$ rpki-client -vvf rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft File: 4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft (raw, json) Hash identifier: hyJBu5xmT7Y5E/fVMjjfgBPIii15uOy6LJzqWMksELo= Subject key identifier: 6A:CA:33:6B:50:AE:9C:EE:44:A9:E2:5D:4A:50:0D:75:3C:B5:48:5C Authority key identifier: 45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36 Certificate issuer: /CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36 Certificate serial: 08EA65F9964CF432B2E078C84CA4CB35B6AF2FB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:01:39 +0000 Manifest this update: Tue 12 May 2026 19:56:39 +0000 Manifest next update: Wed 13 May 2026 20:48:39 +0000 Files and hashes: 1: 3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa (hash: P9vNVfY/gnSAC1gUwy4cPedcB+rYejwkV7mz34Jb55c=) 2: 4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl (hash: UWjRxIswXIteGGs+IittXPooktBxa0Dmx48k/Bs/T/E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ea:65:f9:96:4c:f4:32:b2:e0:78:c8:4c:a4:cb:35:b6:af:2f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36 Validity Not Before: May 12 19:56:39 2026 GMT Not After : May 13 20:48:39 2026 GMT Subject: CN=6ACA336B50AE9CEE44A9E25D4A500D753CB5485C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6b:fd:fa:e4:4f:42:82:2f:a9:20:9a:a4:d1: 3b:d3:dd:c2:fc:06:37:7c:7a:28:ad:ed:a5:b8:2a: af:84:6f:5e:f8:1a:5b:50:8b:a3:e8:e6:66:f6:7b: b6:47:c2:d8:7a:1d:70:07:cb:37:d0:65:36:23:98: 6e:43:2d:42:94:72:62:b6:b0:eb:97:18:be:80:cc: 69:b5:c2:72:51:d7:36:76:e8:7b:87:10:38:93:97: 89:3a:1b:e1:3c:af:d6:b0:84:30:d1:a7:08:da:64: a4:27:b3:e3:0d:ae:34:b5:6e:7e:e9:99:cb:30:36: cb:84:55:9d:21:df:46:03:7f:3b:be:64:25:8c:5b: e9:04:ad:b1:4e:a5:ae:ba:54:0b:b3:4b:80:67:66: 4c:d6:10:78:fc:d7:a4:34:5c:55:4e:34:2f:ba:5f: c5:3c:8e:62:3b:9d:4f:5c:68:3a:8a:59:fc:4e:6b: e5:ac:fa:97:89:26:72:f6:21:8f:3f:56:58:28:6b: 4e:1d:b1:2d:fd:97:d8:fe:73:fd:a6:5b:8c:7a:a6: 72:25:5a:bd:57:00:75:89:07:67:5c:b3:e6:f4:c1: a0:b9:39:a3:88:95:7a:fc:af:59:61:8f:c5:f7:4d: f3:44:91:e6:7e:31:e2:92:a5:a1:17:2b:ab:78:bd: 07:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CA:33:6B:50:AE:9C:EE:44:A9:E2:5D:4A:50:0D:75:3C:B5:48:5C X509v3 Authority Key Identifier: keyid:45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:a6:75:fb:c0:14:20:da:de:9c:08:a9:68:9a:8e:c1:dd:a9: 64:bb:54:5d:71:81:b5:a0:08:96:06:2c:c5:b9:03:eb:6f:81: