$ rpki-client -vvf rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft File: 4BD77983D98742985400276FF0F5959696EA7807.mft (raw, json) Hash identifier: bQlkaoJ+HlAqsc1r+NPgZWP9Km03u141NUO31Ru3oBY= Subject key identifier: 7D:DA:5E:B5:CB:77:85:B3:53:20:40:0E:8F:80:CD:B9:B9:92:4C:F3 Authority key identifier: 4B:D7:79:83:D9:87:42:98:54:00:27:6F:F0:F5:95:96:96:EA:78:07 Certificate issuer: /CN=4BD77983D98742985400276FF0F5959696EA7807 Certificate serial: 343D2E14C471BFE95B5B443DC37488D274EB3E08 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft Manifest number: 0F Signing time: Tue 12 May 2026 11:37:15 +0000 Manifest this update: Tue 12 May 2026 11:32:15 +0000 Manifest next update: Wed 13 May 2026 13:15:15 +0000 Files and hashes: 1: 4BD77983D98742985400276FF0F5959696EA7807.crl (hash: df2z2GAc3qDrpHUeJr2e8gvWas/+JiohS2UaoKp853s=) 2: 3130332e35382e3130342e302f32322d3234203d3e20313333383334.roa (hash: 2ktJ+LGrBdyxqO+5Ni21bj0NM08xpyYMFhaaSWYusJY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.crl rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:3d:2e:14:c4:71:bf:e9:5b:5b:44:3d:c3:74:88:d2:74:eb:3e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD77983D98742985400276FF0F5959696EA7807 Validity Not Before: May 12 11:32:15 2026 GMT Not After : May 13 13:15:15 2026 GMT Subject: CN=7DDA5EB5CB7785B35320400E8F80CDB9B9924CF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3d:69:b5:59:20:ce:80:da:ce:f8:92:e8:b5: 62:8d:84:d1:69:1e:e7:56:9a:ea:47:14:47:0c:03: e2:ef:18:f4:b4:52:1b:ae:5e:4e:c7:9b:9c:35:af: a1:10:d4:38:27:9c:b5:8f:5d:c1:02:c4:92:ec:7c: 58:e3:3b:02:ac:9e:86:17:02:a6:3e:e6:c1:8d:d6: d3:3a:32:5d:71:42:5a:d5:5c:1c:98:49:9a:8a:4a: 7e:e2:ba:e9:2d:d2:be:14:de:61:a7:c0:96:8c:df: 42:79:ce:ef:a7:74:45:44:fd:6c:1a:7a:ba:48:f8: 9c:03:33:f7:68:60:76:55:a8:5c:fb:7c:25:07:69: 33:58:e4:f2:6e:d8:82:71:ff:85:55:6e:80:a2:28: 7b:6c:09:1c:e8:6c:dd:97:5b:67:01:b9:cf:3f:8c: d8:9b:e6:36:4d:bb:83:42:3d:4d:6e:6f:50:56:ac: 8b:00:10:4a:83:8d:05:bf:a2:53:1e:89:7a:7c:ab: 89:49:a3:59:51:80:b8:fb:e8:71:67:0e:e9:f7:fc: bc:43:71:b7:40:c8:df:9d:f5:15:9b:bb:19:a8:9d: eb:aa:9a:f6:5a:79:9a:24:1a:02:50:a9:3b:0a:83: 0c:9d:e8:d8:70:b5:e0:5b:25:da:8d:91:28:9e:8d: 11:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DA:5E:B5:CB:77:85:B3:53:20:40:0E:8F:80:CD:B9:B9:92:4C:F3 X509v3 Authority Key Identifier: keyid:4B:D7:79:83:D9:87:42:98:54:00:27:6F:F0:F5:95:96:96:EA:78:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1e:26:b4:b4:ca:7a:32:a8:8e:e4:10:28:c8:5e:24:90:ef: