$ rpki-client -vvf rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft File: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft (raw, json) Hash identifier: ZDR9bPPkBe3hRJgz4OK+EegrH9iocXs9HKK3fdOPF8I= Subject key identifier: A7:68:D9:85:BA:B1:D4:E7:CC:2A:04:03:88:16:D7:77:A4:D6:D9:0E Authority key identifier: 4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 Certificate issuer: /CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Certificate serial: 7CED371BCEB14F1213CD57DA6C110C180E2AB06B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:12:14 +0000 Manifest this update: Tue 12 May 2026 03:07:14 +0000 Manifest next update: Wed 13 May 2026 03:49:14 +0000 Files and hashes: 1: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: xFJ6YkI92aDNdIdb2cb47Lr1FqvCvQqQCoyTJtEq2Co=) 2: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: 3oF8VGb692CsHNpL5bkpsSKeUmhwgndjMYRrWhUNaPo=) 3: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: 3V56nSlss2prGjnCh8yc0uAcD+eYYddXTnS1OxpPoV0=) 4: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ZDLtfAp4S3OvopOek/8l4bhhMLZjILy0rUvNj5yf6Os=) 5: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: 2oQBF0OAu+x3jbAGDBl7jZuo1w7C20ONHzk/GqcpbO8=) 6: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl (hash: 4wHPW2EH2ChcnwE1OsMVxt40V/kek/NXhyM8tRH2bKs=) 7: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: Nzw87BQmmq5JXKfqP++4H/0NcBCIzysxSEpNOfcwqIA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 03:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ed:37:1b:ce:b1:4f:12:13:cd:57:da:6c:11:0c:18:0e:2a:b0:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Validity Not Before: May 12 03:07:14 2026 GMT Not After : May 13 03:49:14 2026 GMT Subject: CN=A768D985BAB1D4E7CC2A04038816D777A4D6D90E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ef:30:71:52:df:86:21:45:c0:15:17:c4:e1: c9:01:1a:6e:74:7b:6c:19:9d:e4:3e:82:70:83:4b: b6:57:5e:89:a6:a5:2b:64:17:e1:17:42:af:23:b3: 34:09:2d:e5:c7:a5:96:f4:d6:6b:18:eb:f8:19:5e: da:8a:34:36:cc:b9:c5:86:ec:65:a6:ec:8b:04:5d: b0:f7:7d:87:b0:2e:fe:0b:ad:34:0c:db:11:ec:bf: 12:ac:2f:1b:f2:20:c7:60:5a:66:7a:e3:25:ae:2a: cc:cc:cd:0d:84:99:cb:1a:74:75:43:20:71:d0:ac: 5f:0a:2f:a3:c8:be:3b:03:1a:c0:52:3b:f2:02:aa: fc:a0:07:94:47:03:85:71:02:c3:df:b9:1e:35:65: 51:0d:56:75:8a:51:e2:c9:0a:64:b0:28:12:c9:1d: 1c:c7:2e:f9:b3:44:8b:65:12:9a:72:af:4f:e2:75: 42:ba:db:4d:f3:71:26:bd:d9:75:8d:5c:65:48:41: 2a:ff:09:0f:eb:b6:be:c9:87:a3:8b:74:7b:5a:f0: 59:38:1b:0f:07:84:c6:50:6d:ee:84:f1:22:79:d1: 70:3d:90:af:21:d6:65:9d:70:46:67:31:6d:b8:bc: e3:08:0a:a0:64:85:a2:36:a3:83:ff:1b:42:6a:6a: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:68:D9:85:BA:B1:D4:E7:CC:2A:04:03:88:16:D7:77:A4:D6:D9:0E