$ rpki-client -vvf rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft File: 4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft (raw, json) Hash identifier: pbtAx5EUW/oh3Kr2zCqvAt4UspuvxmQQ6drqxxmWSc4= Subject key identifier: F9:6E:DC:31:E1:7A:32:54:EF:C7:BA:82:2A:A1:44:68:D5:CD:9E:01 Authority key identifier: 42:72:D3:49:E0:4B:3A:5D:02:56:1E:E1:92:95:E0:FD:26:B3:7C:BE Certificate issuer: /CN=4272D349E04B3A5D02561EE19295E0FD26B37CBE Certificate serial: 3BD30465431D4C0CDE0852BBB2E60EF2D694ED3B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft Manifest number: 0E Signing time: Tue 12 May 2026 12:17:41 +0000 Manifest this update: Tue 12 May 2026 12:12:41 +0000 Manifest next update: Wed 13 May 2026 16:09:41 +0000 Files and hashes: 1: 4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl (hash: jFlZSVz9D5SY40BRQLyBy4gfLCY1ZrMGOkH1xY0vlvQ=) 2: 3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa (hash: psydRP9iI2xqdgTYldVyaNuPRMq6F5KFPK4XNBT7jw0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d3:04:65:43:1d:4c:0c:de:08:52:bb:b2:e6:0e:f2:d6:94:ed:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4272D349E04B3A5D02561EE19295E0FD26B37CBE Validity Not Before: May 12 12:12:41 2026 GMT Not After : May 13 16:09:41 2026 GMT Subject: CN=F96EDC31E17A3254EFC7BA822AA14468D5CD9E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b8:24:0a:ae:e1:a6:f3:77:d5:9c:42:2a:31: c4:7e:38:e0:c1:15:a9:ee:9a:76:3a:43:d2:76:2a: 88:bb:37:f0:77:f7:c0:11:68:5d:28:80:9a:e5:5b: a2:0f:b5:de:d7:a6:fc:ef:c0:39:95:2f:cc:93:5c: 0c:ee:30:25:73:63:98:94:10:eb:a8:06:06:f1:79: 2d:f7:36:65:46:34:46:77:76:21:5c:4f:24:d8:49: e4:d0:d7:cf:8c:9c:1c:9c:a8:33:d1:03:c6:20:d4: bb:4f:27:d8:45:94:6f:4a:a3:b9:02:06:4f:65:77: 69:a8:c8:f0:e7:a1:2f:3b:da:f9:f3:c8:df:cd:d7: 22:3b:fd:6f:f3:1e:22:bc:aa:dc:5c:9b:78:bc:95: 00:cd:e7:ab:73:b3:4c:91:1a:f9:b0:b4:89:6d:e3: 76:1e:d9:4f:5d:b5:e9:3d:ec:3c:71:b0:6c:93:df: 91:b7:69:b6:72:05:51:b0:36:f9:11:2a:d4:91:cb: e1:f3:58:a0:4a:3d:27:8c:bf:94:70:c5:aa:8f:41: da:cf:56:bc:ea:4b:c2:1f:03:37:5b:d1:24:e0:63: f1:3f:6c:c1:10:6f:63:dd:29:a1:b2:5d:27:ab:46: a9:1a:c6:a5:8a:55:56:65:61:a5:f7:b5:fc:5b:98: e7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6E:DC:31:E1:7A:32:54:EF:C7:BA:82:2A:A1:44:68:D5:CD:9E:01 X509v3 Authority Key Identifier: keyid:42:72:D3:49:E0:4B:3A:5D:02:56:1E:E1:92:95:E0:FD:26:B3:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f4:b9:85:c7:ff:35:9e:b9:a2:7c:d8:22:62:f6:60:3f:f1: 