$ rpki-client -vvf rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft File: 0453EE44B6298E574434A213BFD59854FBBC1AC9.mft (raw, json) Hash identifier: k0I8m1c4UNew3MlVe3q3nQ1CD/eTqfnWCNIUVFjSbDM= Subject key identifier: F2:16:EB:8C:CC:79:A3:33:E5:BD:C7:A2:28:AE:99:4C:D2:EF:8B:A1 Authority key identifier: 04:53:EE:44:B6:29:8E:57:44:34:A2:13:BF:D5:98:54:FB:BC:1A:C9 Certificate issuer: /CN=0453EE44B6298E574434A213BFD59854FBBC1AC9 Certificate serial: 33F5018FFB31F1A61A8A4034B31EC3F45EFF284A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0453EE44B6298E574434A213BFD59854FBBC1AC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft Manifest number: 0F Signing time: Wed 13 May 2026 01:45:44 +0000 Manifest this update: Wed 13 May 2026 01:40:44 +0000 Manifest next update: Thu 14 May 2026 02:58:44 +0000 Files and hashes: 1: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: HWOy6TZ8QT68FcB2BCMFfmYX+XsnVwiXZ6wBXEIZ6YM=) 2: 0453EE44B6298E574434A213BFD59854FBBC1AC9.crl (hash: nicq9p6z0f6Fo1ObEv4K1H/tG3My6Jl7QpvmDiYTf4A=) 3: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: 7NlmtYXZ6oozA3ARYN5xU0ZSurydVsw5V4omrofalOI=) 4: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: 9cSUjwh9z6+6ZJ3LgshkbKPWLwwzg4ImlK/YQG0hafg=) 5: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: cIZPGEVWJFWOc4kuja4Zgt6H/ILhtTMjLdnFHfcUoyY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.crl rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0453EE44B6298E574434A213BFD59854FBBC1AC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f5:01:8f:fb:31:f1:a6:1a:8a:40:34:b3:1e:c3:f4:5e:ff:28:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0453EE44B6298E574434A213BFD59854FBBC1AC9 Validity Not Before: May 13 01:40:44 2026 GMT Not After : May 14 02:58:44 2026 GMT Subject: CN=F216EB8CCC79A333E5BDC7A228AE994CD2EF8BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c8:2e:6a:74:ce:67:e5:eb:48:cd:32:06:8f: a4:52:32:d5:3c:0e:e9:c8:de:af:23:76:90:18:e0: 6f:e7:cc:11:72:8e:55:a6:f0:d2:5a:00:e6:9b:de: 6b:63:1f:06:7a:42:04:83:34:99:42:f1:6d:00:82: 8b:fe:94:be:ed:d5:58:e5:d3:1c:00:1f:89:df:f6: 92:92:9a:7a:3e:a3:70:8a:e2:b6:8c:9f:ac:fb:fb: 29:c0:13:32:f7:55:0d:2b:a1:9f:bf:07:fd:cf:16: f3:82:6d:d0:f5:71:86:d8:53:74:36:45:34:51:eb: 47:8d:44:ba:e6:a6:52:f5:57:4b:f8:ee:d1:35:5a: 7c:f0:d7:ce:1c:6b:8e:9a:16:04:9d:e8:55:14:7a: 8a:7a:92:2a:32:ab:e5:10:d3:71:23:d3:30:82:24: 17:ae:e7:61:5c:1f:ca:ad:8d:cc:80:79:a3:28:7f: df:2a:06:d6:a0:1d:a4:4d:ed:de:12:ec:29:28:d9: 75:2d:06:20:08:9c:2a:9a:12:c0:50:e9:54:ec:ca: f9:b9:a9:97:b7:e8:48:03:bf:2d:e2:f3:25:64:42: 8a:01:ea:82:bb:df:45:de:52:24:6f:66:a4:3d:15: 3d:db:d1:63:93:31:cc:ae:c3:28:94:e4:b3:ee:e2: 85:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:16:EB:8C:CC:79:A3:33:E5:BD:C7:A2:28:AE:99:4C:D2:EF:8B:A1 