$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft File: 4E0311031DBA1471A97F3183416162430EA78405.mft (raw, json) Hash identifier: ELww/2bdbi1Pmulsr0+TLzIsBQlqKdwWNNeh46NkBIs= Subject key identifier: 9D:85:9A:59:6E:85:AD:A3:4F:F0:75:93:35:CD:48:CC:A1:F5:22:18 Authority key identifier: 4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05 Certificate issuer: /CN=4E0311031DBA1471A97F3183416162430EA78405 Certificate serial: 565E77F502499845C337E61BA3429A8E1A44409F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:53:08 +0000 Manifest this update: Tue 12 May 2026 23:48:08 +0000 Manifest next update: Thu 14 May 2026 01:41:08 +0000 Files and hashes: 1: 4E0311031DBA1471A97F3183416162430EA78405.crl (hash: 9QNGj3UtRJi6Ya+h0ZXWSpC+jBrNCgFxOS8BWNTDvu0=) 2: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: EeoLX1eQr3kbHp2go87fzfWuIm2QGRQurIS8zg4rg8k=) 3: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: 45DsIwwkRRpg5bWvzaG3sx/NMYDeJXNq0PjvKzltS2I=) 4: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: LCoG5MBtVr1gnp0Cb9QG4F/kZ9BcJIu/HLJgqKdyZtQ=) 5: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: kBF7Opi92U9hs5gCPj1VpLoXTbkOV0WaW1UNm3qxyr8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5e:77:f5:02:49:98:45:c3:37:e6:1b:a3:42:9a:8e:1a:44:40:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E0311031DBA1471A97F3183416162430EA78405 Validity Not Before: May 12 23:48:08 2026 GMT Not After : May 14 01:41:08 2026 GMT Subject: CN=9D859A596E85ADA34FF0759335CD48CCA1F52218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:77:f2:be:d4:cf:a3:6d:b6:46:8e:1b:b6:31: 89:d2:be:ba:46:b5:e6:3e:ad:3c:d0:36:9a:ef:09: 10:28:9d:26:86:f2:3a:7d:58:04:c5:90:a3:7a:89: 6a:b2:00:d2:85:52:92:e7:5e:72:32:bf:a3:c4:69: 05:f0:a8:d4:0f:7d:d6:53:7c:82:e9:da:ab:aa:cd: 62:55:0b:ba:6b:43:88:2e:92:34:b1:d9:bb:4f:b5: ae:a2:6f:b6:4b:d0:64:e2:ad:28:17:22:29:bf:50: 25:dc:77:81:0c:df:1d:bc:93:a1:43:84:3b:6a:86: 0b:15:a1:9e:37:83:89:5c:3c:2c:ea:57:a7:2d:bf: 72:17:19:36:53:a5:1a:07:b7:d7:d3:d0:75:3d:1c: 25:17:55:3c:03:15:07:de:df:1b:a2:49:81:d1:83: b4:fc:4d:be:8d:e4:ce:43:13:b8:cd:c6:ce:2e:c9: 60:0e:12:e9:25:66:fe:88:38:34:4f:5c:80:13:d6: 57:3f:cc:4f:b8:af:44:56:83:83:9e:f1:e5:07:70: ff:d8:37:63:32:d5:7a:c5:32:83:1a:5d:76:9f:1e: f8:83:de:25:70:29:7e:60:51:ef:69:2c:bb:d6:13: 9f:9b:c7:20:76:f7:15:bf:54:fe:9d:03:3d:3c:3e: 4c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:85:9A:59:6E:85:AD:A3:4F:F0:75:93:35:CD:48:CC:A1:F5:22:18 X509v3 Authority Key Identifier: keyid:4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e6:df:33:b1:a3:c0:7f:57:4a:cd:84:27:c0:d2:3b:83:40: ff:7e:d8:da:08:62:1a:d8:05:36:b3:90:46:f6:5e:ac:f1:cb: c8:9c:7b:80:1f:57:c8:b7:7f:b4:9e:6e:cd:e4:a5:49:70:ea: 00:19:1d:3e:c5:d3:a8:eb:73:6b:c2:18:f9:17:b2:90:f9:43: 93:8c:2b:34:57:1c:ef:ff:50:b0:8e:b9:6c:6e:d2:12:18:c8: 34:54:e0:7c:52:12:f3:71:91:c3:da:44:66:9e:89:3c:bc:ff: d8:f8:5a:20:bb:ad:ef:44:37:8b:38:a0:67:71:70:a2:91:fc: 9d:90:f9:42:62:b3:c5:0b:52:90:37:eb:68:af:df:3a:db:79: 74:df:4e:08:04:d9:23:22:e0:8d:7f:e3:63:13:31:52:23:44: 2f:55:8c:8e:73:34:76:2b:87:9a:89:30:07:5d:5e:bd:35:8b: 84:6f:73:42:5c:47:fb:b5:c0:5c:da:f6:9e:87:4e:89:ca:46: 4f:f2:c1:7f:71:a0:8c:67:b5:b4:a4:43:33:72:c6:d0:d4:b9: 2e:11:82:05:0c:8f:84:f2:28:d9:44:f1:b6:98:7f:41:7b:32: 84:6d:52:7f:17:22:68:e2:ba:71:46:8e:02:a2:f4:26:2d:fe: 81:91:74:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVl539QJJmEXDN+Ybo0KajhpEQJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMzExMDMxREJBMTQ3MUE5N0YzMTgzNDE2MTYyNDMw RUE3ODQwNTAeFw0yNjA1MTIyMzQ4MDhaFw0yNjA1MTQwMTQxMDhaMDMxMTAvBgNV BAMTKDlEODU5QTU5NkU4NUFEQTM0RkYwNzU5MzM1Q0Q0OENDQTFGNTIyMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnd/K+1M+jbbZGjhu2MYnSvrpG teY+rTzQNprvCRAonSaG8jp9WATFkKN6iWqyANKFUpLnXnIyv6PEaQXwqNQPfdZT fILp2quqzWJVC7prQ4gukjSx2btPta6ib7ZL0GTirSgXIim/UCXcd4EM3x28k6FD hDtqhgsVoZ43g4lcPCzqV6ctv3IXGTZTpRoHt9fT0HU9HCUXVTwDFQfe3xuiSYHR g7T8Tb6N5M5DE7jNxs4uyWAOEuklZv6IODRPXIAT1lc/zE+4r0RWg4Oe8eUHcP/Y N2My1XrFMoMaXXafHviD3iVwKX5gUe9pLLvWE5+bxyB29xW/VP6dAz08PkxnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnYWaWW6FraNP8HWTNc1IzKH1IhgwHwYDVR0j BBgwFoAUTgMRAx26FHGpfzGDQWFiQw6nhAUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E4YjU0ZTYtMTAxNS00OGViLTliYmQtNTFjMTZjZDQ1NDQ1LzAvNEUwMzExMDMx REJBMTQ3MUE5N0YzMTgzNDE2MTYyNDMwRUE3ODQwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTAzMTEwMzFEQkExNDcxQTk3RjMxODM0MTYxNjI0MzBFQTc4 NDA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvNEUwMzExMDMxREJBMTQ3MUE5N0YzMTgzNDE2MTYy NDMwRUE3ODQwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLm3zOxo8B/V0rNhCfA0juDQP9+2NoIYhrY BTazkEb2Xqzxy8ice4AfV8i3f7Sebs3kpUlw6gAZHT7F06jrc2vCGPkXspD5Q5OM KzRXHO//ULCOuWxu0hIYyDRU4HxSEvNxkcPaRGaeiTy8/9j4WiC7re9EN4s4oGdx cKKR/J2Q+UJis8ULUpA362iv3zrbeXTfTggE2SMi4I1/42MTMVIjRC9VjI5zNHYr h5qJMAddXr01i4Rvc0JcR/u1wFza9p6HTonKRk/ywX9xoIxntbSkQzNyxtDUuS4R ggUMj4TyKNlE8baYf0F7MoRtUn8XImjiunFGjgKi9CYt/oGRdIo= -----END CERTIFICATE-----Generated at Wed May 13 08:00:11 2026 by rpki-client