:1d:f4:7e:b8:76:ee:b8:90:2b:c0: d9:8b:26:c4:4b:a1:16:a6:90:03:ec:3d:2b:fc:f6: b2:03:cc:7c:20:85:8e:6c:e3:c3:e4:93:95:a1:55: 7e:2e:8a:6f:f1:c2:1d:71:54:ed:98:77:4a:15:df: 59:39:ac:46:91:70:cd:24:86:ec:a3:5b:07:37:99: 22:66:ec:7e:d0:35:57:1f:88:4c:2f:b8:a9:f5:2e: 87:71:73:b7:f4:6d:30:6b:20:0e:52:30:4a:ef:54: fa:b6:d8:e6:9f:38:0d:3a:93:f2:92:5a:cf:fd:25: ac:dd:34:b2:da:e0:0e:36:39:7c:20:b3:b7:1a:ab: 9b:23:a4:7b:d3:83:87:cb:58:74:a9:8b:27:30:e8: 53:f7:6b:6f:9b:65:6a:bd:e5:2f:eb:f2:06:d4:f2: 47:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0F:B2:2A:74:85:12:9B:58:0A:3A:30:1B:A8:A7:22:34:19:4B:42 X509v3 Authority Key Identifier: keyid:14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:9b:f1:43:a0:c2:82:23:ad:57:bc:11:bb:4f:85:d7:3d:a1: b8:0b:8e:65:7e:a2:d7:b7:a8:d8:01:c1:ba:bb:f7:9d:d7:3f: 7b:50:70:6d:12:18:f9:b9:9d:58:87:6a:0e:31:f2:8b:64:bd: c8:5a:85:2c:7f:c1:5d:56:fd:99:2a:3e:0f:9d:06:6e:fc:00: a4:f3:91:e4:57:c7:5d:a7:52:56:25:2d:cf:02:aa:6b:b5:5d: 49:7d:bc:a7:7d:99:4e:2d:9c:8b:0e:49:71:64:3c:d6:1f:b5: 38:87:86:25:ff:79:03:74:89:24:e9:ac:54:6c:26:c7:e6:0f: 6a:74:76:fc:bc:f1:13:b2:e9:6f:14:a3:5e:62:ac:77:68:fc: 72:2d:3f:3e:45:81:21:da:ad:2b:0c:0b:b3:64:e6:4f:1b:5a: 03:ad:ba:12:46:3a:a2:ef:92:b2:55:11:b9:c0:82:6f:91:ea: 50:80:8a:bd:d8:d1:e4:f1:c4:39:b3:de:23:96:63:93:2c:ee: 9b:62:bf:c1:94:a1:1d:d6:48:7f:56:8f:73:95:7e:13:f7:b9: 15:c4:94:0e:4c:5e:3d:c6:1e:34:20:50:27:45:87:11:4b:5d: 1b:bd:5d:6b:06:f4:82:06:57:27:05:57:b6:95:a1:b2:42:bb: e8:25:e7:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWYxU+SPV02aJQPrvhk/B13MXO50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2NDlCMTA2RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2 RThBODQ1NDAeFw0yNjA1MTIyMDQ4MTBaFw0yNjA1MTMyMjU3MTBaMDMxMTAvBgNV BAMTKEM4MEZCMjJBNzQ4NTEyOUI1ODBBM0EzMDFCQThBNzIyMzQxOTRCNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJJquHCmQfTg80qxx3n5O3gXur GV74DlrS/JQgoCfrtdEjbvy6fHgEMp+wEeZTiMUhCzCbKTwAxnaIq9h+H9eplk4Y wXt52mzyTTw3Tyl7DT/bJ/vA4ARe5PMUHHKJHfR+uHbuuJArwNmLJsRLoRamkAPs PSv89rIDzHwghY5s48Pkk5WhVX4uim/xwh1xVO2Yd0oV31k5rEaRcM0khuyjWwc3 mSJm7H7QNVcfiEwvuKn1Lodxc7f0bTBrIA5SMErvVPq22OafOA06k/KSWs/9Jazd NLLa4A42OXwgs7caq5sjpHvTg4fLWHSpiycw6FP3a2+bZWq95S/r8gbU8kcXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyA+yKnSFEptYCjowG6inIjQZS0IwHwYDVR0j BBgwFoAUFGSbEG+gxBHX/Nc6SwFHIm6KhFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQxNzZkZGQtYTk4MC00M2Q2LTk0YTctOTVlZWRhNTM5NjY1LzAvMTQ2NDlCMTA2 RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2RThBODQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDY0OUIxMDZGQTBDNDExRDdGQ0Q3M0E0QjAxNDcyMjZFOEE4 NDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQxNzZkZGQtYTk4MC00M2Q2LTk0 YTctOTVlZWRhNTM5NjY1LzAvMTQ2NDlCMTA2RkEwQzQxMUQ3RkNENzNBNEIwMTQ3 MjI2RThBODQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKab8UOgwoIjrVe8EbtPhdc9obgLjmV+ote3 qNgBwbq7953XP3tQcG0SGPm5nViHag4x8otkvchahSx/wV1W/ZkqPg+dBm78AKTz keRXx12nUlYlLc8Cqmu1XUl9vKd9mU4tnIsOSXFkPNYftTiHhiX/eQN0iSTprFRs JsfmD2p0dvy88ROy6W8Uo15irHdo/HItPz5FgSHarSsMC7Nk5k8bWgOtuhJGOqLv krJVEbnAgm+R6lCAir3Y0eTxxDmz3iOWY5Ms7ptiv8GUoR3WSH9Wj3OVfhP3uRXE lA5MXj3GHjQgUCdFhxFLXRu9XWsG9IIGVycFV7aVobJCu+gl574= -----END CERTIFICATE-----Generated at Wed May 13 09:44:24 2026 by rpki-client