$ rpki-client -vvf rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft File: 411E8C45894267DCEFA20514C89165EE7C17C4C4.mft (raw, json) Hash identifier: wG55+InZscHgfdt3SMmmRExWzY8Wbe9YFNk24c5i4Fo= Subject key identifier: F7:69:2A:5B:97:76:FA:27:57:51:FE:81:6D:D3:FB:32:6B:3C:17:7E Authority key identifier: 41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4 Certificate issuer: /CN=411E8C45894267DCEFA20514C89165EE7C17C4C4 Certificate serial: 581E9992949FEA8392C531A80F2FCBFEEF1C2649 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:49:20 +0000 Manifest this update: Tue 12 May 2026 18:44:20 +0000 Manifest next update: Wed 13 May 2026 21:29:20 +0000 Files and hashes: 1: 3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa (hash: RWaRXWbQIpLKoTQziPLdF6KyPF26oe/DwncsbN1gjuY=) 2: 323030313a6466303a323363303a3a2f34382d3438203d3e20313437313235.roa (hash: Gd2IM01O7z8fqk7GpG61d/HhlCVHlpL3rkOIOFXsAII=) 3: 411E8C45894267DCEFA20514C89165EE7C17C4C4.crl (hash: zYmZyQvyWa3Ek7SVMc4i5SlZGFfoKYG5P7NLyIG1sKg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.crl rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:1e:99:92:94:9f:ea:83:92:c5:31:a8:0f:2f:cb:fe:ef:1c:26:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411E8C45894267DCEFA20514C89165EE7C17C4C4 Validity Not Before: May 12 18:44:20 2026 GMT Not After : May 13 21:29:20 2026 GMT Subject: CN=F7692A5B9776FA275751FE816DD3FB326B3C177E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:69:34:b8:9c:b6:b2:d6:c0:97:18:4d:c1:6d: 11:be:9c:08:f2:c6:9d:4a:1d:b1:fa:df:d8:90:aa: 97:ce:4f:ca:92:30:61:75:8d:37:d0:f2:58:54:27: 12:6f:5f:0d:fe:8b:28:ea:6e:22:c3:d9:0e:d1:f1: 78:68:41:5c:2a:5f:8e:2c:b2:e1:a4:07:0b:5e:27: cc:b5:c1:61:8c:3d:5e:cd:cb:48:be:8f:75:9c:fe: bd:42:44:7b:a6:99:32:70:15:bd:4a:f2:c3:04:70: 09:ca:58:ef:5c:b8:4f:26:05:b3:6f:06:58:85:fb: cf:d0:4b:87:8d:5c:86:24:14:19:77:2e:0d:90:4c: c1:b5:1c:fd:ec:43:bf:dd:37:25:28:e8:c2:e4:67: 07:d1:20:04:55:9f:5f:27:6c:ac:a3:aa:67:e0:48: 46:4a:ae:23:e0:9f:a8:64:3d:53:9d:9b:2a:3b:ff: 67:bb:49:d8:93:91:a3:38:57:98:76:7b:05:45:66: 27:48:12:b4:27:5b:ed:d1:a4:e9:e0:5c:71:5d:9d: 12:76:08:07:70:11:23:80:c7:81:1f:d5:0e:b7:7c: 27:d9:bd:2e:37:76:25:17:59:8b:e5:6c:53:1c:50: 4e:02:cf:cb:d1:e7:60:be:35:5f:75:b3:ee:c1:8c: b9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:69:2A:5B:97:76:FA:27:57:51:FE:81:6D:D3:FB:32:6B:3C:17:7E X509v3 Authority Key Identifier: keyid:41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:2a:a6:68:a7:82:a0:fc:90:6c:53:03:e4:a9:32:ae:b5:8c: aa:89:d4:e1:bb:2a:20:9c:5a:ae:79:b6:eb:d3:b9:1d:d7:3e: 04:4d:d8:4a:7f:09:21:b5:b2:c6:02:03:82:cd:4b:57:2a:d2: 63:02:0e:b3:61:07:fd:cb:5e:ab:5a:38:a2:a0:fc:0e:86:e3: 72:01:29:1b:02:76:f9:ed:34:2d:16:99:52:d6:96:b6:b4:b7: 77:57:6c:be:0c:5d:49:50:68:77:7d:aa:b2:e9:18:96:8b:c4: 87:d5:6d:91:80:e6:c6:88:0f:9e:03:00:93:3a:4b:50:73:a9: 75:d2:77:1a:c8:79:16:b8:19:78:56:5f:e7:d7:88:09:16:e5: d3:58:fd:95:e0:9a:3a:e4:dc:9e:90:6a:97:a2:7b:20:77:2d: 70:1a:b3:23:dd:44:bc:e9:ff:22:31:bb:c8:71:d6:67:a3:e1: 38:c1:df:d3:1e:31:57:4d:3f:5a:a8:69:63:ed:58:fc:c5:d3: 08:f9:86:44:50:18:d8:f2:26:04:83:5b:b0:f6:44:1c:05:6c: 08:08:b0:51:8a:b9:fe:ce:07:bf:ee:a0:a4:00:67:7d:3d:0c: 9d:63:f8:1d:d1:1a:ec:78:12:de:96:86:ef:af:38:54:c3:ed: 10:16:64:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWB6ZkpSf6oOSxTGoDy/L/u8cJkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExRThDNDU4OTQyNjdEQ0VGQTIwNTE0Qzg5MTY1RUU3 QzE3QzRDNDAeFw0yNjA1MTIxODQ0MjBaFw0yNjA1MTMyMTI5MjBaMDMxMTAvBgNV BAMTKEY3NjkyQTVCOTc3NkZBMjc1NzUxRkU4MTZERDNGQjMyNkIzQzE3N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUaTS4nLay1sCXGE3BbRG+nAjy xp1KHbH639iQqpfOT8qSMGF1jTfQ8lhUJxJvXw3+iyjqbiLD2Q7R8XhoQVwqX44s suGkBwteJ8y1wWGMPV7Ny0i+j3Wc/r1CRHummTJwFb1K8sMEcAnKWO9cuE8mBbNv BliF+8/QS4eNXIYkFBl3Lg2QTMG1HP3sQ7/dNyUo6MLkZwfRIARVn18nbKyjqmfg SEZKriPgn6hkPVOdmyo7/2e7SdiTkaM4V5h2ewVFZidIErQnW+3RpOngXHFdnRJ2 CAdwESOAx4Ef1Q63fCfZvS43diUXWYvlbFMcUE4Cz8vR52C+NV91s+7BjLlPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU92kqW5d2+idXUf6BbdP7Mms8F34wHwYDVR0j BBgwFoAUQR6MRYlCZ9zvogUUyJFl7nwXxMQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGMwMjAxZTMtODc1ZC00OWM0LThlMTQtOTk5OTQ5MzZkNDkxLzAvNDExRThDNDU4 OTQyNjdEQ0VGQTIwNTE0Qzg5MTY1RUU3QzE3QzRDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTFFOEM0NTg5NDI2N0RDRUZBMjA1MTRDODkxNjVFRTdDMTdD NEM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGMwMjAxZTMtODc1ZC00OWM0LThl MTQtOTk5OTQ5MzZkNDkxLzAvNDExRThDNDU4OTQyNjdEQ0VGQTIwNTE0Qzg5MTY1 RUU3QzE3QzRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIqpmingqD8kGxTA+SpMq61jKqJ1OG7KiCc Wq55tuvTuR3XPgRN2Ep/CSG1ssYCA4LNS1cq0mMCDrNhB/3LXqtaOKKg/A6G43IB KRsCdvntNC0WmVLWlra0t3dXbL4MXUlQaHd9qrLpGJaLxIfVbZGA5saID54DAJM6 S1BzqXXSdxrIeRa4GXhWX+fXiAkW5dNY/ZXgmjrk3J6QapeieyB3LXAasyPdRLzp /yIxu8hx1mej4TjB39MeMVdNP1qoaWPtWPzF0wj5hkRQGNjyJgSDW7D2RBwFbAgI sFGKuf7OB7/uoKQAZ309DJ1j+B3RGux4Et6Whu+vOFTD7RAWZCk= -----END CERTIFICATE-----Generated at Wed May 13 03:52:59 2026 by rpki-client