$ rpki-client -vvf rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft File: E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft (raw, json) Hash identifier: o1co3/XOGr72h0Lsubv5T0WePMDweBugWHK8qUKfZd4= Subject key identifier: 4D:7F:82:95:65:AB:5F:BE:61:68:07:D9:83:16:D6:01:88:44:13:7B Authority key identifier: E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9 Certificate issuer: /CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9 Certificate serial: 6D22004013B1DC06463F26874E28C02BAC5A38CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:20:55 +0000 Manifest this update: Tue 12 May 2026 16:15:55 +0000 Manifest next update: Wed 13 May 2026 18:49:55 +0000 Files and hashes: 1: E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl (hash: R6wCeVGXHdTTkeUkfAdvBgSNjV8IOUPEpsskag3/3GU=) 2: 3230332e38302e392e302f32342d3234203d3e203234323034.roa (hash: ctsdmpn5r5VUvDq4FMqshtD+HVeYmHxVfhu5eYtcuDY=) 3: 3230332e38302e31342e302f32342d3234203d3e203234323034.roa (hash: 4fpWKKYBY0nnGQkJs0R+bmSKgdPRaMES9zE1728pF2E=) 4: 3230332e38302e31352e302f32342d3234203d3e203234323034.roa (hash: nN8alNrnuAC96uGmiPX7P2NYnsdlkO57xsP55iMfUwk=) 5: 323430353a386530303a3a2f33322d3332203d3e203234323034.roa (hash: sqWc0G+az7rG1OKeMlrjkBetXfc6E3+lsrE6DeDNqXY=) 6: 3230332e38302e31332e302f32342d3234203d3e203234323034.roa (hash: v5fNxHZnP1wOLH3moKO1JSlLZXs/nZienvrRCarDRlk=) 7: 3230332e38302e31322e302f32342d3234203d3e203234323034.roa (hash: h2tT8uN39aiQAWcw3BdGn9c/xBwZZb5nFDTta01r+Os=) 8: 3230332e38302e31312e302f32342d3234203d3e203234323034.roa (hash: Z8294bGV1BqnPHshmggOhT7N0D0yzpQrvHBjc8hglpQ=) 9: 3230332e38302e382e302f32342d3234203d3e203234323034.roa (hash: 0Yyl1JFAblaXf8Yb0JCPy2SmOr5D/U6YS39l5rE81q0=) 10: 3230332e38302e31302e302f32342d3234203d3e203234323034.roa (hash: 1WqLfIO26zKRMIVkfVN7TnPFzjNdo3+29X6uUFeeV7A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:22:00:40:13:b1:dc:06:46:3f:26:87:4e:28:c0:2b:ac:5a:38:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9 Validity Not Before: May 12 16:15:55 2026 GMT Not After : May 13 18:49:55 2026 GMT Subject: CN=4D7F829565AB5FBE616807D98316D6018844137B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:87:27:55:4b:3a:3f:c6:e7:ee:0b:3e:b1: 33:fa:a8:bc:11:a1:99:67:2e:a0:15:b4:18:e4:79: 6e:5e:c6:8b:43:f6:64:94:f7:5d:c1:f3:ce:f6:54: 9d:3e:65:59:d2:a6:96:17:ea:f5:65:38:29:de:2a: bd:cb:b8:6f:4e:62:d0:3c:06:2a:7f:bb:aa:f6:3e: 04:b4:f0:93:dc:ac:69:55:2b:47:46:2f:1e:8d:3d: 75:90:7c:8f:4b:c0:8c:85:31:d2:a3:23:75:1b:6a: 4e:5c:a7:ab:d8:9f:6a:97:ee:fa:4c:fb:b2:9d:73: 84:c4:16:ca:bb:76:e0:bb:89:c3:b0:65:f3:f1:07: e4:45:8d:d7:ae:03:75:cb:53:9d:8f:2a:57:3d:29: 09:ee:88:87:f9:06:a7:c9:cd:7e:74:e4:f3:18:10: d8:13:18:e7:5e:a2:b1:a8:8d:27:f9:d0:10:48:0a: 32:1f:2c:50:bf:c4:6a:d2:15:43:1a:68:be:98:57: 1c:f4:3b:1a:75:ae:ac:b6:e5:c4:b3:1f:39:32:84: 