$ rpki-client -vvf rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft File: 484F335D7E0307C0F7FF120F455566A5DD73933A.mft (raw, json) Hash identifier: I6VuEfK7OJg4X0eL/aU21FHOliDIyCEelnUhoBmFV+o= Subject key identifier: 19:C8:0A:BD:2C:CD:33:EA:B4:F3:85:73:AD:6A:04:22:D1:B9:95:AF Authority key identifier: 48:4F:33:5D:7E:03:07:C0:F7:FF:12:0F:45:55:66:A5:DD:73:93:3A Certificate issuer: /CN=484F335D7E0307C0F7FF120F455566A5DD73933A Certificate serial: 7315DF7EEEF3848AC42623ACD5121180DE4604F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:49:53 +0000 Manifest this update: Tue 12 May 2026 04:44:53 +0000 Manifest next update: Wed 13 May 2026 07:37:53 +0000 Files and hashes: 1: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: ESQviQfyCrkTtBnJrmVbWeQokiDKSwPNHmI0uyVl6TM=) 2: 484F335D7E0307C0F7FF120F455566A5DD73933A.crl (hash: Ifk+IpNNFR0vVT25/ZYFJ68j9QPLFn1IrVLpr+wdZC4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.crl rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:15:df:7e:ee:f3:84:8a:c4:26:23:ac:d5:12:11:80:de:46:04:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=484F335D7E0307C0F7FF120F455566A5DD73933A Validity Not Before: May 12 04:44:53 2026 GMT Not After : May 13 07:37:53 2026 GMT Subject: CN=19C80ABD2CCD33EAB4F38573AD6A0422D1B995AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3d:d2:40:c2:11:41:e6:3b:f2:a8:91:32:02: ad:29:e2:2f:1a:11:44:29:a3:78:b6:f8:b8:4f:f1: f0:0e:50:8b:79:6e:bb:31:dd:78:61:3c:47:f1:bb: 81:93:1c:49:06:70:18:8c:df:cc:1a:ae:52:94:07: ad:00:c7:e9:cf:df:5a:3f:d8:34:6b:56:b4:3e:64: 4e:77:cf:13:ee:47:d3:5c:85:51:b8:96:34:53:77: 1d:26:06:9b:eb:a1:70:11:d5:78:e0:c2:f9:f9:81: 8e:12:b1:8a:42:65:db:f7:0a:3d:56:f0:4a:fd:c5: ee:8c:c8:2e:d7:73:b4:99:53:36:00:c9:98:2f:99: 1a:82:7d:18:50:3d:3e:17:13:30:e8:51:74:6c:b8: 03:89:25:9b:9c:c9:34:c0:58:e3:e1:d8:76:d6:3f: 2f:d5:80:ab:a0:c0:2d:a4:d5:e3:55:52:6d:c8:a7: 9a:fe:e6:a8:83:0d:b6:c4:1c:f2:ea:f1:f1:85:2d: 4f:54:31:c9:26:b2:c3:1b:c7:9a:9c:f6:ca:4d:1a: 72:2b:8e:a1:08:0a:2b:d0:07:b4:64:d5:16:6e:b5: 22:4f:1f:34:da:e9:ed:ae:59:3b:20:1c:62:c1:ae: c1:af:f6:a2:2f:57:bf:de:98:67:51:55:d9:4f:09: 1d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C8:0A:BD:2C:CD:33:EA:B4:F3:85:73:AD:6A:04:22:D1:B9:95:AF X509v3 Authority Key Identifier: keyid:48:4F:33:5D:7E:03:07:C0:F7:FF:12:0F:45:55:66:A5:DD:73:93:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a4:5b:f2:82:14:0e:00:55:ae:86:6b:aa:85:a9:3b:0c:77: 