$ rpki-client -vvf rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft File: A4249B719E5F988286AD3B4164C4E77F434FF948.mft (raw, json) Hash identifier: UIgYCzwPO7NOOZ97Is3JMVk/9le+pvBl6p8cXHc0H08= Subject key identifier: F8:F0:95:83:94:6A:9A:FC:4E:CE:81:19:15:B6:FB:10:13:CE:D2:0A Authority key identifier: A4:24:9B:71:9E:5F:98:82:86:AD:3B:41:64:C4:E7:7F:43:4F:F9:48 Certificate issuer: /CN=A4249B719E5F988286AD3B4164C4E77F434FF948 Certificate serial: 1E987BD8EDD1394D9EED0AD71ACD196455BAD7AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft Manifest number: 0F Signing time: Tue 12 May 2026 10:51:45 +0000 Manifest this update: Tue 12 May 2026 10:46:45 +0000 Manifest next update: Wed 13 May 2026 13:43:45 +0000 Files and hashes: 1: 3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa (hash: /8ZMrBAQoa3qQ8hBZzRb+TXTbN8qY8Wvj8VBQo+giW0=) 2: A4249B719E5F988286AD3B4164C4E77F434FF948.crl (hash: q6+iMtzE8xoL/eLHJ0Hfi8l7ra6TagSLHat6yw4EOLg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.crl rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:98:7b:d8:ed:d1:39:4d:9e:ed:0a:d7:1a:cd:19:64:55:ba:d7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4249B719E5F988286AD3B4164C4E77F434FF948 Validity Not Before: May 12 10:46:45 2026 GMT Not After : May 13 13:43:45 2026 GMT Subject: CN=F8F09583946A9AFC4ECE811915B6FB1013CED20A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:29:ce:5c:ef:3e:01:8d:f4:49:e7:92:e8:0f: a0:b7:8d:a9:10:36:12:8d:b7:da:c0:60:2c:69:11: 9c:8c:d3:54:ac:2a:80:f4:be:99:70:33:d9:1f:bb: e8:49:67:8d:61:af:d4:7a:07:60:89:8a:1c:1b:f1: 2a:a8:c9:e9:9e:e2:b2:ec:86:5c:d2:69:e7:a2:3f: 75:ca:86:1d:03:24:b8:f2:1c:c0:3d:0b:60:a2:bd: 76:93:0d:35:b2:b0:c9:8b:ea:a3:ea:b0:b2:bc:3f: e4:97:d9:08:d8:08:5f:e3:24:2e:0c:25:7b:32:86: a8:34:f7:73:cb:35:3e:46:1f:48:d0:51:73:23:f0: 6e:f4:db:d9:1c:ca:60:ee:f6:04:0a:75:66:5e:e7: b3:10:41:ea:04:21:b6:80:83:2c:f2:df:ea:ca:db: 28:d8:a8:f9:07:46:5d:de:28:4a:59:c8:ae:76:ef: 24:b4:8e:1b:3a:b5:db:8a:9a:33:1c:df:6e:ae:d1: 17:53:24:95:23:67:84:a8:56:d1:dc:67:93:6c:46: 94:10:7a:26:d4:72:ac:41:ed:6a:6b:c3:a2:7b:bb: 33:5c:bb:b5:63:12:5e:ce:df:17:64:7b:32:ad:52: 81:f6:55:5a:c2:95:45:ea:c1:41:fe:0c:76:85:9f: 44:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F0:95:83:94:6A:9A:FC:4E:CE:81:19:15:B6:FB:10:13:CE:D2:0A X509v3 Authority Key Identifier: keyid:A4:24:9B:71:9E:5F:98:82:86:AD:3B:41:64:C4:E7:7F:43:4F:F9:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2d:b2:2c:d9:cd:b5:17:2a:1a:35:c8:c3:89:d8:b1:1e:b3: 