$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft File: 4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft (raw, json) Hash identifier: cmv+iTgjVjEa1RC8dvFZMk6CpAxdTacZq3fm7Wul84w= Subject key identifier: D0:F4:CA:F6:D5:2B:68:F2:50:86:E5:8B:E9:B5:BD:9E:75:C8:59:E2 Authority key identifier: 4A:B7:BD:8A:13:F8:8A:9A:CC:16:3E:CD:B0:8E:E4:9E:AB:29:00:E0 Certificate issuer: /CN=4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0 Certificate serial: 2A2D2C835C9E628D0E56A9351F5F0C54F1962375 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:59:36 +0000 Manifest this update: Tue 12 May 2026 14:54:36 +0000 Manifest next update: Wed 13 May 2026 18:51:36 +0000 Files and hashes: 1: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: U4x7nHOIPSopo3seWvdUR/rW9/Lem7oTQ8rb2DjIll4=) 2: 4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl (hash: /aSFhaM1o4DevabWd1m2S9scVMFwXiyxDuV+zHzFZbI=) 3: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 4GyYBNeN6eFsPcbI1361ngWI6JUq/EEA9jGEIXv0P9w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:2d:2c:83:5c:9e:62:8d:0e:56:a9:35:1f:5f:0c:54:f1:96:23:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0 Validity Not Before: May 12 14:54:36 2026 GMT Not After : May 13 18:51:36 2026 GMT Subject: CN=D0F4CAF6D52B68F25086E58BE9B5BD9E75C859E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3c:41:54:ba:89:a3:de:7d:d6:2b:ec:18:12: e4:a7:00:d9:63:8b:56:3c:20:19:66:17:29:28:1c: d2:08:bf:c3:c8:a4:c0:71:db:6f:10:e6:43:3f:b7: 47:6c:53:e8:2e:26:78:ca:61:41:42:3d:f6:28:64: 1d:07:09:73:d7:39:67:36:3a:9a:c9:d6:9d:40:25: 5a:5a:38:f2:ee:69:ba:14:1e:bd:6e:4d:84:5f:b6: 85:31:1b:ef:99:4d:f6:43:21:dc:40:79:68:c3:e3: f8:f3:b6:67:16:1b:3d:ec:6b:2a:a4:e2:cf:79:9e: cf:c6:35:dd:cc:b9:51:1a:12:9a:47:e8:ec:ac:1b: 27:f0:28:c0:e9:40:c3:bc:79:f1:bc:40:89:63:7f: a1:f5:52:41:c1:8f:bd:57:1f:3e:b5:7a:16:07:d5: b9:03:e6:0e:39:08:ed:0f:71:e5:ab:38:bb:9b:30: 54:24:f3:23:81:9b:2a:9d:9b:1e:54:76:26:8b:15: 74:d7:2b:6d:7e:47:08:1d:ef:e7:24:2c:14:80:02: 34:ce:32:9d:de:28:32:79:20:56:a1:74:8a:9d:05: f6:b1:43:d9:38:5c:db:15:c6:fa:78:32:30:32:bb: d4:fd:9f:ba:99:7c:77:96:f3:44:cc:5e:c8:b9:18: 98:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F4:CA:F6:D5:2B:68:F2:50:86:E5:8B:E9:B5:BD:9E:75:C8:59:E2 X509v3 Authority Key Identifier: keyid:4A:B7:BD:8A:13:F8:8A:9A:CC:16:3E:CD:B0:8E:E4:9E:AB:29:00:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ce:e7:00:cf:ac:de:f1:8a:bd:fb:24:b7:a5:b0:2c:bd:72: 