$ rpki-client -vvf rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft File: 4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft (raw, json) Hash identifier: xwUwihk885CQtHbiZ0QPFd8XdALFXg3QBVIppu2vVoc= Subject key identifier: F7:4A:01:2B:2F:90:D8:69:C6:75:D5:77:44:08:8D:DD:8A:E3:BB:30 Authority key identifier: 41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5 Certificate issuer: /CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5 Certificate serial: 455071D3F8DC0CA252EF9AD29346E59BF833CE88 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:59:25 +0000 Manifest this update: Tue 12 May 2026 07:54:25 +0000 Manifest next update: Wed 13 May 2026 09:44:25 +0000 Files and hashes: 1: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (hash: MIfS/eHMskBKSqBbwRfOeUTCESkdJmMT09TJQUGAcLg=) 2: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (hash: chcA0La2Ovm9yQOvdpAAt2EqYZMflbdwEaNV+8DJqdc=) 3: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (hash: t4tJtjdDpsJpFR/xtJD4ECgHePAHDWhC6e/Cj+1efek=) 4: 4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl (hash: X/ylUPCw4Ar/ftS/YmAsCLepj/CuEXYV89FVZM+sFP4=) 5: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (hash: ATgc6Id4lihO/sLAGAO1j7xGe/4awMhi2w1w0ztaLuU=) 6: 3130332e3231342e3233362e302f32342d3234203d3e20313335343339.roa (hash: dMqa0oYO4c22L7uxBboRe6E/5z9CmS2c9aynUToZXQs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:50:71:d3:f8:dc:0c:a2:52:ef:9a:d2:93:46:e5:9b:f8:33:ce:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5 Validity Not Before: May 12 07:54:25 2026 GMT Not After : May 13 09:44:25 2026 GMT Subject: CN=F74A012B2F90D869C675D57744088DDD8AE3BB30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:be:bd:09:ab:07:d8:e3:0e:3c:08:0b:16:e6: 32:7c:74:45:63:6c:e4:69:9d:c9:5e:de:0f:6c:4e: ad:c5:8b:b7:6f:6f:3a:f0:d7:aa:c6:8b:45:e7:f4: 18:08:1c:01:71:13:41:1b:77:3c:c4:c0:f8:dc:96: 3e:d0:7e:cd:84:9b:b7:49:96:a4:59:8e:40:ab:74: ed:1c:12:93:d7:5a:15:47:6e:fa:1f:e0:80:0f:15: b0:e1:5f:14:4a:73:f4:3b:9b:9a:74:a7:73:30:7f: 5f:72:10:b4:37:05:07:37:7f:b9:14:f7:b8:a1:0e: 4b:5c:75:b0:45:35:85:9c:fd:09:a0:72:6c:8e:a8: 8c:e5:98:b8:90:5a:05:f5:00:24:36:de:36:33:1a: c5:f7:23:5c:bf:dc:3d:04:ea:fc:32:77:c7:4a:22: 4e:dd:88:3e:93:35:8c:20:d3:3f:6e:43:e7:e9:04: d9:30:bd:13:9b:a7:b9:de:7b:d5:e7:5d:7d:7b:3a: 00:f3:75:e8:53:1c:af:13:0d:36:20:d1:21:c6:35: 9d:dc:b3:ac:fd:19:e3:b7:f9:57:0b:b5:e2:44:32: 93:eb:e1:19:a2:2f:89:1c:9d:be:02:2d:ac:c6:f0: 66:54:66:c8:14:82:cd:d1:b2:be:5d:aa:b4:b5:90: ac:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4A:01:2B:2F:90:D8:69:C6:75:D5:77:44:08:8D:DD:8A:E3:BB:30 