$ rpki-client -vvf rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft File: 4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft (raw, json) Hash identifier: NZMFs6ptR8RGo+ZSghs4MWXKDoBZdbiYyxAydjDADX0= Subject key identifier: 7D:68:27:55:87:12:87:59:E9:16:08:95:5F:D3:A3:75:4B:F7:3B:A6 Authority key identifier: 4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15 Certificate issuer: /CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515 Certificate serial: 4A09ADCD6272A5AD0DF4300016DA791BF60AA698 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:01:46 +0000 Manifest this update: Tue 12 May 2026 22:56:46 +0000 Manifest next update: Thu 14 May 2026 00:58:46 +0000 Files and hashes: 1: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: kEQuuE3MZPluiYnypOmYBPYLGkYCAstrSIg304qTUMU=) 2: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: xBC6wC0qaSZA17wYqb5z2deY4tddRBLazqglI6ol9r0=) 3: 4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl (hash: zYm76hPs03GUUFRY/jRvUjc7z/i6M9AGzRE0fxUYuSs=) 4: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: j4hOV3opgjAagd+hKmonrIvCvECab8tS3BbyVP+3UsM=) 5: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: pqH7WpxtojGs6NyUT0vVoZIYUBKEAJzFb6PabPXpeUg=) 6: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: NFMSe8jpXIOrJJynKVDw112aSae0hUPV8Ycnly1ty30=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:09:ad:cd:62:72:a5:ad:0d:f4:30:00:16:da:79:1b:f6:0a:a6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515 Validity Not Before: May 12 22:56:46 2026 GMT Not After : May 14 00:58:46 2026 GMT Subject: CN=7D68275587128759E91608955FD3A3754BF73BA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9b:27:d7:f4:19:6f:c1:f1:d1:88:d3:37:e8: b0:dc:fc:b0:2a:4c:40:aa:b2:6a:07:01:a8:38:9d: ed:84:60:f7:bb:38:07:e1:7d:41:c5:5c:fd:cc:79: 0d:1a:dc:0e:00:7b:47:f9:44:92:d5:b3:ec:18:35: 0a:81:ca:43:9b:06:aa:fc:a0:36:0d:87:55:fc:b9: d1:3d:c9:15:16:33:94:df:a9:fd:41:37:1e:98:59: a4:52:f9:96:02:da:c8:35:00:74:d9:69:35:35:5c: e5:72:3d:49:bd:57:c2:b3:78:2d:37:e1:a4:9a:d7: 89:5c:94:aa:c3:ba:c9:76:07:98:63:6d:28:62:d1: 69:9c:db:b4:46:3d:16:cf:ee:cc:f6:12:10:1d:24: 27:65:ac:1a:d9:94:bb:70:22:21:64:14:d9:3d:f1: 0c:eb:c9:ea:39:e0:52:c2:2a:87:90:0e:b4:a6:64: d9:2c:d6:10:07:ea:d6:52:ca:0a:1c:79:ee:9a:74: d3:24:69:27:95:4f:58:23:b3:5b:39:0b:6c:3a:ca: 80:65:76:37:00:31:18:49:16:12:c1:20:4d:10:d2: 1d:dd:2c:9a:1a:0c:89:da:75:1a:b5:5e:a2:38:e7: 14:ec:7c:3a:4a:14:e9:66:06:a5:13:a0:3b:3a:2c: 5b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:68:27:55:87:12:87:59:E9:16:08:95:5F:D3:A3:75:4B:F7:3B:A6 