$ rpki-client -vvf rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft File: 4156BE0E036363A596E1CBC310489AB801DFF941.mft (raw, json) Hash identifier: rvhyYkpNrGXaCG8ChpK+Ks4uW33K3TmyanuptNuDSIQ= Subject key identifier: 0A:9A:01:C6:6C:0A:DC:E0:E1:E8:C9:5A:0D:82:08:D4:F1:C4:8D:C8 Authority key identifier: 41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41 Certificate issuer: /CN=4156BE0E036363A596E1CBC310489AB801DFF941 Certificate serial: 037B11D8E3FDD3AE93386201BDC77A7F8E4E3EFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:24:13 +0000 Manifest this update: Tue 12 May 2026 14:19:13 +0000 Manifest next update: Wed 13 May 2026 16:37:13 +0000 Files and hashes: 1: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: BnEjvX1TV7mzZcLsswA7EKyiNtfAnyBE1cK3RYLFuSA=) 2: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fBaq5SB6brHrX1BQRg7cuUdo6I/tHMTxRcN1nuTWvWU=) 3: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: 1Jti76r9T9UKwdcEcYvsPgmo/iaRRGG2B+UGXQ8BTSc=) 4: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: 80LRBswxlIwyMdrBKKN8zHcPB67XbaBw69GuBUvFeh0=) 5: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: rSHHS2SVXYFIsnKnswkfD0W9wcSIKHSwcE57Ly7QYSU=) 6: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: 6peX0JDNzT6rMcQu54Lce5kAols1rJU3rJxRvgulacM=) 7: 4156BE0E036363A596E1CBC310489AB801DFF941.crl (hash: dzzAb52s0D4+ZoTGa9AGcFEpU9Ii1tbRSjJEpli8Goc=) 8: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: HmJs2PjyM55f07/63Txr+Z06mPwICEzHB4ScF1m3HOs=) 9: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: HaFV5pJV86ftGAnPRTRMjv8zuoil0malPe+dc/Qoh5c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:7b:11:d8:e3:fd:d3:ae:93:38:62:01:bd:c7:7a:7f:8e:4e:3e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4156BE0E036363A596E1CBC310489AB801DFF941 Validity Not Before: May 12 14:19:13 2026 GMT Not After : May 13 16:37:13 2026 GMT Subject: CN=0A9A01C66C0ADCE0E1E8C95A0D8208D4F1C48DC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1b:58:bf:56:85:05:18:b6:a5:16:b2:2d:69: d3:66:de:d9:89:f2:c6:15:66:fb:ec:66:2c:f0:f2: 32:69:c1:9b:a4:f5:f3:56:32:f6:92:51:41:61:1c: 8c:73:91:7e:0a:ed:8c:9c:9d:90:8e:c0:46:9c:9f: bd:83:21:33:05:d2:6a:98:fa:85:15:13:35:dd:57: e0:d1:7f:37:50:3e:56:98:7d:40:e4:4c:9e:82:7a: 5d:26:c0:73:9b:4b:8b:ca:4d:29:58:c7:e3:0e:a8: 68:b4:58:58:1d:a3:d8:01:87:44:05:d4:53:f9:c3: 30:e9:a3:38:32:ca:a4:c2:0e:08:cd:ee:ab:06:ed: d1:2f:90:da:fd:e4:d2:92:1a:c4:c1:2e:5f:38:45: 51:c7:47:cc:39:f8:31:72:f2:c0:f9:7f:8e:ca:34: 71:93:5a:12:44:42:72:d7:b0:89:f1:04:32:90:ab: 3e:2a:f0:81:52:dd:58:f6:8d:9b:c1:7b:7d:81:a5: 39:35:ec:8f:2c:0a:c2:22:87:8e:24:a3:cc:14:e1: c0:b3:4f:25:5f:2b:66:cd:ed:82:d3:a4:7d:eb:13: a1:75:7e:bd:3c:b0:39:c0:88:88:ab:02:e3:99:7c: 