$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft File: 04D52083D82721F61634E6629E16C7C7A870B9F5.mft (raw, json) Hash identifier: KAA9u5nHTYP/k/SRu/nh68NWY+PPH5ib+GFBYVz/3pE= Subject key identifier: A6:86:B0:FB:84:97:B7:ED:D0:22:C9:29:D0:CD:EF:6B:35:3D:BC:6E Authority key identifier: 04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5 Certificate issuer: /CN=04D52083D82721F61634E6629E16C7C7A870B9F5 Certificate serial: 3EEED83D63DF2D3D2B6A95498F913C6878020767 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft Manifest number: 0F Signing time: Tue 12 May 2026 13:18:22 +0000 Manifest this update: Tue 12 May 2026 13:13:22 +0000 Manifest next update: Wed 13 May 2026 16:37:22 +0000 Files and hashes: 1: 04D52083D82721F61634E6629E16C7C7A870B9F5.crl (hash: GEDD4yO7ls4NVVNhCAC+7B83bdz7w+znMawC9cYBzFo=) 2: 3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (hash: VKlwIPdpyMpqk0maSmWSiVv4EZTH1WpK0M+m3jBjjUU=) 3: 3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (hash: JXl9nF73Wg0ANBBDSP3R1eZt9u9/t+JbOCpzL0EVDI8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ee:d8:3d:63:df:2d:3d:2b:6a:95:49:8f:91:3c:68:78:02:07:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D52083D82721F61634E6629E16C7C7A870B9F5 Validity Not Before: May 12 13:13:22 2026 GMT Not After : May 13 16:37:22 2026 GMT Subject: CN=A686B0FB8497B7EDD022C929D0CDEF6B353DBC6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d5:64:7c:fa:09:6f:86:7b:5c:a1:9d:a9:33: 75:0c:15:06:6a:eb:ac:99:49:81:87:34:e3:f0:2a: 1d:2f:48:e6:a6:c8:ba:24:c8:0a:30:e5:33:83:c2: 52:b3:ae:d6:50:92:d1:f3:7a:c7:e4:82:8d:68:4c: de:5a:59:b8:83:84:a6:4f:7a:2f:70:93:c3:85:ee: 5f:00:55:80:2c:88:ca:fa:3f:ce:cd:69:83:64:91: 45:1c:e0:81:b8:54:53:90:fc:33:06:5f:d3:c1:d6: 52:d9:c2:18:ea:df:c1:c0:30:93:3a:ce:07:65:cb: d4:12:58:bd:fb:2b:d2:58:72:a1:0b:38:88:39:2c: 97:f0:d2:42:62:fd:37:1e:bf:6b:c5:b1:27:75:d2: 4b:ed:fc:8b:e9:41:6a:72:d9:5e:d2:20:b1:b5:d1: 24:12:ae:f2:7d:00:38:4e:de:17:a3:0b:ea:e0:c1: f2:83:52:ec:dd:4b:84:a0:bc:c0:91:6f:18:80:e8: 15:ea:ed:ef:1c:51:6d:6f:d1:0b:a7:bd:da:46:55: f2:7d:11:83:db:8b:eb:fc:01:67:51:8c:bd:c8:4c: 46:43:bf:3a:ad:1e:fd:d6:d2:21:07:82:2d:42:dd: 77:87:af:cc:76:93:8c:94:67:02:bc:29:5b:d9:9f: 0a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:86:B0:FB:84:97:B7:ED:D0:22:C9:29:D0:CD:EF:6B:35:3D:BC:6E X509v3 Authority Key Identifier: keyid:04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:47:61:09:80:5d:35:3a:89:f8:a1:28:58:81:eb:36:b2:5b: e2:7d:41:26:c3:50:15:eb:5b:24:52:53:e3:3c:1e:ed:9e:9e: e0:a4:6d:e0:a4:96:d0:eb:f0:05:00:a0:3c:27:f0:88:3e:ea: 38:a1:14:9f:61:57:a3:41:55:25:5a:52:af:04:30:51:93:b2: 05:50:c0:23:6a:02:85:cc:44:aa:61:56:66:cc:f8:28:04:0d: d3:18:03:f3:af:cb:aa:2e:5b:42:69:06:dd:15:26:37:11:9e: 06:7a:0b:45:89:0b:b3:9b:17:f8:92:53:a6:db:9d:6a:7d:de: d4:25:1f:c4:2f:08:1b:19:b0:0b:5c:1e:0a:79:c6:14:56:5f: 9f:84:7e:57:b0:7b:6a:c5:d8:34:f2:c5:0d:eb:ec:88:81:26: 56:32:99:bf:66:c3:f7:2a:43:0a:19:d2:6c:8e:e9:f9:c2:04: 79:a1:86:1a:2b:12:b3:c0:cb:de:6a:02:7d:9a:3c:f8:27:85: fa:e0:02:71:59:f3:e8:5a:e9:bc:5b:d8:6f:08:01:ef:12:22: 77:0b:a0:d5:8e:e5:d7:c2:c5:62:4e:b7:a4:cb:fa:27:90:e9: 5d:a6:4f:dc:a9:a2:2e:e6:c2:92:5f:7c:23:7d:6a:1a:c5:ea: 00:d7:4b:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPu7YPWPfLT0rapVJj5E8aHgCB2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRENTIwODNEODI3MjFGNjE2MzRFNjYyOUUxNkM3QzdB ODcwQjlGNTAeFw0yNjA1MTIxMzEzMjJaFw0yNjA1MTMxNjM3MjJaMDMxMTAvBgNV BAMTKEE2ODZCMEZCODQ5N0I3RUREMDIyQzkyOUQwQ0RFRjZCMzUzREJDNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR1WR8+glvhntcoZ2pM3UMFQZq 66yZSYGHNOPwKh0vSOamyLokyAow5TODwlKzrtZQktHzesfkgo1oTN5aWbiDhKZP ei9wk8OF7l8AVYAsiMr6P87NaYNkkUUc4IG4VFOQ/DMGX9PB1lLZwhjq38HAMJM6 zgdly9QSWL37K9JYcqELOIg5LJfw0kJi/Tcev2vFsSd10kvt/IvpQWpy2V7SILG1 0SQSrvJ9ADhO3hejC+rgwfKDUuzdS4SgvMCRbxiA6BXq7e8cUW1v0QunvdpGVfJ9 EYPbi+v8AWdRjL3ITEZDvzqtHv3W0iEHgi1C3XeHr8x2k4yUZwK8KVvZnwo9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpoaw+4SXt+3QIskp0M3vazU9vG4wHwYDVR0j BBgwFoAUBNUgg9gnIfYWNOZinhbHx6hwufUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU5MjI0M2EtNzYzZC00NGI4LTk4N2QtMDhiZDBkYTllZTNkLzAvMDRENTIwODNE ODI3MjFGNjE2MzRFNjYyOUUxNkM3QzdBODcwQjlGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNEQ1MjA4M0Q4MjcyMUY2MTYzNEU2NjI5RTE2QzdDN0E4NzBC OUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU5MjI0M2EtNzYzZC00NGI4LTk4 N2QtMDhiZDBkYTllZTNkLzAvMDRENTIwODNEODI3MjFGNjE2MzRFNjYyOUUxNkM3 QzdBODcwQjlGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxHYQmAXTU6ifihKFiB6zayW+J9QSbDUBXr WyRSU+M8Hu2enuCkbeCkltDr8AUAoDwn8Ig+6jihFJ9hV6NBVSVaUq8EMFGTsgVQ wCNqAoXMRKphVmbM+CgEDdMYA/Ovy6ouW0JpBt0VJjcRngZ6C0WJC7ObF/iSU6bb nWp93tQlH8QvCBsZsAtcHgp5xhRWX5+Eflewe2rF2DTyxQ3r7IiBJlYymb9mw/cq QwoZ0myO6fnCBHmhhhorErPAy95qAn2aPPgnhfrgAnFZ8+ha6bxb2G8IAe8SIncL oNWO5dfCxWJOt6TL+ieQ6V2mT9ypoi7mwpJffCN9ahrF6gDXSzI= -----END CERTIFICATE-----Generated at Wed May 13 04:48:04 2026 by rpki-client