X509v3 Authority Key Identifier: keyid:04:53:EE:44:B6:29:8E:57:44:34:A2:13:BF:D5:98:54:FB:BC:1A:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0453EE44B6298E574434A213BFD59854FBBC1AC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:04:86:52:79:41:a8:10:f5:0a:ad:0e:fb:c8:82:ba:4f:09: 50:b0:ae:dc:cc:fe:b7:b3:95:f7:b4:1a:df:1d:91:5e:e0:c9: 93:fd:aa:3b:0a:ba:3d:c4:7a:c7:d3:9c:45:ad:99:77:14:83: 6a:33:c4:eb:d2:22:ee:b3:22:b3:c2:6d:42:c0:ec:f9:7a:6a: 89:89:cf:c3:fa:9d:40:1c:04:87:6a:7a:57:be:35:0d:ba:a4: ce:5b:c0:f0:93:0d:69:23:9f:0d:2f:63:9c:0f:d7:5f:25:6f: 69:69:41:bb:05:c2:8d:5b:3d:ac:ce:a3:3c:d0:08:f9:42:a6: 6f:24:62:7f:02:d1:db:be:41:39:05:fc:0b:99:1d:dd:a9:b4: ed:92:30:ff:8c:9e:b9:87:2d:2d:ef:66:87:7d:31:8a:8b:41: 11:d2:b1:09:75:59:6f:5d:ad:13:cd:f9:2c:43:8b:7f:b4:fd: ec:aa:fa:e8:4d:14:3d:82:e9:57:36:e2:07:a1:9a:e4:f5:7a: f4:82:85:53:1a:6a:1c:14:e2:14:c0:14:4b:fc:b8:5c:78:a8: 77:c0:0f:1f:d1:72:f5:5b:30:31:93:3b:7c:fc:91:be:3f:be: 9e:fd:8b:95:41:89:b3:88:be:2d:f1:be:a4:42:be:78:d2:59: b7:b1:ae:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/UBj/sx8aYaikA0sx7D9F7/KEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1M0VFNDRCNjI5OEU1NzQ0MzRBMjEzQkZENTk4NTRG QkJDMUFDOTAeFw0yNjA1MTMwMTQwNDRaFw0yNjA1MTQwMjU4NDRaMDMxMTAvBgNV BAMTKEYyMTZFQjhDQ0M3OUEzMzNFNUJEQzdBMjI4QUU5OTRDRDJFRjhCQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKyC5qdM5n5etIzTIGj6RSMtU8 DunI3q8jdpAY4G/nzBFyjlWm8NJaAOab3mtjHwZ6QgSDNJlC8W0Agov+lL7t1Vjl 0xwAH4nf9pKSmno+o3CK4raMn6z7+ynAEzL3VQ0roZ+/B/3PFvOCbdD1cYbYU3Q2 RTRR60eNRLrmplL1V0v47tE1Wnzw184ca46aFgSd6FUUeop6kioyq+UQ03Ej0zCC JBeu52FcH8qtjcyAeaMof98qBtagHaRN7d4S7Cko2XUtBiAInCqaEsBQ6VTsyvm5 qZe36EgDvy3i8yVkQooB6oK730XeUiRvZqQ9FT3b0WOTMcyuwyiU5LPu4oVfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8hbrjMx5ozPlvceiKK6ZTNLvi6EwHwYDVR0j BBgwFoAUBFPuRLYpjldENKITv9WYVPu8GskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzU3YjkwY2ItOGViZC00YzdiLThjMzEtMTMzYThiNGVkNjljLzAvMDQ1M0VFNDRC NjI5OEU1NzQ0MzRBMjEzQkZENTk4NTRGQkJDMUFDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDUzRUU0NEI2Mjk4RTU3NDQzNEEyMTNCRkQ1OTg1NEZCQkMx QUM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvMDQ1M0VFNDRCNjI5OEU1NzQ0MzRBMjEzQkZENTk4 NTRGQkJDMUFDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsEhlJ5QagQ9QqtDvvIgrpPCVCwrtzM/rez lfe0Gt8dkV7gyZP9qjsKuj3EesfTnEWtmXcUg2ozxOvSIu6zIrPCbULA7Pl6aomJ z8P6nUAcBIdqele+NQ26pM5bwPCTDWkjnw0vY5wP118lb2lpQbsFwo1bPazOozzQ CPlCpm8kYn8C0du+QTkF/AuZHd2ptO2SMP+MnrmHLS3vZod9MYqLQRHSsQl1WW9d rRPN+SxDi3+0/eyq+uhNFD2C6Vc24gehmuT1evSChVMaahwU4hTAFEv8uFx4qHfA Dx/RcvVbMDGTO3z8kb4/vp79i5VBibOIvi3xvqRCvnjSWbexrp4= -----END CERTIFICATE-----Generated at Wed May 13 04:09:38 2026 by rpki-client