$ rpki-client -vvf rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft File: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft (raw, json) Hash identifier: LfBfK3dpJjo3JcEgiNgWsgUbfXj2tE/qboF83CXseZM= Subject key identifier: 1A:77:3B:44:DB:05:EE:36:2F:FD:CB:C7:B4:B8:37:1D:5B:67:BC:4E Authority key identifier: 4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3 Certificate issuer: /CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3 Certificate serial: 6F4323C747EC43643932699AF324ADDE441A22DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:39:04 +0000 Manifest this update: Tue 12 May 2026 18:34:04 +0000 Manifest next update: Wed 13 May 2026 19:56:04 +0000 Files and hashes: 1: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: +WxXMuFbrHKDjWOS8r0LmF3/UaAmCxzNKESEznXTLHE=) 2: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl (hash: lqRlWHRc2vfIlEOThTIDH9V+LMw4hT6NPh8LaVxlCDs=) 3: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: Dk9FmD1Gd6LwGA6mFHwlSjHioZF8VJSA0K7I5b1rqPY=) 4: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: PWQir4scae8YfD6/q+bk0ejgh+XhSzNVifyQAj+tAMA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:43:23:c7:47:ec:43:64:39:32:69:9a:f3:24:ad:de:44:1a:22:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3 Validity Not Before: May 12 18:34:04 2026 GMT Not After : May 13 19:56:04 2026 GMT Subject: CN=1A773B44DB05EE362FFDCBC7B4B8371D5B67BC4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2b:56:04:7c:be:e8:5f:35:87:cb:c4:17:59: 3a:d8:dd:d5:95:f1:52:4a:79:99:72:f8:04:a0:e7: 03:17:2b:85:19:ce:37:0b:64:29:1c:bf:45:52:df: f9:fc:74:90:fb:4b:5b:d1:f3:d3:86:ed:d9:e1:2f: 7d:b9:ca:5f:d8:28:23:59:ac:f9:b3:c0:04:11:cb: b8:37:1d:eb:8f:a8:c5:c4:87:ab:25:81:7b:22:25: b8:9d:cc:e0:f3:81:87:25:40:f9:64:0a:22:32:32: 53:d6:8a:6c:bd:3d:dc:51:4d:29:78:47:50:a2:20: 4a:9f:d2:d9:d1:ec:da:f0:67:b9:7c:47:86:e4:13: 25:db:9a:c6:ee:7c:3b:0e:1f:39:ae:6a:b5:49:30: e2:a3:52:b2:55:7b:28:7b:21:41:5d:58:e5:87:6f: 8b:b2:77:d5:47:f6:61:20:82:96:fb:62:62:51:1d: f6:f0:30:ab:e0:29:98:fb:d6:a4:d1:f3:64:d6:aa: 8a:d3:6a:81:08:68:e0:f4:da:ce:4c:29:2e:b0:0e: ed:29:7d:33:e2:f2:8d:4e:a1:84:d0:5c:11:1c:90: 4c:b3:8b:6b:25:e7:b6:7d:99:74:e5:4a:6d:2f:ac: bc:78:4d:2b:0f:1a:b0:7d:d4:48:7b:8d:04:ec:48: 6a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:77:3B:44:DB:05:EE:36:2F:FD:CB:C7:B4:B8:37:1D:5B:67:BC:4E X509v3 Authority Key Identifier: keyid:4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:d6:44:90:f4:ac:00:1a:14:63:f7:f5:db:db:88:ee:53:1d: d6:52:83:16:3e:d2:c1:d7:cc:3e:a7:df:2e:61:87:ca:ac:ae: e0:66:df:dc:24:3f:39:a4:fa:3f:fd:4e:58:19:10:fa:21:80: 29:d7:61:78:65:fc:fe:96:6a:59:2d:4c:39:63:4a:5a:c7:37: e4:64:cb:0b:0c:9a:70:65:00:10:58:06:77:6a:5d:e6:66:cb: 25:0d:a6:37:47:1c:75:59:e5:d4:7f:9e:f9:0b:f4:02:15:bb: e8:e0:b7:2d:16:82:b4:0f:69:44:48:05:dc:d7:09:47:43:b8: 52:95:e2:7c:24:8c:0f:43:c4:d1:7d:27:13:84:fb:1d:02:41: 0c:4a:a7:89:dd:58:07:41:d1:c3:91:8d:d3:7c:d6:38:05:ef: 1f:cf:a5:43:95:da:59:31:ba:9c:9e:7f:18:de:b4:10:bd:9b: d9:0d:33:51:92:53:a1:d5:9d:04:34:af:c0:71:4e:7d:18:f6: 1e:b2:70:7a:54:8a:8e:e3:4f:29:2e:ec:78:eb:0b:a9:c0:d6: dd:8a:c7:ab:cd:78:54:a1:a6:34:39:2e:f1:5d:6f:58:79:23: 13:e4:fd:e2:18:a3:d0:91:2d:45:50:52:51:56:a4:0e:5c:6b: 74:b1:63:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb0Mjx0fsQ2Q5Mmma8ySt3kQaItwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQwMDhBRDQ3NjFCQzcyRTNBREZBOEI0Njc3QTQ0MDc2 REE4OTBCMzAeFw0yNjA1MTIxODM0MDRaFw0yNjA1MTMxOTU2MDRaMDMxMTAvBgNV BAMTKDFBNzczQjQ0REIwNUVFMzYyRkZEQ0JDN0I0QjgzNzFENUI2N0JDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpK1YEfL7oXzWHy8QXWTrY3dWV 8VJKeZly+ASg5wMXK4UZzjcLZCkcv0VS3/n8dJD7S1vR89OG7dnhL325yl/YKCNZ rPmzwAQRy7g3HeuPqMXEh6slgXsiJbidzODzgYclQPlkCiIyMlPWimy9PdxRTSl4 R1CiIEqf0tnR7NrwZ7l8R4bkEyXbmsbufDsOHzmuarVJMOKjUrJVeyh7IUFdWOWH b4uyd9VH9mEggpb7YmJRHfbwMKvgKZj71qTR82TWqorTaoEIaOD02s5MKS6wDu0p fTPi8o1OoYTQXBEckEyzi2sl57Z9mXTlSm0vrLx4TSsPGrB91Eh7jQTsSGqLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGnc7RNsF7jYv/cvHtLg3HVtnvE4wHwYDVR0j BBgwFoAUTQCK1HYbxy4636i0Z3pEB22okLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTIyOWNhNTAtZTk1Yy00NWJiLTljMzAtNjNlMTJhZjdhNWUxLzAvNEQwMDhBRDQ3 NjFCQzcyRTNBREZBOEI0Njc3QTQ0MDc2REE4OTBCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDAwOEFENDc2MUJDNzJFM0FERkE4QjQ2NzdBNDQwNzZEQTg5 MEIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj MzAtNjNlMTJhZjdhNWUxLzAvNEQwMDhBRDQ3NjFCQzcyRTNBREZBOEI0Njc3QTQ0 MDc2REE4OTBCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDWRJD0rAAaFGP39dvbiO5THdZSgxY+0sHX zD6n3y5hh8qsruBm39wkPzmk+j/9TlgZEPohgCnXYXhl/P6WalktTDljSlrHN+Rk ywsMmnBlABBYBndqXeZmyyUNpjdHHHVZ5dR/nvkL9AIVu+jgty0WgrQPaURIBdzX CUdDuFKV4nwkjA9DxNF9JxOE+x0CQQxKp4ndWAdB0cORjdN81jgF7x/PpUOV2lkx upyefxjetBC9m9kNM1GSU6HVnQQ0r8BxTn0Y9h6ycHpUio7jTyku7HjrC6nA1t2K x6vNeFShpjQ5LvFdb1h5IxPk/eIYo9CRLUVQUlFWpA5ca3SxYz8= -----END CERTIFICATE-----Generated at Tue May 12 22:52:17 2026 by rpki-client