a8:f8:74:27:ad:5f:25:89:fb:48:b5:f8:23:1f:c0:32:e8:09: 20:53:c9:67:26:fe:0a:01:89:6a:53:06:51:59:c3:27:a0:3f: 6f:b4:73:84:35:b3:e8:4c:2d:9a:19:6b:fb:d3:24:a3:84:99: a5:2d:3c:dc:f3:6d:be:7f:df:0b:92:45:2f:57:96:20:76:71: 5e:d5:68:97:28:cd:65:63:b7:12:b4:53:36:7e:e9:74:f6:49: e6:bf:33:0f:48:67:60:6f:43:90:6c:dd:a4:4f:51:14:0e:b8: be:fc:f4:c6:ab:62:82:3b:dd:09:78:4d:25:c9:f2:0c:a0:5b: f2:93:b3:97:dd:48:05:b0:2a:4b:f7:3c:19:e7:f7:2c:7a:13: 36:73:c5:6b:2a:7c:26:28:0c:d6:b1:b9:09:ca:ec:15:e9:aa: f8:e6:5f:96:83:c7:91:a7:1e:fa:7d:a6:78:46:b4:be:94:65: 19:19:ff:b8:cc:73:77:9f:cd:2b:72:6f:b8:55:ee:85:8e:d4: b9:ab:5e:2e:a8:af:11:32:48:b6:39:5c:29:32:33:78:59:03: 6a:d1:2c:46:09:46:94:fa:2e:74:e8:2c:99:6a:af:19:7a:59: 8a:de:bf:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUND0uFMRxv+lbW0Q9w3SI0nTrPggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJENzc5ODNEOTg3NDI5ODU0MDAyNzZGRjBGNTk1OTY5 NkVBNzgwNzAeFw0yNjA1MTIxMTMyMTVaFw0yNjA1MTMxMzE1MTVaMDMxMTAvBgNV BAMTKDdEREE1RUI1Q0I3Nzg1QjM1MzIwNDAwRThGODBDREI5Qjk5MjRDRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpPWm1WSDOgNrO+JLotWKNhNFp HudWmupHFEcMA+LvGPS0UhuuXk7Hm5w1r6EQ1DgnnLWPXcECxJLsfFjjOwKsnoYX AqY+5sGN1tM6Ml1xQlrVXByYSZqKSn7iuukt0r4U3mGnwJaM30J5zu+ndEVE/Wwa erpI+JwDM/doYHZVqFz7fCUHaTNY5PJu2IJx/4VVboCiKHtsCRzobN2XW2cBuc8/ jNib5jZNu4NCPU1ub1BWrIsAEEqDjQW/olMeiXp8q4lJo1lRgLj76HFnDun3/LxD cbdAyN+d9RWbuxmoneuqmvZaeZokGgJQqTsKgwyd6NhwteBbJdqNkSiejRG/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfdpetct3hbNTIEAOj4DNubmSTPMwHwYDVR0j BBgwFoAUS9d5g9mHQphUACdv8PWVlpbqeAcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODcxYWRhOWUtZTJhOS00MDBlLThkZmYtOWJlNDgxYWJhNTgzLzAvNEJENzc5ODNE OTg3NDI5ODU0MDAyNzZGRjBGNTk1OTY5NkVBNzgwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkQ3Nzk4M0Q5ODc0Mjk4NTQwMDI3NkZGMEY1OTU5Njk2RUE3 ODA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODcxYWRhOWUtZTJhOS00MDBlLThk ZmYtOWJlNDgxYWJhNTgzLzAvNEJENzc5ODNEOTg3NDI5ODU0MDAyNzZGRjBGNTk1 OTY5NkVBNzgwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoeJrS0ynoyqI7kECjIXiSQ76j4dCetXyWJ +0i1+CMfwDLoCSBTyWcm/goBiWpTBlFZwyegP2+0c4Q1s+hMLZoZa/vTJKOEmaUt PNzzbb5/3wuSRS9XliB2cV7VaJcozWVjtxK0UzZ+6XT2Sea/Mw9IZ2BvQ5Bs3aRP URQOuL789MarYoI73Ql4TSXJ8gygW/KTs5fdSAWwKkv3PBnn9yx6EzZzxWsqfCYo DNaxuQnK7BXpqvjmX5aDx5GnHvp9pnhGtL6UZRkZ/7jMc3efzStyb7hV7oWO1Lmr Xi6orxEySLY5XCkyM3hZA2rRLEYJRpT6LnToLJlqrxl6WYrev2U= -----END CERTIFICATE-----Generated at Wed May 13 02:34:37 2026 by rpki-client