$ rpki-client -vvf rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft File: 4032440C7B463FEA0D28A5D4682DFA954E77451E.mft (raw, json) Hash identifier: tibr23In83NpB0C+cxGcC+EdfN6mHaVbFd6WLhmQhag= Subject key identifier: 30:FA:EC:71:3F:66:C8:60:7B:DB:B1:CC:A8:B1:A0:DC:5F:63:11:2A Authority key identifier: 40:32:44:0C:7B:46:3F:EA:0D:28:A5:D4:68:2D:FA:95:4E:77:45:1E Certificate issuer: /CN=4032440C7B463FEA0D28A5D4682DFA954E77451E Certificate serial: 3FF02EC10C6EEF56AED9D845D5E44E76F6F46507 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4032440C7B463FEA0D28A5D4682DFA954E77451E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:35:09 +0000 Manifest this update: Tue 12 May 2026 15:30:09 +0000 Manifest next update: Wed 13 May 2026 18:04:09 +0000 Files and hashes: 1: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: 8b7JHKN9jGh8XEFxRZEHDDGBc52rA0ln90frZNev8wg=) 2: 4032440C7B463FEA0D28A5D4682DFA954E77451E.crl (hash: bvqsjdBPgl/n+cv+kSlLkHIIBxM/ACFmiPKPYu+D5Q8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.crl rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4032440C7B463FEA0D28A5D4682DFA954E77451E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f0:2e:c1:0c:6e:ef:56:ae:d9:d8:45:d5:e4:4e:76:f6:f4:65:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4032440C7B463FEA0D28A5D4682DFA954E77451E Validity Not Before: May 12 15:30:09 2026 GMT Not After : May 13 18:04:09 2026 GMT Subject: CN=30FAEC713F66C8607BDBB1CCA8B1A0DC5F63112A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dc:c9:d2:58:2f:21:a8:ea:4d:01:2f:77:da: 2c:6e:66:6c:80:c5:6c:57:f5:10:a7:66:11:e8:3f: 2f:7e:9b:61:2f:04:83:f3:ed:bc:db:c9:a5:85:21: c7:c9:0a:91:18:22:a5:a6:ab:c7:c2:13:7e:08:b4: 10:41:9f:8d:32:84:8a:99:8d:89:0d:9b:07:97:f2: 00:ab:c9:e7:5e:fc:49:2f:d1:2d:d5:85:bb:b6:78: 86:62:b6:e9:a7:eb:f1:f4:31:4c:4e:41:fc:9f:e0: 03:85:49:77:a5:78:fb:34:00:22:ce:64:f3:02:ea: 54:92:f1:8e:0a:0f:f9:5a:8a:27:19:c9:76:54:dd: 09:3c:97:48:aa:63:03:a1:2d:32:ee:9d:ce:bd:fb: 09:f6:85:92:db:c3:b6:5e:85:bc:2d:42:77:42:c8: 4d:66:b5:d9:21:2e:b9:43:76:a2:ec:ff:c2:62:79: 4d:e1:24:09:96:c4:c3:b6:dc:3e:05:ec:e2:0f:d1: 95:1e:7b:a6:5b:66:53:7a:09:4a:d5:96:86:61:b3: bc:95:c8:b2:8f:ff:6f:8e:6d:82:8c:58:5d:ff:43: 1d:2d:00:97:18:93:4f:46:65:0b:f6:b0:b3:31:ee: 80:14:e3:3c:09:ed:7d:84:76:f8:d7:59:2d:1f:2b: 69:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FA:EC:71:3F:66:C8:60:7B:DB:B1:CC:A8:B1:A0:DC:5F:63:11:2A X509v3 Authority Key Identifier: keyid:40:32:44:0C:7B:46:3F:EA:0D:28:A5:D4:68:2D:FA:95:4E:77:45:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4032440C7B463FEA0D28A5D4682DFA954E77451E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:83:75:48:dd:2e:84:b9:af:32:c0:45:1a:d3:91:9a:1e:d7: f0:8a:18:f3:e2:32:db:86:37:04:78:4a:77:f7:c1:67:79:03: 88:ef:70:34:f5:56:94:e7:6c:6b:6d:95:f1:22:5c:eb:98:50: 7f:57:b2:d5:5d:83:51:23:08:6f:f4:83:6f:32:fc:8f:3c:4e: f1:36:85:ec:95:ea:71:81:95:bb:65:07:c1:83:91:a2:f6:08: 43:6d:5d:f7:b6:99:89:05:53:c3:a6:10:08:9b:14:df:76:1c: 7e:81:0d:8b:26:b1:ca:11:fb:e9:31:57:db:16:94:e9:35:2f: 47:10:7a:95:05:91:cc:ef:8c:0c:55:41:dd:d7:9a:fc:6d:97: b5:5e:8c:f0:4a:fb:e7:42:79:3c:49:3b:1b:88:77:ec:f4:5a: cf:ea:af:40:56:9f:b9:7f:5f:5e:cb:49:47:4e:a4:30:99:3b: e6:65:17:b7:4e:81:f0:5a:20:fa:39:3d:31:40:da:44:77:44: bb:4b:d3:1a:2b:fd:b9:95:18:67:ae:a0:af:b1:9c:c2:03:77: 7e:c3:e0:60:bd:a0:3a:73:56:13:52:f2:d5:f5:41:b1:e2:bd: f8:39:45:63:98:c6:a3:fe:a2:b9:c4:f5:f5:e6:02:4b:4c:99: 92:8e:cb:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP/AuwQxu71au2dhF1eROdvb0ZQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAzMjQ0MEM3QjQ2M0ZFQTBEMjhBNUQ0NjgyREZBOTU0 RTc3NDUxRTAeFw0yNjA1MTIxNTMwMDlaFw0yNjA1MTMxODA0MDlaMDMxMTAvBgNV BAMTKDMwRkFFQzcxM0Y2NkM4NjA3QkRCQjFDQ0E4QjFBMERDNUY2MzExMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn3MnSWC8hqOpNAS932ixuZmyA xWxX9RCnZhHoPy9+m2EvBIPz7bzbyaWFIcfJCpEYIqWmq8fCE34ItBBBn40yhIqZ jYkNmweX8gCryede/Ekv0S3Vhbu2eIZitumn6/H0MUxOQfyf4AOFSXelePs0ACLO ZPMC6lSS8Y4KD/laiicZyXZU3Qk8l0iqYwOhLTLunc69+wn2hZLbw7ZehbwtQndC yE1mtdkhLrlDdqLs/8JieU3hJAmWxMO23D4F7OIP0ZUee6ZbZlN6CUrVloZhs7yV yLKP/2+ObYKMWF3/Qx0tAJcYk09GZQv2sLMx7oAU4zwJ7X2EdvjXWS0fK2nBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMPrscT9myGB727HMqLGg3F9jESowHwYDVR0j BBgwFoAUQDJEDHtGP+oNKKXUaC36lU53RR4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcyMGNlNzYtZGI3NS00NjUxLTg1YjAtMGJmYjE4ZTBiMTc1LzAvNDAzMjQ0MEM3 QjQ2M0ZFQTBEMjhBNUQ0NjgyREZBOTU0RTc3NDUxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDMyNDQwQzdCNDYzRkVBMEQyOEE1RDQ2ODJERkE5NTRFNzc0 NTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcyMGNlNzYtZGI3NS00NjUxLTg1 YjAtMGJmYjE4ZTBiMTc1LzAvNDAzMjQ0MEM3QjQ2M0ZFQTBEMjhBNUQ0NjgyREZB OTU0RTc3NDUxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWDdUjdLoS5rzLARRrTkZoe1/CKGPPiMtuG NwR4Snf3wWd5A4jvcDT1VpTnbGttlfEiXOuYUH9XstVdg1EjCG/0g28y/I88TvE2 heyV6nGBlbtlB8GDkaL2CENtXfe2mYkFU8OmEAibFN92HH6BDYsmscoR++kxV9sW lOk1L0cQepUFkczvjAxVQd3Xmvxtl7VejPBK++dCeTxJOxuId+z0Ws/qr0BWn7l/ X17LSUdOpDCZO+ZlF7dOgfBaIPo5PTFA2kR3RLtL0xor/bmVGGeuoK+xnMIDd37D 4GC9oDpzVhNS8tX1QbHivfg5RWOYxqP+ornE9fXmAktMmZKOyz8= -----END CERTIFICATE-----Generated at Tue May 12 22:19:50 2026 by rpki-client