$ rpki-client -vvf rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft File: 4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft (raw, json) Hash identifier: h/2b+L9c5w0zgIfkXFDceg7RC5dcG35rWybwAAa8dHc= Subject key identifier: 76:B5:A9:6B:32:FC:DC:A6:24:B1:AC:66:4E:5D:E2:AA:4A:43:D3:D0 Authority key identifier: 4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2 Certificate issuer: /CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2 Certificate serial: 18915BD210585505185A01B2147AEF692C0702FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:51:27 +0000 Manifest this update: Tue 12 May 2026 05:46:27 +0000 Manifest next update: Wed 13 May 2026 08:34:27 +0000 Files and hashes: 1: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (hash: Ud8zXVkaxOANWSpFsC422ZV+3rT9KJeF9ej6YaNldzs=) 2: 4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl (hash: gb5W23SYTqjIuGZgMc4x6zWjzToUAfC7UVcet8ThQwY=) 3: 3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa (hash: IVSxWqHfsbpgTjNP8RzLROF59WJoZKS7+db35QQ4pHo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:91:5b:d2:10:58:55:05:18:5a:01:b2:14:7a:ef:69:2c:07:02:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2 Validity Not Before: May 12 05:46:27 2026 GMT Not After : May 13 08:34:27 2026 GMT Subject: CN=76B5A96B32FCDCA624B1AC664E5DE2AA4A43D3D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b0:1a:03:24:75:dc:da:f3:ea:98:9a:7e:f3: 21:6a:f3:42:b7:b8:a2:6b:7e:9a:61:60:82:e5:c6: 0e:7c:01:36:b7:b2:c1:16:34:42:91:7b:23:13:89: 89:64:41:4f:ab:52:64:ed:49:57:ca:eb:99:8b:0f: b1:de:04:a3:2a:cc:4a:0f:00:88:ef:e4:5c:f1:29: dd:f6:92:32:f1:93:36:93:e7:78:d3:f2:6e:b4:44: 87:a0:da:46:a7:59:bf:58:4a:37:2c:1d:41:6a:d4: 07:f9:27:0f:eb:52:f5:ce:a8:1a:75:24:67:a0:15: bb:dd:6d:b2:27:39:17:12:de:07:a7:5c:af:b7:17: 8b:74:5d:68:a9:a1:4d:19:74:e6:df:7b:12:06:52: a7:3e:2a:a3:3e:4a:1d:f0:d1:ec:b7:ce:6a:c6:44: 50:b5:fe:c1:33:c5:70:ff:e3:11:d7:35:21:01:32: f9:71:56:1c:95:d3:e6:ed:43:c7:84:41:ba:56:df: d7:6b:1d:5c:7e:4a:c6:63:1a:67:d2:92:97:f6:0f: 8c:b3:dc:db:34:a8:0b:7f:d6:2c:87:37:7b:84:76: 42:19:fb:a3:9b:51:d9:b9:9e:13:1a:3d:bf:7f:aa: 14:40:e9:fa:05:5b:53:bd:3b:8a:28:c6:f8:8f:a0: 2a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B5:A9:6B:32:FC:DC:A6:24:B1:AC:66:4E:5D:E2:AA:4A:43:D3:D0 X509v3 Authority Key Identifier: keyid:4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1a:12:90:58:9f:67:83:4c:a2:95:b6:1d:a0:ff:bc:15:9d: 