$ rpki-client -vvf rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft File: A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft (raw, json) Hash identifier: GHSPiMOXFGEyYWU0pxxAns3CUDRcSJ5igfVr1QbK8Z8= Subject key identifier: 50:9F:2A:F1:5F:B6:00:3C:5E:6A:CB:FC:67:FE:AF:18:09:17:3B:47 Authority key identifier: A4:E1:4E:D9:62:51:66:5F:CF:9F:C4:FA:C3:68:DC:40:95:3E:34:0D Certificate issuer: /CN=A4E14ED96251665FCF9FC4FAC368DC40953E340D Certificate serial: 552BB4A19F59C6FC788A7A47250B8582B2A53C7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4E14ED96251665FCF9FC4FAC368DC40953E340D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:09:52 +0000 Manifest this update: Tue 12 May 2026 19:04:52 +0000 Manifest next update: Wed 13 May 2026 22:26:52 +0000 Files and hashes: 1: A4E14ED96251665FCF9FC4FAC368DC40953E340D.crl (hash: 5LUxA8wGby9gw0A74JD9MvRwgOUKtyI/+YKpOoY3wLU=) 2: 3130332e3136312e3134362e302f32332d3234203d3e20313431363238.roa (hash: q0vh/quQ+eV+UyFsOiPKTjhnWvk1GZbhfwaX1pBs5t4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.crl rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4E14ED96251665FCF9FC4FAC368DC40953E340D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2b:b4:a1:9f:59:c6:fc:78:8a:7a:47:25:0b:85:82:b2:a5:3c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4E14ED96251665FCF9FC4FAC368DC40953E340D Validity Not Before: May 12 19:04:52 2026 GMT Not After : May 13 22:26:52 2026 GMT Subject: CN=509F2AF15FB6003C5E6ACBFC67FEAF1809173B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0a:92:ff:e2:6b:bd:b3:22:66:e1:9d:c7:23: 38:0f:d3:ca:bb:87:da:d3:24:94:20:d8:33:22:36: 4b:5c:59:8e:4b:52:59:2b:85:8f:ee:70:ad:da:d6: 31:58:51:af:6c:41:b5:b8:8d:a7:65:40:67:7a:84: 91:a8:65:e4:75:6c:ae:72:7d:63:a7:f2:2c:2a:13: b5:e5:d6:34:3e:e4:eb:28:16:ac:89:e8:4e:06:63: 44:6f:b5:13:2a:48:6f:01:a4:d7:3e:d7:a1:c3:04: 79:65:b5:d3:30:86:a3:36:c9:ec:38:43:ed:48:97: 44:c9:a7:7b:35:c6:12:86:3a:4e:c0:2d:d2:b1:bc: d3:1c:12:ac:be:ac:f2:e6:1f:53:a6:f5:a6:1c:95: 45:6e:ae:a4:b6:51:c0:63:99:6e:38:89:b6:7c:ad: 09:fa:52:cf:ec:85:ec:c8:f7:b6:b9:46:1d:9f:63: 36:cc:de:6e:77:e9:dd:32:1f:d7:79:ce:e2:15:cf: 93:9b:fe:a6:f5:4f:fd:84:0d:b4:d3:a8:9d:c9:0b: 39:14:7d:0d:7f:19:c9:f9:b5:67:de:8a:d4:39:57: 1b:7c:4e:c6:48:c9:39:16:5b:ed:f5:a5:8c:26:9f: f6:da:77:8e:3d:ee:16:59:20:88:f5:a0:cc:50:f7: 83:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9F:2A:F1:5F:B6:00:3C:5E:6A:CB:FC:67:FE:AF:18:09:17:3B:47 X509v3 Authority Key Identifier: keyid:A4:E1:4E:D9:62:51:66:5F:CF:9F:C4:FA:C3:68:DC:40:95:3E:34:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4E14ED96251665FCF9FC4FAC368DC40953E340D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ee:0f:fc:9b:e4:c4:70:94:29:51:14:83:e0:9d:dd:65:da: d8:ed:25:96:29:8c:d2:ce:6a:31:47:d4:9f:b7:83:ce:40:60: f0:ae:c9:4d:88:95:62:06:d5:fc:48:22:b0:71:87:6e:75:c2: eb:d7:a8:95:7f:83:34:0f:74:28:a3:3c:2c:0e:7e:fa:1e:a5: 84:b7:53:e3:7b:9a:07:4d:84:bd:e1:c7:1d:a3:32:f8:07:89: 48:61:7b:4d:a7:65:1e:09:6f:ab:32:66:4c:1c:55:de:a8:fb: 6a:b9:1b:6d:d7:c4:b0:58:f4:d1:43:ca:55:62:c8:9e:e6:ba: 60:ce:47:bd:e9:1c:2a:ce:69:1e:a6:7c:56:4c:df:8a:4b:26: 12:a8:e1:5a:a7:0e:22:95:c8:54:6e:6a:7d:59:d0:d0:2e:86: 8a:fa:00:5a:d0:e5:bd:a6:69:fc:84:28:a6:42:a1:29:6e:c9: 5c:f1:b3:81:fb:fc:ba:d8:dd:22:04:93:ae:7d:92:63:f7:dc: 75:87:71:58:46:bd:c7:53:f5:5c:88:36:10:2e:2a:7f:d2:46: 85:fe:70:fd:e3:b1:02:06:8c:f4:bc:49:8a:d8:7b:da:1d:6c: a6:0e:69:1d:0c:67:1d:30:bb:ee:af:c0:f6:24:9a:fe:65:38: ef:85:a2:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVSu0oZ9Zxvx4inpHJQuFgrKlPHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRFMTRFRDk2MjUxNjY1RkNGOUZDNEZBQzM2OERDNDA5 NTNFMzQwRDAeFw0yNjA1MTIxOTA0NTJaFw0yNjA1MTMyMjI2NTJaMDMxMTAvBgNV BAMTKDUwOUYyQUYxNUZCNjAwM0M1RTZBQ0JGQzY3RkVBRjE4MDkxNzNCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKCpL/4mu9syJm4Z3HIzgP08q7 h9rTJJQg2DMiNktcWY5LUlkrhY/ucK3a1jFYUa9sQbW4jadlQGd6hJGoZeR1bK5y fWOn8iwqE7Xl1jQ+5OsoFqyJ6E4GY0RvtRMqSG8BpNc+16HDBHlltdMwhqM2yew4 Q+1Il0TJp3s1xhKGOk7ALdKxvNMcEqy+rPLmH1Om9aYclUVurqS2UcBjmW44ibZ8 rQn6Us/shezI97a5Rh2fYzbM3m536d0yH9d5zuIVz5Ob/qb1T/2EDbTTqJ3JCzkU fQ1/Gcn5tWfeitQ5Vxt8TsZIyTkWW+31pYwmn/bad4497hZZIIj1oMxQ94OnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUJ8q8V+2ADxeasv8Z/6vGAkXO0cwHwYDVR0j BBgwFoAUpOFO2WJRZl/Pn8T6w2jcQJU+NA0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA0MDM2NzUtNWZhOS00ZTczLWI0YTktMjMyMDY5YjMxYWQ5LzAvQTRFMTRFRDk2 MjUxNjY1RkNGOUZDNEZBQzM2OERDNDA5NTNFMzQwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNEUxNEVEOTYyNTE2NjVGQ0Y5RkM0RkFDMzY4REM0MDk1M0Uz NDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA0MDM2NzUtNWZhOS00ZTczLWI0 YTktMjMyMDY5YjMxYWQ5LzAvQTRFMTRFRDk2MjUxNjY1RkNGOUZDNEZBQzM2OERD NDA5NTNFMzQwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHuD/yb5MRwlClRFIPgnd1l2tjtJZYpjNLO ajFH1J+3g85AYPCuyU2IlWIG1fxIIrBxh251wuvXqJV/gzQPdCijPCwOfvoepYS3 U+N7mgdNhL3hxx2jMvgHiUhhe02nZR4Jb6syZkwcVd6o+2q5G23XxLBY9NFDylVi yJ7mumDOR73pHCrOaR6mfFZM34pLJhKo4VqnDiKVyFRuan1Z0NAuhor6AFrQ5b2m afyEKKZCoSluyVzxs4H7/LrY3SIEk659kmP33HWHcVhGvcdT9VyINhAuKn/SRoX+ cP3jsQIGjPS8SYrYe9odbKYOaR0MZx0wu+6vwPYkmv5lOO+FokE= -----END CERTIFICATE-----Generated at Tue May 12 22:56:35 2026 by rpki-client