$ rpki-client -vvf rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft File: 4FE0444622A2C111B372D11A38DAFE7648673D36.mft (raw, json) Hash identifier: dmyNQDj6r15S6b9UfS6KiFPNIJLmtxS4P1aTSviwmLY= Subject key identifier: 0F:28:10:F8:05:20:57:18:67:D7:05:EC:93:30:B8:6D:4D:90:B3:68 Authority key identifier: 4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36 Certificate issuer: /CN=4FE0444622A2C111B372D11A38DAFE7648673D36 Certificate serial: 40A5DD1A6F2EBC8F2C1407FD151CCF53E94D7472 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:50:20 +0000 Manifest this update: Tue 12 May 2026 15:45:20 +0000 Manifest next update: Wed 13 May 2026 16:17:20 +0000 Files and hashes: 1: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: jwm0S2hFDX+dZX8vIrEhkY9/01RjPCQuv88vNZDWSb8=) 2: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: gRZjicumGEoblrElHZ58yAQf9cx0JwPN+oerGxN3DUY=) 3: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: EeoonxSdNuxOduC2I/c7vz+iodDJX+FOusUJ8W+8sks=) 4: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: KpYQSU+oal444FTCzAQqpO+RSPbHAZ+ta2JoMh51nbo=) 5: 4FE0444622A2C111B372D11A38DAFE7648673D36.crl (hash: 5yxPn2Pdfk4LeulJyFqgr+ZhSKCIuMnHnYFdb4mzV4Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.crl rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a5:dd:1a:6f:2e:bc:8f:2c:14:07:fd:15:1c:cf:53:e9:4d:74:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FE0444622A2C111B372D11A38DAFE7648673D36 Validity Not Before: May 12 15:45:20 2026 GMT Not After : May 13 16:17:20 2026 GMT Subject: CN=0F2810F80520571867D705EC9330B86D4D90B368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:39:2b:73:7f:52:7f:f7:3f:ab:b0:81:11:84: 84:8c:bf:6c:53:a5:38:cd:4b:44:9d:33:37:50:52: 59:b1:bb:ff:5a:d3:bc:3b:91:36:a0:92:50:e0:0b: 72:0d:3c:3d:ca:e4:b4:9a:b3:45:ea:2f:76:37:5e: f1:87:34:c4:b1:4d:d3:f0:0f:4c:dc:d8:99:47:f6: 09:93:04:c6:dd:c3:8a:64:1e:52:a6:f2:6e:8a:9b: 6c:ff:84:7b:85:45:d4:5e:7d:58:c0:84:52:80:8b: e5:9e:08:8b:4d:1a:5e:4b:1e:5c:7b:c0:5f:9e:2a: 4a:07:af:83:06:b7:de:10:0d:7d:83:71:ba:43:b6: 54:aa:3e:83:6a:4a:18:48:8a:e5:a8:98:0a:f9:d8: c3:96:b9:f5:1a:e5:1f:80:03:19:a7:77:20:a8:b1: d7:fa:b0:3e:57:93:1f:d4:aa:e8:19:53:4a:77:34: 3f:ad:61:2e:be:ab:d5:35:46:c9:58:7b:42:c5:9e: 36:17:dc:14:bc:20:b5:b6:d5:c9:ae:1c:4b:f7:11: 61:50:4b:53:1e:5d:67:04:0a:d4:76:fe:25:cd:b0: ec:e7:36:ad:6e:7f:4b:d0:57:0c:3e:5d:e9:dc:2e: da:bb:cb:d1:2a:33:0c:2d:89:d1:82:6e:2a:07:8c: f9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:28:10:F8:05:20:57:18:67:D7:05:EC:93:30:B8:6D:4D:90:B3:68 