$ rpki-client -vvf rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft File: 4AD757CB155CFF255FDEC1E6D09300FD55954787.mft (raw, json) Hash identifier: 8fuZB3c3vIkZ55VqbJIxFjzv6byZlifiUngT4hzOdlQ= Subject key identifier: 67:27:89:E5:32:BD:2F:DE:12:8B:51:C7:76:A6:A3:42:24:EB:35:A0 Authority key identifier: 4A:D7:57:CB:15:5C:FF:25:5F:DE:C1:E6:D0:93:00:FD:55:95:47:87 Certificate issuer: /CN=4AD757CB155CFF255FDEC1E6D09300FD55954787 Certificate serial: 16486DF950B9637500BA38B1E40CB4C14CE84011 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AD757CB155CFF255FDEC1E6D09300FD55954787.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:46:26 +0000 Manifest this update: Tue 12 May 2026 16:41:26 +0000 Manifest next update: Wed 13 May 2026 18:16:26 +0000 Files and hashes: 1: 3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa (hash: YQmR5xszR6XJTWjFcmbhXoD76oy0pbbqOdOUyAmXzbo=) 2: 4AD757CB155CFF255FDEC1E6D09300FD55954787.crl (hash: jwx5qifpwVwSr8dgrnevn7EGtbGLr0cVGRA69is3ECo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.crl rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AD757CB155CFF255FDEC1E6D09300FD55954787.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:48:6d:f9:50:b9:63:75:00:ba:38:b1:e4:0c:b4:c1:4c:e8:40:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AD757CB155CFF255FDEC1E6D09300FD55954787 Validity Not Before: May 12 16:41:26 2026 GMT Not After : May 13 18:16:26 2026 GMT Subject: CN=672789E532BD2FDE128B51C776A6A34224EB35A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:b7:42:76:e7:21:84:b9:1e:48:96:27:35: ad:01:53:c5:d8:4c:40:89:07:ea:15:38:c0:75:8a: af:5c:a8:7e:6f:55:07:d3:ab:f1:f4:ac:d1:2b:9c: 40:d7:34:c3:9e:27:f8:88:0d:0e:aa:d0:54:8b:35: 76:d1:a9:15:fe:82:fd:90:da:ed:4f:82:17:51:d6: ea:ef:2d:de:17:49:7e:ec:96:18:d9:fd:c4:a8:fa: 8d:a3:69:25:e9:de:ea:04:c2:47:d1:2e:58:be:64: a8:48:69:d3:d2:b0:7f:08:89:c4:1b:15:13:55:d7: b8:58:54:b5:4b:cb:3a:ad:4b:6e:d1:16:c8:24:db: 99:af:83:fd:fd:b2:7b:d6:ed:6f:aa:5d:e7:77:2b: a2:95:95:7a:be:4a:93:07:fb:60:67:3e:aa:86:94: 30:d1:1f:12:55:0e:7b:43:53:87:ae:70:ef:b5:9e: 5d:a6:22:55:86:35:87:6d:2e:ea:4a:52:6b:8b:17: 8e:25:47:8c:9c:3f:5f:31:90:8b:84:c6:bd:bb:b5: 1a:a5:93:28:4d:c0:84:7e:a2:2f:97:01:2e:c4:10: b3:bf:49:aa:17:15:5e:e9:89:e3:1a:2d:76:b6:c4: 40:fd:e6:fd:56:08:87:49:9f:56:91:b2:88:be:c3: a0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:27:89:E5:32:BD:2F:DE:12:8B:51:C7:76:A6:A3:42:24:EB:35:A0 X509v3 Authority Key Identifier: keyid:4A:D7:57:CB:15:5C:FF:25:5F:DE:C1:E6:D0:93:00:FD:55:95:47:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AD757CB155CFF255FDEC1E6D09300FD55954787.