$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft File: 494BBF61A7ADCFAD78873BA2370358D4C942405D.mft (raw, json) Hash identifier: q56XlErExH//w0+GHEgJWa5uPnjz/6ZibHl/OXxEc9k= Subject key identifier: A2:29:34:42:4A:A3:DA:7F:2A:9A:86:79:4C:F1:DE:43:E9:2F:1B:EE Authority key identifier: 49:4B:BF:61:A7:AD:CF:AD:78:87:3B:A2:37:03:58:D4:C9:42:40:5D Certificate issuer: /CN=494BBF61A7ADCFAD78873BA2370358D4C942405D Certificate serial: 2EE97AC1738C425EB77D2E42343B93D43000A204 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/494BBF61A7ADCFAD78873BA2370358D4C942405D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:41:20 +0000 Manifest this update: Tue 12 May 2026 16:36:20 +0000 Manifest next update: Wed 13 May 2026 17:30:20 +0000 Files and hashes: 1: 494BBF61A7ADCFAD78873BA2370358D4C942405D.crl (hash: GDqrKAbEkVDgWu/foTaMR4ocJAE47hKxFOON1Bd/4PI=) 2: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: Ckq81tABd9P/ltS1UN2BW7llZjF9ry0atyKHbIk0sEg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.crl rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/494BBF61A7ADCFAD78873BA2370358D4C942405D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e9:7a:c1:73:8c:42:5e:b7:7d:2e:42:34:3b:93:d4:30:00:a2:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=494BBF61A7ADCFAD78873BA2370358D4C942405D Validity Not Before: May 12 16:36:20 2026 GMT Not After : May 13 17:30:20 2026 GMT Subject: CN=A22934424AA3DA7F2A9A86794CF1DE43E92F1BEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:1b:e1:d2:a6:7b:d8:c9:66:f1:11:2d:15: 9c:d5:18:cb:56:bc:65:6d:2e:cf:77:e7:75:a2:3b: 0d:0c:96:e6:e4:81:ba:1d:e7:44:3a:65:0f:dd:25: 53:cf:13:87:cf:b0:b3:b7:66:e8:c0:40:68:a1:56: 6b:26:44:fa:1f:4a:b7:98:88:d0:78:25:87:ee:8d: 4c:57:7b:43:da:48:5f:5f:69:16:f0:af:95:cf:cd: 75:4c:9c:07:2e:b6:9e:48:b8:18:c4:89:14:97:6b: 95:4a:d1:fb:0a:51:bb:96:af:c5:af:57:f8:ec:aa: 49:b1:23:a6:12:c6:fb:32:d1:24:8b:8c:5c:fb:b7: 7e:53:db:59:8d:3a:7c:17:91:9e:aa:13:7e:e3:a4: db:5a:4e:fe:fb:e0:e5:65:01:ee:8a:d6:10:c6:7c: 23:d0:1a:c0:59:d6:6a:1a:48:90:f8:77:f0:25:af: 6b:01:46:4c:13:af:12:f8:b8:07:69:7f:7e:3b:7b: ca:9d:dd:79:cd:10:08:99:b3:e3:79:eb:c4:8e:9b: 44:39:70:a0:e6:b1:5b:91:8b:a5:56:c6:9a:d3:77: e6:5f:a7:15:b2:2a:c8:88:02:0e:f8:57:d2:10:28: 3a:1d:26:81:17:1b:6c:51:0d:d4:e3:b7:8e:a7:b8: d8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:29:34:42:4A:A3:DA:7F:2A:9A:86:79:4C:F1:DE:43:E9:2F:1B:EE X509v3 Authority Key Identifier: keyid:49:4B:BF:61:A7:AD:CF:AD:78:87:3B:A2:37:03:58:D4:C9:42:40:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/494BBF61A7ADCFAD78873BA2370358D4C942405D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3c:86:ce:06:ca:62:78:a8:59:6c:03:28:6c:25:a8:d1:44: 