d9:7d:0a:04:6b:0e:5f:e7:00:33:e4:14:6d:b4:a3:af:1b:f7: 94:ee:e3:d5:69:b3:e4:a3:35:3a:d0:54:69:4d:b9:c8:1a:2b: 70:b1:a4:f9:28:bf:ff:76:81:69:10:3a:e1:32:fc:4c:5e:7b: 81:cb:90:d9:cc:60:43:13:9e:fc:32:07:6b:33:75:1f:49:f3: 59:8f:1f:cc:b1:b1:94:4c:c7:e7:ad:32:c3:be:a1:f5:16:0c: c9:a3:91:bc:96:35:23:c0:98:87:a8:2f:1a:aa:e2:15:35:c9: 27:24:41:fe:46:46:c0:5d:3e:d4:ae:ca:ab:c0:4b:10:2c:d4: ac:75:10:99:8d:6a:45:db:c4:4d:27:0a:6a:a7:78:48:25:17: e5:22:a0:7d:ca:59:ce:95:79:e4:1f:df:24:a7:b8:d8:85:7e: 40:e8:46:09:70:ea:08:f1:83:e0:10:70:7f:10:47:f8:95:c2: d2:5d:fc:e2:09:c2:e9:22:cd:e9:b7:e5:fe:95:0d:87:82:af: a1:06:e3:fd:57:e3:c4:f9:e7:99:ec:7f:f9:d1:1e:c3:93:17: 09:05:46:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCOpl+ZZM9DKy4HjITKTLNbavL7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzMkY4MDBBN0VCNUJDQjVEQjA1Njk5QzZEREFBN0Y5 NUZBRUMzNjAeFw0yNjA1MTIxOTU2MzlaFw0yNjA1MTMyMDQ4MzlaMDMxMTAvBgNV BAMTKDZBQ0EzMzZCNTBBRTlDRUU0NEE5RTI1RDRBNTAwRDc1M0NCNTQ4NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDza/365E9Cgi+pIJqk0TvT3cL8 Bjd8eiit7aW4Kq+Eb174GltQi6Po5mb2e7ZHwth6HXAHyzfQZTYjmG5DLUKUcmK2 sOuXGL6AzGm1wnJR1zZ26HuHEDiTl4k6G+E8r9awhDDRpwjaZKQns+MNrjS1bn7p mcswNsuEVZ0h30YDfzu+ZCWMW+kErbFOpa66VAuzS4BnZkzWEHj816Q0XFVONC+6 X8U8jmI7nU9caDqKWfxOa+Ws+peJJnL2IY8/Vlgoa04dsS39l9j+c/2mW4x6pnIl Wr1XAHWJB2dcs+b0waC5OaOIlXr8r1lhj8X3TfNEkeZ+MeKSpaEXK6t4vQf9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUasoza1CunO5EqeJdSlANdTy1SFwwHwYDVR0j BBgwFoAURTL4AKfrW8tdsFaZxt2qf5X67DYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg0MjNiOGEtZmUyMi00M2FkLTk1MDctMWE5OWFiYmE3ZDk0LzAvNDUzMkY4MDBB N0VCNUJDQjVEQjA1Njk5QzZEREFBN0Y5NUZBRUMzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NTMyRjgwMEE3RUI1QkNCNURCMDU2OTlDNkREQUE3Rjk1RkFF QzM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg0MjNiOGEtZmUyMi00M2FkLTk1 MDctMWE5OWFiYmE3ZDk0LzAvNDUzMkY4MDBBN0VCNUJDQjVEQjA1Njk5QzZEREFB N0Y5NUZBRUMzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWmdfvAFCDa3pwIqWiajsHdqWS7VF1xgbWg CJYGLMW5A+tvgdl9CgRrDl/nADPkFG20o68b95Tu49Vps+SjNTrQVGlNucgaK3Cx pPkov/92gWkQOuEy/Exee4HLkNnMYEMTnvwyB2szdR9J81mPH8yxsZRMx+etMsO+ ofUWDMmjkbyWNSPAmIeoLxqq4hU1ySckQf5GRsBdPtSuyqvASxAs1Kx1EJmNakXb xE0nCmqneEglF+UioH3KWc6VeeQf3ySnuNiFfkDoRglw6gjxg+AQcH8QR/iVwtJd /OIJwukizem35f6VDYeCr6EG4/1X48T555nsf/nRHsOTFwkFRu0= -----END CERTIFICATE-----Generated at Tue May 12 22:46:49 2026 by rpki-client