$ rpki-client -vvf rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.mft File: 4D81747956B88002B7CA79329A458E7D5CC04FC7.mft (raw, json) Hash identifier: on1r+7qTgb4wvF1MTn300/K1hk/jHNxI2g2TMncdgjY= Subject key identifier: 24:D6:97:79:63:F9:E5:E5:72:C1:F4:5C:BE:A9:1C:E8:4A:5E:36:B6 Authority key identifier: 4D:81:74:79:56:B8:80:02:B7:CA:79:32:9A:45:8E:7D:5C:C0:4F:C7 Certificate issuer: /CN=4D81747956B88002B7CA79329A458E7D5CC04FC7 Certificate serial: 65955146CDAA3C59AB74DE3639489A2C9BA10254 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D81747956B88002B7CA79329A458E7D5CC04FC7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:59:34 +0000 Manifest this update: Tue 12 May 2026 18:54:34 +0000 Manifest next update: Wed 13 May 2026 19:11:34 +0000 Files and hashes: 1: 4D81747956B88002B7CA79329A458E7D5CC04FC7.crl (hash: EzNU8Y/GFQKO+5wEhwekMIGQbsXP3sD2uNxemcrd7DE=) 2: 3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa (hash: pJiC24QIjxd6JDAGc4IBUzAveppgmfr21Asl7pAU+wU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.crl rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D81747956B88002B7CA79329A458E7D5CC04FC7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:95:51:46:cd:aa:3c:59:ab:74:de:36:39:48:9a:2c:9b:a1:02:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D81747956B88002B7CA79329A458E7D5CC04FC7 Validity Not Before: May 12 18:54:34 2026 GMT Not After : May 13 19:11:34 2026 GMT Subject: CN=24D6977963F9E5E572C1F45CBEA91CE84A5E36B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a2:ea:cb:b5:3d:14:14:85:3a:fa:47:7b:2a: 72:e1:0d:62:af:e8:d7:e7:30:e9:6e:b7:f8:b3:59: c6:db:73:28:16:90:4b:d1:82:e1:d5:b4:41:04:a9: 09:56:05:71:70:11:ee:24:dc:87:72:e3:b4:1e:9c: 1b:9c:7d:53:d0:ac:ec:2e:36:16:1a:2c:55:3b:31: 54:07:08:4f:b9:b6:d4:4e:cd:5e:d6:9d:2c:20:dd: a9:32:1f:54:31:a6:90:c3:64:9a:72:4e:67:90:a8: af:97:06:69:6d:cf:51:0f:26:72:6f:c4:bb:94:05: eb:00:59:fb:d9:d5:ff:76:e4:12:03:38:4d:e9:f6: 24:07:e4:b0:81:c5:71:9c:11:43:90:0d:cd:c7:b1: b5:69:21:f0:7d:e6:8e:c2:d7:af:8b:ca:49:7b:67: 7f:11:1e:37:41:0a:a3:6f:33:54:a4:71:da:83:df: 01:8d:72:0b:9c:14:42:86:f5:e9:b6:9d:da:aa:4b: 62:70:4e:7f:88:41:5c:e4:a9:e2:68:bc:ca:5d:73: ab:3a:59:c5:37:ee:35:04:56:59:d9:c8:dc:b9:43: 4e:de:b7:0e:c3:c7:4e:66:10:32:b5:bf:31:92:1c: 81:40:f0:71:29:ac:7d:1c:42:43:d4:bd:fb:a1:0c: d7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D6:97:79:63:F9:E5:E5:72:C1:F4:5C:BE:A9:1C:E8:4A:5E:36:B6 X509v3 Authority Key Identifier: