$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft File: 4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft (raw, json) Hash identifier: mxnzOUL8Jq9XAhMNYbFr9Zh5xanr3n9mQSyULi3vKPk= Subject key identifier: C5:E1:6C:53:38:CF:F3:BE:BF:50:C5:6C:CF:94:B1:69:7C:47:05:4E Authority key identifier: 4F:C4:8D:D4:A0:4D:6F:39:93:1A:F1:E8:DE:E3:5A:BD:F9:C7:76:FA Certificate issuer: /CN=4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA Certificate serial: 4C06D55B3207C465142F15B1365CE575F703A884 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:52:56 +0000 Manifest this update: Tue 12 May 2026 17:47:56 +0000 Manifest next update: Wed 13 May 2026 18:38:56 +0000 Files and hashes: 1: 4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl (hash: MU8WrmszwhRCDqSN1mvG8tOie9FW1qhhI4gPa5zWS7U=) 2: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (hash: H/rwQ/f8aUBtc58OK4kWZL1DduHZ4X5rHCUaLkdQAjM=) 3: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (hash: Y5XB9rqhcbsV9IQfUbYmWZisnqag3EEZWqXjsPcCSU4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:06:d5:5b:32:07:c4:65:14:2f:15:b1:36:5c:e5:75:f7:03:a8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA Validity Not Before: May 12 17:47:56 2026 GMT Not After : May 13 18:38:56 2026 GMT Subject: CN=C5E16C5338CFF3BEBF50C56CCF94B1697C47054E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:48:9f:a2:97:a2:dc:2f:49:91:16:c2:6d:fb: 0a:76:95:7e:4b:e3:2c:65:c8:62:ab:e9:14:75:4c: 58:23:86:41:2c:13:f9:0a:5f:0a:d9:a1:7f:c3:cc: 1b:c1:3d:00:eb:80:cc:ee:68:94:c7:57:33:8c:cc: 8b:c4:3c:9a:7e:2e:59:15:9c:4c:38:92:0f:95:f0: 28:d3:94:f9:97:90:74:11:ae:a4:ed:b1:a3:32:aa: 2e:01:6d:01:7e:66:32:48:30:3f:0b:65:be:45:68: bc:6b:89:06:3d:88:c2:31:50:08:8f:62:04:16:cf: d7:7e:3c:97:31:7d:9b:1d:b5:24:69:59:22:2b:a5: 26:7a:1c:25:41:d5:bf:0a:74:e4:69:48:64:8e:15: 59:cf:54:24:38:42:d9:ac:da:1d:23:88:21:67:f5: 95:0f:47:89:bb:81:76:7a:b8:91:87:d0:de:0b:6b: 99:d2:c2:14:5e:bc:44:48:7d:c5:72:af:5c:3e:bb: 65:18:e3:1e:8d:fe:d8:8f:97:90:0f:d1:63:ea:00: f0:4b:d6:64:5b:c5:8f:fb:87:a2:8c:2d:4a:52:16: 47:ca:86:d3:fd:53:67:a5:13:4a:67:13:5b:3a:53: c7:5c:20:b4:5e:4f:8e:aa:be:a9:36:c1:2c:e3:c2: 9b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E1:6C:53:38:CF:F3:BE:BF:50:C5:6C:CF:94:B1:69:7C:47:05:4E X509v3 Authority Key Identifier: keyid:4F:C4:8D:D4:A0:4D:6F:39:93:1A:F1:E8:DE:E3:5A:BD:F9:C7:76:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d9:20:e4:6b:e7:9a:12:c7:89:45:b7:22:42:41:b4:c2:54: 