$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft File: 2479BECD79D87972D2E64A75818044EA49B2F7AB.mft (raw, json) Hash identifier: tKOPsXF/0+RDBcNjAf1MRn+SMK2epB1ibw0RGJCz+ks= Subject key identifier: 11:28:74:FF:A5:F1:74:1D:6B:97:F3:C8:B3:9C:17:51:0F:04:37:71 Authority key identifier: 24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB Certificate issuer: /CN=2479BECD79D87972D2E64A75818044EA49B2F7AB Certificate serial: 4C17F46EBF39E041B4A14C567A9503AB4FD3CAA4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:47:56 +0000 Manifest this update: Tue 12 May 2026 20:42:56 +0000 Manifest next update: Wed 13 May 2026 22:34:56 +0000 Files and hashes: 1: 2479BECD79D87972D2E64A75818044EA49B2F7AB.crl (hash: GA4LJmvTkZb8DkTfFe4Wf8NF+f669LloWgpiupwYNHg=) 2: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: /gZ4/45D54iPNl3rFwLqcXjfv+fGeCZ/kGOEYCstAaw=) 3: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: aop58br7cTbLrX5Ig76Wb88/Xv5ZLtq0WiG+kxtdBWw=) 4: 3130332e3131322e3134342e302f32332d3233203d3e20313534343130.roa (hash: EBSYxoW+DLXOqCY+Bl9yoeDsBygUGPhlM9cqjS/xpGk=) 5: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: W/8+xRtFQTktxO0fuk7MAz6L6AHwxOnMCS8RTW7dGss=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:17:f4:6e:bf:39:e0:41:b4:a1:4c:56:7a:95:03:ab:4f:d3:ca:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2479BECD79D87972D2E64A75818044EA49B2F7AB Validity Not Before: May 12 20:42:56 2026 GMT Not After : May 13 22:34:56 2026 GMT Subject: CN=112874FFA5F1741D6B97F3C8B39C17510F043771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ae:ed:e9:7c:db:e0:16:00:20:43:2b:e3:9e: 32:fb:62:c9:eb:ae:6e:97:7b:15:40:fb:54:f6:eb: 23:4f:d3:63:71:5d:1c:24:4d:75:46:c3:a5:5a:fb: f4:cb:61:d7:bb:8a:70:73:ab:74:27:3c:cb:5e:7c: b8:18:96:7b:8a:e6:0e:2a:b3:52:58:46:fe:66:8f: 88:7c:f4:09:1e:86:73:34:52:c2:c2:29:13:4e:99: d1:10:12:10:de:3a:06:ab:f0:f8:ef:2a:e5:d7:06: c9:c4:29:75:4b:76:48:8f:5a:63:5a:36:81:aa:97: 6b:79:ec:71:fa:a0:b1:5a:91:dd:3a:3c:8e:65:85: 16:ce:c9:25:80:f1:95:b8:23:ae:f3:51:fd:4d:33: bc:db:d4:35:1a:a8:63:03:a0:46:5a:59:04:72:0c: bc:94:23:fd:02:7f:ca:f4:62:3a:b5:b6:f3:ef:fc: 79:ce:95:f3:11:1e:ee:b8:81:77:9a:eb:90:96:aa: 9d:b7:c4:9d:b8:c2:cf:b0:18:52:0d:9c:cc:d1:6b: 86:4d:e5:81:da:25:fe:b7:3b:24:51:96:4d:e0:8f: 3c:72:b4:0a:39:fd:56:e3:f4:65:2e:5c:df:7f:e3: e4:1e:be:a6:1f:ef:ec:f8:43:49:8a:8f:f0:d6:ed: ad:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:28:74:FF:A5:F1:74:1D:6B:97:F3:C8:B3:9C:17:51:0F:04:37:71 X509v3 Authority Key Identifier: