$ rpki-client -vvf rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft File: 4958ACA345C7658A0DAF8E986F7577A772837161.mft (raw, json) Hash identifier: q76bsXShrq+YXFuW+6Ye17aMl1edRRo9ekrcwjfT8G8= Subject key identifier: F3:EF:3B:99:8F:80:23:D5:FE:86:73:CD:9B:D4:91:F9:28:28:3C:D5 Authority key identifier: 49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61 Certificate issuer: /CN=4958ACA345C7658A0DAF8E986F7577A772837161 Certificate serial: 33C89DD4D22BDF64334DFD3045EFBA04FCB6C66A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:45:18 +0000 Manifest this update: Tue 12 May 2026 15:40:18 +0000 Manifest next update: Wed 13 May 2026 19:12:18 +0000 Files and hashes: 1: 4958ACA345C7658A0DAF8E986F7577A772837161.crl (hash: 0LCufi+4xF/RSNGR7JVLDK1WFwA45JC+rp6um/IfjRw=) 2: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (hash: KtDrnG9lvgnRMSX5R+jeLWfcRpbu+ptwzkE+z8AdY3o=) 3: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (hash: HGbCMrvkn9HLdb/84AEUgwBryTJVzNaclVbYnTuUOj0=) 4: 3130332e3137392e36342e302f32342d3234203d3e20313439333335.roa (hash: ERSYk3hZf9PVzWt1WH0Bk7NUbuFdmrm4ZK2jNR3DM5g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c8:9d:d4:d2:2b:df:64:33:4d:fd:30:45:ef:ba:04:fc:b6:c6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4958ACA345C7658A0DAF8E986F7577A772837161 Validity Not Before: May 12 15:40:18 2026 GMT Not After : May 13 19:12:18 2026 GMT Subject: CN=F3EF3B998F8023D5FE8673CD9BD491F928283CD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b9:a6:97:ac:44:0b:56:0f:ef:99:b0:d8:d3: 38:6e:5a:37:f2:f2:44:32:88:bf:62:7e:82:6b:0d: 5d:a4:30:17:7e:92:1a:5c:fd:5a:db:d4:9f:cb:3e: 5c:76:d7:63:81:ea:23:6b:b9:0d:da:94:02:01:1d: ab:66:dc:cf:15:b9:2f:8b:ab:76:cb:56:47:2d:20: 72:9d:50:8e:79:97:8f:4e:39:ec:e2:ce:88:6f:b0: 26:17:71:e7:bc:86:95:74:9a:72:6f:0e:6a:5d:ee: 60:85:7b:c2:96:4c:37:3d:13:c1:ba:af:84:1b:32: 54:66:ae:87:b4:58:a5:4b:9c:5e:12:58:cb:d6:cb: 33:48:79:3e:25:16:34:7e:85:de:c4:df:05:46:77: ab:bb:e2:2c:67:3c:e7:57:d8:46:2a:a4:97:b0:2e: 39:39:db:a2:e5:93:6e:76:07:16:30:f2:4c:63:0f: 1b:01:47:9b:e0:af:ea:65:99:65:1e:a0:a6:45:ab: 36:9c:bf:b0:a4:f7:8d:71:c2:77:c5:30:38:23:5e: 9a:b0:61:a8:b0:d2:fd:ab:07:cf:aa:d2:69:35:a3: 80:ad:4b:55:df:69:41:96:dd:0e:7e:f7:e6:49:b0: 14:ce:d1:5b:56:02:ea:99:4c:42:06:45:61:a1:50: 83:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EF:3B:99:8F:80:23:D5:FE:86:73:CD:9B:D4:91:F9:28:28:3C:D5 X509v3 Authority Key Identifier: keyid:49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:aa:9e:c7:99:74:15:94:b6:61:e9:76:de:40:8b:37:ff:cc: 