44:b4:f2:2c:1b:1b:b4:51:6f:ce:08:af:4c:68:53:0b:c7:53: ff:0c:ea:39:86:95:1e:b1:7a:0b:b2:0d:16:8e:7e:62:e3:1e: 2a:5e:20:12:05:9e:b4:d0:bf:9d:91:ee:10:8e:af:80:ff:f1: 86:8e:8c:2d:cd:6e:45:d9:bf:64:c5:6c:28:cc:58:48:4c:8a: c3:b0:6b:9c:61:ec:9d:52:7e:4f:2d:8a:1d:3b:46:3c:d1:f3: 1c:ab:5f:b9:83:81:8c:4d:55:33:b5:e1:24:11:74:24:d7:4e: e5:aa:78:6d:99:c5:39:22:44:dc:63:69:bb:a7:48:d1:1f:ca: a8:64:6e:60:19:ac:22:b1:4e:e7:ac:be:37:5e:a6:7d:5c:bb: 02:61:c3:ea:52:03:3b:5e:ad:2c:a7:7b:ab:e0:68:23:d9:58: e3:ca:e0:3b:57:a4:7f:c0:39:d1:6c:c5:fa:72:b4:c3:42:da: 86:93:6d:8d:5e:a6:b1:1e:e9:7e:81:26:04:8d:56:c1:e2:05: 4d:92:6b:15:2b:d9:87:a1:1c:60:a2:95:b6:d9:06:49:6a:22: 2f:93:8b:8e:01:95:e2:7d:65:70:53:7a:da:bf:4d:a8:04:fe: 7c:a3:a7:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULul6wXOMQl63fS5CNDuT1DAAogQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk0QkJGNjFBN0FEQ0ZBRDc4ODczQkEyMzcwMzU4RDRD OTQyNDA1RDAeFw0yNjA1MTIxNjM2MjBaFw0yNjA1MTMxNzMwMjBaMDMxMTAvBgNV BAMTKEEyMjkzNDQyNEFBM0RBN0YyQTlBODY3OTRDRjFERTQzRTkyRjFCRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzoBvh0qZ72Mlm8REtFZzVGMtW vGVtLs9353WiOw0Mlubkgbod50Q6ZQ/dJVPPE4fPsLO3ZujAQGihVmsmRPofSreY iNB4JYfujUxXe0PaSF9faRbwr5XPzXVMnAcutp5IuBjEiRSXa5VK0fsKUbuWr8Wv V/jsqkmxI6YSxvsy0SSLjFz7t35T21mNOnwXkZ6qE37jpNtaTv774OVlAe6K1hDG fCPQGsBZ1moaSJD4d/Alr2sBRkwTrxL4uAdpf347e8qd3XnNEAiZs+N568SOm0Q5 cKDmsVuRi6VWxprTd+ZfpxWyKsiIAg74V9IQKDodJoEXG2xRDdTjt46nuNipAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoik0Qkqj2n8qmoZ5TPHeQ+kvG+4wHwYDVR0j BBgwFoAUSUu/Yaetz614hzuiNwNY1MlCQF0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U1MzI4ZDgtODY3ZS00MjMyLWI1ZTEtNjVhYjBiYzA0ODk2LzAvNDk0QkJGNjFB N0FEQ0ZBRDc4ODczQkEyMzcwMzU4RDRDOTQyNDA1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTRCQkY2MUE3QURDRkFENzg4NzNCQTIzNzAzNThENEM5NDI0 MDVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U1MzI4ZDgtODY3ZS00MjMyLWI1 ZTEtNjVhYjBiYzA0ODk2LzAvNDk0QkJGNjFBN0FEQ0ZBRDc4ODczQkEyMzcwMzU4 RDRDOTQyNDA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFI8hs4GymJ4qFlsAyhsJajRRES08iwbG7RR b84Ir0xoUwvHU/8M6jmGlR6xeguyDRaOfmLjHipeIBIFnrTQv52R7hCOr4D/8YaO jC3NbkXZv2TFbCjMWEhMisOwa5xh7J1Sfk8tih07RjzR8xyrX7mDgYxNVTO14SQR dCTXTuWqeG2ZxTkiRNxjabunSNEfyqhkbmAZrCKxTuesvjdepn1cuwJhw+pSAzte rSyne6vgaCPZWOPK4DtXpH/AOdFsxfpytMNC2oaTbY1eprEe6X6BJgSNVsHiBU2S axUr2YehHGCilbbZBklqIi+Ti44BleJ9ZXBTetq/TagE/nyjp6s= -----END CERTIFICATE-----Generated at Tue May 12 22:19:40 2026 by rpki-client