$ rpki-client -vvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft File: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft (raw, json) Hash identifier: P7uLpKlyHtJcKcSOT9QJ270eDr7qOMRSoiXeeZ0Nt08= Subject key identifier: 45:76:C6:12:A0:87:CE:E6:3E:3E:D7:81:6A:16:CA:1F:E7:79:F9:B0 Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 Certificate issuer: /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Certificate serial: 05A3DDDFAB65939058F346572D0A16AFEEFD16FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:13:25 +0000 Manifest this update: Tue 12 May 2026 18:08:25 +0000 Manifest next update: Wed 13 May 2026 18:37:25 +0000 Files and hashes: 1: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: g1I0bBx5cjAJOzumuYvYP7lbpo4MSyJWdm8CedSYPpI=) 2: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: q58scCW7sBCYqA/7Gndz9LKwymI96P89Wvy+Agpx7Mc=) 3: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: urgfoaYh1o6UsdX1mUmdbsm+CcX88/2KXBm9Z1HG15I=) 4: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: FpwgktK1DQqLal+31qD50dL+9IE6iqH71YHo/zowge0=) 5: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: 66aA75QUcB6PMDAVxPn0l4kedL6JSinUSrD/FjvLrOY=) 6: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: WalfT1mL5d9q2qz66c+NikOGnrlzK5PgkQomXo+2N10=) 7: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: W25/R8+HpdSmi7KzPEgroFOQ480UBFrJ5yvQhWXeJXQ=) 8: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: G52CYZhUDrFCUCiXjLaytTYVhllqOW5hgj+MEiJQrDA=) 9: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: IW6kFtW7lOTzfvLnRGitZxVOzbp+5ns5aGwVJLG1nQc=) 10: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: JSmaKD9Eb9InTbBwEjQnvpvNRxQcyoooyCEpIv/JUMs=) 11: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl (hash: JThi0ZOxQGIIHHtWEmYe1wSYX5u2mspmFD66nB6ECdo=) 12: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: F+gSAhyteOkmJD/CsnwawpfqMUKtHHVAzkHCqnUyAyI=) 13: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: 8L5+IN2jLctjeA6EMT3ij4Mxdk3Uel+Y6ekXcJbLdyM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a3:dd:df:ab:65:93:90:58:f3:46:57:2d:0a:16:af:ee:fd:16:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Validity Not Before: May 12 18:08:25 2026 GMT Not After : May 13 18:37:25 2026 GMT Subject: CN=4576C612A087CEE63E3ED7816A16CA1FE779F9B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d6:fc:f2:b6:a8:e4:f5:d7:3f:53:af:4a:b3: 18:67:53:55:a7:ba:27:9c:ce:0b:9c:4f:d4:0b:c2: 0c:98:23:4f:a6:82:b1:58:2c:e4:aa:1b:c7:94:2e: 85:e6:16:80:6f:a5:13:0d:ea:49:ea:58:c4:8a:93: 41:d6:8f:0e:06:53:f5:a5:4b:77:ea:fb:54:ae:50: 3d:23:d7:7d:2b:c3:6a:97:c8:f2:54:c1:c6:e3:a0: 65:ef:f9:09:53:1b:5b:d2:f4:04:93:fe:50:53:d3: 58:e8:59:ce:86:14:4d:5b:a0:34:40:df:70:ed:53: 25:cb:2f:82:57:b7:56:6b:ff:09:3b:90:e2:11:b9: 7f:4d:08:df:92:84:74:52:d4:a5:82:96:ef:55:e0: 02:4d:5b:86:6c:2e:c7:b9:0e:1c:97:7b:f3:ae:ff: f6:ca:e7:c4:c0:a6:97:39:00:36:04:8d:ec:d6:ce: 