$ rpki-client -vvf rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft File: 4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft (raw, json) Hash identifier: ePS+dmP+0h9BmHAt9IjSmPsl5ys1KAAK6/R9qTN4dlg= Subject key identifier: 76:D6:A3:3A:2A:1B:63:A9:C1:D6:BF:AC:DD:5C:8F:4C:68:3A:11:72 Authority key identifier: 4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A Certificate issuer: /CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A Certificate serial: 0285E03745997E9B9A40EA38ACACA26009E415D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:28:49 +0000 Manifest this update: Tue 12 May 2026 07:23:49 +0000 Manifest next update: Wed 13 May 2026 07:47:49 +0000 Files and hashes: 1: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: NbzRk+anslHWDpTfVCq58hG430siKypJAEmOtHHoBDU=) 2: 4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl (hash: 2qlt1qwz0w5oz3v4A1+hPn9+k8j2yHT9tkc+VyJBBCQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:85:e0:37:45:99:7e:9b:9a:40:ea:38:ac:ac:a2:60:09:e4:15:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A Validity Not Before: May 12 07:23:49 2026 GMT Not After : May 13 07:47:49 2026 GMT Subject: CN=76D6A33A2A1B63A9C1D6BFACDD5C8F4C683A1172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:01:97:59:9a:3b:80:44:0b:b9:2e:0d:83:56: 3c:ab:c4:c6:12:41:39:a5:ba:9d:f1:2f:f0:f9:81: 65:3b:35:2a:92:b6:b9:72:28:79:ee:0a:f8:a4:6d: 19:c6:48:39:3a:ec:5e:ec:16:84:ff:00:16:97:32: 81:56:98:03:cc:91:7a:93:e4:1c:cf:31:a1:44:08: 09:e2:29:82:08:b9:f4:aa:00:1d:58:e4:57:21:0a: 4c:54:fd:16:b7:43:d7:33:1b:11:bd:01:ee:f0:0a: 3d:7f:6d:ce:0a:86:ef:77:7c:f6:f1:2b:9e:49:39: 64:54:8b:b7:af:59:25:99:b7:10:f1:bf:64:c4:07: 83:40:fb:d8:e2:31:d2:01:40:e8:8d:32:22:db:d5: 72:fb:f7:60:03:bf:f1:37:2f:c8:06:89:7a:3d:98: fd:13:1b:2c:01:5f:12:c9:89:cb:eb:67:55:1f:3a: 5a:91:99:c0:1d:45:c2:25:70:45:85:5f:de:b0:82: 8c:7e:8e:23:c3:69:55:59:89:4b:d4:e4:df:65:ee: d7:97:ac:60:fb:68:d9:5a:9f:4f:5b:87:b9:88:6f: ec:86:42:d9:a7:ed:29:3a:ca:86:53:69:94:03:b5: 81:59:db:86:ea:fc:84:03:5f:fb:94:b9:12:2a:36: 0c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D6:A3:3A:2A:1B:63:A9:C1:D6:BF:AC:DD:5C:8F:4C:68:3A:11:72 X509v3 Authority Key Identifier: keyid:4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:56:10:27:fe:e5:68:28:28:ac:2d:f0:7e:21:03:1d:60:cb: 82:36:13:b6:02:63:66:a3:6c:c5:72:8a:ad:1f:d8:c6:42:26: c3:f6:39:fb:59:16:65:b6:36:a1:8a:2c:57:37:69:d7:d6:42: a6:85:de:70:47:b9:6b:9d:13:2f:c9:f8:f2:eb:a2:cc:20:c1: 6e:8c:81:89:69:4b:18:18:6a:19:0a:8c:d7:2f:2c:bb:ea:2e: 93:01:94:64:38:92:6b:02:8e:a6:1e:86:cf:c1:2f:f4:ba:bc: e7:1c:cb:c0:cb:eb:df:01:9b:4a:e8:ff:7f:64:e3:ad:d2:2a: 5b:09:74:10:36:b0:4e:45:66:7b:78:77:8a:a5:e4:30:56:a7: b8:7c:7e:5f:05:6b:79:77:4e:ee:ed:1a:9e:26:95:c5:8e:51: b2:92:ec:ea:07:f8:9a:5b:2c:87:60:6e:46:08:a5:40:0d:ea: 2c:a6:7c:11:69:c4:59:7e:bd:7a:e5:68:0e:d7:9e:38:92:5e: 9d:ae:9d:67:c5:e7:2e:36:ae:c2:b8:fc:0c:03:81:e5:21:a9: 07:89:21:31:aa:4a:f6:e3:9b:fe:0e:ff:d0:49:47:bb:62:da: 59:e6:a0:6e:b9:8c:b3:2d:a5:48:e9:ab:cb:26:81:28:d9:b5: a5:ba:4d:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAoXgN0WZfpuaQOo4rKyiYAnkFdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDRUI1NjBCQzQyOERCRUM0RUMyRUYyRUY3NDJDOUJE QURDRTMwQTAeFw0yNjA1MTIwNzIzNDlaFw0yNjA1MTMwNzQ3NDlaMDMxMTAvBgNV BAMTKDc2RDZBMzNBMkExQjYzQTlDMUQ2QkZBQ0RENUM4RjRDNjgzQTExNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeAZdZmjuARAu5Lg2DVjyrxMYS QTmlup3xL/D5gWU7NSqStrlyKHnuCvikbRnGSDk67F7sFoT/ABaXMoFWmAPMkXqT 5BzPMaFECAniKYIIufSqAB1Y5FchCkxU/Ra3Q9czGxG9Ae7wCj1/bc4Khu93fPbx K55JOWRUi7evWSWZtxDxv2TEB4NA+9jiMdIBQOiNMiLb1XL792ADv/E3L8gGiXo9 mP0TGywBXxLJicvrZ1UfOlqRmcAdRcIlcEWFX96wgox+jiPDaVVZiUvU5N9l7teX rGD7aNlan09bh7mIb+yGQtmn7Sk6yoZTaZQDtYFZ24bq/IQDX/uUuRIqNgw5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdtajOiobY6nB1r+s3VyPTGg6EXIwHwYDVR0j BBgwFoAUTc61YLxCjb7E7C7y73Qsm9rc4wowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGViYTg2N2EtOGY4NC00NjYzLWIzMjAtZjQzNTI4MmI5ZmZlLzAvNERDRUI1NjBC QzQyOERCRUM0RUMyRUYyRUY3NDJDOUJEQURDRTMwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RENFQjU2MEJDNDI4REJFQzRFQzJFRjJFRjc0MkM5QkRBRENF MzBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvNERDRUI1NjBCQzQyOERCRUM0RUMyRUYyRUY3NDJD OUJEQURDRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVWECf+5WgoKKwt8H4hAx1gy4I2E7YCY2aj bMVyiq0f2MZCJsP2OftZFmW2NqGKLFc3adfWQqaF3nBHuWudEy/J+PLroswgwW6M gYlpSxgYahkKjNcvLLvqLpMBlGQ4kmsCjqYehs/BL/S6vOccy8DL698Bm0ro/39k 463SKlsJdBA2sE5FZnt4d4ql5DBWp7h8fl8Fa3l3Tu7tGp4mlcWOUbKS7OoH+Jpb LIdgbkYIpUAN6iymfBFpxFl+vXrlaA7XnjiSXp2unWfF5y42rsK4/AwDgeUhqQeJ ITGqSvbjm/4O/9BJR7ti2lnmoG65jLMtpUjpq8smgSjZtaW6TcU= -----END CERTIFICATE-----Generated at Tue May 12 22:19:45 2026 by rpki-client