0b:d5:f3:b5:54:5f:cc:cf:11:2d:c8:61:4a:e5:fd:ef:c9:e3: ca:cc:fb:a7:71:be:17:ae:2c:2c:ac:d0:3e:ad:f0:d2:f9:61: a2:7e:2d:f5:b6:ec:cb:a6:43:7c:8f:54:ed:7d:91:32:1f:cd: ba:c4:c5:36:ae:aa:94:83:d5:41:0b:14:1e:ff:af:c2:39:99: 7d:0a:32:93:f7:84:59:a8:14:7e:4a:37:65:46:3f:fa:e5:15: 19:5c:bf:bb:2d:10:16:18:8c:4f:17:ee:50:7a:54:92:43:3e: af:b3:da:48:24:ac:df:74:83:86:4d:10:aa:c6:91:67:f5:95: 80:ba:29:f4:51:80:80:38:9f:e9:03:83:ef:46:fc:7f:52:f0: c2:bb:97:dd:b6:8c:53:bf:4d:43:ab:48:ed:2c:1f:04:86:e2: 41:54:97:ed:1b:4b:a1:78:83:e0:da:e6:8c:ef:f2:be:7c:65: 36:f2:e1:17:71:7c:b2:ae:26:6e:c2:cb:37:4e:d2:cb:ed:1a: ba:76:e9:07:b5:80:06:fa:5d:84:c5:85:56:36:fe:07:8b:32: a3:38:b7:08:3d:cc:bb:fa:b2:d0:bc:f2:db:d2:26:95:3d:3e: c7:5a:ed:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO9MEZUMdTAzeCFK7suYO8taU7TswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI3MkQzNDlFMDRCM0E1RDAyNTYxRUUxOTI5NUUwRkQy NkIzN0NCRTAeFw0yNjA1MTIxMjEyNDFaFw0yNjA1MTMxNjA5NDFaMDMxMTAvBgNV BAMTKEY5NkVEQzMxRTE3QTMyNTRFRkM3QkE4MjJBQTE0NDY4RDVDRDlFMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNuCQKruGm83fVnEIqMcR+OODB FanumnY6Q9J2Koi7N/B398ARaF0ogJrlW6IPtd7XpvzvwDmVL8yTXAzuMCVzY5iU EOuoBgbxeS33NmVGNEZ3diFcTyTYSeTQ18+MnBycqDPRA8Yg1LtPJ9hFlG9Ko7kC Bk9ld2moyPDnoS872vnzyN/N1yI7/W/zHiK8qtxcm3i8lQDN56tzs0yRGvmwtIlt 43Ye2U9dtek97DxxsGyT35G3abZyBVGwNvkRKtSRy+HzWKBKPSeMv5RwxaqPQdrP VrzqS8IfAzdb0STgY/E/bMEQb2PdKaGyXSerRqkaxqWKVVZlYaX3tfxbmOdTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+W7cMeF6MlTvx7qCKqFEaNXNngEwHwYDVR0j BBgwFoAUQnLTSeBLOl0CVh7hkpXg/SazfL4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTY3NTBiZjktOWY1OC00MjhhLTg5NTItOGI1NTU1ZWY3Y2E3LzAvNDI3MkQzNDlF MDRCM0E1RDAyNTYxRUUxOTI5NUUwRkQyNkIzN0NCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MjcyRDM0OUUwNEIzQTVEMDI1NjFFRTE5Mjk1RTBGRDI2QjM3 Q0JFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTY3NTBiZjktOWY1OC00MjhhLTg5 NTItOGI1NTU1ZWY3Y2E3LzAvNDI3MkQzNDlFMDRCM0E1RDAyNTYxRUUxOTI5NUUw RkQyNkIzN0NCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/0uYXH/zWeuaJ82CJi9mA/8QvV87VUX8zP ES3IYUrl/e/J48rM+6dxvheuLCys0D6t8NL5YaJ+LfW27MumQ3yPVO19kTIfzbrE xTauqpSD1UELFB7/r8I5mX0KMpP3hFmoFH5KN2VGP/rlFRlcv7stEBYYjE8X7lB6 VJJDPq+z2kgkrN90g4ZNEKrGkWf1lYC6KfRRgIA4n+kDg+9G/H9S8MK7l922jFO/ TUOrSO0sHwSG4kFUl+0bS6F4g+Da5ozv8r58ZTby4RdxfLKuJm7CyzdO0svtGrp2 6Qe1gAb6XYTFhVY2/geLMqM4twg9zLv6stC88tvSJpU9Psda7VY= -----END CERTIFICATE-----Generated at Wed May 13 07:14:26 2026 by rpki-client