$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft File: 14649B106FA0C411D7FCD73A4B0147226E8A8454.mft (raw, json) Hash identifier: b4qqgaZQWuD3HJH2UaKoONTdxe2AxiM0UeqPMoBL860= Subject key identifier: 38:E5:7C:BE:FD:EB:8E:8C:FC:20:E9:E9:1B:C3:08:34:09:ED:B2:04 Authority key identifier: 14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54 Certificate issuer: /CN=14649B106FA0C411D7FCD73A4B0147226E8A8454 Certificate serial: 338D76A6568BFDBA1BFEA0EEC6F17A9E79F59FB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft Manifest number: 12 Signing time: Fri 15 May 2026 00:25:33 +0000 Manifest this update: Fri 15 May 2026 00:20:33 +0000 Manifest next update: Sat 16 May 2026 02:26:33 +0000 Files and hashes: 1: 14649B106FA0C411D7FCD73A4B0147226E8A8454.crl (hash: CRI3H4ilaubqehbTlw8qN88L3soLPWFEAcZGnl53muI=) 2: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (hash: HpCznd8LAemIm49TlwLV1GhAVKIU4sZ5BY+7TeR1EA4=) 3: 3130332e38392e3136342e302f32342d3234203d3e20313333383030.roa (hash: eR7s3iDJUbgwn7vG0iEll3YQrHiAYjHNsvD28zhjxXY=) 4: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (hash: j+ssfk4JgFO6Pb/CGHEOZfos8czQhoSwZB6YERcUzUI=) 5: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (hash: O5MLHMcohhvApO1/L1RvpM2jYbsZVQ8eLBzNQkddTHQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 May 2026 20:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:8d:76:a6:56:8b:fd:ba:1b:fe:a0:ee:c6:f1:7a:9e:79:f5:9f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14649B106FA0C411D7FCD73A4B0147226E8A8454 Validity Not Before: May 15 00:20:33 2026 GMT Not After : May 16 02:26:33 2026 GMT Subject: CN=38E57CBEFDEB8E8CFC20E9E91BC3083409EDB204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:97:d5:2a:e1:a2:2a:2e:18:e9:5b:39:39:c3: 28:39:22:e3:76:82:28:18:32:6c:8b:42:0c:7c:5f: 2b:80:10:ec:72:52:3f:6a:d8:41:1a:5c:3a:5c:a7: 5f:da:c7:af:be:35:c8:f7:99:1f:08:d7:16:65:4f: ce:ae:d0:e6:96:88:8a:1b:da:c8:1e:4c:7f:a1:6f: 87:00:7a:f4:fa:eb:23:22:6c:c9:3f:3c:a5:74:30: 24:f6:d1:b7:69:ad:cd:a6:91:eb:08:93:f7:22:fc: 32:75:49:af:18:77:ae:f7:a0:ed:40:55:08:00:67: 97:f1:73:83:49:32:cc:a9:6e:7b:97:f2:70:f1:c7: 8d:21:f2:d2:79:87:23:f1:02:9c:57:2a:3f:50:77: 7c:6e:02:ed:e0:62:dd:e7:9d:be:fc:b3:1d:14:6c: d7:55:31:f4:db:d8:aa:da:ea:f3:ed:05:72:ac:a1: 79:8c:aa:23:ac:52:93:87:eb:7e:f9:f9:ba:90:24: 85:3c:fe:49:38:29:0b:33:a5:64:0a:1b:09:5a:0d: 61:46:9d:e4:ce:d1:33:68:12:ba:91:03:d8:82:c9: a8:9e:ec:21:a7:b3:33:ff:7b:00:38:53:5e:e0:51: f5:91:d5:cc:8b:39:64:17:81:f2:a2:18:fe:3a:1f: b2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E5:7C:BE:FD:EB:8E:8C:FC:20:E9:E9:1B:C3:08:34:09:ED:B2:04 X509v3 Authority