$ rpki-client -vvf rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft File: 4DC2282186B6221A7A52575CE005F2B42354E4A6.mft (raw, json) Hash identifier: Clxrsg4Eeo9Z/OriootdAusbMNRYHBjXW8j6AFnXZt4= Subject key identifier: 49:D7:24:A2:67:87:B0:FC:FA:BE:68:53:1F:57:CB:12:C7:59:A9:43 Authority key identifier: 4D:C2:28:21:86:B6:22:1A:7A:52:57:5C:E0:05:F2:B4:23:54:E4:A6 Certificate issuer: /CN=4DC2282186B6221A7A52575CE005F2B42354E4A6 Certificate serial: 6532DAD646A5654C261C27617DD6EC3599925E71 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:29:06 +0000 Manifest this update: Tue 12 May 2026 21:24:06 +0000 Manifest next update: Wed 13 May 2026 22:52:06 +0000 Files and hashes: 1: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: Z0k2HMfcMKksaFrziJOtsyyQXBDq/OhSupVq38YlMrI=) 2: 4DC2282186B6221A7A52575CE005F2B42354E4A6.crl (hash: Bwaz9w2nb5UnBjgPkQxqfWTYp0aiiZQ0khAQ75XMBOI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.crl rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:32:da:d6:46:a5:65:4c:26:1c:27:61:7d:d6:ec:35:99:92:5e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC2282186B6221A7A52575CE005F2B42354E4A6 Validity Not Before: May 12 21:24:06 2026 GMT Not After : May 13 22:52:06 2026 GMT Subject: CN=49D724A26787B0FCFABE68531F57CB12C759A943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d0:11:8b:b0:74:64:76:11:3f:80:9a:de:75: 39:00:40:b2:ca:c2:3e:6b:5c:c6:a2:a8:0a:e5:5c: 5b:f7:c7:97:50:c2:e2:34:89:33:4a:fc:1a:81:a3: f6:64:37:43:11:b1:14:da:2d:81:71:98:53:84:81: ab:af:ce:e1:52:bd:b6:5f:c3:79:76:25:21:d9:50: 21:36:4b:a0:01:69:7d:31:8a:6f:92:39:52:90:93: 33:c5:23:9d:43:01:0b:4c:63:52:8e:94:a0:60:94: 6c:da:e9:63:62:c1:39:80:4a:65:9e:a5:fd:4d:a3: 4e:6e:6d:0f:9d:94:8e:f1:af:54:01:de:74:9a:27: 1f:3d:31:ae:fb:5a:d1:d4:d8:e3:76:54:c3:88:27: b7:ed:bc:11:aa:df:62:03:9d:1d:ba:9e:d7:46:29: cb:3d:0f:92:7e:31:66:cd:b0:6e:cc:e7:8e:26:00: 3d:f9:13:24:36:65:6a:26:de:4c:bd:bd:ae:95:37: eb:f7:40:e1:f2:11:33:58:92:f6:14:a4:69:8c:d7: bb:9c:4b:03:36:21:df:e2:12:e7:4a:c4:e1:0b:d7: 60:a0:43:34:4e:d3:74:f3:e2:ef:2a:a0:d9:36:2e: 40:eb:1b:fc:f2:96:48:10:95:84:9a:cf:6e:a2:76: 31:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D7:24:A2:67:87:B0:FC:FA:BE:68:53:1F:57:CB:12:C7:59:A9:43 X509v3 Authority Key Identifier: keyid:4D:C2:28:21:86:B6:22:1A:7A:52:57:5C:E0:05:F2:B4:23:54:E4:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:57:5a:77:ba:5f:ea:0e:f2:53:5e:69:3b:82:ef:a7:f2:83: 