$ rpki-client -vvf rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft File: 4202428F6F3C953C642F298719C5C35E169724A2.mft (raw, json) Hash identifier: 8cunz6ORkKMSKSwDsPjnxQQr3Mqilhou8OFpNkcontk= Subject key identifier: 28:03:B5:28:A2:39:AA:8B:36:EA:88:29:CC:4C:54:A8:EF:0F:9E:5D Authority key identifier: 42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2 Certificate issuer: /CN=4202428F6F3C953C642F298719C5C35E169724A2 Certificate serial: 0558A2FA9A0E14FB9C698903041FB32ADB82EADB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft Manifest number: 0F Signing time: Tue 12 May 2026 12:48:01 +0000 Manifest this update: Tue 12 May 2026 12:43:01 +0000 Manifest next update: Wed 13 May 2026 15:55:01 +0000 Files and hashes: 1: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: p7JO88fvmBW+Y+ZP8rFGldK5BvqAlDmHyGZVg3MhVAY=) 2: 4202428F6F3C953C642F298719C5C35E169724A2.crl (hash: Q5fMtI/GEHgLlGifLrYBGE22zffjkRE1KvWBTTfEBKE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:58:a2:fa:9a:0e:14:fb:9c:69:89:03:04:1f:b3:2a:db:82:ea:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4202428F6F3C953C642F298719C5C35E169724A2 Validity Not Before: May 12 12:43:01 2026 GMT Not After : May 13 15:55:01 2026 GMT Subject: CN=2803B528A239AA8B36EA8829CC4C54A8EF0F9E5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:cb:35:13:fa:4e:7e:3c:aa:99:aa:2d:81: 32:29:1c:74:2a:31:ff:ed:83:45:6f:6c:d6:7a:99: 26:06:b8:db:49:ec:8d:0f:d4:86:b6:2b:90:78:1e: 7c:b1:da:be:b2:a8:e1:64:86:7c:65:17:ca:63:ca: 80:fb:c0:ba:b4:e0:ba:c1:20:3e:48:69:53:b4:6d: 79:cf:c9:54:42:18:68:44:c4:1a:74:a7:80:61:d8: 7a:9b:25:6c:bd:4e:28:8a:1c:b2:ca:e4:46:ff:b6: 1e:67:05:cc:b7:1b:22:64:34:95:95:95:0a:e0:3f: 92:90:c4:58:22:18:01:91:54:b1:22:62:17:c3:85: b8:a1:6e:29:e7:48:22:50:25:b5:63:53:0b:30:ab: 39:14:47:43:9f:11:51:da:42:32:0c:2f:9f:f8:fc: 8d:86:21:f1:54:52:e4:d3:da:1d:28:f6:76:dc:fe: 11:d1:00:a1:e9:9a:77:54:c7:b8:69:65:27:bb:e6: 3f:13:9d:0c:63:a0:de:4e:e1:0d:76:13:42:e9:2b: ee:01:b0:8c:7e:02:37:d3:ea:bf:c5:71:77:b2:86: 24:d9:ca:7a:77:e4:55:2a:ba:db:65:f1:e1:25:14: e6:a3:3b:46:fd:32:d2:7f:1f:b9:01:ce:a2:a6:c2: ea:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:03:B5:28:A2:39:AA:8B:36:EA:88:29:CC:4C:54:A8:EF:0F:9E:5D X509v3 Authority Key Identifier: keyid:42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:29:0e:a2:20:3f:fd:17:e7:64:e3:2d:14:66:15:f4:c7:9b: 