$ rpki-client -vvf rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft File: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft (raw, json) Hash identifier: q+2iO+e4Nj8a5ieCX7vBso/ucart7ToDPfJXdUQWgM8= Subject key identifier: 99:B0:B6:8E:22:5F:E7:55:D4:96:C8:5B:B7:CF:45:02:39:2D:3D:0C Authority key identifier: 4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B Certificate issuer: /CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Certificate serial: 37FEC5443EC86FDBEB74154024D73C1899344F40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:41:15 +0000 Manifest this update: Tue 12 May 2026 16:36:15 +0000 Manifest next update: Wed 13 May 2026 18:29:15 +0000 Files and hashes: 1: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: RcYrOS6rHRHWdeyezVsL3GaabN57kfPwCIDe/5oYbMs=) 2: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: IlV0vgNjpTuApXjZnZRsOZX0dY/TDSqULrpC6FIi3II=) 3: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: 7ql88/IJdY/aWaZ2NP20wpbVy2vo7/DTiipCEcxNsYM=) 4: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl (hash: j3pXpF1YrMPrfWsrXEIF4of/9c9SAYV6ZCRohuZBWPE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:fe:c5:44:3e:c8:6f:db:eb:74:15:40:24:d7:3c:18:99:34:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Validity Not Before: May 12 16:36:15 2026 GMT Not After : May 13 18:29:15 2026 GMT Subject: CN=99B0B68E225FE755D496C85BB7CF4502392D3D0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:39:b3:1e:a3:1e:76:36:ab:ef:85:ee:fc:cc: e7:a2:26:5e:28:8f:47:d6:14:cb:c6:d2:8c:fe:4e: 1a:0d:88:13:fe:4f:58:a0:8b:a4:6f:f6:96:b4:08: fd:9b:05:a8:32:b6:e7:95:38:0d:81:98:93:a1:1c: d0:f2:e0:bf:e9:81:dd:7c:e3:9f:0b:14:f2:cb:f6: 17:62:72:61:52:24:d3:f5:8e:89:82:0c:a1:70:6c: d6:86:4a:f8:d0:e4:fd:93:55:88:b6:e8:f8:9b:72: 9f:2a:78:86:17:f0:96:2f:3f:52:a1:50:8b:de:f0: e3:f4:bd:04:70:a4:74:78:db:af:b3:69:af:e0:19: b8:7b:c8:6c:fb:b8:83:fd:5c:fe:16:26:85:b7:13: 27:c6:d7:e6:6e:c9:39:43:11:bb:f2:9c:e0:be:c2: 17:a4:22:fb:66:8b:6e:0e:de:68:8b:a9:42:2b:e6: 4c:a6:ae:47:3c:07:4a:e2:5a:8f:c3:fb:c2:6a:08: c8:95:1e:47:26:52:c7:7e:b9:20:57:62:cc:4e:87: 0c:63:37:9e:2e:f8:a9:4c:a4:dd:27:be:6d:78:96: 05:03:06:e9:64:a1:23:c7:8d:bd:a2:07:d8:6c:2b: a5:19:a2:3e:49:f5:b6:d0:03:f9:23:e6:b3:2f:e8: 52:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B0:B6:8E:22:5F:E7:55:D4:96:C8:5B:B7:CF:45:02:39:2D:3D:0C X509v3 Authority Key Identifier: keyid:4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:89:23:b3:a6:c4:43:d2:dd:18:91:4f:76:a8:a4:b9:7d:ba: 5f:3f:6c:4e:52:8a:88:1a:ff:83:96:85:f7:3e:33:cb:7e:d3: 8d:60:17:8c:11:24:83:58:00:92:4f:da:ea:ba:69:7a:09:16: bc:22:ee:55:de:4c:f2:18:ea:61:d1:b7:88:2f:35:3d:04:fb: e9:35:7f:22:0f:2b:b1:d7:83:1a:f5:a7:28:23:6b:e1:ff:97: 28:07:8f:53:61:5c:fb:68:d4:f0:12:2b:8f:6d:06:a1:0d:78: 93:c7:41:b2:ec:45:76:ee:1b:9b:d2:31:a3:ab:09:e9:59:bd: 42:0b:e9:e4:54:5c:9f:c5:59:e8:5a:77:fe:a7:d6:57:d0:c7: 4a:e5:4e:ce:8f:6d:54:9f:46:a6:22:21:70:82:dc:d9:11:4f: bf:49:84:a1:be:d4:55:20:f9:04:74:77:e5:b2:9a:87:0f:d0: cb:ce:2d:8a:c1:bb:d4:d2:93:84:60:03:95:6b:c3:0d:a2:6d: 8e:00:a0:c3:47:6e:ae:51:48:c6:d4:ce:84:14:82:c4:c1:53: 2f:9f:0e:d3:50:da:1f:71:57:0d:5d:26:ac:10:93:db:b9:45: 0d:5a:19:a5:61:83:0b:18:5f:82:42:09:93:2e:a5:e2:69:3b: 5e:70:1c:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN/7FRD7Ib9vrdBVAJNc8GJk0T0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQy NjA2OUMyQjAeFw0yNjA1MTIxNjM2MTVaFw0yNjA1MTMxODI5MTVaMDMxMTAvBgNV BAMTKDk5QjBCNjhFMjI1RkU3NTVENDk2Qzg1QkI3Q0Y0NTAyMzkyRDNEMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAObMeox52Nqvvhe78zOeiJl4o j0fWFMvG0oz+ThoNiBP+T1igi6Rv9pa0CP2bBagytueVOA2BmJOhHNDy4L/pgd18 458LFPLL9hdicmFSJNP1jomCDKFwbNaGSvjQ5P2TVYi26Pibcp8qeIYX8JYvP1Kh UIve8OP0vQRwpHR426+zaa/gGbh7yGz7uIP9XP4WJoW3EyfG1+ZuyTlDEbvynOC+ whekIvtmi24O3miLqUIr5kymrkc8B0riWo/D+8JqCMiVHkcmUsd+uSBXYsxOhwxj N54u+KlMpN0nvm14lgUDBulkoSPHjb2iB9hsK6UZoj5J9bbQA/kj5rMv6FJrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmbC2jiJf51XUlshbt89FAjktPQwwHwYDVR0j BBgwFoAUSvelxvVMX9vYlXp/5bckJCYGnCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE1OWEzNjItOTUwYy00NWMyLWFlY2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZG NTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQyNjA2OUMyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QUY3QTVDNkY1NEM1RkRCRDg5NTdBN0ZFNUI3MjQyNDI2MDY5 QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0 MjQyNjA2OUMyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeJI7OmxEPS3RiRT3aopLl9ul8/bE5Sioga /4OWhfc+M8t+041gF4wRJINYAJJP2uq6aXoJFrwi7lXeTPIY6mHRt4gvNT0E++k1 fyIPK7HXgxr1pygja+H/lygHj1NhXPto1PASK49tBqENeJPHQbLsRXbuG5vSMaOr CelZvUIL6eRUXJ/FWehad/6n1lfQx0rlTs6PbVSfRqYiIXCC3NkRT79JhKG+1FUg +QR0d+WymocP0MvOLYrBu9TSk4RgA5Vrww2ibY4AoMNHbq5RSMbUzoQUgsTBUy+f DtNQ2h9xVw1dJqwQk9u5RQ1aGaVhgwsYX4JCCZMupeJpO15wHJ4= -----END CERTIFICATE-----Generated at Wed May 13 00:20:38 2026 by rpki-client