43:1d:f2:8e:55:07:f9:44:10:88:5b:8f:9d:14:42:ab:f0:72: 11:24:a3:21:e3:9a:37:29:b5:c3:0c:50:a2:1f:29:bd:d7:62: 12:ff:3f:83:8b:09:b5:ff:9c:3e:78:fc:10:17:2a:20:b9:d3: fd:4f:c2:c0:30:71:2f:f1:d4:6f:31:bb:b2:c0:69:db:ae:9e: be:59:fe:85:a8:5f:32:07:57:61:31:47:cc:9f:65:6b:01:2d: 0c:32:03:04:08:78:b0:2c:b9:8a:c6:64:34:a9:82:e1:bf:9f: e7:f6:57:98:75:5e:31:56:ef:ab:cf:5d:94:dc:97:29:33:2e: 04:c0:40:61:bf:33:db:9f:30:fb:fe:41:a4:d4:1d:57:88:ed: 48:ab:c1:8c:81:60:a3:f4:35:d7:97:96:15:e7:47:41:2d:03: 7e:af:61:bf:ea:3a:53:2b:db:3f:c5:df:e6:62:07:85:1c:de: ae:5e:b8:6e:00:58:74:e3:3a:4b:8a:a9:6f:0d:7e:9d:f8:1a: 02:b6:c7:84:e4:21:b1:fc:df:14:e2:b3:91:49:72:5e:8e:8a: a5:8a:f3:1c:8f:78:51:61:bd:44:c3:f4:6e:d4:e5:ea:30:b8: 4f:3e:87:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcxXffu7zhIrEJiOs1RIRgN5GBPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg0RjMzNUQ3RTAzMDdDMEY3RkYxMjBGNDU1NTY2QTVE RDczOTMzQTAeFw0yNjA1MTIwNDQ0NTNaFw0yNjA1MTMwNzM3NTNaMDMxMTAvBgNV BAMTKDE5QzgwQUJEMkNDRDMzRUFCNEYzODU3M0FENkEwNDIyRDFCOTk1QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/PdJAwhFB5jvyqJEyAq0p4i8a EUQpo3i2+LhP8fAOUIt5brsx3XhhPEfxu4GTHEkGcBiM38warlKUB60Ax+nP31o/ 2DRrVrQ+ZE53zxPuR9NchVG4ljRTdx0mBpvroXAR1Xjgwvn5gY4SsYpCZdv3Cj1W 8Er9xe6MyC7Xc7SZUzYAyZgvmRqCfRhQPT4XEzDoUXRsuAOJJZucyTTAWOPh2HbW Py/VgKugwC2k1eNVUm3Ip5r+5qiDDbbEHPLq8fGFLU9UMckmssMbx5qc9spNGnIr jqEICivQB7Rk1RZutSJPHzTa6e2uWTsgHGLBrsGv9qIvV7/emGdRVdlPCR3FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGcgKvSzNM+q084VzrWoEItG5la8wHwYDVR0j BBgwFoAUSE8zXX4DB8D3/xIPRVVmpd1zkzowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE3YzhjMDEtNGFmNy00MWIwLTg1YTMtOWQxZmE0ZWI5ZmJhLzAvNDg0RjMzNUQ3 RTAzMDdDMEY3RkYxMjBGNDU1NTY2QTVERDczOTMzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODRGMzM1RDdFMDMwN0MwRjdGRjEyMEY0NTU1NjZBNURENzM5 MzNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE3YzhjMDEtNGFmNy00MWIwLTg1 YTMtOWQxZmE0ZWI5ZmJhLzAvNDg0RjMzNUQ3RTAzMDdDMEY3RkYxMjBGNDU1NTY2 QTVERDczOTMzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOkW/KCFA4AVa6Ga6qFqTsMd0Md8o5VB/lE EIhbj50UQqvwchEkoyHjmjcptcMMUKIfKb3XYhL/P4OLCbX/nD54/BAXKiC50/1P wsAwcS/x1G8xu7LAaduunr5Z/oWoXzIHV2ExR8yfZWsBLQwyAwQIeLAsuYrGZDSp guG/n+f2V5h1XjFW76vPXZTclykzLgTAQGG/M9ufMPv+QaTUHVeI7UirwYyBYKP0 NdeXlhXnR0EtA36vYb/qOlMr2z/F3+ZiB4Uc3q5euG4AWHTjOkuKqW8Nfp34GgK2 x4TkIbH83xTis5FJcl6OiqWK8xyPeFFhvUTD9G7U5eowuE8+h1U= -----END CERTIFICATE-----Generated at Tue May 12 22:20:02 2026 by rpki-client