Key Identifier: keyid:14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d3:b1:46:b1:26:00:05:33:6c:4e:53:1a:f7:10:bc:d1:04: 8f:5d:b3:68:00:8a:d4:34:be:ce:4e:89:d2:d7:ed:fb:39:44: d0:3c:df:4d:c1:bf:9f:67:ba:2c:aa:21:6b:ed:4d:dc:ac:79: fe:b6:fa:48:57:d6:f7:7d:49:55:1d:e7:95:51:04:3a:0a:2c: ba:23:00:10:43:ec:c5:76:30:19:29:40:77:4a:06:aa:f7:cf: eb:df:fa:3f:3d:ee:13:69:2e:37:7a:dd:a4:98:c8:20:b5:97: 5f:a9:58:15:d4:4a:eb:29:f9:ad:04:97:5a:ec:fc:0c:85:57: ff:1e:81:63:f5:fb:60:cd:bc:df:fa:7d:18:77:c6:86:4a:47: e8:e5:4e:62:db:2e:68:cb:d9:4a:6f:98:88:f3:af:b9:c0:f7: 09:a9:58:c6:c8:fc:98:6c:4e:ba:6a:c6:71:80:30:aa:9d:14: 8b:1d:9c:46:bb:5b:b3:92:5c:7e:6d:4b:8d:b0:c2:7c:99:ff: ac:d6:62:fd:5f:78:54:43:9a:e0:2b:e2:b8:8d:32:5f:3b:28: fe:2e:63:af:cc:ed:f6:5e:23:db:9c:f8:0f:0e:89:18:47:e5: e0:64:9b:8e:22:9a:db:f7:d8:84:cd:af:54:83:97:4e:1c:46: 44:af:5a:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM412plaL/bob/qDuxvF6nnn1n7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2NDlCMTA2RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2 RThBODQ1NDAeFw0yNjA1MTUwMDIwMzNaFw0yNjA1MTYwMjI2MzNaMDMxMTAvBgNV BAMTKDM4RTU3Q0JFRkRFQjhFOENGQzIwRTlFOTFCQzMwODM0MDlFREIyMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3l9Uq4aIqLhjpWzk5wyg5IuN2 gigYMmyLQgx8XyuAEOxyUj9q2EEaXDpcp1/ax6++Ncj3mR8I1xZlT86u0OaWiIob 2sgeTH+hb4cAevT66yMibMk/PKV0MCT20bdprc2mkesIk/ci/DJ1Sa8Yd673oO1A VQgAZ5fxc4NJMsypbnuX8nDxx40h8tJ5hyPxApxXKj9Qd3xuAu3gYt3nnb78sx0U bNdVMfTb2Kra6vPtBXKsoXmMqiOsUpOH6375+bqQJIU8/kk4KQszpWQKGwlaDWFG neTO0TNoErqRA9iCyaie7CGnszP/ewA4U17gUfWR1cyLOWQXgfKiGP46H7JlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOOV8vv3rjoz8IOnpG8MINAntsgQwHwYDVR0j BBgwFoAUFGSbEG+gxBHX/Nc6SwFHIm6KhFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQxNzZkZGQtYTk4MC00M2Q2LTk0YTctOTVlZWRhNTM5NjY1LzAvMTQ2NDlCMTA2 RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2RThBODQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDY0OUIxMDZGQTBDNDExRDdGQ0Q3M0E0QjAxNDcyMjZFOEE4 NDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQxNzZkZGQtYTk4MC00M2Q2LTk0 YTctOTVlZWRhNTM5NjY1LzAvMTQ2NDlCMTA2RkEwQzQxMUQ3RkNENzNBNEIwMTQ3 MjI2RThBODQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvTsUaxJgAFM2xOUxr3ELzRBI9ds2gAitQ0 vs5OidLX7fs5RNA8303Bv59nuiyqIWvtTdysef62+khX1vd9SVUd55VRBDoKLLoj ABBD7MV2MBkpQHdKBqr3z+vf+j897hNpLjd63aSYyCC1l1+pWBXUSusp+a0El1rs /AyFV/8egWP1+2DNvN/6fRh3xoZKR+jlTmLbLmjL2UpvmIjzr7nA9wmpWMbI/Jhs TrpqxnGAMKqdFIsdnEa7W7OSXH5tS42wwnyZ/6zWYv1feFRDmuAr4riNMl87KP4u Y6/M7fZeI9uc+A8OiRhH5eBkm44imtv32ITNr1SDl04cRkSvWho= -----END CERTIFICATE-----Generated at Fri May 15 05:35:55 2026 by rpki-client