X509v3 Authority Key Identifier: keyid:4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:22:ef:e4:e7:41:22:df:24:65:36:22:04:cc:ea:11:f7:c2: 59:5e:df:c8:99:ff:47:1d:ab:bd:b4:12:50:ec:d9:6f:24:f8: 94:ba:20:ba:0c:c4:37:2f:17:73:4a:02:80:53:ca:c7:36:98: ba:2e:bf:57:0d:d0:e5:9f:ca:8b:15:87:b2:3e:89:16:81:45: 78:84:e4:3e:f5:37:bd:85:70:d7:48:09:52:16:a8:a6:84:0f: e3:92:ce:55:49:83:c3:04:22:c5:e4:70:3b:fc:bc:1a:5c:ec: a1:76:1d:eb:6c:74:c1:87:52:f4:e2:84:e1:66:63:dc:1f:e4: 77:b4:77:eb:96:b3:08:2a:72:8a:c4:31:7c:a9:f9:87:5b:0b: 42:8f:a5:d3:9c:ee:eb:f0:b3:20:59:7e:ef:9e:da:fb:99:98: 9e:20:66:15:b7:cf:92:b2:d3:04:bf:47:cc:d1:47:76:1f:b0: d2:7e:08:3d:6a:4a:ee:34:44:f3:cc:ee:ab:7d:d8:b6:52:22: 3e:26:c0:81:a5:a9:d9:fb:66:4d:32:f5:55:65:af:41:59:b2: 92:66:ac:2e:c1:38:1d:4c:e5:2d:13:05:a2:c4:77:5d:97:e7: d8:3c:09:50:df:8b:f2:98:1e:c3:5c:3b:8b:94:72:57:d0:01: 12:b3:40:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQKXdGm8uvI8sFAf9FRzPU+lNdHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZFMDQ0NDYyMkEyQzExMUIzNzJEMTFBMzhEQUZFNzY0 ODY3M0QzNjAeFw0yNjA1MTIxNTQ1MjBaFw0yNjA1MTMxNjE3MjBaMDMxMTAvBgNV BAMTKDBGMjgxMEY4MDUyMDU3MTg2N0Q3MDVFQzkzMzBCODZENEQ5MEIzNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEOStzf1J/9z+rsIERhISMv2xT pTjNS0SdMzdQUlmxu/9a07w7kTagklDgC3INPD3K5LSas0XqL3Y3XvGHNMSxTdPw D0zc2JlH9gmTBMbdw4pkHlKm8m6Km2z/hHuFRdRefVjAhFKAi+WeCItNGl5LHlx7 wF+eKkoHr4MGt94QDX2DcbpDtlSqPoNqShhIiuWomAr52MOWufUa5R+AAxmndyCo sdf6sD5Xkx/UqugZU0p3ND+tYS6+q9U1RslYe0LFnjYX3BS8ILW21cmuHEv3EWFQ S1MeXWcECtR2/iXNsOznNq1uf0vQVww+XencLtq7y9EqMwwtidGCbioHjPklAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDygQ+AUgVxhn1wXskzC4bU2Qs2gwHwYDVR0j BBgwFoAUT+BERiKiwRGzctEaONr+dkhnPTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTFmZDM1MWUtMmJkNy00MTkxLTkxMDYtNTNmODc1MDE2ZjBlLzAvNEZFMDQ0NDYy MkEyQzExMUIzNzJEMTFBMzhEQUZFNzY0ODY3M0QzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkUwNDQ0NjIyQTJDMTExQjM3MkQxMUEzOERBRkU3NjQ4Njcz RDM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvNEZFMDQ0NDYyMkEyQzExMUIzNzJEMTFBMzhEQUZF NzY0ODY3M0QzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAi7+TnQSLfJGU2IgTM6hH3wlle38iZ/0cd q720ElDs2W8k+JS6ILoMxDcvF3NKAoBTysc2mLouv1cN0OWfyosVh7I+iRaBRXiE 5D71N72FcNdICVIWqKaED+OSzlVJg8MEIsXkcDv8vBpc7KF2HetsdMGHUvTihOFm Y9wf5He0d+uWswgqcorEMXyp+YdbC0KPpdOc7uvwsyBZfu+e2vuZmJ4gZhW3z5Ky 0wS/R8zRR3YfsNJ+CD1qSu40RPPM7qt92LZSIj4mwIGlqdn7Zk0y9VVlr0FZspJm rC7BOB1M5S0TBaLEd12X59g8CVDfi/KYHsNcO4uUclfQARKzQIw= -----END CERTIFICATE-----Generated at Wed May 13 00:31:04 2026 by rpki-client