60:dd:8b:67:e0:f0:f4:46:70:ee:71:8c:15:7c:19:a3:6e:6e: fb:e8:7e:7d:49:66:79:51:e2:ee:f8:80:25:e6:ba:1a:88:c5: ea:cc:0e:3c:90:50:ca:2a:54:11:cd:fa:f8:8c:e9:0b:e6:37: 8c:56:d8:d5:94:23:c9:4d:c0:32:ee:e9:24:78:a0:c2:07:2a: 54:73:4e:3d:f6:e2:1d:8a:3c:fa:32:fc:13:b0:ff:07:3a:16: b0:4c:fd:2a:82:9e:61:fb:fe:b3:f6:3d:4d:0e:7a:b1:f6:1a: 86:e0:58:7c:d5:21:3f:57:db:11:6b:98:0b:a8:65:f6:93:99: fd:b2:4c:61:ac:0b:6d:74:89:8a:aa:c8:18:be:47:08:ad:90: 44:7a:b3:6a:b1:fb:ee:14:e1:8e:d3:93:f6:57:90:0f:ee:67: 81:65:e5:79:76:a5:cd:d2:e9:ae:4b:94:b5:4e:c6:63:5e:dc: 2e:ed:69:eb:91:ee:00:7a:8d:97:3c:78:75:9d:2d:3a:15:3f: 42:18:4b:ad:99:9c:f4:50:f1:14:5d:8b:40:90:df:b2:1a:41: 1d:3f:9d:38:e7:d4:0c:b7:a8:71:12:e6:70:37:1f:38:d7:f9: 6d:54:45:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKi0sg1yeYo0OVqk1H18MVPGWI3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFCN0JEOEExM0Y4OEE5QUNDMTYzRUNEQjA4RUU0OUVB QjI5MDBFMDAeFw0yNjA1MTIxNDU0MzZaFw0yNjA1MTMxODUxMzZaMDMxMTAvBgNV BAMTKEQwRjRDQUY2RDUyQjY4RjI1MDg2RTU4QkU5QjVCRDlFNzVDODU5RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFPEFUuomj3n3WK+wYEuSnANlj i1Y8IBlmFykoHNIIv8PIpMBx228Q5kM/t0dsU+guJnjKYUFCPfYoZB0HCXPXOWc2 OprJ1p1AJVpaOPLuaboUHr1uTYRftoUxG++ZTfZDIdxAeWjD4/jztmcWGz3sayqk 4s95ns/GNd3MuVEaEppH6OysGyfwKMDpQMO8efG8QIljf6H1UkHBj71XHz61ehYH 1bkD5g45CO0PceWrOLubMFQk8yOBmyqdmx5UdiaLFXTXK21+Rwgd7+ckLBSAAjTO Mp3eKDJ5IFahdIqdBfaxQ9k4XNsVxvp4MjAyu9T9n7qZfHeW80TMXsi5GJhTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0PTK9tUraPJQhuWL6bW9nnXIWeIwHwYDVR0j BBgwFoAUSre9ihP4iprMFj7NsI7knqspAOAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ3NTA4OGUtNDlhZi00NzJiLTliNjItODFlNzNkYWFmMWQ2LzAvNEFCN0JEOEEx M0Y4OEE5QUNDMTYzRUNEQjA4RUU0OUVBQjI5MDBFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUI3QkQ4QTEzRjg4QTlBQ0MxNjNFQ0RCMDhFRTQ5RUFCMjkw MEUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvNEFCN0JEOEExM0Y4OEE5QUNDMTYzRUNEQjA4RUU0 OUVBQjI5MDBFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfO5wDPrN7xir37JLelsCy9cmDdi2fg8PRG cO5xjBV8GaNubvvofn1JZnlR4u74gCXmuhqIxerMDjyQUMoqVBHN+viM6QvmN4xW 2NWUI8lNwDLu6SR4oMIHKlRzTj324h2KPPoy/BOw/wc6FrBM/SqCnmH7/rP2PU0O erH2GobgWHzVIT9X2xFrmAuoZfaTmf2yTGGsC210iYqqyBi+RwitkER6s2qx++4U 4Y7Tk/ZXkA/uZ4Fl5Xl2pc3S6a5LlLVOxmNe3C7taeuR7gB6jZc8eHWdLToVP0IY S62ZnPRQ8RRdi0CQ37IaQR0/nTjn1Ay3qHES5nA3HzjX+W1URT4= -----END CERTIFICATE-----Generated at Wed May 13 02:11:58 2026 by rpki-client