$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft File: A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft (raw, json) Hash identifier: bfHm/Q4lEapMjhjUrBq8YcFwE9jp4FFwGY/1WAlVVS8= Subject key identifier: 37:5A:E8:A3:C5:71:84:F5:5C:EC:3B:86:35:AE:B5:06:C1:71:18:BE Authority key identifier: A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C Certificate issuer: /CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C Certificate serial: 2CAB677FDE6C69A342A97E5E3C63E24EA85D1E66 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:17:00 +0000 Manifest this update: Tue 12 May 2026 17:12:00 +0000 Manifest next update: Wed 13 May 2026 19:37:00 +0000 Files and hashes: 1: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: Xz4v16/PuWF3xc6NRQS+cFH5cfyFs8wYPFxR2GtXMDw=) 2: A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl (hash: YfNrp35pB/PeNYMZCVcGT5awu5gjxmzT6LwlPmYZam0=) 3: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: oVthfsHvJfZFfAfPgVnP6RK4i2YXuHXT4TJi3carfJc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ab:67:7f:de:6c:69:a3:42:a9:7e:5e:3c:63:e2:4e:a8:5d:1e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C Validity Not Before: May 12 17:12:00 2026 GMT Not After : May 13 19:37:00 2026 GMT Subject: CN=375AE8A3C57184F55CEC3B8635AEB506C17118BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:71:19:eb:d1:3d:83:ca:6b:6c:dc:54:47:a7: df:ec:71:a2:a1:0d:1d:69:0b:08:70:d4:1e:d7:b1: 09:67:c9:97:86:80:91:02:33:31:04:33:bb:5c:b2: 88:b5:6b:4d:a3:e6:08:95:a0:25:c6:b4:e2:6a:65: 17:bd:93:3a:b2:2c:a8:4c:66:33:63:81:73:77:0b: ec:27:40:09:f9:7c:4e:3d:da:fe:43:e7:b0:9b:06: e1:2d:59:00:00:bf:fb:91:90:b4:5c:f6:53:33:4a: 11:24:7d:cc:1b:1d:25:4e:54:ee:ca:d3:2c:c9:18: db:db:43:1b:47:71:25:f1:5f:89:53:45:18:7d:14: 96:04:8c:36:44:3d:37:85:a4:14:5b:90:cd:9d:2f: 48:76:c6:c7:83:f1:80:c2:dd:15:6b:49:63:4a:b0: 56:ad:93:3f:28:cf:00:56:40:db:f5:5d:1c:ce:d7: e8:20:b2:2d:64:a8:99:8d:24:98:8d:f5:2c:f9:43: a2:88:8c:52:a8:4d:bd:51:f7:b3:b6:c7:d6:1c:4a: 5c:b8:02:7f:ec:cd:1f:46:f3:ac:d4:54:6d:4d:43: c0:f9:1f:3b:50:a5:69:30:03:67:94:3d:43:0a:a2: 48:a5:76:4a:9a:2f:52:80:60:54:46:be:49:cc:22: 0e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5A:E8:A3:C5:71:84:F5:5C:EC:3B:86:35:AE:B5:06:C1:71:18:BE X509v3 Authority Key Identifier: keyid:A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:09:73:84:a9:62:bf:9d:0f:12:fb:c1:60:f7:22:01:a0:4f: 