keyid:24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:9c:f6:0b:e0:24:fb:a3:dd:89:d0:07:48:d0:8e:42:9d:d1: bd:b9:17:e8:44:78:5f:9b:04:8f:e9:d4:a2:63:f5:c3:09:5b: f7:6e:ab:ee:06:30:8a:2f:62:df:d9:17:7b:13:8b:80:ad:44: 84:ba:72:0f:b2:e7:a5:58:4e:b1:cc:bb:12:b3:e5:09:d6:fd: 14:4b:d4:03:88:6a:af:6d:9d:90:df:c1:db:32:55:ec:7d:11: 4c:9c:2c:8a:66:bf:8c:b8:5a:ef:f5:9f:b7:99:a1:cd:c6:34: c9:e8:e4:d7:c9:f1:7d:97:17:fa:35:fc:8a:aa:6c:1c:1a:f9: 45:64:14:69:d7:fe:d4:0d:c9:35:74:61:92:c4:0f:60:7e:fd: 04:c5:de:80:91:c8:3b:9c:87:78:d7:4a:6c:30:5d:ea:a4:a4: 0a:11:23:23:e4:f8:23:35:bd:22:6b:7c:d1:5d:a5:0c:e1:0a: 1a:12:93:cf:cc:5f:7b:61:0b:b8:74:4f:f2:a0:48:2b:ce:f0: e4:70:c4:5d:46:3e:39:3c:68:5c:53:e2:83:9d:61:07:5b:2a: 13:3e:39:45:09:42:8d:4a:44:62:64:a2:8e:10:dd:22:89:55: 66:08:a6:aa:3f:9d:a4:96:c0:e3:ad:30:54:41:5c:2d:7e:44: c7:e4:56:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTBf0br854EG0oUxWepUDq0/TyqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3OUJFQ0Q3OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0RUE0 OUIyRjdBQjAeFw0yNjA1MTIyMDQyNTZaFw0yNjA1MTMyMjM0NTZaMDMxMTAvBgNV BAMTKDExMjg3NEZGQTVGMTc0MUQ2Qjk3RjNDOEIzOUMxNzUxMEYwNDM3NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoru3pfNvgFgAgQyvjnjL7Ysnr rm6XexVA+1T26yNP02NxXRwkTXVGw6Va+/TLYde7inBzq3QnPMtefLgYlnuK5g4q s1JYRv5mj4h89AkehnM0UsLCKRNOmdEQEhDeOgar8PjvKuXXBsnEKXVLdkiPWmNa NoGql2t57HH6oLFakd06PI5lhRbOySWA8ZW4I67zUf1NM7zb1DUaqGMDoEZaWQRy DLyUI/0Cf8r0Yjq1tvPv/HnOlfMRHu64gXea65CWqp23xJ24ws+wGFINnMzRa4ZN 5YHaJf63OyRRlk3gjzxytAo5/Vbj9GUuXN9/4+QevqYf7+z4Q0mKj/DW7a0FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUESh0/6XxdB1rl/PIs5wXUQ8EN3EwHwYDVR0j BBgwFoAUJHm+zXnYeXLS5kp1gYBE6kmy96swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNkMDhlYjMtOTM3ZC00MzA0LTkxNjctNDYzZDdjNThkNWU0LzAvMjQ3OUJFQ0Q3 OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0RUE0OUIyRjdBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDc5QkVDRDc5RDg3OTcyRDJFNjRBNzU4MTgwNDRFQTQ5QjJG N0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx NjctNDYzZDdjNThkNWU0LzAvMjQ3OUJFQ0Q3OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0 RUE0OUIyRjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKc9gvgJPuj3YnQB0jQjkKd0b25F+hEeF+b BI/p1KJj9cMJW/duq+4GMIovYt/ZF3sTi4CtRIS6cg+y56VYTrHMuxKz5QnW/RRL 1AOIaq9tnZDfwdsyVex9EUycLIpmv4y4Wu/1n7eZoc3GNMno5NfJ8X2XF/o1/Iqq bBwa+UVkFGnX/tQNyTV0YZLED2B+/QTF3oCRyDuch3jXSmwwXeqkpAoRIyPk+CM1 vSJrfNFdpQzhChoSk8/MX3thC7h0T/KgSCvO8ORwxF1GPjk8aFxT4oOdYQdbKhM+ OUUJQo1KRGJkoo4Q3SKJVWYIpqo/naSWwOOtMFRBXC1+RMfkVr4= -----END CERTIFICATE-----Generated at Wed May 13 02:40:40 2026 by rpki-client