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:4e:b6:f9:0e:8f:ee:f6:92:f6:8a:bf:57:05:3a:4a:fc:b2: fe:60:ad:fa:0e:30:2e:d9:60:50:a0:08:82:07:81:31:bd:d1: f2:9e:09:6f:af:cc:e3:4a:2b:4b:41:1e:4e:a8:ce:fd:94:6c: 08:b7:f9:9e:b6:73:cb:a9:90:7f:af:86:96:01:0d:fd:05:06: 7d:6f:7f:41:20:7c:fa:8a:c2:be:a6:3a:d4:df:27:47:14:da: f9:5f:a9:8d:e1:fc:1e:69:b5:b9:fe:35:a4:bd:38:a8:61:07: b1:21:04:9c:84:1e:9f:1e:81:d0:88:e3:a7:47:46:6b:80:96: da:82:d5:f6:d8:ff:20:f2:1e:c2:0b:11:33:1d:1e:69:32:02: 85:6b:17:dd:b4:23:00:74:07:9c:4e:d1:60:6c:69:f8:12:ec: 22:38:41:11:4e:43:89:43:1b:48:72:9d:5e:16:c1:57:ce:19: 09:d7:ba:c8:73:47:5b:e8:2a:04:4c:ca:a2:76:3c:c4:d2:61: 9c:6a:7c:77:f1:30:fb:ce:22:1a:b6:12:da:08:b3:58:30:78: 1b:da:9e:21:77:90:7b:64:5f:81:02:91:29:24:a5:cc:fd:e5: ca:8f:92:6e:5c:4d:f5:0b:68:37:4f:ab:19:12:10:03:89:a2: b0:d5:bb:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFkht+VC5Y3UAujix5Ay0wUzoQBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFENzU3Q0IxNTVDRkYyNTVGREVDMUU2RDA5MzAwRkQ1 NTk1NDc4NzAeFw0yNjA1MTIxNjQxMjZaFw0yNjA1MTMxODE2MjZaMDMxMTAvBgNV BAMTKDY3Mjc4OUU1MzJCRDJGREUxMjhCNTFDNzc2QTZBMzQyMjRFQjM1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwrdCduchhLkeSJYnNa0BU8XY TECJB+oVOMB1iq9cqH5vVQfTq/H0rNErnEDXNMOeJ/iIDQ6q0FSLNXbRqRX+gv2Q 2u1PghdR1urvLd4XSX7slhjZ/cSo+o2jaSXp3uoEwkfRLli+ZKhIadPSsH8IicQb FRNV17hYVLVLyzqtS27RFsgk25mvg/39snvW7W+qXed3K6KVlXq+SpMH+2BnPqqG lDDRHxJVDntDU4eucO+1nl2mIlWGNYdtLupKUmuLF44lR4ycP18xkIuExr27tRql kyhNwIR+oi+XAS7EELO/SaoXFV7pieMaLXa2xED95v1WCIdJn1aRsoi+w6CvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZyeJ5TK9L94Si1HHdqajQiTrNaAwHwYDVR0j BBgwFoAUStdXyxVc/yVf3sHm0JMA/VWVR4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2RiNTlhMTAtNThkMC00NjJlLWIwOWItMTkxOWIxYzM1ZDcyLzAvNEFENzU3Q0Ix NTVDRkYyNTVGREVDMUU2RDA5MzAwRkQ1NTk1NDc4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUQ3NTdDQjE1NUNGRjI1NUZERUMxRTZEMDkzMDBGRDU1OTU0 Nzg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2RiNTlhMTAtNThkMC00NjJlLWIw OWItMTkxOWIxYzM1ZDcyLzAvNEFENzU3Q0IxNTVDRkYyNTVGREVDMUU2RDA5MzAw RkQ1NTk1NDc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGROtvkOj+72kvaKv1cFOkr8sv5grfoOMC7Z YFCgCIIHgTG90fKeCW+vzONKK0tBHk6ozv2UbAi3+Z62c8upkH+vhpYBDf0FBn1v f0EgfPqKwr6mOtTfJ0cU2vlfqY3h/B5ptbn+NaS9OKhhB7EhBJyEHp8egdCI46dH RmuAltqC1fbY/yDyHsILETMdHmkyAoVrF920IwB0B5xO0WBsafgS7CI4QRFOQ4lD G0hynV4WwVfOGQnXushzR1voKgRMyqJ2PMTSYZxqfHfxMPvOIhq2EtoIs1gweBva niF3kHtkX4ECkSkkpcz95cqPkm5cTfULaDdPqxkSEAOJorDVu6w= -----END CERTIFICATE-----Generated at Tue May 12 22:47:13 2026 by rpki-client