25:ea:df:9a:29:fd:9c:5e:30:50:c0:f1:0b:21:bf: ae:e4:a1:58:ca:4b:20:e7:03:de:bf:20:ed:72:0f: 86:27:61:f3:a1:db:4b:a7:a8:71:69:bd:fd:1b:6c: b1:42:b2:0a:61:31:e3:02:c1:d2:f4:50:05:b9:a4: 7b:02:a3:b1:8c:52:3b:71:92:79:6c:f7:2a:3b:dc: a4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:76:C6:12:A0:87:CE:E6:3E:3E:D7:81:6A:16:CA:1F:E7:79:F9:B0 X509v3 Authority Key Identifier: keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:04:73:a2:66:88:44:0b:20:ed:e6:71:1c:38:eb:2b:48:c3: e7:cd:c8:2e:ef:13:a2:ee:a5:61:2e:03:65:78:67:cf:58:3f: 54:69:b9:05:9c:48:f1:6c:45:d9:38:1f:b5:65:11:2e:21:b4: 15:77:ee:89:b9:dd:b0:78:d8:8f:c8:1c:da:b1:a6:84:f5:f8: 3d:a5:27:f1:75:e0:75:c9:22:7e:8c:7f:71:1a:60:7c:b9:db: ff:1f:d3:35:a8:c4:de:16:4d:e6:55:94:b3:eb:6c:25:56:3b: 13:b1:7e:82:03:6b:c6:a7:6a:6d:01:7e:53:88:e9:71:13:c5: e6:16:96:98:76:70:4e:9f:36:57:4e:4c:df:6a:d6:93:85:d5: 5f:04:33:74:84:64:c9:ac:ac:38:1c:5c:3c:9f:ca:fa:d2:cc: cc:7b:bb:55:65:0b:6b:2a:5e:29:12:22:e8:c2:df:8e:f6:c3: b5:ee:58:4b:81:03:c2:67:f3:f5:e2:fb:00:e2:ed:86:13:71: af:a7:63:6b:5c:99:38:8d:a1:e1:d9:82:32:93:cf:30:48:e2: 2c:97:8b:b9:9a:16:86:0e:72:ba:51:5e:0a:19:1b:cc:ae:7f: 67:ed:94:28:e0:6f:31:c8:a5:d2:c9:56:26:77:be:18:82:d0: 38:e5:7f:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBaPd36tlk5BY80ZXLQoWr+79Fv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3 NDI4MjA5MzAeFw0yNjA1MTIxODA4MjVaFw0yNjA1MTMxODM3MjVaMDMxMTAvBgNV BAMTKDQ1NzZDNjEyQTA4N0NFRTYzRTNFRDc4MTZBMTZDQTFGRTc3OUY5QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1vzytqjk9dc/U69KsxhnU1Wn uieczgucT9QLwgyYI0+mgrFYLOSqG8eULoXmFoBvpRMN6knqWMSKk0HWjw4GU/Wl S3fq+1SuUD0j130rw2qXyPJUwcbjoGXv+QlTG1vS9AST/lBT01joWc6GFE1boDRA 33DtUyXLL4JXt1Zr/wk7kOIRuX9NCN+ShHRS1KWClu9V4AJNW4ZsLse5DhyXe/Ou //bK58TAppc5ADYEjezWziXq35op/ZxeMFDA8Qshv67koVjKSyDnA96/IO1yD4Yn YfOh20unqHFpvf0bbLFCsgphMeMCwdL0UAW5pHsCo7GMUjtxknls9yo73KTtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURXbGEqCHzuY+PteBahbKH+d5+bAwHwYDVR0j BBgwFoAUTYyv7L8S73kvHv1yJ2fl/nQoIJMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU1NDAxNjQtM2Q0Ni00Nzk0LWJmNTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNC RjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3NDI4MjA5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDhDQUZFQ0JGMTJFRjc5MkYxRUZENzIyNzY3RTVGRTc0Mjgy MDkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU1NDAxNjQtM2Q0Ni00Nzk0LWJm NTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1 RkU3NDI4MjA5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEEc6JmiEQLIO3mcRw46ytIw+fNyC7vE6Lu pWEuA2V4Z89YP1RpuQWcSPFsRdk4H7VlES4htBV37om53bB42I/IHNqxpoT1+D2l J/F14HXJIn6Mf3EaYHy52/8f0zWoxN4WTeZVlLPrbCVWOxOxfoIDa8anam0BflOI 6XETxeYWlph2cE6fNldOTN9q1pOF1V8EM3SEZMmsrDgcXDyfyvrSzMx7u1VlC2sq XikSIujC3472w7XuWEuBA8Jn8/Xi+wDi7YYTca+nY2tcmTiNoeHZgjKTzzBI4iyX i7maFoYOcrpRXgoZG8yuf2ftlCjgbzHIpdLJViZ3vhiC0Djlf/s= -----END CERTIFICATE-----Generated at Wed May 13 00:34:15 2026 by rpki-client