09:f3:03:08:c1:9e:d7:7d:23:56:3b:2d:59:7c:f1:e3:1f:ef: 69:53:04:f9:14:41:28:c1:38:a7:7c:ff:92:ac:73:cb:71:22: a4:d8:73:0d:56:86:f8:3c:64:3a:f7:5c:be:30:97:a8:52:8f: cb:57:79:90:9e:98:e6:19:8a:8c:57:75:18:98:1e:9c:d5:ae: b7:9a:9e:08:1b:c1:c6:0a:d7:e7:24:80:2f:64:9d:5b:0b:2a: e3:6a:96:56:35:40:8a:47:da:d5:8a:9f:b1:96:2a:af:29:da: d0:a3:56:8c:4b:fc:88:9d:a4:75:f8:bb:35:48:93:4a:36:55: 74:36:bc:3c:fb:d0:58:02:65:f0:84:63:3d:fa:72:4d:8b:44: b5:29:ce:48:4c:29:c4:9d:ae:7f:9e:ce:84:1b:9f:67:95:cf: f8:d6:61:35:93:87:d5:9a:ba:c4:f7:c6:0c:12:31:4f:db:98: 28:32:24:01:b3:5d:53:51:8a:7c:aa:6a:c2:74:22:af:69:a1: 5b:6a:7f:98:60:84:01:2e:be:ed:13:a1:22:8c:f2:fc:40:fb: e4:a6:c7:ad:fc:3f:e4:06:c3:ae:ff:d2:c1:e8:cc:3c:2c:db: 91:59:4f:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTAbVWzIHxGUULxWxNlzldfcDqIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDNDhERDRBMDRENkYzOTkzMUFGMUU4REVFMzVBQkRG OUM3NzZGQTAeFw0yNjA1MTIxNzQ3NTZaFw0yNjA1MTMxODM4NTZaMDMxMTAvBgNV BAMTKEM1RTE2QzUzMzhDRkYzQkVCRjUwQzU2Q0NGOTRCMTY5N0M0NzA1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuSJ+il6LcL0mRFsJt+wp2lX5L 4yxlyGKr6RR1TFgjhkEsE/kKXwrZoX/DzBvBPQDrgMzuaJTHVzOMzIvEPJp+LlkV nEw4kg+V8CjTlPmXkHQRrqTtsaMyqi4BbQF+ZjJIMD8LZb5FaLxriQY9iMIxUAiP YgQWz9d+PJcxfZsdtSRpWSIrpSZ6HCVB1b8KdORpSGSOFVnPVCQ4Qtms2h0jiCFn 9ZUPR4m7gXZ6uJGH0N4La5nSwhRevERIfcVyr1w+u2UY4x6N/tiPl5AP0WPqAPBL 1mRbxY/7h6KMLUpSFkfKhtP9U2elE0pnE1s6U8dcILReT46qvqk2wSzjwpt1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxeFsUzjP876/UMVsz5SxaXxHBU4wHwYDVR0j BBgwFoAUT8SN1KBNbzmTGvHo3uNavfnHdvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2IwMWM5NjctOTlkMC00YzIxLTk2NDItODdhZGE2NzE1NWM4LzAvNEZDNDhERDRB MDRENkYzOTkzMUFGMUU4REVFMzVBQkRGOUM3NzZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkM0OERENEEwNEQ2RjM5OTMxQUYxRThERUUzNUFCREY5Qzc3 NkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2IwMWM5NjctOTlkMC00YzIxLTk2 NDItODdhZGE2NzE1NWM4LzAvNEZDNDhERDRBMDRENkYzOTkzMUFGMUU4REVFMzVB QkRGOUM3NzZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/ZIORr55oSx4lFtyJCQbTCVAnzAwjBntd9 I1Y7LVl88eMf72lTBPkUQSjBOKd8/5Ksc8txIqTYcw1Whvg8ZDr3XL4wl6hSj8tX eZCemOYZioxXdRiYHpzVrreanggbwcYK1+ckgC9knVsLKuNqllY1QIpH2tWKn7GW Kq8p2tCjVoxL/IidpHX4uzVIk0o2VXQ2vDz70FgCZfCEYz36ck2LRLUpzkhMKcSd rn+ezoQbn2eVz/jWYTWTh9WausT3xgwSMU/bmCgyJAGzXVNRinyqasJ0Iq9poVtq f5hghAEuvu0ToSKM8vxA++Smx638P+QGw67/0sHozDws25FZTzo= -----END CERTIFICATE-----Generated at Tue May 12 22:46:31 2026 by rpki-client