$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft File: 4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft (raw, json) Hash identifier: 4Rl3O1eBSRFjxrWg3hHr0S67i48h4rH03mftH0ZAJG0= Subject key identifier: D3:4A:E3:53:CB:A8:4F:F9:96:ED:A3:99:40:B2:C7:49:6D:00:42:AA Authority key identifier: 4A:E1:58:1E:C7:DF:E6:5F:5E:99:AA:61:34:75:D8:54:28:08:C4:6A Certificate issuer: /CN=4AE1581EC7DFE65F5E99AA613475D8542808C46A Certificate serial: 0EAE89F839EDD14560143AC1BACC95C369F88FF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:20:38 +0000 Manifest this update: Tue 12 May 2026 05:15:38 +0000 Manifest next update: Wed 13 May 2026 06:40:38 +0000 Files and hashes: 1: 4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl (hash: 9Ri54UVtPUD145ckshVAq1RKVnzGkhMBpSrIWed5d8A=) 2: 3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa (hash: Tkh0+XsPVTypniidThAuJHBFvt6qbkv8XEWtO3EZhzc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ae:89:f8:39:ed:d1:45:60:14:3a:c1:ba:cc:95:c3:69:f8:8f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AE1581EC7DFE65F5E99AA613475D8542808C46A Validity Not Before: May 12 05:15:38 2026 GMT Not After : May 13 06:40:38 2026 GMT Subject: CN=D34AE353CBA84FF996EDA39940B2C7496D0042AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:05:66:9c:67:4f:ca:eb:93:14:6d:6a:1a:4e: 87:e5:de:85:47:a6:a0:ab:ea:2e:29:87:04:d5:92: 10:88:a0:20:70:73:0d:ae:bb:a5:f4:5b:ee:0d:5e: 51:89:4d:65:5b:ca:cb:66:9f:a2:77:27:ef:8e:17: a0:19:94:65:b8:ae:1f:6c:fe:fa:15:6e:e2:17:e0: 04:8f:d3:c1:cc:95:4c:65:af:12:b9:ee:7b:52:45: b6:bd:cc:0d:96:7c:02:a8:e1:4d:2d:58:3f:04:9b: b9:18:69:41:22:3b:10:5a:08:be:ca:48:51:36:0d: 81:8f:3e:0b:d0:ce:20:ed:89:b6:7f:cd:fd:25:37: c6:93:46:34:25:51:be:3d:b7:3c:48:e2:1b:d0:84: 81:dd:e7:8a:42:c7:bd:6b:39:b3:14:ed:31:9e:e4: 55:76:7a:48:65:45:23:f5:fa:82:ce:d7:45:69:3a: 50:61:f3:af:cb:e2:c0:88:a6:53:c0:2e:0c:5d:f2: 1c:64:7a:ab:16:34:31:73:df:60:35:a2:7a:77:32: 8f:b3:e4:86:99:ee:b7:e3:40:bf:b5:5a:fb:5a:26: 8d:f6:dc:fa:36:87:78:a7:97:3d:d1:c4:77:54:b9: b6:a2:a9:7a:03:94:29:6f:42:c3:80:2d:b8:6b:0b: 86:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4A:E3:53:CB:A8:4F:F9:96:ED:A3:99:40:B2:C7:49:6D:00:42:AA X509v3 Authority Key Identifier: keyid:4A:E1:58:1E:C7:DF:E6:5F:5E:99:AA:61:34:75:D8:54:28:08:C4:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e7:5e:5f:c2:41:82:f9:74:e7:1a:7c:98:32:bc:eb:00:2e: 94:aa:69:ef:56:98:1d:eb:76:31:37:73:0e:bf:90:3d:5e:9f: e7:1c:a2:1b:8f:53:10:7c:88:04:ac:75:c9:6b:33:b9:4e:13: 82:ab:6a:eb:bd:a2:d7:52:9a:66:c0:30:a0:6c:1c:6c:c6:87: ab:b0:c9:c8:31:34:14:82:02:50:a2:32:9c:f7:2d:ec:44:74: 18:5f:ea:0d:94:ca:be:53:cd:02:ad:31:ab:65:bb:e8:14:86: 1c:7e:49:8b:20:cf:cf:be:bf:ed:4f:ef:10:65:d9:0c:94:62: fe:7c:4a:52:2c:37:cd:ee:27:33:c9:4a:1c:f5:c6:2b:a7:51: 26:cd:86:74:6c:98:93:86:f3:fe:cb:4e:0a:05:02:fd:d1:c5: 5f:93:37:71:fc:4c:51:07:6a:fb:cd:3d:f8:19:b6:56:fc:fe: 60:4c:48:fa:a9:f7:19:68:c6:5c:20:b0:17:db:be:25:49:2e: 53:c8:6a:2e:97:50:f5:58:32:1a:bf:7b:f4:f1:93:39:ca:2e: 86:ca:d8:cc:d3:ed:50:c7:74:7e:6c:e6:62:b5:63:59:d1:98: 4d:0f:47:68:85:4c:c0:1b:57:99:4f:3c:0a:8b:e8:9c:c4:8b: 8e:80:64:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDq6J+Dnt0UVgFDrBusyVw2n4j/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFFMTU4MUVDN0RGRTY1RjVFOTlBQTYxMzQ3NUQ4NTQy ODA4QzQ2QTAeFw0yNjA1MTIwNTE1MzhaFw0yNjA1MTMwNjQwMzhaMDMxMTAvBgNV BAMTKEQzNEFFMzUzQ0JBODRGRjk5NkVEQTM5OTQwQjJDNzQ5NkQwMDQyQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0BWacZ0/K65MUbWoaTofl3oVH pqCr6i4phwTVkhCIoCBwcw2uu6X0W+4NXlGJTWVbystmn6J3J++OF6AZlGW4rh9s /voVbuIX4ASP08HMlUxlrxK57ntSRba9zA2WfAKo4U0tWD8Em7kYaUEiOxBaCL7K SFE2DYGPPgvQziDtibZ/zf0lN8aTRjQlUb49tzxI4hvQhIHd54pCx71rObMU7TGe 5FV2ekhlRSP1+oLO10VpOlBh86/L4sCIplPALgxd8hxkeqsWNDFz32A1onp3Mo+z 5IaZ7rfjQL+1WvtaJo323Po2h3inlz3RxHdUubaiqXoDlClvQsOALbhrC4adAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU00rjU8uoT/mW7aOZQLLHSW0AQqowHwYDVR0j BBgwFoAUSuFYHsff5l9emaphNHXYVCgIxGowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThjZWQxOGQtYTdjYy00YjQ0LWFmNGEtODVmMzA0ZjllYjZjLzAvNEFFMTU4MUVD N0RGRTY1RjVFOTlBQTYxMzQ3NUQ4NTQyODA4QzQ2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QUUxNTgxRUM3REZFNjVGNUU5OUFBNjEzNDc1RDg1NDI4MDhD NDZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThjZWQxOGQtYTdjYy00YjQ0LWFm NGEtODVmMzA0ZjllYjZjLzAvNEFFMTU4MUVDN0RGRTY1RjVFOTlBQTYxMzQ3NUQ4 NTQyODA4QzQ2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjnXl/CQYL5dOcafJgyvOsALpSqae9WmB3r djE3cw6/kD1en+ccohuPUxB8iASsdclrM7lOE4Krauu9otdSmmbAMKBsHGzGh6uw ycgxNBSCAlCiMpz3LexEdBhf6g2Uyr5TzQKtMatlu+gUhhx+SYsgz8++v+1P7xBl 2QyUYv58SlIsN83uJzPJShz1xiunUSbNhnRsmJOG8/7LTgoFAv3RxV+TN3H8TFEH avvNPfgZtlb8/mBMSPqp9xloxlwgsBfbviVJLlPIai6XUPVYMhq/e/TxkznKLobK 2MzT7VDHdH5s5mK1Y1nRmE0PR2iFTMAbV5lPPAqL6JzEi46AZLU= -----END CERTIFICATE-----Generated at Tue May 12 22:13:02 2026 by rpki-client