47:25:02:ff:ca:61:d0:e2:96:01:79:61:41:ba:78: c3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9A:01:C6:6C:0A:DC:E0:E1:E8:C9:5A:0D:82:08:D4:F1:C4:8D:C8 X509v3 Authority Key Identifier: keyid:41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:72:a5:a0:7f:8d:97:92:cc:60:3d:30:e2:53:61:29:4c:56: 2d:cd:8d:f7:a7:dc:e9:29:38:3c:82:b8:e5:55:8d:b1:b9:d2: 9d:b7:d2:e6:6c:27:06:85:70:ab:9c:8f:e1:02:9e:7e:3a:ae: c9:32:2a:f4:e1:d2:df:22:dc:06:34:1c:0a:1a:94:27:1d:e5: 2d:18:bc:af:ce:e4:d5:67:e5:6b:d0:f5:af:c4:e0:47:de:12: 53:20:20:ef:29:d1:fd:33:5c:d0:90:91:2a:e8:89:36:d2:95: bc:e6:a7:d9:c4:2c:2e:5b:2b:ea:cc:b1:7a:71:52:a9:38:99: d1:fc:1f:3e:af:be:04:41:c7:ad:62:5d:c6:d7:44:fc:84:86: e2:4d:db:2e:48:96:bb:f6:c8:5a:d0:c7:f4:6e:29:cf:05:30: 43:e6:d9:5a:fb:69:11:50:4b:ba:63:d5:8b:f2:bf:28:e7:ee: 67:18:c7:b5:b0:48:d5:66:1b:77:53:1d:35:87:22:cc:c3:6d: 94:f4:4a:c9:8e:19:a9:d2:3a:e3:91:9e:f4:ee:d6:3a:9b:21: ef:68:25:86:b5:94:c9:76:dd:26:83:25:b3:2e:7e:db:72:27: 65:7f:78:b7:9c:28:fa:c1:23:f0:b3:a5:87:a2:a4:25:2e:40: ab:14:75:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA3sR2OP9066TOGIBvcd6f45OPvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NkJFMEUwMzYzNjNBNTk2RTFDQkMzMTA0ODlBQjgw MURGRjk0MTAeFw0yNjA1MTIxNDE5MTNaFw0yNjA1MTMxNjM3MTNaMDMxMTAvBgNV BAMTKDBBOUEwMUM2NkMwQURDRTBFMUU4Qzk1QTBEODIwOEQ0RjFDNDhEQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbG1i/VoUFGLalFrItadNm3tmJ 8sYVZvvsZizw8jJpwZuk9fNWMvaSUUFhHIxzkX4K7YycnZCOwEacn72DITMF0mqY +oUVEzXdV+DRfzdQPlaYfUDkTJ6Cel0mwHObS4vKTSlYx+MOqGi0WFgdo9gBh0QF 1FP5wzDpozgyyqTCDgjN7qsG7dEvkNr95NKSGsTBLl84RVHHR8w5+DFy8sD5f47K NHGTWhJEQnLXsInxBDKQqz4q8IFS3Vj2jZvBe32BpTk17I8sCsIih44ko8wU4cCz TyVfK2bN7YLTpH3rE6F1fr08sDnAiIirAuOZfEclAv/KYdDilgF5YUG6eMMvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCpoBxmwK3ODh6MlaDYII1PHEjcgwHwYDVR0j BBgwFoAUQVa+DgNjY6WW4cvDEEiauAHf+UEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODA3NThmMTUtNWRlOC00ODdkLTk5NDUtYzNlYTIwN2U0NGFkLzAvNDE1NkJFMEUw MzYzNjNBNTk2RTFDQkMzMTA0ODlBQjgwMURGRjk0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTU2QkUwRTAzNjM2M0E1OTZFMUNCQzMxMDQ4OUFCODAxREZG OTQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvNDE1NkJFMEUwMzYzNjNBNTk2RTFDQkMzMTA0ODlB QjgwMURGRjk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExypaB/jZeSzGA9MOJTYSlMVi3Njfen3Okp ODyCuOVVjbG50p230uZsJwaFcKucj+ECnn46rskyKvTh0t8i3AY0HAoalCcd5S0Y vK/O5NVn5WvQ9a/E4EfeElMgIO8p0f0zXNCQkSroiTbSlbzmp9nELC5bK+rMsXpx Uqk4mdH8Hz6vvgRBx61iXcbXRPyEhuJN2y5Ilrv2yFrQx/RuKc8FMEPm2Vr7aRFQ S7pj1Yvyvyjn7mcYx7WwSNVmG3dTHTWHIszDbZT0SsmOGanSOuORnvTu1jqbIe9o JYa1lMl23SaDJbMufttyJ2V/eLecKPrBI/CzpYeipCUuQKsUdd4= -----END CERTIFICATE-----Generated at Wed May 13 01:45:13 2026 by rpki-client