$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft File: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft (raw, json) Hash identifier: 3eTOPfwTkE171zLISNIAj2G88WV9iCzS1s//ZpnJrPA= Subject key identifier: 0B:6D:C0:39:C1:92:2F:D9:E6:A9:F2:B4:C3:EE:71:03:3D:F9:6B:47 Authority key identifier: 4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5 Certificate issuer: /CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5 Certificate serial: 1031EA856177325D24DE47051ACEB492CF7D9707 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:05:34 +0000 Manifest this update: Tue 12 May 2026 09:00:34 +0000 Manifest next update: Wed 13 May 2026 11:10:34 +0000 Files and hashes: 1: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl (hash: XoLWinhvzCfMaBZl/zih10OgJnW79bu1DDIiVcduKWY=) 2: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: eAc+mnltXFWM2Zo7C5pCUJCKXwlG3JzkV70vxAzWX04=) 3: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: wL6gjmzCFjkZlG1aqyBw0D/I6Abo7eZzV1pr7Z6kz7k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:31:ea:85:61:77:32:5d:24:de:47:05:1a:ce:b4:92:cf:7d:97:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5 Validity Not Before: May 12 09:00:34 2026 GMT Not After : May 13 11:10:34 2026 GMT Subject: CN=0B6DC039C1922FD9E6A9F2B4C3EE71033DF96B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ea:93:64:d5:16:87:62:db:70:5a:a8:3c:76: 88:d2:9f:e0:25:a6:b1:cb:3b:22:75:57:65:cd:ea: 1e:fe:86:04:bd:43:74:30:e9:20:02:f9:97:0f:9e: d6:00:69:3b:3a:62:a9:9e:75:47:38:7b:53:bc:68: 8f:78:68:ae:c1:55:be:5f:f6:82:3b:11:04:cb:49: 3c:9d:d1:6e:f7:f6:9b:50:0f:88:de:b0:56:10:f4: 8c:07:32:5a:ec:d1:ca:cf:f5:00:ef:78:6e:45:9e: b4:7d:53:af:16:c5:c7:37:1e:b5:c1:df:7d:ff:c7: 37:4f:e4:65:bc:36:c9:fa:b7:fc:22:5a:13:55:22: f3:5b:40:0f:ae:ab:69:d0:39:a3:f8:38:98:5a:d9: e2:4a:e4:47:89:c9:ba:e6:15:fc:4d:19:5c:8f:93: 1c:dc:5c:a9:ba:9a:67:0e:fa:99:c8:eb:89:04:c2: fa:3d:86:cf:7c:4e:8b:83:69:b2:1e:cb:e7:b4:ea: 1a:23:d9:9e:9a:52:20:56:0f:81:47:9a:fd:5a:12: 75:e7:23:a3:7e:1b:1f:82:93:07:5c:fc:03:95:8e: 1f:04:c8:7d:63:f2:2d:67:36:93:76:75:2b:fa:e1: 28:ee:2d:92:c3:f0:0d:91:f3:e4:1b:5d:e6:fb:e8: c1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6D:C0:39:C1:92:2F:D9:E6:A9:F2:B4:C3:EE:71:03:3D:F9:6B:47 X509v3 Authority Key Identifier: keyid:4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:20:c6:12:71:00:90:53:8c:28:4e:db:f0:db:30:c5:31:ed: 