$ rpki-client -vvf rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft File: 04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft (raw, json) Hash identifier: NoG4yVX27ZAVIbjp45wlhFMaszGDQibgTktkcEkmVJk= Subject key identifier: 39:4B:5F:51:0D:C0:5E:E6:A7:0B:F1:E7:52:2A:13:84:51:74:8D:59 Authority key identifier: 04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36 Certificate issuer: /CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36 Certificate serial: 5ABB9AC3CC984BE3114EC3C17E553A0E1944C7D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:11:21 +0000 Manifest this update: Tue 12 May 2026 10:06:21 +0000 Manifest next update: Wed 13 May 2026 13:45:21 +0000 Files and hashes: 1: 04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl (hash: wkoJXTHPaYTnmHKPDn9fi8h9Iam8elWB0pifrj/TYMg=) 2: 3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (hash: Sxgjfc3rJMR/6kggcztr6diqTcIFdNjFMaFwfjqQRVc=) 3: 3130332e38302e39312e302f32342d3234203d3e20313337333033.roa (hash: 8fVyhPJOnEawBWwgARzQly7FMcHwy/+Ghg0XkCT2OOs=) 4: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (hash: bImD2ZtrKw/qYZlZEa6DVDo0ea7PH2tJcz0npEPPdds=) 5: 3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (hash: jiJN5uTtVqTyi/LsSOB3CZxJlHQ5mjW5GcesMlLX4EE=) 6: 3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (hash: ngWzWlF3BDUAfLENIH4eXpEMJ09d6MMBm0aRXwTS2DE=) 7: 3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (hash: vatB6xTCpKTsE4tbG+JDKUhfyJC22x4PAXCG04Pc2lA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:bb:9a:c3:cc:98:4b:e3:11:4e:c3:c1:7e:55:3a:0e:19:44:c7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36 Validity Not Before: May 12 10:06:21 2026 GMT Not After : May 13 13:45:21 2026 GMT Subject: CN=394B5F510DC05EE6A70BF1E7522A138451748D59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:66:f6:b7:78:42:f0:60:1a:8f:30:bf:10:02: cc:b5:b2:95:b0:18:38:f9:4a:7b:fc:ef:36:d9:00: c4:b5:4c:8b:b1:ba:0e:74:64:bf:15:c0:bf:44:47: cb:73:fd:22:d4:13:6d:97:42:2f:ed:38:5b:cd:7b: 23:63:1b:39:49:dc:36:80:c2:86:1b:89:f7:f6:e9: c7:b4:4d:a2:1a:a6:cb:0e:b0:08:de:f2:6c:96:9d: fb:9c:65:29:50:32:7e:76:28:b4:28:31:f0:e1:74: 91:0f:29:f7:27:06:dd:00:53:25:fc:ee:8f:5c:4b: 6f:09:64:fc:3d:ec:19:4f:ee:7b:32:02:02:93:49: 27:da:13:a8:3f:d0:c2:43:fc:f7:27:a2:f7:05:02: 9a:7c:f3:a2:a4:60:88:7b:67:24:1a:5e:c8:69:72: c1:5b:69:24:ab:a1:7f:c0:29:3f:ae:7b:d2:03:32: 5c:31:1f:d2:82:fc:91:ad:01:4d:a1:2b:e8:98:7b: 63:dd:94:5e:4c:10:41:37:61:08:bf:db:74:3c:8f: 9b:8a:d4:60:fa:0e:68:60:17:3e:ea:6c:b1:05:0f: 83:02:67:60:82:7d:78:35:e7:19:27:44:0b:a6:0a: c2:55:75:98:a3:3d:e1:68:5a:ce:8d:4d:2c:cd:c7: 26:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4B:5F:51:0D:C0:5E:E6:A7:0B:F1:E7:52:2A:13:84:51:74:8D:59 X509v3 Authority Key Identifier: keyid:04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:a1:b2:bf:47:71:28:62:88:84:6a:cd:32:4c:f1:7f:ae:12: cd:be:db:86:cb:de:94:58:16:1c:24:97:57:bf:7e:28:ba:a3: 22:a8:36:92:ef:36:c9:3c:95:c7:d9:32:a0:5f:20:2d:ea:8e: 11:a0:05:45:42:f1:bb:4d:51:a2:13:ae:bd:89:85:29:d4:04: df:11:c0:4f:63:a3:77:9d:13:b3:10:23:27:3f:1e:52:41:9d: 4c:b9:e1:9b:4b:87:65:f4:16:2f:9d:77:b7:c4:7e:61:68:8a: bb:ea:d9:f7:d0:26:e2:91:fb:43:74:64:c1:e1:52:2d:a1:6b: aa:ef:40:08:39:44:e5:68:33:24:3b:19:92:bc:05:ad:d6:d8: 51:23:c4:17:9e:35:03:23:ed:9c:6b:fd:5f:91:8b:4c:cc:f5: 68:f0:64:1c:0b:e0:30:de:a2:de:d3:30:a5:06:dd:23:90:21: 45:bd:0d:24:a8:03:b3:54:4b:cb:1c:43:6e:90:a9:fd:65:2e: 49:c1:11:df:dd:10:18:aa:5b:1a:6f:92:4b:2d:e8:5e:f7:e3: 4c:f9:62:c9:b7:3b:cc:1c:78:e7:57:3a:4f:c0:05:85:76:e2: f7:08:1e:57:17:28:ee:8a:79:53:90:9f:3d:48:13:88:ab:8a: d4:45:b0:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWruaw8yYS+MRTsPBflU6DhlEx9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREQkI1ODUxMUVCNTY2RDlCRTE5OEI3RUNFMTcxRDJB RTNGMEQzNjAeFw0yNjA1MTIxMDA2MjFaFw0yNjA1MTMxMzQ1MjFaMDMxMTAvBgNV BAMTKDM5NEI1RjUxMERDMDVFRTZBNzBCRjFFNzUyMkExMzg0NTE3NDhENTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Zva3eELwYBqPML8QAsy1spWw GDj5Snv87zbZAMS1TIuxug50ZL8VwL9ER8tz/SLUE22XQi/tOFvNeyNjGzlJ3DaA woYbiff26ce0TaIapssOsAje8myWnfucZSlQMn52KLQoMfDhdJEPKfcnBt0AUyX8 7o9cS28JZPw97BlP7nsyAgKTSSfaE6g/0MJD/PcnovcFApp886KkYIh7ZyQaXshp csFbaSSroX/AKT+ue9IDMlwxH9KC/JGtAU2hK+iYe2PdlF5MEEE3YQi/23Q8j5uK 1GD6DmhgFz7qbLEFD4MCZ2CCfXg15xknRAumCsJVdZijPeFoWs6NTSzNxyb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOUtfUQ3AXuanC/HnUioThFF0jVkwHwYDVR0j BBgwFoAUBNu1hRHrVm2b4Zi37OFx0q4/DTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIwMzJiYzktNjA1YS00MjUzLWE0Y2QtNjJmMTI0MTI2ZWFjLzAvMDREQkI1ODUx MUVCNTY2RDlCRTE5OEI3RUNFMTcxRDJBRTNGMEQzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNERCQjU4NTExRUI1NjZEOUJFMTk4QjdFQ0UxNzFEMkFFM0Yw RDM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIwMzJiYzktNjA1YS00MjUzLWE0 Y2QtNjJmMTI0MTI2ZWFjLzAvMDREQkI1ODUxMUVCNTY2RDlCRTE5OEI3RUNFMTcx RDJBRTNGMEQzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKhsr9HcShiiIRqzTJM8X+uEs2+24bL3pRY Fhwkl1e/fii6oyKoNpLvNsk8lcfZMqBfIC3qjhGgBUVC8btNUaITrr2JhSnUBN8R wE9jo3edE7MQIyc/HlJBnUy54ZtLh2X0Fi+dd7fEfmFoirvq2ffQJuKR+0N0ZMHh Ui2ha6rvQAg5ROVoMyQ7GZK8Ba3W2FEjxBeeNQMj7Zxr/V+Ri0zM9WjwZBwL4DDe ot7TMKUG3SOQIUW9DSSoA7NUS8scQ26Qqf1lLknBEd/dEBiqWxpvkkst6F7340z5 Ysm3O8wceOdXOk/ABYV24vcIHlcXKO6KeVOQnz1IE4iritRFsGk= -----END CERTIFICATE-----Generated at Tue May 12 22:46:36 2026 by rpki-client