9d:cb:ff:8d:1d:07:87:9b:09:a6:b8:53:bf:50:10:48:5c:77: 9f:a2:0b:a5:53:f7:12:ca:e6:72:0b:21:49:90:92:4f:2d:2d: 55:62:cc:09:09:8c:4e:ea:0c:2c:de:a5:be:bd:9c:6b:bb:e3: d2:4e:46:15:62:a3:00:61:8c:1c:ff:7a:99:e4:68:e5:75:ac: 55:4d:db:56:db:78:d5:fc:5f:0d:94:65:17:66:f4:4d:b2:e7: ca:e3:29:f4:73:d3:0f:36:89:61:66:04:51:8b:2e:8e:2b:81: 70:31:ae:fa:2b:48:3b:5a:ab:f4:e5:ee:45:36:2c:e4:5a:57: e4:8f:72:52:99:bb:53:f6:4c:82:d5:b1:28:cc:32:a2:be:ee: 5a:89:2a:51:19:b7:f7:38:e3:f2:60:0b:3f:d3:4b:d2:66:45: 86:9b:27:34:36:9f:0d:a5:14:d8:c4:c3:9d:cf:dd:d1:12:6c: 15:ed:3e:85:b6:21:ae:91:ed:82:12:02:c4:aa:7a:04:23:d8: 27:3b:4f:a2:c2:0c:3c:f3:e8:2d:d0:b2:91:31:7a:50:4d:a4: b4:1b:57:d9:22:8b:02:fb:b4:60:9b:65:d7:ed:1e:fd:f4:12: c7:d3:c4:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHph72O3ROU2e7QrXGs0ZZFW6168wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyNDlCNzE5RTVGOTg4Mjg2QUQzQjQxNjRDNEU3N0Y0 MzRGRjk0ODAeFw0yNjA1MTIxMDQ2NDVaFw0yNjA1MTMxMzQzNDVaMDMxMTAvBgNV BAMTKEY4RjA5NTgzOTQ2QTlBRkM0RUNFODExOTE1QjZGQjEwMTNDRUQyMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Kc5c7z4BjfRJ55LoD6C3jakQ NhKNt9rAYCxpEZyM01SsKoD0vplwM9kfu+hJZ41hr9R6B2CJihwb8Sqoyeme4rLs hlzSaeeiP3XKhh0DJLjyHMA9C2CivXaTDTWysMmL6qPqsLK8P+SX2QjYCF/jJC4M JXsyhqg093PLNT5GH0jQUXMj8G7029kcymDu9gQKdWZe57MQQeoEIbaAgyzy3+rK 2yjYqPkHRl3eKEpZyK527yS0jhs6tduKmjMc326u0RdTJJUjZ4SoVtHcZ5NsRpQQ eibUcqxB7Wprw6J7uzNcu7VjEl7O3xdkezKtUoH2VVrClUXqwUH+DHaFn0QdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+PCVg5RqmvxOzoEZFbb7EBPO0gowHwYDVR0j BBgwFoAUpCSbcZ5fmIKGrTtBZMTnf0NP+UgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWJjYzYyYWUtMjBjOC00OTc0LWFhZTktYjEwOGRmOGUyZjU5LzAvQTQyNDlCNzE5 RTVGOTg4Mjg2QUQzQjQxNjRDNEU3N0Y0MzRGRjk0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNDI0OUI3MTlFNUY5ODgyODZBRDNCNDE2NEM0RTc3RjQzNEZG OTQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWJjYzYyYWUtMjBjOC00OTc0LWFh ZTktYjEwOGRmOGUyZjU5LzAvQTQyNDlCNzE5RTVGOTg4Mjg2QUQzQjQxNjRDNEU3 N0Y0MzRGRjk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4tsizZzbUXKho1yMOJ2LEes53L/40dB4eb Caa4U79QEEhcd5+iC6VT9xLK5nILIUmQkk8tLVVizAkJjE7qDCzepb69nGu749JO RhViowBhjBz/epnkaOV1rFVN21bbeNX8Xw2UZRdm9E2y58rjKfRz0w82iWFmBFGL Lo4rgXAxrvorSDtaq/Tl7kU2LORaV+SPclKZu1P2TILVsSjMMqK+7lqJKlEZt/c4 4/JgCz/TS9JmRYabJzQ2nw2lFNjEw53P3dESbBXtPoW2Ia6R7YISAsSqegQj2Cc7 T6LCDDzz6C3QspExelBNpLQbV9kiiwL7tGCbZdftHv30EsfTxLI= -----END CERTIFICATE-----Generated at Wed May 13 00:44:26 2026 by rpki-client