85:a5:9a:49:b0:e9:07:3e:8d:8a:ab:ee:e0:be:08:61:34:ed: e3:9f:80:a9:12:af:14:66:33:23:19:2d:38:f4:2d:6e:f6:02: 77:84:f5:2f:26:5c:44:c1:9e:e3:b3:d3:59:2d:35:ec:da:0a: 8d:7b:48:46:3d:ca:ed:3b:1d:b9:84:f1:82:9b:57:2a:aa:7e: 0a:4b:3c:db:db:fe:9b:c6:55:63:81:1f:1d:44:00:ed:0e:c9: a1:75:74:15:9f:d1:bd:34:49:f0:c1:2f:12:0c:43:ce:9c:ea: c4:2f:2f:cf:09:28:71:47:ef:35:6b:04:c6:b7:02:50:b9:18: e0:cd:72:f8:a2:0f:ca:cf:4e:22:f2:f8:9d:dd:4a:34:d6:f6: 3b:21:b0:ea:b1:26:6f:9b:f7:20:04:af:a0:f4:73:2f:43:04: 2a:53:d6:fa:d4:7c:f5:4b:75:15:44:85:88:2f:59:97:37:1c: 5d:68:91:e5:18:20:ce:8d:0b:89:2f:86:f1:36:3b:21:14:1d: d6:62:55:6f:96:ea:53:c2:80:f8:0c:f8:14:4b:e0:e2:80:78: 71:32:cb:3d:c1:4c:ef:44:24:67:ca:56:2f:08:6a:44:8f:6e: 02:c8:74:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZTLa1kalZUwmHCdhfdbsNZmSXnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDMjI4MjE4NkI2MjIxQTdBNTI1NzVDRTAwNUYyQjQy MzU0RTRBNjAeFw0yNjA1MTIyMTI0MDZaFw0yNjA1MTMyMjUyMDZaMDMxMTAvBgNV BAMTKDQ5RDcyNEEyNjc4N0IwRkNGQUJFNjg1MzFGNTdDQjEyQzc1OUE5NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT0BGLsHRkdhE/gJredTkAQLLK wj5rXMaiqArlXFv3x5dQwuI0iTNK/BqBo/ZkN0MRsRTaLYFxmFOEgauvzuFSvbZf w3l2JSHZUCE2S6ABaX0xim+SOVKQkzPFI51DAQtMY1KOlKBglGza6WNiwTmASmWe pf1No05ubQ+dlI7xr1QB3nSaJx89Ma77WtHU2ON2VMOIJ7ftvBGq32IDnR26ntdG Kcs9D5J+MWbNsG7M544mAD35EyQ2ZWom3ky9va6VN+v3QOHyETNYkvYUpGmM17uc SwM2Id/iEudKxOEL12CgQzRO03Tz4u8qoNk2LkDrG/zylkgQlYSaz26idjHNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSdckomeHsPz6vmhTH1fLEsdZqUMwHwYDVR0j BBgwFoAUTcIoIYa2Ihp6Uldc4AXytCNU5KYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmUxMWU5OGYtZjU0ZS00NjBiLTg4ZjMtYmY5MWUwNDQzZTkwLzAvNERDMjI4MjE4 NkI2MjIxQTdBNTI1NzVDRTAwNUYyQjQyMzU0RTRBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REMyMjgyMTg2QjYyMjFBN0E1MjU3NUNFMDA1RjJCNDIzNTRF NEE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvNERDMjI4MjE4NkI2MjIxQTdBNTI1NzVDRTAwNUYy QjQyMzU0RTRBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMdXWne6X+oO8lNeaTuC76fyg4Wlmkmw6Qc+ jYqr7uC+CGE07eOfgKkSrxRmMyMZLTj0LW72AneE9S8mXETBnuOz01ktNezaCo17 SEY9yu07HbmE8YKbVyqqfgpLPNvb/pvGVWOBHx1EAO0OyaF1dBWf0b00SfDBLxIM Q86c6sQvL88JKHFH7zVrBMa3AlC5GODNcviiD8rPTiLy+J3dSjTW9jshsOqxJm+b 9yAEr6D0cy9DBCpT1vrUfPVLdRVEhYgvWZc3HF1okeUYIM6NC4kvhvE2OyEUHdZi VW+W6lPCgPgM+BRL4OKAeHEyyz3BTO9EJGfKVi8IakSPbgLIdAI= -----END CERTIFICATE-----Generated at Wed May 13 04:47:03 2026 by rpki-client