$ rpki-client -vvf rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft File: 4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft (raw, json) Hash identifier: +dPOYDMKEHFZwm7Wi9f8FzZvuq/u96s6WDhL8+NN2JI= Subject key identifier: 5F:BA:9F:07:C0:2C:DA:5D:CA:93:87:E9:91:A5:4F:E6:0A:9F:22:AD Authority key identifier: 4E:85:79:F4:6C:CA:51:CA:56:CD:9C:3E:A1:A3:A1:29:C1:98:70:4B Certificate issuer: /CN=4E8579F46CCA51CA56CD9C3EA1A3A129C198704B Certificate serial: 4340F84E44DCD6A66430C5980E2B7C6F4502A2EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:12:05 +0000 Manifest this update: Tue 12 May 2026 23:07:05 +0000 Manifest next update: Thu 14 May 2026 01:23:05 +0000 Files and hashes: 1: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: S+rOrm27Es7W6Om8mBBRTFySKu0A8+vu3LzCH/NnAfQ=) 2: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: l0tvorHSkUZlt4zaL3Dl67F8jKKatHb3Uo7qW6XsBFY=) 3: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: cvnmUk/nxIx4kivdjBl5pAuWya0Ssizm0yja+4mpq3g=) 4: 4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl (hash: cuaRAsRxcAjXxffXmpaw5LcFIcxyUCaZw5icF/n+els=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:40:f8:4e:44:dc:d6:a6:64:30:c5:98:0e:2b:7c:6f:45:02:a2:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E8579F46CCA51CA56CD9C3EA1A3A129C198704B Validity Not Before: May 12 23:07:05 2026 GMT Not After : May 14 01:23:05 2026 GMT Subject: CN=5FBA9F07C02CDA5DCA9387E991A54FE60A9F22AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:72:5d:08:e3:26:c0:9f:b7:46:89:31:d6: d8:3e:a9:90:1a:9f:e9:e2:86:52:66:f1:56:77:77: 8b:bc:92:47:28:cb:37:2f:11:fa:35:b3:24:4f:ab: 55:ff:07:95:e6:6d:e6:46:be:7a:80:69:20:79:75: 27:a3:5f:27:b4:f6:5f:80:e4:ac:a4:d4:d5:3e:b1: 8a:a1:4a:79:bf:b5:85:27:16:f4:ba:18:1a:27:9f: da:12:cb:ba:79:d3:22:bb:b3:ca:84:e7:96:ed:ef: c9:e8:13:9d:88:09:3c:c7:a6:ac:e5:c1:d9:2f:7b: ff:59:1e:cf:7d:37:4a:4c:b8:d2:8d:5f:18:87:f0: cc:8b:a2:70:a6:16:9c:af:ff:8f:e3:69:de:6f:db: 41:8d:ab:df:12:16:3d:31:60:e0:1b:7d:55:2d:ee: cc:03:d3:2d:33:02:8c:3c:0a:66:39:43:1e:9f:9a: c8:4f:31:8f:c1:a6:5a:74:f6:cb:fd:bd:88:d5:9e: d6:f7:7b:43:b2:be:99:09:3f:13:c2:51:64:db:84: 83:76:0a:0b:72:75:b0:39:2d:61:01:3d:0c:14:9e: fd:ae:3e:db:9d:e7:47:8d:8a:3a:df:da:9c:fc:ef: 0a:ba:6a:4b:59:32:0e:17:c8:3c:07:86:f4:6e:11: 24:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BA:9F:07:C0:2C:DA:5D:CA:93:87:E9:91:A5:4F:E6:0A:9F:22:AD X509v3 Authority Key Identifier: keyid:4E:85:79:F4:6C:CA:51:CA:56:CD:9C:3E:A1:A3:A1:29:C1:98:70:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:45:c4:41:f0:95:81:fd:74:37:85:c9:a6:e2:8d:7b:70:a5: 64:3b:27:2c:63:72:59:a0:54:12:2e:8b:3b:eb:03:38:e0:de: 48:50:e4:19:a6:2a:bc:d1:d5:a6:38:37:56:b1:92:96:93:b4: 84:8c:cd:15:4e:39:dc:a4:eb:bf:cb:77:5a:e2:07:e7:81:82: 8b:b6:d4:c5:0e:3f:6b:2a:51:62:e2:7a:37:b4:1a:72:73:9e: db:d1:36:68:33:49:6c:4f:e4:03:fd:3a:d9:b0:3e:8e:3f:8d: 61:43:f7:35:0b:5e:75:49:e9:db:2a:15:9b:01:56:3d:1e:81: 7f:b8:ed:fb:f4:60:04:ce:f6:60:91:f6:ee:bc:03:6b:3d:b7: 4a:2a:c6:8d:27:ab:3f:78:17:ca:ce:98:d1:17:6b:a7:67:5c: 62:ed:16:2f:a3:a6:3c:d9:5a:01:7d:71:20:a8:1c:ec:29:f2: 7a:8a:f7:12:85:d2:a5:c8:ba:2e:9d:a0:07:f7:13:7f:72:c5: a1:f6:1a:78:68:f4:a0:54:4b:09:44:a3:52:f1:86:df:a6:d5: 80:df:ac:08:bb:2e:07:e4:98:e1:c7:5e:40:c4:d1:ec:4e:10: 14:8f:fe:af:be:d2:9f:18:0a:7c:01:87:3a:18:ff:5b:00:c2: a4:ef:03:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0D4TkTc1qZkMMWYDit8b0UCouwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU4NTc5RjQ2Q0NBNTFDQTU2Q0Q5QzNFQTFBM0ExMjlD MTk4NzA0QjAeFw0yNjA1MTIyMzA3MDVaFw0yNjA1MTQwMTIzMDVaMDMxMTAvBgNV BAMTKDVGQkE5RjA3QzAyQ0RBNURDQTkzODdFOTkxQTU0RkU2MEE5RjIyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9j3JdCOMmwJ+3Rokx1tg+qZAa n+nihlJm8VZ3d4u8kkcoyzcvEfo1syRPq1X/B5XmbeZGvnqAaSB5dSejXye09l+A 5Kyk1NU+sYqhSnm/tYUnFvS6GBonn9oSy7p50yK7s8qE55bt78noE52ICTzHpqzl wdkve/9ZHs99N0pMuNKNXxiH8MyLonCmFpyv/4/jad5v20GNq98SFj0xYOAbfVUt 7swD0y0zAow8CmY5Qx6fmshPMY/Bplp09sv9vYjVntb3e0OyvpkJPxPCUWTbhIN2 CgtydbA5LWEBPQwUnv2uPtud50eNijrf2pz87wq6aktZMg4XyDwHhvRuESTFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX7qfB8As2l3Kk4fpkaVP5gqfIq0wHwYDVR0j BBgwFoAUToV59GzKUcpWzZw+oaOhKcGYcEswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM1MjI0YzYtMzM0ZC00ZjNkLTk4MzctMWJhY2NhNWEwMjJiLzAvNEU4NTc5RjQ2 Q0NBNTFDQTU2Q0Q5QzNFQTFBM0ExMjlDMTk4NzA0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTg1NzlGNDZDQ0E1MUNBNTZDRDlDM0VBMUEzQTEyOUMxOTg3 MDRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvNEU4NTc5RjQ2Q0NBNTFDQTU2Q0Q5QzNFQTFBM0Ex MjlDMTk4NzA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxFxEHwlYH9dDeFyabijXtwpWQ7Jyxjclmg VBIuizvrAzjg3khQ5BmmKrzR1aY4N1axkpaTtISMzRVOOdyk67/Ld1riB+eBgou2 1MUOP2sqUWLieje0GnJzntvRNmgzSWxP5AP9OtmwPo4/jWFD9zULXnVJ6dsqFZsB Vj0egX+47fv0YATO9mCR9u68A2s9t0oqxo0nqz94F8rOmNEXa6dnXGLtFi+jpjzZ WgF9cSCoHOwp8nqK9xKF0qXIui6doAf3E39yxaH2Gnho9KBUSwlEo1Lxht+m1YDf rAi7LgfkmOHHXkDE0exOEBSP/q++0p8YCnwBhzoY/1sAwqTvA8w= -----END CERTIFICATE-----Generated at Wed May 13 07:36:12 2026 by rpki-client