8f:d1:9e:b5:37:73:fc:90:be:d4:9b:d4:8c:25:a2: 23:f4:37:b7:55:c6:f0:9a:ff:0e:e8:84:cd:9c:e5: c4:a8:18:e2:f8:41:84:34:25:98:5e:e0:bb:bb:88: 09:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7F:82:95:65:AB:5F:BE:61:68:07:D9:83:16:D6:01:88:44:13:7B X509v3 Authority Key Identifier: keyid:E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:e0:6a:e8:fc:36:e7:66:9c:61:a7:cc:d9:41:6b:8f:21:0e: 92:f0:a1:52:7d:5b:3d:ea:b6:2f:4f:20:c7:56:97:4d:be:5e: a2:b2:64:bf:cf:83:ce:70:e0:78:8b:bd:3d:1d:a1:ce:8a:85: 3c:89:0e:04:8c:5f:4c:4f:9b:aa:89:a2:1e:07:2c:30:74:6e: 41:9c:72:4b:1d:19:db:c4:47:fc:e1:8f:59:b6:5c:eb:6c:6a: e5:44:c2:34:35:bc:fd:08:f2:3a:fe:c6:8d:ff:fb:b2:e3:ed: 9f:e2:50:e8:e6:24:b9:a2:64:40:7f:e7:77:cc:c0:42:69:68: 05:cf:e5:41:c3:aa:98:7a:fc:70:91:39:18:37:a3:7e:2e:62: 05:fc:e8:4d:34:5d:16:7a:3b:e5:be:6e:94:7f:03:74:bf:98: 40:21:7a:30:cd:ce:96:87:fa:1c:12:45:61:7e:5f:3d:db:b2: 0f:31:59:72:fa:b9:50:b5:6f:ec:1a:3b:27:88:f3:d9:99:f5: 94:75:fa:a2:f6:7b:74:fd:28:62:64:5e:ed:ee:93:68:7e:d0: 6c:c9:17:0e:63:2f:da:ba:89:dd:27:cd:af:86:bd:32:9c:ce: 18:4f:8f:d5:c3:e6:09:29:50:ec:86:a0:4a:ba:8b:a9:ce:bf: cd:94:d4:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbSIAQBOx3AZGPyaHTijAK6xaOM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZCRDNC MTMyNEFCOTAeFw0yNjA1MTIxNjE1NTVaFw0yNjA1MTMxODQ5NTVaMDMxMTAvBgNV BAMTKDREN0Y4Mjk1NjVBQjVGQkU2MTY4MDdEOTgzMTZENjAxODg0NDEzN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAUocnVUs6P8bn7gs+sTP6qLwR oZlnLqAVtBjkeW5exotD9mSU913B8872VJ0+ZVnSppYX6vVlOCneKr3LuG9OYtA8 Bip/u6r2PgS08JPcrGlVK0dGLx6NPXWQfI9LwIyFMdKjI3Ubak5cp6vYn2qX7vpM +7Kdc4TEFsq7duC7icOwZfPxB+RFjdeuA3XLU52PKlc9KQnuiIf5BqfJzX505PMY ENgTGOdeorGojSf50BBICjIfLFC/xGrSFUMaaL6YVxz0Oxp1rqy25cSzHzkyhI/R nrU3c/yQvtSb1IwloiP0N7dVxvCa/w7ohM2c5cSoGOL4QYQ0JZhe4Lu7iAljAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTX+ClWWrX75haAfZgxbWAYhEE3swHwYDVR0j BBgwFoAU5FAef9vFcWDG2vDTvpL707EySrkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI0YTkxMDUtOGQyYS00YjM4LWE2YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZE QkM1NzE2MEM2REFGMEQzQkU5MkZCRDNCMTMyNEFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDUwMUU3RkRCQzU3MTYwQzZEQUYwRDNCRTkyRkJEM0IxMzI0 QUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI0YTkxMDUtOGQyYS00YjM4LWE2 YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZC RDNCMTMyNEFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLgauj8NudmnGGnzNlBa48hDpLwoVJ9Wz3q ti9PIMdWl02+XqKyZL/Pg85w4HiLvT0doc6KhTyJDgSMX0xPm6qJoh4HLDB0bkGc cksdGdvER/zhj1m2XOtsauVEwjQ1vP0I8jr+xo3/+7Lj7Z/iUOjmJLmiZEB/53fM wEJpaAXP5UHDqph6/HCRORg3o34uYgX86E00XRZ6O+W+bpR/A3S/mEAhejDNzpaH +hwSRWF+Xz3bsg8xWXL6uVC1b+waOyeI89mZ9ZR1+qL2e3T9KGJkXu3uk2h+0GzJ Fw5jL9q6id0nza+GvTKczhhPj9XD5gkpUOyGoEq6i6nOv82U1C0= -----END CERTIFICATE-----Generated at Wed May 13 00:44:17 2026 by rpki-client