9b:dd:c7:3e:79:75:21:97:dd:dc:01:c4:90:b3:0e:eb:6f:c2: e9:6d:6b:79:69:bf:ff:6a:8e:ba:3c:ea:57:a7:ff:db:bc:58: 97:e4:ba:4c:3b:79:99:d2:b8:37:ef:67:60:1d:fc:de:ca:09: 82:b1:0b:5f:6e:8e:2c:a6:3c:a4:1f:5c:3b:37:c2:d8:5e:82: 85:2c:e4:80:a7:3b:4f:a6:16:5d:16:b6:b2:d6:e0:eb:f8:b9: 4f:ff:b1:de:b2:82:75:f8:c6:71:33:a7:dc:e1:06:af:c0:b9: 7d:8f:35:c4:31:7f:40:47:22:61:a0:73:d1:be:0f:c3:5b:d3: ee:d1:56:57:40:c2:d0:53:6b:95:a8:8a:0b:81:11:4b:7e:99: 40:01:5d:33:3e:4b:85:f1:40:a1:a6:de:8c:7b:b9:b8:f4:3d: 77:d8:6f:b1:b4:10:b8:ba:74:5f:fa:fb:b3:4e:b6:61:a1:02: 72:8b:1f:11:9d:0d:8b:14:1e:c4:a5:11:c0:1e:ba:47:0c:9d: 70:2a:cc:10:a6:d6:49:37:6a:3a:98:54:0f:5a:03:3a:77:cc: eb:8b:cb:5c:68:74:b0:3c:00:e5:ed:f3:56:48:e5:9e:55:7c: 80:9e:21:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBVii+poOFPucaYkDBB+zKtuC6tswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwMjQyOEY2RjNDOTUzQzY0MkYyOTg3MTlDNUMzNUUx Njk3MjRBMjAeFw0yNjA1MTIxMjQzMDFaFw0yNjA1MTMxNTU1MDFaMDMxMTAvBgNV BAMTKDI4MDNCNTI4QTIzOUFBOEIzNkVBODgyOUNDNEM1NEE4RUYwRjlFNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfcs1E/pOfjyqmaotgTIpHHQq Mf/tg0VvbNZ6mSYGuNtJ7I0P1Ia2K5B4Hnyx2r6yqOFkhnxlF8pjyoD7wLq04LrB ID5IaVO0bXnPyVRCGGhExBp0p4Bh2HqbJWy9TiiKHLLK5Eb/th5nBcy3GyJkNJWV lQrgP5KQxFgiGAGRVLEiYhfDhbihbinnSCJQJbVjUwswqzkUR0OfEVHaQjIML5/4 /I2GIfFUUuTT2h0o9nbc/hHRAKHpmndUx7hpZSe75j8TnQxjoN5O4Q12E0LpK+4B sIx+AjfT6r/FcXeyhiTZynp35FUquttl8eElFOajO0b9MtJ/H7kBzqKmwuo7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKAO1KKI5qos26ogpzExUqO8Pnl0wHwYDVR0j BBgwFoAUQgJCj288lTxkLymHGcXDXhaXJKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZiODA4ZWItYzk4ZS00MDM2LWJlOWEtMTkzYmJjYzY0ODkyLzAvNDIwMjQyOEY2 RjNDOTUzQzY0MkYyOTg3MTlDNUMzNUUxNjk3MjRBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MjAyNDI4RjZGM0M5NTNDNjQyRjI5ODcxOUM1QzM1RTE2OTcy NEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzAvNDIwMjQyOEY2RjNDOTUzQzY0MkYyOTg3MTlDNUMz NUUxNjk3MjRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4pDqIgP/0X52TjLRRmFfTHm5vdxz55dSGX 3dwBxJCzDutvwulta3lpv/9qjro86len/9u8WJfkukw7eZnSuDfvZ2Ad/N7KCYKx C19ujiymPKQfXDs3wthegoUs5ICnO0+mFl0WtrLW4Ov4uU//sd6ygnX4xnEzp9zh Bq/AuX2PNcQxf0BHImGgc9G+D8Nb0+7RVldAwtBTa5WoiguBEUt+mUABXTM+S4Xx QKGm3ox7ubj0PXfYb7G0ELi6dF/6+7NOtmGhAnKLHxGdDYsUHsSlEcAeukcMnXAq zBCm1kk3ajqYVA9aAzp3zOuLy1xodLA8AOXt81ZI5Z5VfICeIf8= -----END CERTIFICATE-----Generated at Tue May 12 22:19:46 2026 by rpki-client