X509v3 Authority Key Identifier: keyid:4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:73:75:9c:35:e9:ca:5e:af:cf:d1:c5:8d:74:e7:5b:d8:d7: 06:72:6f:74:0d:35:a9:17:ba:ba:af:9b:bf:3c:c4:4d:d1:47: 9e:e9:99:5f:07:63:05:77:cb:fb:09:51:eb:6f:5f:db:1c:15: cc:56:a8:2c:b7:a7:6b:48:af:7a:60:63:be:8a:05:a7:08:67: aa:db:ce:e6:1c:18:82:08:c2:fa:1c:26:ff:49:41:c6:ce:35: 9e:6a:2a:49:98:d0:41:bd:05:ab:76:38:e2:9f:1b:7d:44:25: a1:c3:0b:a8:1a:bf:72:00:e8:89:dc:5a:11:fa:45:72:06:a0: 06:65:4f:0a:f8:7f:dc:11:1b:46:01:8c:67:47:68:1c:fc:80: ba:46:dc:0b:b8:1a:69:3f:3b:4d:5b:6e:26:1e:6a:c1:1f:a5: 87:c9:74:a5:56:26:d3:3c:64:34:fc:15:6a:2f:5d:c5:99:57: 48:95:80:dd:04:40:27:e4:d3:97:a7:43:e6:5d:0f:ce:8a:8a: 09:95:95:ba:61:af:86:40:e0:0c:01:37:eb:c2:c8:6d:a8:a4: c2:58:67:00:7f:cb:75:01:6c:6f:da:2a:50:ba:65:36:e4:36: 53:0c:8a:55:a2:17:b1:16:07:d8:c4:88:03:26:c6:1f:59:82: be:80:15:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSgmtzWJypa0N9DAAFtp5G/YKppgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0QkY4NEU3RDZGMzlENjI3QkU1QjUwQTkxNzMxNURG RUJGMTUxNTAeFw0yNjA1MTIyMjU2NDZaFw0yNjA1MTQwMDU4NDZaMDMxMTAvBgNV BAMTKDdENjgyNzU1ODcxMjg3NTlFOTE2MDg5NTVGRDNBMzc1NEJGNzNCQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRmyfX9BlvwfHRiNM36LDc/LAq TECqsmoHAag4ne2EYPe7OAfhfUHFXP3MeQ0a3A4Ae0f5RJLVs+wYNQqBykObBqr8 oDYNh1X8udE9yRUWM5Tfqf1BNx6YWaRS+ZYC2sg1AHTZaTU1XOVyPUm9V8KzeC03 4aSa14lclKrDusl2B5hjbShi0Wmc27RGPRbP7sz2EhAdJCdlrBrZlLtwIiFkFNk9 8Qzryeo54FLCKoeQDrSmZNks1hAH6tZSygocee6adNMkaSeVT1gjs1s5C2w6yoBl djcAMRhJFhLBIE0Q0h3dLJoaDInadRq1XqI45xTsfDpKFOlmBqUToDs6LFvBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfWgnVYcSh1npFgiVX9OjdUv3O6YwHwYDVR0j BBgwFoAUTUv4Tn1vOdYnvltQqRcxXf6/FRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0ZTZiMmQtM2RkYi00NmViLTgzZWYtYzk5YjIwMDM3ODNmLzAvNEQ0QkY4NEU3 RDZGMzlENjI3QkU1QjUwQTkxNzMxNURGRUJGMTUxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRCRjg0RTdENkYzOUQ2MjdCRTVCNTBBOTE3MzE1REZFQkYx NTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz ZWYtYzk5YjIwMDM3ODNmLzAvNEQ0QkY4NEU3RDZGMzlENjI3QkU1QjUwQTkxNzMx NURGRUJGMTUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtzdZw16cper8/RxY1051vY1wZyb3QNNakX urqvm788xE3RR57pmV8HYwV3y/sJUetvX9scFcxWqCy3p2tIr3pgY76KBacIZ6rb zuYcGIIIwvocJv9JQcbONZ5qKkmY0EG9Bat2OOKfG31EJaHDC6gav3IA6IncWhH6 RXIGoAZlTwr4f9wRG0YBjGdHaBz8gLpG3Au4Gmk/O01bbiYeasEfpYfJdKVWJtM8 ZDT8FWovXcWZV0iVgN0EQCfk05enQ+ZdD86KigmVlbphr4ZA4AwBN+vCyG2opMJY ZwB/y3UBbG/aKlC6ZTbkNlMMilWiF7EWB9jEiAMmxh9Zgr6AFd8= -----END CERTIFICATE-----Generated at Wed May 13 04:00:07 2026 by rpki-client