$ rpki-client -vvf rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft File: 04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft (raw, json) Hash identifier: HCEGuCfM6yBVDQYuxVqhvZFJn9cNYrCgI3EgMPO4Am8= Subject key identifier: 9F:E3:4F:16:4B:CC:FD:3E:F1:75:10:CC:68:D6:B7:1C:96:54:99:8E Authority key identifier: 04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4 Certificate issuer: /CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4 Certificate serial: 3E4D09E9BB792AFCC5DAEC5F1CB0BAC941370616 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:39:06 +0000 Manifest this update: Tue 12 May 2026 18:34:06 +0000 Manifest next update: Wed 13 May 2026 21:50:06 +0000 Files and hashes: 1: 323430363a343563303a3a2f33332d3438203d3e203634333030.roa (hash: 0XuhY+T94wXhxTCvmTzUJVF+dBVIx5FGQo4RfqmReyU=) 2: 3130332e3135332e3134382e302f32342d3234203d3e203634333030.roa (hash: dl9xVM2rxfLjhJqwGW0G8h/VTUN1oUgBuq0Qw5n8Lwg=) 3: 323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa (hash: 6uG8JEAg5YXu68O6z0VK1/htvcExMqCS4aozBNgJO50=) 4: 04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl (hash: /fw/9GeLc7ceDwOlJR+fKrC7pRe7VYk6QIXZxSnP2J4=) 5: 323430363a343563303a3a2f33322d3332203d3e203634333030.roa (hash: 1M4q1NFllsSsvSfNvwTitiKk8jnGm1cKfR4Eial5H4E=) 6: 3130332e3135332e3134392e302f32342d3234203d3e203634333030.roa (hash: 5vV5ZfJoSxF8YdCtjpH1p1DLAYvEvLGC91Wktf8Mw9c=) 7: 3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa (hash: BrjeraCPyUffk29JD70GjyNah0k3nj4heiQybdMxnEQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:4d:09:e9:bb:79:2a:fc:c5:da:ec:5f:1c:b0:ba:c9:41:37:06:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4 Validity Not Before: May 12 18:34:06 2026 GMT Not After : May 13 21:50:06 2026 GMT Subject: CN=9FE34F164BCCFD3EF17510CC68D6B71C9654998E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:54:18:06:6e:04:16:b1:13:8b:2c:90:76: 7b:d3:03:6c:42:1c:fc:95:48:88:8a:1d:23:5e:5e: a7:51:1f:35:36:6e:7a:3f:c0:3b:4a:4e:3a:62:d0: e1:7c:cb:14:e9:42:cf:50:ed:78:b7:3a:1c:05:d9: 86:8a:29:fd:7e:06:76:9a:42:16:03:ce:a6:cf:d8: a3:5b:7d:f6:ff:2b:11:2b:e9:94:cc:c6:6f:c7:bb: 8a:2e:11:1c:64:23:df:7c:7c:58:ce:15:73:36:b9: 47:41:03:8b:a0:8d:39:b7:50:c3:cc:5c:08:e3:18: a9:1f:c4:76:d3:5b:6e:e4:66:dd:95:5c:f4:fe:8d: 37:30:87:bb:bd:5f:0f:3f:63:27:c6:30:11:93:c5: 90:62:f8:d1:b4:75:2b:30:71:95:a7:43:04:59:6e: 18:23:f8:d4:de:81:43:3b:5c:40:4b:25:fc:c5:26: b7:11:32:81:32:65:4b:ac:cf:d7:57:eb:44:cf:0e: 6b:49:9b:5f:ae:32:a4:f1:e4:99:60:d4:e7:ef:f6: 22:e9:e7:94:43:d2:b3:28:f9:4d:1e:9d:d7:c4:0e: 88:6d:21:ba:cf:23:b7:39:cf:b6:65:7a:16:8e:ce: 2f:0c:09:21:ac:a0:d0:96:5e:5b:96:ac:e7:bf:30: 