99:b0:88:fe:b4:64:07:d8:7b:a1:4f:7a:3a:23:ff:94:5b:ba: 9c:51:21:d4:d1:80:81:50:94:ec:f9:2f:b5:79:51:4b:a6:22: d1:f0:97:2d:e3:eb:67:ae:fd:f3:af:59:51:8e:cc:4f:83:f8: 82:b6:7b:aa:94:fe:20:ba:af:da:fd:1c:40:1f:e2:90:3c:af: 94:b8:f3:22:79:57:7a:1b:73:c3:45:c8:f1:2c:5e:d1:40:53: 2a:b4:16:25:60:85:a4:98:8f:1c:8e:cd:ef:9d:6a:ac:ef:ec: 78:48:70:5f:98:95:7b:c5:3f:ef:45:da:f5:87:7c:6a:7c:22: b4:6c:28:37:f1:a2:c9:01:2f:a0:69:7d:eb:97:73:36:d8:8f: 0b:4d:14:86:4b:b5:09:8c:aa:b5:69:e6:bc:01:b4:29:0d:0f: e1:14:c8:c1:7d:6a:b7:72:28:1a:cd:c5:c5:df:44:62:2a:ee: 67:8d:fb:3f:2d:c0:ab:56:ce:60:01:1f:93:17:63:93:06:80: 42:cb:0d:8a:98:87:3f:58:cd:62:c3:10:5a:8e:9f:45:2a:a7: f1:db:cc:84:06:87:26:94:5c:28:d3:a0:31:5d:52:21:71:3a: 6a:f7:99:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULKtnf95saaNCqX5ePGPiTqhdHmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBNUE1QzI2MDM5QUNGMjE2REYzRTVCMjg0MzQ1Njkz RUU4RjM0QzAeFw0yNjA1MTIxNzEyMDBaFw0yNjA1MTMxOTM3MDBaMDMxMTAvBgNV BAMTKDM3NUFFOEEzQzU3MTg0RjU1Q0VDM0I4NjM1QUVCNTA2QzE3MTE4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChcRnr0T2Dymts3FRHp9/scaKh DR1pCwhw1B7XsQlnyZeGgJECMzEEM7tcsoi1a02j5giVoCXGtOJqZRe9kzqyLKhM ZjNjgXN3C+wnQAn5fE492v5D57CbBuEtWQAAv/uRkLRc9lMzShEkfcwbHSVOVO7K 0yzJGNvbQxtHcSXxX4lTRRh9FJYEjDZEPTeFpBRbkM2dL0h2xseD8YDC3RVrSWNK sFatkz8ozwBWQNv1XRzO1+ggsi1kqJmNJJiN9Sz5Q6KIjFKoTb1R97O2x9YcSly4 An/szR9G86zUVG1NQ8D5HztQpWkwA2eUPUMKokildkqaL1KAYFRGvknMIg65AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN1roo8VxhPVc7DuGNa61BsFxGL4wHwYDVR0j BBgwFoAUpKWlwmA5rPIW3z5bKENFaT7o80wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWQyZmE1MWUtM2ZkNC00NTIwLWIzNzUtMDllZWY1ZTBlNTEwLzAvQTRBNUE1QzI2 MDM5QUNGMjE2REYzRTVCMjg0MzQ1NjkzRUU4RjM0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNEE1QTVDMjYwMzlBQ0YyMTZERjNFNUIyODQzNDU2OTNFRThG MzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvQTRBNUE1QzI2MDM5QUNGMjE2REYzRTVCMjg0MzQ1 NjkzRUU4RjM0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIJc4SpYr+dDxL7wWD3IgGgT5mwiP60ZAfY e6FPejoj/5RbupxRIdTRgIFQlOz5L7V5UUumItHwly3j62eu/fOvWVGOzE+D+IK2 e6qU/iC6r9r9HEAf4pA8r5S48yJ5V3obc8NFyPEsXtFAUyq0FiVghaSYjxyOze+d aqzv7HhIcF+YlXvFP+9F2vWHfGp8IrRsKDfxoskBL6BpfeuXczbYjwtNFIZLtQmM qrVp5rwBtCkND+EUyMF9ardyKBrNxcXfRGIq7meN+z8twKtWzmABH5MXY5MGgELL DYqYhz9YzWLDEFqOn0Uqp/HbzIQGhyaUXCjToDFdUiFxOmr3mdA= -----END CERTIFICATE-----Generated at Wed May 13 00:21:07 2026 by rpki-client