$ rpki-client -vvf rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft File: 0446D571B5FD57D22786B0872C74829904EAAB9F.mft (raw, json) Hash identifier: SGfKryKTfLL/UmSKXAE6wwpLfdip7G+/vdf56u/G5Y4= Subject key identifier: AF:77:5B:C6:41:55:40:E2:D0:9E:91:3E:8D:3B:A5:6E:1C:17:9D:56 Authority key identifier: 04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F Certificate issuer: /CN=0446D571B5FD57D22786B0872C74829904EAAB9F Certificate serial: 16CB2999DF12B02D8F249DBF45DF274709EC30E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft Manifest number: 05 Signing time: Tue 05 May 2026 08:51:13 +0000 Manifest this update: Tue 05 May 2026 08:46:13 +0000 Manifest next update: Wed 06 May 2026 10:39:13 +0000 Files and hashes: 1: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: HRGJ5g7ob2C6LusF30ZyigavwWaGRf5eI1zjWJC6sRM=) 2: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: +WRWxjAdOAaW9ozUiBysIyJuRRO3IGup2Zv05rrzhoE=) 3: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: thRIrZ3+blRuGrSxkOAlYh2ltCPP95UB2kgDE2dzqA4=) 4: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: ecVKsNk2S0Aj+ACqfjrNpX8pv8RXijVnKVy2HYKiIA0=) 5: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: kaGHUTZEr4BI633+KX6qHXh8OmneAQRf7YHLIlmtSgU=) 6: 0446D571B5FD57D22786B0872C74829904EAAB9F.crl (hash: E0JZZIN3OIP0e1pRzP9V2o6wEYgtKu+19Ki8G7abts4=) 7: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: aC4RLZpJ1CIL1Btz47Fr7aIh879KOm3isCxWG9+kLpI=) 8: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: JHRytoLKe3DoWLn6hLaaCfBPYIXsYxniAiTb3PYHUfQ=) 9: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: RykC0CgepUzoO/XGaABN4CTb5JdoVGJrzeKzsVUCn3M=) 10: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: K+7+KqgCp4d18TVZTPxmAsUlKSyTdPx9xS3oBJGcNok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:cb:29:99:df:12:b0:2d:8f:24:9d:bf:45:df:27:47:09:ec:30:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0446D571B5FD57D22786B0872C74829904EAAB9F Validity Not Before: May 5 08:46:13 2026 GMT Not After : May 6 10:39:13 2026 GMT Subject: CN=AF775BC6415540E2D09E913E8D3BA56E1C179D56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2e:99:41:1c:d6:98:18:c7:40:3d:c7:4a:52: 27:2c:ab:73:9a:65:77:71:dd:0d:f0:90:c6:c5:c3: 82:11:6d:4a:da:35:de:63:96:a1:be:a1:69:19:ff: f7:b9:c4:dc:f9:bf:1e:30:d9:2b:c0:ff:e1:50:98: 52:e2:41:f1:fc:1d:5f:20:a9:16:d7:00:6b:3e:92: f8:7f:60:62:5e:6a:90:32:b8:19:27:d9:02:78:9d: 80:b0:5b:2e:aa:b4:6c:ab:6f:68:1a:25:92:fd:2e: b8:51:05:2e:8a:4b:8a:84:4c:86:8a:f7:8c:a3:dc: 40:6b:3e:3a:31:1d:24:27:df:83:7c:b6:02:54:7a: 60:8c:c3:fa:d7:99:98:53:ef:8a:17:d0:01:45:b5: 07:82:37:8a:c6:3a:ba:78:6a:4e:87:d5:e9:77:5b: 4c:45:ad:e9:99:43:8b:27:86:31:da:38:88:73:ee: f3:30:f1:bd:74:d0:a7:f0:ca:fd:47:1f:a2:56:b9: 59:de:ff:66:73:4b:33:ad:0e:4d:5c:50:b9:b6:1d: ff:cd:56:14:36:fc:80:58:6e:5c:4c:81:ca:d8:e2: 