9a:eb:99:23:15:53:0a:61:d7:fe:1c:7f:33:b4:7f:e8:35:12: 79:c0:51:f9:59:10:35:be:17:75:c0:06:d4:da:59:a8:17:e8: 3e:b6:a9:42:6a:89:a3:4d:b1:43:a2:7c:90:4f:72:1a:4b:be: a1:0d:6b:4e:fa:fe:8e:b2:fb:0d:ef:e3:8d:52:c2:78:35:12: 68:64:11:4f:c8:98:97:82:07:40:8a:3f:6e:f6:83:b2:ce:49: 94:4e:fa:5f:1c:db:41:0c:66:43:93:e7:fe:6b:c3:0e:38:4e: 48:32:ab:9d:ff:2b:01:c5:6c:85:94:b5:2e:3d:8c:03:f2:34: b2:28:bc:90:2e:91:22:83:50:6a:39:6e:02:26:db:70:88:2e: c9:96:c6:56:04:04:e9:64:5d:bf:cb:de:24:1b:30:8e:43:32: 6d:7f:b0:5b:ce:60:73:fb:67:a8:3c:e4:53:67:56:26:94:f9: 59:4d:6c:05:b6:4e:0b:64:e7:80:6d:bf:a1:51:2e:72:ee:ca: 00:17:27:7c:69:45:1f:42:6f:91:0b:d2:4c:76:d2:41:de:a1: 78:d9:a3:03:14:ed:68:a6:db:9b:58:5a:0f:1c:5b:54:45:a0: f4:ba:0b:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJFb0hBYVQUYWgGyFHrvaSwHAvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3MTVERTZFMjVCNzRCM0E2NzdCQUVEN0NFODFFMzEx OTAwNzFGMjAeFw0yNjA1MTIwNTQ2MjdaFw0yNjA1MTMwODM0MjdaMDMxMTAvBgNV BAMTKDc2QjVBOTZCMzJGQ0RDQTYyNEIxQUM2NjRFNURFMkFBNEE0M0QzRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrsBoDJHXc2vPqmJp+8yFq80K3 uKJrfpphYILlxg58ATa3ssEWNEKReyMTiYlkQU+rUmTtSVfK65mLD7HeBKMqzEoP AIjv5FzxKd32kjLxkzaT53jT8m60RIeg2kanWb9YSjcsHUFq1Af5Jw/rUvXOqBp1 JGegFbvdbbInORcS3genXK+3F4t0XWipoU0ZdObfexIGUqc+KqM+Sh3w0ey3zmrG RFC1/sEzxXD/4xHXNSEBMvlxVhyV0+btQ8eEQbpW39drHVx+SsZjGmfSkpf2D4yz 3Ns0qAt/1iyHN3uEdkIZ+6ObUdm5nhMaPb9/qhRA6foFW1O9O4ooxviPoConAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdrWpazL83KYksaxmTl3iqkpD09AwHwYDVR0j BBgwFoAUTXFd5uJbdLOmd7rtfOgeMRkAcfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzRhYWEyZjEtNjNhOS00MjgxLTg5NDItZmI1ZDgyNDExOWE0LzAvNEQ3MTVERTZF MjVCNzRCM0E2NzdCQUVEN0NFODFFMzExOTAwNzFGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDcxNURFNkUyNUI3NEIzQTY3N0JBRUQ3Q0U4MUUzMTE5MDA3 MUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzRhYWEyZjEtNjNhOS00MjgxLTg5 NDItZmI1ZDgyNDExOWE0LzAvNEQ3MTVERTZFMjVCNzRCM0E2NzdCQUVEN0NFODFF MzExOTAwNzFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwaEpBYn2eDTKKVth2g/7wVnZrrmSMVUwph 1/4cfzO0f+g1EnnAUflZEDW+F3XABtTaWagX6D62qUJqiaNNsUOifJBPchpLvqEN a076/o6y+w3v441Swng1EmhkEU/ImJeCB0CKP272g7LOSZRO+l8c20EMZkOT5/5r ww44Tkgyq53/KwHFbIWUtS49jAPyNLIovJAukSKDUGo5bgIm23CILsmWxlYEBOlk Xb/L3iQbMI5DMm1/sFvOYHP7Z6g85FNnViaU+VlNbAW2Tgtk54Btv6FRLnLuygAX J3xpRR9Cb5EL0kx20kHeoXjZowMU7Wim25tYWg8cW1RFoPS6C4o= -----END CERTIFICATE-----Generated at Tue May 12 23:20:39 2026 by rpki-client