X509v3 Authority Key Identifier: keyid:4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:0b:97:0e:2f:b1:6f:f2:db:f7:2a:6d:af:eb:38:5e:c3:ac: 4f:24:af:03:a4:8f:9b:8e:5b:3a:77:9f:41:49:1c:8c:4b:52: 74:45:35:6e:b1:5b:af:2b:7b:9b:94:03:a8:ae:78:e4:a7:ea: 34:47:69:04:d0:78:79:11:86:ac:9d:cb:72:5c:eb:71:b7:b5: 94:15:9b:94:f9:42:b6:1d:76:14:3d:fe:d3:09:14:a2:df:86: b8:a2:84:a5:7e:d7:da:d6:94:55:48:a5:4e:bf:aa:0b:8a:0b: 1a:05:60:b6:18:40:d3:92:02:50:61:70:a0:81:ab:92:04:0f: 3f:13:06:75:ad:e6:aa:64:3c:d5:20:0b:e4:12:f0:c3:9a:5e: 2c:be:2d:83:a2:48:a3:37:79:10:56:c4:4b:bb:5f:3d:d2:f3: e8:9f:b2:88:92:4d:92:e5:bc:d7:47:35:c0:0d:15:fc:01:43: 7b:b1:23:c4:af:6b:fd:0e:a2:ed:15:f2:59:3b:90:eb:f8:b0: 54:3a:51:05:fa:71:8c:73:cc:0e:99:35:be:2c:a5:bd:ad:b5: 54:48:2a:6c:72:ed:73:9f:1f:68:dc:bb:5f:16:e8:7f:29:8f: 29:08:d7:5c:99:0e:93:5b:57:cf:33:e6:97:4b:dc:01:ef:b6: f5:e3:48:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfO03G86xTxITzVfabBEMGA4qsGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMx RjI3RTU4NDAeFw0yNjA1MTIwMzA3MTRaFw0yNjA1MTMwMzQ5MTRaMDMxMTAvBgNV BAMTKEE3NjhEOTg1QkFCMUQ0RTdDQzJBMDQwMzg4MTZENzc3QTRENkQ5MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7zBxUt+GIUXAFRfE4ckBGm50 e2wZneQ+gnCDS7ZXXommpStkF+EXQq8jszQJLeXHpZb01msY6/gZXtqKNDbMucWG 7GWm7IsEXbD3fYewLv4LrTQM2xHsvxKsLxvyIMdgWmZ64yWuKszMzQ2EmcsadHVD IHHQrF8KL6PIvjsDGsBSO/ICqvygB5RHA4VxAsPfuR41ZVENVnWKUeLJCmSwKBLJ HRzHLvmzRItlEppyr0/idUK6203zcSa92XWNXGVIQSr/CQ/rtr7Jh6OLdHta8Fk4 Gw8HhMZQbe6E8SJ50XA9kK8h1mWdcEZnMW24vOMICqBkhaI2o4P/G0Jqao8rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp2jZhbqx1OfMKgQDiBbXd6TW2Q4wHwYDVR0j BBgwFoAUSsXcQXKq9DGWIvThwD/+Qx8n5YQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQwMTQzNmItMDI2Ny00NjZiLWEzNDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3 MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMxRjI3RTU4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUM1REM0MTcyQUFGNDMxOTYyMkY0RTFDMDNGRkU0MzFGMjdF NTg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQwMTQzNmItMDI2Ny00NjZiLWEz NDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZF NDMxRjI3RTU4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADALlw4vsW/y2/cqba/rOF7DrE8krwOkj5uO Wzp3n0FJHIxLUnRFNW6xW68re5uUA6iueOSn6jRHaQTQeHkRhqydy3Jc63G3tZQV m5T5QrYddhQ9/tMJFKLfhriihKV+19rWlFVIpU6/qguKCxoFYLYYQNOSAlBhcKCB q5IEDz8TBnWt5qpkPNUgC+QS8MOaXiy+LYOiSKM3eRBWxEu7Xz3S8+ifsoiSTZLl vNdHNcANFfwBQ3uxI8Sva/0Oou0V8lk7kOv4sFQ6UQX6cYxzzA6ZNb4spb2ttVRI Kmxy7XOfH2jcu18W6H8pjykI11yZDpNbV88z5pdL3AHvtvXjSMM= -----END CERTIFICATE-----Generated at Tue May 12 22:19:27 2026 by rpki-client