$ rpki-client -vvf rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft File: C4E9D4469828724936CAE63A417C0DE2014F205A.mft (raw, json) Hash identifier: 8r/NXaAXmV/61ljI4ibGTkr6idCuObN4g1/zUy7NF6s= Subject key identifier: 04:10:0D:6D:35:89:58:36:73:F0:E6:A4:EA:C1:53:E2:E4:E5:D5:8B Authority key identifier: C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A Certificate issuer: /CN=C4E9D4469828724936CAE63A417C0DE2014F205A Certificate serial: 2064B885BD138A79CF94C0ED234149FFFE650354 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:29:17 +0000 Manifest this update: Tue 12 May 2026 14:24:17 +0000 Manifest next update: Wed 13 May 2026 15:56:17 +0000 Files and hashes: 1: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: O5O73bIVgP3Ny3ggR2VTr1FgLepLoRHQrtRQ7caTd/s=) 2: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: n2rjzJ/zLgB675Rxossmph/fEyHX/dgt2ieO+QslQMw=) 3: C4E9D4469828724936CAE63A417C0DE2014F205A.crl (hash: tLfF1vCirmdTP6Vlsb7te9IGsq+qvFvKufougHI1gwY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:64:b8:85:bd:13:8a:79:cf:94:c0:ed:23:41:49:ff:fe:65:03:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4E9D4469828724936CAE63A417C0DE2014F205A Validity Not Before: May 12 14:24:17 2026 GMT Not After : May 13 15:56:17 2026 GMT Subject: CN=04100D6D3589583673F0E6A4EAC153E2E4E5D58B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:c0:2b:2f:64:2d:85:66:81:99:eb:e7:f8: f5:c3:73:24:74:68:06:29:34:7b:04:b1:19:ea:2a: 31:2f:2f:a5:3d:4c:58:3e:c6:c4:7c:2f:ba:fc:91: 2b:2b:f6:07:d7:f8:02:b8:8c:67:11:21:43:fb:85: 96:6d:12:52:2e:c5:5d:dd:d7:91:a1:a2:e2:b2:5e: dc:e2:47:ae:27:b0:23:0b:d7:db:15:ed:36:01:7b: ef:01:56:89:28:8b:cb:a3:db:8c:fd:37:35:07:7f: c2:94:ad:a7:a6:9a:78:b5:45:4d:a0:2a:5d:2f:53: 2a:13:70:17:2a:0c:5f:6f:37:a7:bc:c5:87:45:fb: e6:8b:fb:a2:a0:04:9d:7f:ec:1d:c2:33:cd:db:fa: 47:33:08:58:b6:9e:56:fd:f3:78:53:0b:e0:4a:7c: c8:22:19:84:af:6b:a6:a2:64:07:84:42:08:f3:69: d1:5a:9a:88:ca:b8:43:c0:4c:8e:e6:74:df:05:8c: 77:ca:f5:72:b0:b1:72:86:d9:c4:08:e0:db:bc:00: 92:c2:6f:35:a9:f2:4d:5c:8a:f3:e3:6a:df:a2:5d: e3:80:76:4e:86:4b:47:a4:63:a4:b2:ac:1b:31:5e: 18:5c:91:d3:d9:08:66:82:43:0b:e0:e2:ee:a5:b3: 65:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:10:0D:6D:35:89:58:36:73:F0:E6:A4:EA:C1:53:E2:E4:E5:D5:8B X509v3 Authority Key Identifier: keyid:C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:03:c6:fe:73:d5:77:a9:eb:05:bd:ae:a1:27:cc:e9:8a:69: f8:56:5f:cf:fc:72:d7:fd:ee:2b:29:3d:9f:1a:41:85:b2:15: d1:82:62:70:5b:21:00:ce:0c:b5:7b:a8:e4:be:c1:a8:ae:61: 3a:0c:e7:dc:ce:a4:51:1c:21:a5:8c:f5:80:8c:e1:5c:b1:55: d1:95:a3:ab:08:fe:87:7e:74:c3:3c:09:71:be:cc:9d:aa:fd: ac:9b:10:42:81:ab:84:df:ba:d2:33:45:63:ba:65:fe:01:09: 0a:56:cb:e2:a9:8e:4d:22:ac:bc:75:07:36:f7:88:be:ea:3d: db:a5:ec:6a:9b:92:0f:58:44:3c:d8:fa:b3:b4:e3:3e:db:99: 9a:cc:09:d6:4c:3a:6d:e6:26:ac:8d:8b:f0:ab:a9:85:ea:7f: e4:04:0a:c7:29:9a:69:ab:0a:d2:2c:9d:66:85:e0:03:cf:8e: aa:4d:f0:60:34:d6:48:d0:7d:65:99:d9:39:8c:84:06:85:f9: ed:66:5b:6b:18:0d:a1:1f:77:35:6c:18:e2:20:66:c3:cf:de: 35:9d:b8:e2:7f:35:ad:f3:f0:b1:3c:77:ed:89:e2:64:66:fe: bd:1c:95:c5:a8:e3:0b:b4:5e:6d:3a:a0:a5:22:90:0c:27:0e: b3:2a:41:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIGS4hb0TinnPlMDtI0FJ//5lA1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRFOUQ0NDY5ODI4NzI0OTM2Q0FFNjNBNDE3QzBERTIw MTRGMjA1QTAeFw0yNjA1MTIxNDI0MTdaFw0yNjA1MTMxNTU2MTdaMDMxMTAvBgNV BAMTKDA0MTAwRDZEMzU4OTU4MzY3M0YwRTZBNEVBQzE1M0UyRTRFNUQ1OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCejsArL2QthWaBmevn+PXDcyR0 aAYpNHsEsRnqKjEvL6U9TFg+xsR8L7r8kSsr9gfX+AK4jGcRIUP7hZZtElIuxV3d 15GhouKyXtziR64nsCML19sV7TYBe+8BVokoi8uj24z9NzUHf8KUraemmni1RU2g Kl0vUyoTcBcqDF9vN6e8xYdF++aL+6KgBJ1/7B3CM83b+kczCFi2nlb983hTC+BK fMgiGYSva6aiZAeEQgjzadFamojKuEPATI7mdN8FjHfK9XKwsXKG2cQI4Nu8AJLC bzWp8k1civPjat+iXeOAdk6GS0ekY6SyrBsxXhhckdPZCGaCQwvg4u6ls2VlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBBANbTWJWDZz8Oak6sFT4uTl1YswHwYDVR0j BBgwFoAUxOnURpgockk2yuY6QXwN4gFPIFowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTU4MmZjYTktMzIyMi00NWI2LWI0MjItZmYyYzZhOWZkMjQ3LzAvQzRFOUQ0NDY5 ODI4NzI0OTM2Q0FFNjNBNDE3QzBERTIwMTRGMjA1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DNEU5RDQ0Njk4Mjg3MjQ5MzZDQUU2M0E0MTdDMERFMjAxNEYy MDVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvQzRFOUQ0NDY5ODI4NzI0OTM2Q0FFNjNBNDE3QzBE RTIwMTRGMjA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEDxv5z1Xep6wW9rqEnzOmKafhWX8/8ctf9 7ispPZ8aQYWyFdGCYnBbIQDODLV7qOS+waiuYToM59zOpFEcIaWM9YCM4VyxVdGV o6sI/od+dMM8CXG+zJ2q/aybEEKBq4TfutIzRWO6Zf4BCQpWy+Kpjk0irLx1Bzb3 iL7qPdul7Gqbkg9YRDzY+rO04z7bmZrMCdZMOm3mJqyNi/CrqYXqf+QECscpmmmr CtIsnWaF4APPjqpN8GA01kjQfWWZ2TmMhAaF+e1mW2sYDaEfdzVsGOIgZsPP3jWd uOJ/Na3z8LE8d+2J4mRm/r0clcWo4wu0Xm06oKUikAwnDrMqQZ4= -----END CERTIFICATE-----Generated at Wed May 13 04:20:02 2026 by rpki-client