$ rpki-client -vvf rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft File: 4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft (raw, json) Hash identifier: 1a9X+oujgItNuVGoLo18bAPUmcrohP9Nc/yxNbZY9a4= Subject key identifier: 96:4A:8C:0B:31:F2:94:14:3C:BA:CD:8D:6A:F1:20:E2:EC:02:E3:33 Authority key identifier: 4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3 Certificate issuer: /CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3 Certificate serial: 56FFF63E524F2AC858EC2D08EFA2C621C7D9CE90 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:53:06 +0000 Manifest this update: Tue 12 May 2026 20:48:06 +0000 Manifest next update: Wed 13 May 2026 23:36:06 +0000 Files and hashes: 1: 4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl (hash: dUw+T7TJWXw1Vyl8G9fdsEIWq4db7vUB8Zc/bnc8ZX0=) 2: 3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa (hash: YUIYXOMtckDPfw6P14i0EQXXM9bXJM2DHMRCUnkqTUY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ff:f6:3e:52:4f:2a:c8:58:ec:2d:08:ef:a2:c6:21:c7:d9:ce:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3 Validity Not Before: May 12 20:48:06 2026 GMT Not After : May 13 23:36:06 2026 GMT Subject: CN=964A8C0B31F294143CBACD8D6AF120E2EC02E333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d6:19:3e:74:cb:23:11:e6:9d:34:e0:67:ea: 3c:c1:f0:34:c8:ad:ca:e5:31:eb:f0:0d:e2:45:5d: 4b:de:2e:3f:d0:6c:f6:2a:1a:9c:ee:85:4b:e6:c8: 22:59:15:0f:ee:57:d3:67:f9:77:e9:cf:95:29:d4: 96:f9:77:f3:33:70:66:9d:64:74:57:4c:f1:a9:d9: 87:92:98:21:cf:f1:d1:ec:e7:91:e4:54:f7:0e:92: 35:61:52:6b:d5:61:3e:3f:fa:41:c2:f7:9e:13:0e: 5f:b6:5b:60:0c:63:05:04:5f:d4:f0:05:81:76:8c: 5a:01:19:d0:ea:43:0e:fb:f7:b4:8e:dd:e6:f7:9d: 76:fb:b6:96:5d:b7:cf:42:ab:61:ba:bf:ac:14:44: 2a:0c:a8:f6:51:63:a2:0f:82:31:da:42:9c:d3:70: ff:28:84:53:bb:db:01:44:ad:51:a0:f2:ad:93:a2: ff:23:f8:ae:44:38:d0:03:81:cc:47:41:73:f2:40: 36:60:21:83:ec:9f:46:6a:aa:66:25:98:3e:eb:ae: 0b:2c:bb:a8:8b:d7:9b:e4:96:c4:b1:22:cc:88:0e: fb:fe:a1:a1:ab:2f:49:15:4d:68:cf:35:b8:5e:5c: f5:38:ea:ae:b1:7c:5f:15:24:a4:53:4a:41:89:db: de:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4A:8C:0B:31:F2:94:14:3C:BA:CD:8D:6A:F1:20:E2:EC:02:E3:33 X509v3 Authority Key Identifier: keyid:4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:8f:f6:ce:22:c2:22:2c:fd:91:ec:66:6b:f1:2a:2a:12:09: 93:28:6f:05:82:af:d9:45:60:ff:69:75:47:59:51:bb:37:0b: 