X509v3 Authority Key Identifier: keyid:41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:cd:19:95:8a:01:f0:ad:cd:0f:7c:8a:8b:d9:a3:19:2e:cd: ca:59:1f:85:e2:53:6f:e2:bc:21:7f:ee:1b:b1:dd:f9:f8:20: 6a:08:d8:20:3f:2b:7f:73:20:67:d6:69:4c:87:d9:10:aa:b4: 31:82:b6:36:99:88:a3:ad:43:b0:e7:f6:db:96:f6:a9:ba:70: ba:75:c2:d3:e2:f6:43:7b:43:52:a9:b6:85:17:47:9a:66:e7: 33:88:e0:cd:6e:25:95:83:52:48:1f:fb:7a:16:e3:97:07:34: 0d:11:8e:19:66:71:95:eb:88:81:fa:0c:6e:9a:8e:1e:cb:14: 57:61:5a:89:ff:62:43:cf:8f:27:9a:64:87:f1:f9:42:90:5e: 11:67:df:44:b6:6f:86:bc:fc:48:2c:5c:cb:aa:45:52:a2:44: 42:5c:0f:59:13:bc:84:29:32:51:50:a8:54:fb:db:9e:41:72: 1e:41:97:a3:13:93:80:43:ea:8f:7c:0e:56:3f:2a:03:09:27: be:81:85:23:da:de:ca:a7:e4:7c:61:90:2b:27:9f:58:fd:d0: 37:0a:d2:c0:c4:70:94:3f:00:28:0c:ed:a3:68:5a:aa:c2:d2: d8:25:ba:31:33:57:62:87:0a:5d:19:b8:c6:4b:2a:d7:85:35: f7:40:9a:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURVBx0/jcDKJS75rSk0blm/gzzogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEzOEUwQUQ0NjQ2RDhCNUIxOTE2NDgxMzEwNUUyRUM3 QzVBQzRBNTAeFw0yNjA1MTIwNzU0MjVaFw0yNjA1MTMwOTQ0MjVaMDMxMTAvBgNV BAMTKEY3NEEwMTJCMkY5MEQ4NjlDNjc1RDU3NzQ0MDg4REREOEFFM0JCMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOvr0JqwfY4w48CAsW5jJ8dEVj bORpncle3g9sTq3Fi7dvbzrw16rGi0Xn9BgIHAFxE0EbdzzEwPjclj7Qfs2Em7dJ lqRZjkCrdO0cEpPXWhVHbvof4IAPFbDhXxRKc/Q7m5p0p3Mwf19yELQ3BQc3f7kU 97ihDktcdbBFNYWc/QmgcmyOqIzlmLiQWgX1ACQ23jYzGsX3I1y/3D0E6vwyd8dK Ik7diD6TNYwg0z9uQ+fpBNkwvRObp7nee9XnXX17OgDzdehTHK8TDTYg0SHGNZ3c s6z9GeO3+VcLteJEMpPr4RmiL4kcnb4CLazG8GZUZsgUgs3Rsr5dqrS1kKz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU90oBKy+Q2GnGddV3RAiN3YrjuzAwHwYDVR0j BBgwFoAUQTjgrUZG2LWxkWSBMQXi7HxaxKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2RlNzE0MzctODVmYy00N2FmLTk2ODctOTAzYmFmYjJjMTYxLzAvNDEzOEUwQUQ0 NjQ2RDhCNUIxOTE2NDgxMzEwNUUyRUM3QzVBQzRBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTM4RTBBRDQ2NDZEOEI1QjE5MTY0ODEzMTA1RTJFQzdDNUFD NEE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2RlNzE0MzctODVmYy00N2FmLTk2 ODctOTAzYmFmYjJjMTYxLzAvNDEzOEUwQUQ0NjQ2RDhCNUIxOTE2NDgxMzEwNUUy RUM3QzVBQzRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELNGZWKAfCtzQ98iovZoxkuzcpZH4XiU2/i vCF/7hux3fn4IGoI2CA/K39zIGfWaUyH2RCqtDGCtjaZiKOtQ7Dn9tuW9qm6cLp1 wtPi9kN7Q1KptoUXR5pm5zOI4M1uJZWDUkgf+3oW45cHNA0RjhlmcZXriIH6DG6a jh7LFFdhWon/YkPPjyeaZIfx+UKQXhFn30S2b4a8/EgsXMuqRVKiREJcD1kTvIQp MlFQqFT7255Bch5Bl6MTk4BD6o98DlY/KgMJJ76BhSPa3sqn5HxhkCsnn1j90DcK 0sDEcJQ/ACgM7aNoWqrC0tglujEzV2KHCl0ZuMZLKteFNfdAmgQ= -----END CERTIFICATE-----Generated at Wed May 13 02:37:44 2026 by rpki-client