$ rpki-client -vvf rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft File: 4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft (raw, json) Hash identifier: NaY5row7azlVpmN9QCoGp9OI7ZVA4/TQyRcVq8Szxdk= Subject key identifier: 99:7E:45:1F:01:87:9C:F7:B3:0B:84:C0:E0:91:00:1A:B8:FF:E4:6D Authority key identifier: 4F:CC:5F:72:C8:4C:03:16:A4:33:3F:A5:DC:1D:8E:50:86:1D:CF:B4 Certificate issuer: /CN=4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4 Certificate serial: 2A687DD063D2D81B0ADECA748E57E1605700103D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:40:55 +0000 Manifest this update: Tue 12 May 2026 19:35:55 +0000 Manifest next update: Wed 13 May 2026 20:36:55 +0000 Files and hashes: 1: 4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl (hash: xhE4/j+TOFjB2Wlp3cVB74czKJREtWFpvYJMZP14ym8=) 2: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: k64Gbl+KVZNgSNBLh88ZvPWQiWwa2C0VFUdGvst00Zw=) 3: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: GvESsWLLWyGR/dTKAI2ZEQUDQyTILXzxCsEPsqKRlPc=) 4: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: 6RDMlBYKz+7bJ5EOXVwDOVFpA9NmUujfNeaVaTSvntE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:68:7d:d0:63:d2:d8:1b:0a:de:ca:74:8e:57:e1:60:57:00:10:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4 Validity Not Before: May 12 19:35:55 2026 GMT Not After : May 13 20:36:55 2026 GMT Subject: CN=997E451F01879CF7B30B84C0E091001AB8FFE46D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:96:d4:23:f0:30:e4:3a:51:19:e0:64:3d:f6: 90:cd:c1:e9:99:cd:de:19:72:e0:ba:84:6f:1b:d2: 88:8f:79:aa:4b:58:ca:d7:73:bc:28:fc:29:2e:cc: c0:ef:c0:b2:54:95:9a:69:bd:67:19:ae:b0:ea:09: 1b:8e:51:76:23:d9:8a:43:6c:3f:ff:6f:90:85:97: 6c:f6:7e:48:69:55:c6:d3:2f:c9:d9:b1:3a:ff:6a: a0:f6:da:95:d4:aa:1a:f4:76:6a:54:74:8f:79:27: 78:14:73:dd:9b:de:0f:8c:df:79:1f:77:c4:e5:c9: a4:fa:55:02:f8:3e:c0:91:e4:fb:8f:f9:cf:85:81: 48:13:e3:91:aa:dd:e9:d3:1a:cf:05:db:52:14:65: ae:af:5c:d6:4c:62:b1:1f:9f:96:65:09:34:13:52: 90:da:6b:58:d5:f6:3d:4d:09:af:8c:3e:ea:d3:d3: ae:a8:64:8a:24:b1:d6:bc:13:53:f4:ef:dc:b1:4c: 05:06:03:df:78:9f:99:43:03:10:64:ca:60:6d:87: 6b:5f:73:a1:1f:38:af:3b:df:b0:bf:03:fa:65:13: b5:70:43:6d:50:ee:ce:40:a0:cb:93:dc:bf:6d:c9: c1:6d:5c:fb:d4:4d:50:be:c0:3f:84:3c:5b:7e:c0: d2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7E:45:1F:01:87:9C:F7:B3:0B:84:C0:E0:91:00:1A:B8:FF:E4:6D X509v3 Authority Key Identifier: keyid:4F:CC:5F:72:C8:4C:03:16:A4:33:3F:A5:DC:1D:8E:50:86:1D:CF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:23:dd:42:be:c3:db:1e:c8:d8:e7:ef:66:75:13:63:17:25: 3b:3f:c8:63:1e:4c:35:5d:30:b4:1e:d0:84:29:77:55:ce:55: 2b:76:ee:1e:6b:d5:5c:3e:88:f0:e3:c0:c0:84:10:af:71:19: 57:21:95:37:a8:5e:79:28:d6:e5:90:7e:fc:18:0d:9a:64:a2: f7:cc:79:67:98:e5:7a:d0:91:b4:86:e3:c2:8a:28:31:69:d0: d7:d0:fa:a4:83:fc:fd:e5:5a:eb:88:27:14:3f:a1:8a:f2:e9: 3e:e0:8f:b4:67:be:a4:ad:a2:1d:3c:b1:ca:ee:84:4a:67:08: 44:8f:3e:c1:1c:8c:b1:fa:18:12:36:12:e0:a7:63:46:80:3d: cd:46:b6:de:c0:a8:3d:41:ef:82:93:56:cc:78:61:b7:8a:2b: 06:20:4c:a1:77:4e:6e:f2:d8:5b:5c:31:a4:d5:96:c0:ba:c7: a6:ab:e4:77:e1:9e:62:63:05:ac:d2:e9:46:27:ca:24:7d:4f: 28:73:24:f1:f3:67:f9:f1:aa:8e:c8:69:96:a7:06:05:45:6e: a4:2c:c7:a5:d0:9d:37:7a:53:31:07:54:b6:84:52:63:6f:3c: f0:9b:39:fe:e0:79:92:ff:94:9d:16:d5:44:86:29:7a:e5:8c: 40:c3:3a:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKmh90GPS2BsK3sp0jlfhYFcAED0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDQzVGNzJDODRDMDMxNkE0MzMzRkE1REMxRDhFNTA4 NjFEQ0ZCNDAeFw0yNjA1MTIxOTM1NTVaFw0yNjA1MTMyMDM2NTVaMDMxMTAvBgNV BAMTKDk5N0U0NTFGMDE4NzlDRjdCMzBCODRDMEUwOTEwMDFBQjhGRkU0NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaltQj8DDkOlEZ4GQ99pDNwemZ zd4ZcuC6hG8b0oiPeapLWMrXc7wo/CkuzMDvwLJUlZppvWcZrrDqCRuOUXYj2YpD bD//b5CFl2z2fkhpVcbTL8nZsTr/aqD22pXUqhr0dmpUdI95J3gUc92b3g+M33kf d8TlyaT6VQL4PsCR5PuP+c+FgUgT45Gq3enTGs8F21IUZa6vXNZMYrEfn5ZlCTQT UpDaa1jV9j1NCa+MPurT066oZIoksda8E1P079yxTAUGA994n5lDAxBkymBth2tf c6EfOK8737C/A/plE7VwQ21Q7s5AoMuT3L9tycFtXPvUTVC+wD+EPFt+wNKfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmX5FHwGHnPezC4TA4JEAGrj/5G0wHwYDVR0j BBgwFoAUT8xfcshMAxakMz+l3B2OUIYdz7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk4YjM1NDktZTI1My00ZmQ5LWE3MDQtMjk2OTQ0ZTVhMDYzLzAvNEZDQzVGNzJD ODRDMDMxNkE0MzMzRkE1REMxRDhFNTA4NjFEQ0ZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkNDNUY3MkM4NEMwMzE2QTQzMzNGQTVEQzFEOEU1MDg2MURD RkI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvNEZDQzVGNzJDODRDMDMxNkE0MzMzRkE1REMxRDhF NTA4NjFEQ0ZCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgj3UK+w9seyNjn72Z1E2MXJTs/yGMeTDVd MLQe0IQpd1XOVSt27h5r1Vw+iPDjwMCEEK9xGVchlTeoXnko1uWQfvwYDZpkovfM eWeY5XrQkbSG48KKKDFp0NfQ+qSD/P3lWuuIJxQ/oYry6T7gj7RnvqStoh08scru hEpnCESPPsEcjLH6GBI2EuCnY0aAPc1Gtt7AqD1B74KTVsx4YbeKKwYgTKF3Tm7y 2FtcMaTVlsC6x6ar5HfhnmJjBazS6UYnyiR9TyhzJPHzZ/nxqo7IaZanBgVFbqQs x6XQnTd6UzEHVLaEUmNvPPCbOf7geZL/lJ0W1USGKXrljEDDOhs= -----END CERTIFICATE-----Generated at Wed May 13 00:31:09 2026 by rpki-client