77:25:57:f9:55:23:e9:42:70:c9:40:37:a5:e7:e2:43:9c:18: e9:f0:e5:be:5b:5f:79:21:3f:91:79:f2:d8:05:99:4c:26:fc: f5:a5:ec:d2:81:3a:14:45:bd:fa:80:12:35:cf:70:1f:81:1d: 90:c1:65:79:12:57:57:60:33:2d:31:1e:d7:0a:b3:43:ef:62: 66:06:53:9d:ce:e3:ea:2e:b8:19:37:35:c7:30:79:45:1b:7c: 76:94:ce:10:d7:b5:4b:3f:91:90:cf:89:a7:3b:9c:69:c0:d1: 93:13:59:0d:f3:9a:55:3a:bf:bf:61:49:29:5d:e6:50:24:07: 4a:f9:3b:fc:a4:5e:f3:24:8b:21:bc:fe:e8:77:a3:d6:f7:b8: 6b:13:16:b5:f2:25:aa:a8:b2:35:0e:9b:bb:34:6a:79:ed:3f: c5:21:2e:7e:e4:d4:b3:35:a9:58:ee:b2:ae:b4:40:b9:4b:2c: a2:6a:85:c0:e6:02:1c:f8:58:2f:71:9b:92:51:1d:cb:4b:36: e2:41:f1:80:ff:ad:99:cb:38:15:15:af:88:9a:b2:56:34:14: 2f:0a:b4:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVv/2PlJPKshY7C0I76LGIcfZzpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3NDUwQzI3OTRFNDI1NTlFRkJGM0E5MEZCMDQzRDU2 QTJGOTdFMzAeFw0yNjA1MTIyMDQ4MDZaFw0yNjA1MTMyMzM2MDZaMDMxMTAvBgNV BAMTKDk2NEE4QzBCMzFGMjk0MTQzQ0JBQ0Q4RDZBRjEyMEUyRUMwMkUzMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1hk+dMsjEeadNOBn6jzB8DTI rcrlMevwDeJFXUveLj/QbPYqGpzuhUvmyCJZFQ/uV9Nn+Xfpz5Up1Jb5d/MzcGad ZHRXTPGp2YeSmCHP8dHs55HkVPcOkjVhUmvVYT4/+kHC954TDl+2W2AMYwUEX9Tw BYF2jFoBGdDqQw7797SO3eb3nXb7tpZdt89Cq2G6v6wURCoMqPZRY6IPgjHaQpzT cP8ohFO72wFErVGg8q2Tov8j+K5EONADgcxHQXPyQDZgIYPsn0ZqqmYlmD7rrgss u6iL15vklsSxIsyIDvv+oaGrL0kVTWjPNbheXPU46q6xfF8VJKRTSkGJ296RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlkqMCzHylBQ8us2NavEg4uwC4zMwHwYDVR0j BBgwFoAUTXRQwnlOQlWe+/OpD7BD1Wovl+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM1ZjE1YzktNTg0My00NzA1LWI2OTQtZmU1ZTdjZTE5ODA4LzAvNEQ3NDUwQzI3 OTRFNDI1NTlFRkJGM0E5MEZCMDQzRDU2QTJGOTdFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDc0NTBDMjc5NEU0MjU1OUVGQkYzQTkwRkIwNDNENTZBMkY5 N0UzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM1ZjE1YzktNTg0My00NzA1LWI2 OTQtZmU1ZTdjZTE5ODA4LzAvNEQ3NDUwQzI3OTRFNDI1NTlFRkJGM0E5MEZCMDQz RDU2QTJGOTdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSP9s4iwiIs/ZHsZmvxKioSCZMobwWCr9lF YP9pdUdZUbs3C3clV/lVI+lCcMlAN6Xn4kOcGOnw5b5bX3khP5F58tgFmUwm/PWl 7NKBOhRFvfqAEjXPcB+BHZDBZXkSV1dgMy0xHtcKs0PvYmYGU53O4+ouuBk3Nccw eUUbfHaUzhDXtUs/kZDPiac7nGnA0ZMTWQ3zmlU6v79hSSld5lAkB0r5O/ykXvMk iyG8/uh3o9b3uGsTFrXyJaqosjUOm7s0anntP8UhLn7k1LM1qVjusq60QLlLLKJq hcDmAhz4WC9xm5JRHctLNuJB8YD/rZnLOBUVr4iaslY0FC8KtII= -----END CERTIFICATE-----Generated at Wed May 13 11:04:05 2026 by rpki-client