9e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E3:4F:16:4B:CC:FD:3E:F1:75:10:CC:68:D6:B7:1C:96:54:99:8E X509v3 Authority Key Identifier: keyid:04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:45:73:3f:cb:c4:5d:4d:14:04:e9:be:32:f7:ac:f7:e5:2e: 95:bb:95:57:ee:3a:7a:1e:f3:d9:42:9a:16:6e:80:03:9f:6d: d5:a5:5c:1c:2d:49:15:44:b5:5b:6a:59:42:4e:dd:e9:68:9e: 27:e5:fa:1c:8a:45:de:ec:38:95:69:eb:30:12:df:6a:f6:6e: 7e:b2:66:e0:07:cd:05:38:a6:40:8e:bc:d6:71:cf:87:ff:02: fd:a5:49:65:b7:5a:8d:36:e1:e6:86:c9:26:27:9d:77:e8:d1: 87:fa:fb:23:70:9c:ad:7f:95:6a:79:a2:1f:5e:28:9f:b9:40: 61:72:a3:ac:34:8c:1f:f3:55:3b:3a:2d:07:b7:27:39:04:f3: 30:29:27:0e:dc:fb:b5:b9:6b:38:21:54:f7:67:10:f6:12:ae: 1f:ad:c7:3b:a1:5b:16:97:0b:f8:67:76:ce:0d:c7:48:98:36: 2b:1e:d0:df:d5:3a:35:3a:81:b1:b5:a3:4a:f2:2b:89:a2:f8: 86:5d:54:29:aa:dd:16:c4:49:73:c4:69:91:04:36:34:b6:7c: d8:43:4c:57:0f:cb:38:f5:27:7a:8f:f3:4e:44:f9:d4:a1:47: be:9b:4c:2e:26:f7:b4:02:6d:93:c6:6c:0b:e2:e4:b7:a9:94: 07:ee:f3:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPk0J6bt5KvzF2uxfHLC6yUE3BhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREQjQ3NTVDNzVBODMxQ0Q5MTgxN0U2QTlCN0U0RTFF RDJERjJENDAeFw0yNjA1MTIxODM0MDZaFw0yNjA1MTMyMTUwMDZaMDMxMTAvBgNV BAMTKDlGRTM0RjE2NEJDQ0ZEM0VGMTc1MTBDQzY4RDZCNzFDOTY1NDk5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICFQYBm4EFrETiyyQdnvTA2xC HPyVSIiKHSNeXqdRHzU2bno/wDtKTjpi0OF8yxTpQs9Q7Xi3OhwF2YaKKf1+Bnaa QhYDzqbP2KNbffb/KxEr6ZTMxm/Hu4ouERxkI998fFjOFXM2uUdBA4ugjTm3UMPM XAjjGKkfxHbTW27kZt2VXPT+jTcwh7u9Xw8/YyfGMBGTxZBi+NG0dSswcZWnQwRZ bhgj+NTegUM7XEBLJfzFJrcRMoEyZUusz9dX60TPDmtJm1+uMqTx5Jlg1Ofv9iLp 55RD0rMo+U0endfEDohtIbrPI7c5z7ZlehaOzi8MCSGsoNCWXluWrOe/MJ5LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn+NPFkvM/T7xdRDMaNa3HJZUmY4wHwYDVR0j BBgwFoAUBNtHVcdagxzZGBfmqbfk4e0t8tQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTQzMDRiNjQtMjg5OS00ODMwLTljM2MtMzc1ODRhMzI3ZTFlLzAvMDREQjQ3NTVD NzVBODMxQ0Q5MTgxN0U2QTlCN0U0RTFFRDJERjJENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNERCNDc1NUM3NUE4MzFDRDkxODE3RTZBOUI3RTRFMUVEMkRG MkQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQzMDRiNjQtMjg5OS00ODMwLTlj M2MtMzc1ODRhMzI3ZTFlLzAvMDREQjQ3NTVDNzVBODMxQ0Q5MTgxN0U2QTlCN0U0 RTFFRDJERjJENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1Fcz/LxF1NFATpvjL3rPflLpW7lVfuOnoe 89lCmhZugAOfbdWlXBwtSRVEtVtqWUJO3elonifl+hyKRd7sOJVp6zAS32r2bn6y ZuAHzQU4pkCOvNZxz4f/Av2lSWW3Wo024eaGySYnnXfo0Yf6+yNwnK1/lWp5oh9e KJ+5QGFyo6w0jB/zVTs6LQe3JzkE8zApJw7c+7W5azghVPdnEPYSrh+txzuhWxaX C/hnds4Nx0iYNise0N/VOjU6gbG1o0ryK4mi+IZdVCmq3RbESXPEaZEENjS2fNhD TFcPyzj1J3qP805E+dShR76bTC4m97QCbZPGbAvi5LeplAfu804= -----END CERTIFICATE-----Generated at Tue May 12 23:20:34 2026 by rpki-client