3e:55:10:1e:e9:06:0f:ea:47:4a:2c:91:bf:ff:72: ae:cb:61:26:7a:96:fb:c8:51:24:dc:b9:ef:80:68: 31:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:77:5B:C6:41:55:40:E2:D0:9E:91:3E:8D:3B:A5:6E:1C:17:9D:56 X509v3 Authority Key Identifier: keyid:04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d6:6a:a9:fb:cc:d4:2a:2c:83:b1:8b:0e:12:22:86:66:e4: 0d:40:20:23:91:fc:82:0e:8d:d0:e8:40:97:2a:f5:3e:4a:18: 2b:78:6e:b8:bc:cc:d4:3a:21:f4:14:90:da:88:3d:bc:92:4c: c7:37:ac:6c:1e:90:54:2e:67:19:6a:69:03:a0:63:48:24:f5: 8d:b8:ba:ce:51:bc:53:2c:38:93:f8:ed:74:e6:4d:31:f9:cd: 3d:14:e6:97:c8:45:bb:36:6f:35:1f:a1:45:de:4a:e2:d1:4e: 46:09:5a:6e:a1:8e:78:88:b6:26:0a:4e:df:c8:66:60:9f:76: 7c:b4:29:fe:46:3c:07:f4:c1:fd:51:2c:7d:50:03:d1:a1:8d: c3:3e:42:3d:b8:c8:14:81:25:7e:8a:30:76:83:76:ef:62:8f: bd:64:73:38:7f:11:4e:7e:6e:68:c4:32:31:d3:a7:65:45:7a: 92:3a:b4:ff:c8:27:9f:ad:a3:0e:b8:46:02:18:c1:63:51:20: bd:07:1e:2f:ea:b5:ab:2a:06:96:31:e7:9b:f5:ea:08:53:db: da:a9:1b:61:25:b3:cd:8a:f4:c8:9a:f0:5d:69:56:dc:0a:ab: ad:bb:33:65:22:7a:92:26:04:d1:aa:ec:60:89:c5:f8:dc:fe: e3:ca:eb:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFsspmd8SsC2PJJ2/Rd8nRwnsMOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ0NkQ1NzFCNUZENTdEMjI3ODZCMDg3MkM3NDgyOTkw NEVBQUI5RjAeFw0yNjA1MDUwODQ2MTNaFw0yNjA1MDYxMDM5MTNaMDMxMTAvBgNV BAMTKEFGNzc1QkM2NDE1NTQwRTJEMDlFOTEzRThEM0JBNTZFMUMxNzlENTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOLplBHNaYGMdAPcdKUicsq3Oa ZXdx3Q3wkMbFw4IRbUraNd5jlqG+oWkZ//e5xNz5vx4w2SvA/+FQmFLiQfH8HV8g qRbXAGs+kvh/YGJeapAyuBkn2QJ4nYCwWy6qtGyrb2gaJZL9LrhRBS6KS4qETIaK 94yj3EBrPjoxHSQn34N8tgJUemCMw/rXmZhT74oX0AFFtQeCN4rGOrp4ak6H1el3 W0xFremZQ4snhjHaOIhz7vMw8b100Kfwyv1HH6JWuVne/2ZzSzOtDk1cULm2Hf/N VhQ2/IBYblxMgcrY4j5VEB7pBg/qR0oskb//cq7LYSZ6lvvIUSTcue+AaDHhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr3dbxkFVQOLQnpE+jTulbhwXnVYwHwYDVR0j BBgwFoAUBEbVcbX9V9InhrCHLHSCmQTqq58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWMyODk3MDYtYTRmNC00ZTFmLTlhNmUtMDFjOWM1M2NkOGY5LzAvMDQ0NkQ1NzFC NUZENTdEMjI3ODZCMDg3MkM3NDgyOTkwNEVBQUI5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDQ2RDU3MUI1RkQ1N0QyMjc4NkIwODcyQzc0ODI5OTA0RUFB QjlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWMyODk3MDYtYTRmNC00ZTFmLTlh NmUtMDFjOWM1M2NkOGY5LzAvMDQ0NkQ1NzFCNUZENTdEMjI3ODZCMDg3MkM3NDgy OTkwNEVBQUI5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXWaqn7zNQqLIOxiw4SIoZm5A1AICOR/IIO jdDoQJcq9T5KGCt4bri8zNQ6IfQUkNqIPbySTMc3rGwekFQuZxlqaQOgY0gk9Y24 us5RvFMsOJP47XTmTTH5zT0U5pfIRbs2bzUfoUXeSuLRTkYJWm6hjniItiYKTt/I ZmCfdny0Kf5GPAf0wf1RLH1QA9GhjcM+Qj24yBSBJX6KMHaDdu9ij71kczh/EU5+ bmjEMjHTp2VFepI6tP/IJ5+tow64RgIYwWNRIL0HHi/qtasqBpYx55v16ghT29qp G2Els82K9Mia8F1pVtwKq627M2UiepImBNGq7GCJxfjc/uPK65k= -----END CERTIFICATE-----Generated at Wed May 6 02:46:29 2026 by rpki-client