$ rpki-client -vvf rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft File: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft (raw, json) Hash identifier: 7tutxDM/pBeDo5mzhXq4I9wYfwWwmY3p+C4HGJbyHU0= Subject key identifier: F6:1F:4F:DE:3E:01:D5:68:45:60:23:A2:7E:75:12:29:7F:2D:E5:C2 Authority key identifier: 48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 Certificate issuer: /CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Certificate serial: 4AE9CEB602A6596CB6057246CB846301313D4C7E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:06:42 +0000 Manifest this update: Tue 12 May 2026 20:01:42 +0000 Manifest next update: Wed 13 May 2026 22:16:42 +0000 Files and hashes: 1: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl (hash: co0DjhbWPGu0Ek7gk9gGvR/Ih++mKxGfKR8FbrEmV+c=) 2: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: 5QHnLxUj5ToZbDP+kG+27eOW/Apgnrnl+qyMt1ibRXw=) 3: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: gNsJ7E8Wxy2p/7sU5QpT/62BpjOz3T6D3tTX9O4/j10=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e9:ce:b6:02:a6:59:6c:b6:05:72:46:cb:84:63:01:31:3d:4c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Validity Not Before: May 12 20:01:42 2026 GMT Not After : May 13 22:16:42 2026 GMT Subject: CN=F61F4FDE3E01D568456023A27E7512297F2DE5C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:be:5c:9c:fc:9c:f0:1a:2a:76:4c:4b:ad:4c: 2e:eb:43:10:d1:f4:2d:14:6f:0f:0c:90:de:17:8b: 94:8c:9e:89:c9:c9:0f:58:8f:55:4e:92:6f:55:e7: 4c:3e:26:ae:9d:cc:3b:38:b5:99:64:cc:ca:21:03: 72:41:82:e8:91:23:b0:4a:c3:10:1d:c5:a2:c4:65: 08:1c:2e:19:35:a6:22:91:bf:66:e9:a5:26:1a:1e: be:a6:7a:70:92:61:e0:eb:de:5a:41:20:42:33:c8: d9:f3:d8:8e:64:4f:d3:63:f9:79:9b:0a:44:e8:e4: 2e:a3:25:fe:36:40:08:06:ec:c3:0c:3e:f6:5d:d0: 7a:87:52:5f:22:37:28:e9:fd:5a:3b:e8:b3:fb:04: 7e:cc:a9:4a:8c:01:56:74:ae:49:1a:fe:a9:02:4c: 9c:d8:61:23:88:8b:dc:56:6f:84:cc:59:a3:a9:67: 05:8a:c2:a5:45:b1:5c:8d:9c:e8:0d:b7:af:7a:23: 33:cd:94:2f:91:72:6c:85:8a:2a:58:5c:0a:38:30: 6b:65:bb:3d:66:2a:ae:18:d2:9b:88:0c:39:53:e1: 86:1d:a0:7d:df:1e:35:4c:64:53:09:0a:ae:c6:d5: 3e:4c:5e:78:dc:3a:e3:a4:bd:6b:db:cd:78:27:0d: 2a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1F:4F:DE:3E:01:D5:68:45:60:23:A2:7E:75:12:29:7F:2D:E5:C2 X509v3 Authority Key Identifier: keyid:48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:4a:e2:8b:16:f1:b4:94:7e:05:c2:7d:46:79:10:91:10:a8: 56:23:95:9d:c0:0a:b8:25:c4:c0:8f:91:7d:07:f6:be:82:4b: 89:88:92:ad:13:21:e9:97:68:f8:4b:21:05:30:ca:90:92:ae: 99:d4:9b:fc:28:da:ce:96:85:cb:17:71:4f:68:6f:70:bd:c1: 33:41:1e:c7:a6:5c:69:b5:2b:61:b7:f0:c0:25:a8:d2:a9:e0: 8d:bf:f5:bb:2b:7e:cd:94:e1:56:ff:30:2f:8a:d9:8b:58:ca: 68:82:5e:46:11:90:82:5d:d9:81:fe:2f:eb:eb:5b:7b:77:61: 1b:23:92:83:f6:d8:b6:d3:7e:8c:c1:31:99:21:dc:65:28:d3: b7:6a:a9:63:28:11:f7:b8:34:e6:32:36:25:7a:5c:4e:79:be: 9a:28:32:ed:74:5f:10:5e:a4:76:51:90:30:34:cb:0e:39:53: ef:a5:27:e9:45:b7:eb:fd:11:d5:f3:06:bd:23:22:4f:61:15: 4d:1c:91:57:48:c3:79:be:48:e2:8e:01:de:e2:aa:83:b3:59: 53:32:ce:24:07:50:7e:6c:55:63:01:25:79:15:68:5b:03:fc: a2:78:f9:51:5c:12:78:e2:bf:23:c1:36:58:d1:bf:22:1b:b7: 22:fb:70:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSunOtgKmWWy2BXJGy4RjATE9TH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4 QUY2ODdEMzAeFw0yNjA1MTIyMDAxNDJaFw0yNjA1MTMyMjE2NDJaMDMxMTAvBgNV BAMTKEY2MUY0RkRFM0UwMUQ1Njg0NTYwMjNBMjdFNzUxMjI5N0YyREU1QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnvlyc/JzwGip2TEutTC7rQxDR 9C0Ubw8MkN4Xi5SMnonJyQ9Yj1VOkm9V50w+Jq6dzDs4tZlkzMohA3JBguiRI7BK wxAdxaLEZQgcLhk1piKRv2bppSYaHr6menCSYeDr3lpBIEIzyNnz2I5kT9Nj+Xmb CkTo5C6jJf42QAgG7MMMPvZd0HqHUl8iNyjp/Vo76LP7BH7MqUqMAVZ0rkka/qkC TJzYYSOIi9xWb4TMWaOpZwWKwqVFsVyNnOgNt696IzPNlC+RcmyFiipYXAo4MGtl uz1mKq4Y0puIDDlT4YYdoH3fHjVMZFMJCq7G1T5MXnjcOuOkvWvbzXgnDSoTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9h9P3j4B1WhFYCOifnUSKX8t5cIwHwYDVR0j BBgwFoAUSIXnXWsKk49f7jX6uibeoIr2h9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZmN2VmMzQtNDk5MS00YmIxLTk2YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2 QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4QUY2ODdEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg1RTc1RDZCMEE5MzhGNUZFRTM1RkFCQTI2REVBMDhBRjY4 N0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZmN2VmMzQtNDk5MS00YmIxLTk2 YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRF QTA4QUY2ODdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxK4osW8bSUfgXCfUZ5EJEQqFYjlZ3ACrgl xMCPkX0H9r6CS4mIkq0TIemXaPhLIQUwypCSrpnUm/wo2s6WhcsXcU9ob3C9wTNB HsemXGm1K2G38MAlqNKp4I2/9bsrfs2U4Vb/MC+K2YtYymiCXkYRkIJd2YH+L+vr W3t3YRsjkoP22LbTfozBMZkh3GUo07dqqWMoEfe4NOYyNiV6XE55vpooMu10XxBe pHZRkDA0yw45U++lJ+lFt+v9EdXzBr0jIk9hFU0ckVdIw3m+SOKOAd7iqoOzWVMy ziQHUH5sVWMBJXkVaFsD/KJ4+VFcEnjivyPBNljRvyIbtyL7cH0= -----END CERTIFICATE-----Generated at Wed May 13 01:41:10 2026 by rpki-client