keyid:4D:81:74:79:56:B8:80:02:B7:CA:79:32:9A:45:8E:7D:5C:C0:4F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D81747956B88002B7CA79329A458E7D5CC04FC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:14:73:c3:30:18:32:08:0a:5f:ef:fa:0e:d0:5a:b8:69:37: 41:74:f6:9a:3a:74:3e:d0:da:9e:94:84:ab:51:19:e6:b5:e3: ee:3b:63:d6:9a:51:58:e5:25:5f:f7:f2:5f:51:e7:bb:05:87: 0c:18:9d:0a:3f:74:b0:1f:f3:98:09:4e:34:01:24:08:db:68: 81:47:9f:12:01:7a:df:ae:b5:d6:9f:7f:ac:9c:c8:35:f6:37: e4:af:1d:a0:1b:01:af:fe:26:18:a2:bb:d3:23:23:05:3b:61: a1:ce:6f:3e:22:78:a5:e3:c9:61:7d:b1:1a:ef:2a:15:68:d6: 25:67:f5:a9:36:8c:f4:96:3b:d5:13:df:77:06:8d:a9:82:f4: 05:4d:37:11:2f:cd:3f:3e:26:c3:ac:09:63:b3:6d:ba:a9:c6: 20:aa:51:1c:b5:c0:da:46:87:c1:a1:dc:6a:71:b0:aa:7c:b6: 76:93:2c:16:fb:8c:72:7e:13:ab:e5:28:ed:2a:14:9b:9b:3b: 39:f3:4e:69:51:67:76:75:cf:9e:22:d5:9e:98:74:6d:63:62: a4:bd:cc:99:69:61:ea:c8:a8:82:7a:fb:20:c9:d7:98:7b:6e: b2:12:ec:d2:0a:0e:45:d4:78:93:01:36:cb:8e:d5:0e:a1:57: 44:fb:fb:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZZVRRs2qPFmrdN42OUiaLJuhAlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4MTc0Nzk1NkI4ODAwMkI3Q0E3OTMyOUE0NThFN0Q1 Q0MwNEZDNzAeFw0yNjA1MTIxODU0MzRaFw0yNjA1MTMxOTExMzRaMDMxMTAvBgNV BAMTKDI0RDY5Nzc5NjNGOUU1RTU3MkMxRjQ1Q0JFQTkxQ0U4NEE1RTM2QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsourLtT0UFIU6+kd7KnLhDWKv 6NfnMOlut/izWcbbcygWkEvRguHVtEEEqQlWBXFwEe4k3Idy47QenBucfVPQrOwu NhYaLFU7MVQHCE+5ttROzV7WnSwg3akyH1QxppDDZJpyTmeQqK+XBmltz1EPJnJv xLuUBesAWfvZ1f925BIDOE3p9iQH5LCBxXGcEUOQDc3HsbVpIfB95o7C16+Lykl7 Z38RHjdBCqNvM1SkcdqD3wGNcgucFEKG9em2ndqqS2JwTn+IQVzkqeJovMpdc6s6 WcU37jUEVlnZyNy5Q07etw7Dx05mEDK1vzGSHIFA8HEprH0cQkPUvfuhDNdlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJNaXeWP55eVywfRcvqkc6EpeNrYwHwYDVR0j BBgwFoAUTYF0eVa4gAK3ynkymkWOfVzAT8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWYwYTJiZWMtZjgxYS00YTNiLWExNDQtMTc1YjE2OGUyMmZkLzAvNEQ4MTc0Nzk1 NkI4ODAwMkI3Q0E3OTMyOUE0NThFN0Q1Q0MwNEZDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDgxNzQ3OTU2Qjg4MDAyQjdDQTc5MzI5QTQ1OEU3RDVDQzA0 RkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWYwYTJiZWMtZjgxYS00YTNiLWEx NDQtMTc1YjE2OGUyMmZkLzAvNEQ4MTc0Nzk1NkI4ODAwMkI3Q0E3OTMyOUE0NThF N0Q1Q0MwNEZDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEUc8MwGDIICl/v+g7QWrhpN0F09po6dD7Q 2p6UhKtRGea14+47Y9aaUVjlJV/38l9R57sFhwwYnQo/dLAf85gJTjQBJAjbaIFH nxIBet+utdaff6ycyDX2N+SvHaAbAa/+Jhiiu9MjIwU7YaHObz4ieKXjyWF9sRrv KhVo1iVn9ak2jPSWO9UT33cGjamC9AVNNxEvzT8+JsOsCWOzbbqpxiCqURy1wNpG h8Gh3GpxsKp8tnaTLBb7jHJ+E6vlKO0qFJubOznzTmlRZ3Z1z54i1Z6YdG1jYqS9 zJlpYerIqIJ6+yDJ15h7brIS7NIKDkXUeJMBNsuO1Q6hV0T7+7c= -----END CERTIFICATE-----Generated at Wed May 13 09:37:40 2026 by rpki-client