$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft File: 489207A82A4F1A3B6758139186A867CE751999B7.mft (raw, json) Hash identifier: Mw3DoIpzCc7cFahymPfqsspN2rF3iGcTYOHhxIMCWtI= Subject key identifier: C0:B9:72:25:C8:66:72:AA:0F:F5:D1:97:A4:44:D9:DE:77:0A:62:7A Authority key identifier: 48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7 Certificate issuer: /CN=489207A82A4F1A3B6758139186A867CE751999B7 Certificate serial: 3AA686084EC1469C4F31A04F6B95EE222412F4B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:08:34 +0000 Manifest this update: Wed 13 May 2026 00:03:34 +0000 Manifest next update: Thu 14 May 2026 00:33:34 +0000 Files and hashes: 1: 489207A82A4F1A3B6758139186A867CE751999B7.crl (hash: s6FlhTt5uF53WBysN0eoVMjiLcQTfW2gMj2c34q+dTE=) 2: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: FB472ElcOvg/ylc+xiayFIvGK9fHP8MxdL79QVbGvdA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a6:86:08:4e:c1:46:9c:4f:31:a0:4f:6b:95:ee:22:24:12:f4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489207A82A4F1A3B6758139186A867CE751999B7 Validity Not Before: May 13 00:03:34 2026 GMT Not After : May 14 00:33:34 2026 GMT Subject: CN=C0B97225C86672AA0FF5D197A444D9DE770A627A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c4:69:95:c1:0a:9a:63:5b:67:43:71:4f:76: 68:b1:80:b9:51:d9:98:5c:89:67:ba:f3:9b:2b:9c: 36:d9:60:34:56:17:e8:43:36:4b:0e:d3:63:ad:be: 50:35:29:f1:3b:50:7a:8b:ba:7e:27:4b:14:4c:3f: ad:f0:0e:c1:36:76:9a:1c:88:e1:63:ae:ac:4f:16: 6b:69:3e:73:cb:f3:a9:a8:ab:f1:c0:c9:72:f5:04: 7c:7e:e4:f8:30:82:9c:13:91:87:69:00:33:4f:bf: eb:63:2f:74:31:b7:16:ae:28:0b:0f:b3:18:dc:ca: af:06:1f:70:f6:e9:d7:74:e0:cc:32:a0:f7:9b:d2: 8a:51:69:c8:b6:08:63:89:53:c7:41:28:46:04:84: 0d:91:84:c7:24:94:e0:52:97:17:ef:6d:b0:69:62: 0b:c1:2b:61:dc:a1:09:ee:3d:10:4f:e8:84:d8:31: cd:76:1b:38:29:a3:94:bd:b4:8d:ec:9a:b2:e4:d3: 6d:0c:9e:36:9b:3d:17:fb:7b:c0:8e:3d:35:50:7f: 05:49:71:d9:9a:4e:57:85:9d:ed:76:0d:f5:db:e1: 2d:ef:58:f7:59:3b:57:0d:20:5c:10:54:a1:3a:4c: ca:26:1a:62:b8:92:50:cc:d1:41:ea:63:16:b2:2a: 31:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B9:72:25:C8:66:72:AA:0F:F5:D1:97:A4:44:D9:DE:77:0A:62:7A X509v3 Authority Key Identifier: keyid:48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:cb:8d:69:b6:4a:02:1d:b8:d8:b9:17:c3:2c:84:2a:65:dd: 34:77:9e:d8:e8:75:54:0b:da:99:19:b2:74:ce:e7:9d:8b:67: b1:bd:7b:86:75:ec:97:2f:83:98:e4:b6:af:32:a0:ff:58:f0: 67:62:49:54:23:13:c1:4c:03:91:04:65:04:c3:50:1a:54:a9: b5:d8:26:87:44:f2:0a:3d:09:0f:97:f9:f8:c7:82:9a:04:57: 84:47:6a:7c:dd:72:7a:b8:b8:e1:0b:08:e3:c3:d5:7a:24:58: d0:50:62:3a:d7:a6:85:a0:64:5f:55:ae:bf:fc:93:be:d4:11: 95:0f:eb:09:ab:8d:da:fe:99:93:a1:d4:ab:6a:fc:f4:5a:8b: 2d:21:31:f1:f9:e5:da:9b:c9:3f:09:2b:b1:6a:4d:6b:2e:30: ca:f3:b5:cf:81:b0:6a:79:95:50:44:87:f7:ca:e0:65:de:ec: b2:bc:48:0e:90:1b:b4:e0:07:d2:01:dc:da:d9:7c:f5:f6:2a: 64:73:6f:8c:86:47:72:e3:9a:d2:1f:2b:47:46:68:24:89:bb: 49:a7:3c:6d:2f:50:c3:73:10:9d:e3:7d:61:d6:1a:50:b7:4f: 9f:55:04:75:ea:7e:d8:29:91:45:e9:24:56:94:c8:c1:b0:ca: 46:5e:73:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOqaGCE7BRpxPMaBPa5XuIiQS9LgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3 NTE5OTlCNzAeFw0yNjA1MTMwMDAzMzRaFw0yNjA1MTQwMDMzMzRaMDMxMTAvBgNV BAMTKEMwQjk3MjI1Qzg2NjcyQUEwRkY1RDE5N0E0NDREOURFNzcwQTYyN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSxGmVwQqaY1tnQ3FPdmixgLlR 2ZhciWe685srnDbZYDRWF+hDNksO02OtvlA1KfE7UHqLun4nSxRMP63wDsE2dpoc iOFjrqxPFmtpPnPL86moq/HAyXL1BHx+5PgwgpwTkYdpADNPv+tjL3QxtxauKAsP sxjcyq8GH3D26dd04MwyoPeb0opRaci2CGOJU8dBKEYEhA2RhMcklOBSlxfvbbBp YgvBK2HcoQnuPRBP6ITYMc12Gzgpo5S9tI3smrLk020MnjabPRf7e8COPTVQfwVJ cdmaTleFne12DfXb4S3vWPdZO1cNIFwQVKE6TMomGmK4klDM0UHqYxayKjF3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwLlyJchmcqoP9dGXpETZ3ncKYnowHwYDVR0j BBgwFoAUSJIHqCpPGjtnWBORhqhnznUZmbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiNDdhYjYtZDFmMS00ZDJlLTljZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgy QTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3NTE5OTlCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80ODkyMDdBODJBNEYxQTNCNjc1ODEzOTE4NkE4NjdDRTc1MTk5 OUI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3 Q0U3NTE5OTlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHLjWm2SgIduNi5F8MshCpl3TR3ntjodVQL 2pkZsnTO552LZ7G9e4Z17Jcvg5jktq8yoP9Y8GdiSVQjE8FMA5EEZQTDUBpUqbXY JodE8go9CQ+X+fjHgpoEV4RHanzdcnq4uOELCOPD1XokWNBQYjrXpoWgZF9Vrr/8 k77UEZUP6wmrjdr+mZOh1Ktq/PRaiy0hMfH55dqbyT8JK7FqTWsuMMrztc+BsGp5 lVBEh/fK4GXe7LK8SA6QG7TgB9IB3NrZfPX2KmRzb4yGR3LjmtIfK0dGaCSJu0mn PG0vUMNzEJ3jfWHWGlC3T59VBHXqftgpkUXpJFaUyMGwykZecxk= -----END CERTIFICATE-----Generated at Wed May 13 02:40:40 2026 by rpki-client