$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft File: 4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft (raw, json) Hash identifier: 1Mmt5DSCgG8USfg1J+BTd29Wt8MPaz6+y9NawesIiXI= Subject key identifier: CB:99:36:F0:25:36:F9:0A:CC:C6:91:FC:AE:5E:F5:A1:6E:E7:85:87 Authority key identifier: 4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58 Certificate issuer: /CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58 Certificate serial: 08F6B14CA59064568D0FAE18F0A0614D22E9B8A6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:56:11 +0000 Manifest this update: Tue 12 May 2026 09:51:11 +0000 Manifest next update: Wed 13 May 2026 11:51:11 +0000 Files and hashes: 1: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (hash: 6Vy3iy991tbMeWN8XgwIw7kSD92akdQ0AseMbxbKJxY=) 2: 4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl (hash: wUBvuCfTiQaV7B+cOl2daZprxkPKRsibYBDm4yEooMk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f6:b1:4c:a5:90:64:56:8d:0f:ae:18:f0:a0:61:4d:22:e9:b8:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58 Validity Not Before: May 12 09:51:11 2026 GMT Not After : May 13 11:51:11 2026 GMT Subject: CN=CB9936F02536F90ACCC691FCAE5EF5A16EE78587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ac:fa:d6:72:d4:af:f8:a9:fa:cd:4d:02:3f: 99:98:b9:5a:7a:48:f9:88:52:c1:66:d6:af:2e:ba: 74:3f:d1:26:a7:87:f8:d9:e9:04:87:88:d5:a9:ed: 82:6b:d0:6d:ce:ef:41:0d:55:1a:56:1d:10:00:fe: f3:7f:f7:e8:80:f4:f5:9a:51:6f:64:1c:78:72:cb: ef:ff:ab:7a:de:30:58:a7:24:77:0d:0d:b2:13:ab: aa:e0:97:87:57:c6:6f:23:eb:a3:b2:bd:06:85:06: 0b:f1:a0:a8:fd:2d:3c:79:5b:9e:65:b6:09:33:6d: f4:8b:1d:e7:48:db:53:02:9c:28:ff:c8:69:17:91: bb:83:a9:b6:c4:ac:e9:42:1f:9e:db:5c:4d:61:cc: e7:92:25:6e:b1:86:bd:67:47:e3:21:7d:42:3d:b5: dc:8a:c9:42:17:f0:a7:2b:09:92:43:d5:61:42:46: 5a:ce:59:5f:ba:e7:8f:57:b9:dd:0a:b2:e2:5f:a6: 83:44:7e:56:2d:ac:b3:57:e3:50:0e:5f:31:1e:bc: fd:0a:39:eb:95:06:93:d8:fd:33:a6:cd:d5:29:1c: 12:9e:e2:d0:24:0a:6a:18:2c:86:79:b5:48:9d:bf: 44:76:29:cc:4b:c4:37:45:a3:58:5a:b3:24:85:35: a3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:99:36:F0:25:36:F9:0A:CC:C6:91:FC:AE:5E:F5:A1:6E:E7:85:87 X509v3 Authority Key Identifier: keyid:4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2a:d6:70:d6:30:69:38:03:f5:80:53:ce:a7:47:11:d5:e9: e1:b2:8b:bd:d6:96:59:b4:8f:e7:f6:0a:75:36:6b:0e:9d:0b: b6:53:22:1d:40:5b:0a:b2:32:98:b2:9a:64:e6:dc:90:79:a6: dd:ab:0f:ef:36:be:96:4f:72:37:d6:26:9d:c0:1a:b4:e6:26: b1:c7:5a:be:9b:f9:32:d7:c6:b1:7d:a9:43:d6:45:29:01:1e: 46:1f:9c:7d:4c:0f:df:9c:00:60:26:a0:85:e6:62:d4:73:3f: d0:d4:47:c5:c8:d9:05:f6:b2:d4:b6:59:91:46:26:39:47:79: 6f:a8:51:db:e9:51:9d:94:93:c8:c1:c7:e4:65:6b:7d:5d:ae: 26:0b:3f:ce:16:ae:c2:c6:f9:e7:06:db:c6:05:db:9a:50:bf: 57:05:c7:78:95:13:8f:d0:a9:38:03:a7:db:eb:8c:02:51:b1: b5:1c:25:63:50:08:21:2b:65:81:41:8a:3f:24:e9:a6:f7:08: b1:0f:f3:91:67:e0:1a:34:3e:92:f5:55:9c:1c:97:d4:50:88: 7c:e5:a2:5c:75:c8:72:67:3a:93:60:b8:4a:7e:41:a3:c3:ba: b9:6d:e6:fd:f2:a2:3f:42:22:60:c6:ba:c7:a7:1e:c5:88:48: 69:4a:5d:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCPaxTKWQZFaND64Y8KBhTSLpuKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwQjY0N0MxREY3RENFMjIwMTA2QkRBMTFDMUQ3RDE2 M0QxMEY1ODAeFw0yNjA1MTIwOTUxMTFaFw0yNjA1MTMxMTUxMTFaMDMxMTAvBgNV BAMTKENCOTkzNkYwMjUzNkY5MEFDQ0M2OTFGQ0FFNUVGNUExNkVFNzg1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCrPrWctSv+Kn6zU0CP5mYuVp6 SPmIUsFm1q8uunQ/0Sanh/jZ6QSHiNWp7YJr0G3O70ENVRpWHRAA/vN/9+iA9PWa UW9kHHhyy+//q3reMFinJHcNDbITq6rgl4dXxm8j66OyvQaFBgvxoKj9LTx5W55l tgkzbfSLHedI21MCnCj/yGkXkbuDqbbErOlCH57bXE1hzOeSJW6xhr1nR+MhfUI9 tdyKyUIX8KcrCZJD1WFCRlrOWV+6549Xud0KsuJfpoNEflYtrLNX41AOXzEevP0K OeuVBpPY/TOmzdUpHBKe4tAkCmoYLIZ5tUidv0R2KcxLxDdFo1hasySFNaPzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy5k28CU2+QrMxpH8rl71oW7nhYcwHwYDVR0j BBgwFoAUTAtkfB333OIgEGvaEcHX0WPRD1gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUzZjY2YTgtYTBmZi00NGZhLWJkYTYtOGU1ZjI3ZDYxYjNmLzAvNEMwQjY0N0Mx REY3RENFMjIwMTA2QkRBMTFDMUQ3RDE2M0QxMEY1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzBCNjQ3QzFERjdEQ0UyMjAxMDZCREExMUMxRDdEMTYzRDEw RjU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUzZjY2YTgtYTBmZi00NGZhLWJk YTYtOGU1ZjI3ZDYxYjNmLzAvNEMwQjY0N0MxREY3RENFMjIwMTA2QkRBMTFDMUQ3 RDE2M0QxMEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwq1nDWMGk4A/WAU86nRxHV6eGyi73Wllm0 j+f2CnU2aw6dC7ZTIh1AWwqyMpiymmTm3JB5pt2rD+82vpZPcjfWJp3AGrTmJrHH Wr6b+TLXxrF9qUPWRSkBHkYfnH1MD9+cAGAmoIXmYtRzP9DUR8XI2QX2stS2WZFG JjlHeW+oUdvpUZ2Uk8jBx+Rla31driYLP84WrsLG+ecG28YF25pQv1cFx3iVE4/Q qTgDp9vrjAJRsbUcJWNQCCErZYFBij8k6ab3CLEP85Fn4Bo0PpL1VZwcl9RQiHzl olx1yHJnOpNguEp+QaPDurlt5v3yoj9CImDGusenHsWISGlKXZI= -----END CERTIFICATE-----Generated at Tue May 12 23:27:38 2026 by rpki-client