57:85:a8:d0:de:49:ba:eb:80:a8:4b:56:81:5d:1c:d9:54:ae: 22:2f:23:dc:9a:12:43:fd:eb:8c:10:3a:a0:87:ec:47:2d:e8: 80:2d:31:81:65:f1:a4:ba:7c:e2:49:19:bd:b2:94:06:2e:26: f2:50:41:0c:d9:1b:a7:49:f1:ea:11:33:94:be:f2:28:a5:ac: ef:53:5e:8b:d3:56:b7:af:d3:35:f8:c2:dc:fe:03:6b:0b:c9: 3a:f8:56:c1:26:64:55:8e:1d:33:d6:47:85:82:33:4c:8e:f4: db:6f:b1:c8:4d:30:e6:f0:7e:b3:50:e9:c3:0b:14:33:c9:e9: 6a:5d:e1:c3:48:cf:ce:91:82:19:4b:84:5d:06:87:cb:55:48: 00:7a:ea:34:5a:65:83:64:d1:b0:46:3b:44:e1:fd:2d:d2:f9: ef:60:9a:a5:16:fb:b2:07:ae:30:b9:15:80:55:17:24:2b:ad: 0d:e6:50:2f:f0:90:65:cc:71:a2:71:ed:bc:24:e3:05:de:ed: 72:76:6f:c2:62:63:e6:f1:59:c2:0b:00:30:52:6a:44:d6:7a: b2:6f:94:9b:ae:38:06:b1:36:a2:6e:20:4b:18:d0:37:82:40: 9d:15:51:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM8id1NIr32QzTf0wRe+6BPy2xmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1OEFDQTM0NUM3NjU4QTBEQUY4RTk4NkY3NTc3QTc3 MjgzNzE2MTAeFw0yNjA1MTIxNTQwMThaFw0yNjA1MTMxOTEyMThaMDMxMTAvBgNV BAMTKEYzRUYzQjk5OEY4MDIzRDVGRTg2NzNDRDlCRDQ5MUY5MjgyODNDRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwuaaXrEQLVg/vmbDY0zhuWjfy 8kQyiL9ifoJrDV2kMBd+khpc/Vrb1J/LPlx212OB6iNruQ3alAIBHatm3M8VuS+L q3bLVkctIHKdUI55l49OOezizohvsCYXcee8hpV0mnJvDmpd7mCFe8KWTDc9E8G6 r4QbMlRmroe0WKVLnF4SWMvWyzNIeT4lFjR+hd7E3wVGd6u74ixnPOdX2EYqpJew Ljk526Llk252BxYw8kxjDxsBR5vgr+plmWUeoKZFqzacv7Ck941xwnfFMDgjXpqw Yaiw0v2rB8+q0mk1o4CtS1XfaUGW3Q5+9+ZJsBTO0VtWAuqZTEIGRWGhUINlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8+87mY+AI9X+hnPNm9SR+SgoPNUwHwYDVR0j BBgwFoAUSViso0XHZYoNr46Yb3V3p3KDcWEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc3ZGUwMTMtOWI1Ni00OWZmLThiNzktMzY2N2EzNDVjYjhkLzAvNDk1OEFDQTM0 NUM3NjU4QTBEQUY4RTk4NkY3NTc3QTc3MjgzNzE2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTU4QUNBMzQ1Qzc2NThBMERBRjhFOTg2Rjc1NzdBNzcyODM3 MTYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc3ZGUwMTMtOWI1Ni00OWZmLThi NzktMzY2N2EzNDVjYjhkLzAvNDk1OEFDQTM0NUM3NjU4QTBEQUY4RTk4NkY3NTc3 QTc3MjgzNzE2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmqnseZdBWUtmHpdt5Aizf/zFeFqNDeSbrr gKhLVoFdHNlUriIvI9yaEkP964wQOqCH7Ect6IAtMYFl8aS6fOJJGb2ylAYuJvJQ QQzZG6dJ8eoRM5S+8iilrO9TXovTVrev0zX4wtz+A2sLyTr4VsEmZFWOHTPWR4WC M0yO9NtvschNMObwfrNQ6cMLFDPJ6Wpd4cNIz86RghlLhF0Gh8tVSAB66jRaZYNk 0bBGO0Th/S3S+e9gmqUW+7IHrjC5FYBVFyQrrQ3mUC/wkGXMcaJx7bwk4wXe7XJ2 b8JiY+bxWcILADBSakTWerJvlJuuOAaxNqJuIEsY0DeCQJ0VUTE= -----END CERTIFICATE-----Generated at Tue May 12 22:19:35 2026 by rpki-client