31:40:6e:8b:5f:c7:9d:eb:bb:fa:e9:32:37:5d:f9:cd:64:b2: a2:8a:76:25:b2:b9:63:48:b4:83:4f:b8:fb:39:b1:05:c1:f1: 28:0c:b8:56:da:7b:4f:51:7a:23:57:2d:09:f4:dd:67:77:4a: 60:82:a2:00:6d:45:b4:f3:ce:f9:38:fa:67:c6:98:2a:63:1c: 37:d4:da:a7:5c:93:35:bb:5b:68:b4:b0:8f:6b:73:84:68:b3: 8a:39:57:df:7b:1a:b5:fb:01:e5:54:36:9f:81:6c:c1:5d:a9: bc:ce:bd:bc:7c:ed:6f:12:35:02:db:86:38:9d:fc:d6:02:2f: a1:4d:b3:94:c0:2b:1e:1b:e5:54:29:17:4d:5d:8f:c3:2c:9d: 0c:e4:31:f5:5a:1f:30:03:7e:34:ac:93:8c:ba:58:6c:8a:1e: e4:91:bc:45:f1:86:c5:ab:e0:16:10:59:70:f4:4c:4f:39:f0: ac:47:92:c9:17:ca:54:52:6f:63:c1:aa:ad:76:60:94:98:6e: de:53:7a:5e:e8:b4:5d:df:2b:cc:fb:64:64:04:2b:8f:18:9c: 88:cf:fa:70:d5:36:4b:d7:67:af:f9:27:b8:15:83:19:e3:be: 72:4a:96:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEDHqhWF3Ml0k3kcFGs60ks99lwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzQTYwNjg4M0IxMjI3MTYxOUM3Q0I0OURGQ0QzNTlG MEYzRTZGNTAeFw0yNjA1MTIwOTAwMzRaFw0yNjA1MTMxMTEwMzRaMDMxMTAvBgNV BAMTKDBCNkRDMDM5QzE5MjJGRDlFNkE5RjJCNEMzRUU3MTAzM0RGOTZCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX6pNk1RaHYttwWqg8dojSn+Al prHLOyJ1V2XN6h7+hgS9Q3Qw6SAC+ZcPntYAaTs6YqmedUc4e1O8aI94aK7BVb5f 9oI7EQTLSTyd0W739ptQD4jesFYQ9IwHMlrs0crP9QDveG5FnrR9U68Wxcc3HrXB 333/xzdP5GW8Nsn6t/wiWhNVIvNbQA+uq2nQOaP4OJha2eJK5EeJybrmFfxNGVyP kxzcXKm6mmcO+pnI64kEwvo9hs98TouDabIey+e06hoj2Z6aUiBWD4FHmv1aEnXn I6N+Gx+Ckwdc/AOVjh8EyH1j8i1nNpN2dSv64SjuLZLD8A2R8+QbXeb76MFdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC23AOcGSL9nmqfK0w+5xAz35a0cwHwYDVR0j BBgwFoAUSjpgaIOxInFhnHy0nfzTWfDz5vUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY5Mjk5MDEtYTEzNy00YTM1LTgxMzQtMTgwNGY5NDc5MmRmLzAvNEEzQTYwNjg4 M0IxMjI3MTYxOUM3Q0I0OURGQ0QzNTlGMEYzRTZGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTNBNjA2ODgzQjEyMjcxNjE5QzdDQjQ5REZDRDM1OUYwRjNF NkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvNEEzQTYwNjg4M0IxMjI3MTYxOUM3Q0I0OURGQ0Qz NTlGMEYzRTZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFggxhJxAJBTjChO2/DbMMUx7TFAbotfx53r u/rpMjdd+c1ksqKKdiWyuWNItINPuPs5sQXB8SgMuFbae09ReiNXLQn03Wd3SmCC ogBtRbTzzvk4+mfGmCpjHDfU2qdckzW7W2i0sI9rc4Ros4o5V997GrX7AeVUNp+B bMFdqbzOvbx87W8SNQLbhjid/NYCL6FNs5TAKx4b5VQpF01dj8MsnQzkMfVaHzAD fjSsk4y6WGyKHuSRvEXxhsWr4BYQWXD0TE858KxHkskXylRSb2PBqq12YJSYbt5T el7otF3fK8z7ZGQEK48YnIjP+nDVNkvXZ6/5J7gVgxnjvnJKllc= -----END CERTIFICATE-----Generated at Tue May 12 22:19:36 2026 by rpki-client