$ rpki-client -vvf rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft File: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft (raw, json) Hash identifier: tJ/3KKJTMM2kJ5c1yOYopO6i0qAPwYFmIPnoeaPWIZg= Subject key identifier: D7:C1:53:6A:0B:42:3A:58:9D:0E:12:EC:8E:0B:4C:EF:1F:E5:34:FD Authority key identifier: 4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 Certificate issuer: /CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Certificate serial: 18068BCE490A62AE0C3BEE4C9B9D87968589CAAF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft Manifest number: 15 Signing time: Sun 17 May 2026 06:36:08 +0000 Manifest this update: Sun 17 May 2026 06:31:08 +0000 Manifest next update: Mon 18 May 2026 07:54:08 +0000 Files and hashes: 1: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl (hash: p6rLj6Ng3ok+Y0fAmZvVq28fzmyCHJDzdK2yxO/Qe3I=) 2: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: Nzw87BQmmq5JXKfqP++4H/0NcBCIzysxSEpNOfcwqIA=) 3: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: xFJ6YkI92aDNdIdb2cb47Lr1FqvCvQqQCoyTJtEq2Co=) 4: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: 2oQBF0OAu+x3jbAGDBl7jZuo1w7C20ONHzk/GqcpbO8=) 5: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ZDLtfAp4S3OvopOek/8l4bhhMLZjILy0rUvNj5yf6Os=) 6: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: 3oF8VGb692CsHNpL5bkpsSKeUmhwgndjMYRrWhUNaPo=) 7: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: 3V56nSlss2prGjnCh8yc0uAcD+eYYddXTnS1OxpPoV0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 05:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:06:8b:ce:49:0a:62:ae:0c:3b:ee:4c:9b:9d:87:96:85:89:ca:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Validity Not Before: May 17 06:31:08 2026 GMT Not After : May 18 07:54:08 2026 GMT Subject: CN=D7C1536A0B423A589D0E12EC8E0B4CEF1FE534FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:66:05:04:9e:95:ee:fc:24:0d:45:81:85:b7: b0:ab:16:82:a7:2d:79:70:8d:63:9d:f7:f6:32:f4: ca:bb:83:40:42:61:98:e4:4a:3e:4a:ba:71:55:db: c4:98:82:21:d1:d4:d0:a0:7b:c0:76:85:23:9f:95: c5:25:f3:50:5d:07:17:17:27:5d:78:87:4f:f3:d4: 29:54:cf:7a:b5:da:bf:46:10:ee:39:bc:a1:a1:be: 17:2b:cb:4f:1a:c6:90:09:17:8f:8e:e1:70:5e:a6: b2:57:44:ef:c6:68:59:be:c1:15:ab:87:0d:bf:dc: 4b:86:15:1f:7d:2b:69:9b:09:a5:83:03:b3:9b:86: f0:2f:85:22:ab:8d:99:5d:d5:46:d1:72:e4:52:c4: 87:e1:3d:cc:8a:0a:8d:2b:f1:ef:8a:95:8e:6e:83: 7c:67:7e:1b:af:8c:72:9e:c4:4c:1a:1e:e7:63:12: a7:42:1d:b3:f6:77:aa:2b:24:0e:6e:eb:3a:66:c9: 72:b3:9a:7a:75:ce:72:01:7e:29:1c:bc:75:05:1d: 74:e5:d9:f2:46:83:a2:22:3f:57:ee:65:19:d8:fd: 94:48:d8:4a:04:39:d8:f1:f7:24:d2:50:77:e5:e0: 7c:65:70:1e:9a:86:11:af:11:48:37:41:d9:48:e4: af:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C1:53:6A:0B:42:3A:58:9D:0E:12:EC:8E:0B:4C:EF:1F:E5:34:FD X509v3 Authority Key Identifier: keyid:4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:84:ee:9d:d1:03:65:41:a9:11:3c:3c:a4:2c:96:2e:dd:2d: 3f:a6:5c:19:fe:8c:e7:b2:6f:7f:12:17:dc:77:fd:de:b3:e5: ab:12:1e:be:04:ad:08:a7:2f:fb:fc:44:6d:98:9d:b9:c7:d1: e3:a3:a9:ee:93:c2:30:0a:5d:2e:1b:2e:fb:4f:c0:7a:18:98: 58:6f:22:3a:aa:8d:b1:b1:5a:24:1b:3f:19:db:56:cb:5c:ce: 6a:99:dd:9d:1c:a2:31:c5:2e:35:d1:17:05:37:a3:60:f3:93: 83:11:85:fb:55:9b:3e:21:a4:36:41:e2:fe:ac:89:d0:27:bb: 68:50:f6:15:3f:33:4e:3b:7f:86:b7:cc:1f:df:d8:7f:0b:d2: 16:be:d5:b7:ab:37:cc:cf:7b:6e:2e:c0:f1:27:a0:6b:89:b6: 0c:48:88:90:a5:67:44:4b:ed:b7:e7:49:f2:28:5d:40:cc:83: 5e:d0:59:bf:62:32:d2:4e:62:0a:e2:47:a2:19:a7:fc:02:8e: 9d:36:8d:f9:d8:cb:bf:21:59:3a:07:01:bc:05:5c:0e:3b:75: 93:85:ac:9f:d3:7c:32:9e:37:52:77:07:b8:17:81:9a:14:8e: a4:0b:63:85:d0:57:af:97:aa:71:db:51:4d:e8:33:cf:d8:ef: 62:ba:4a:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGAaLzkkKYq4MO+5Mm52HloWJyq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMx RjI3RTU4NDAeFw0yNjA1MTcwNjMxMDhaFw0yNjA1MTgwNzU0MDhaMDMxMTAvBgNV BAMTKEQ3QzE1MzZBMEI0MjNBNTg5RDBFMTJFQzhFMEI0Q0VGMUZFNTM0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVZgUEnpXu/CQNRYGFt7CrFoKn LXlwjWOd9/Yy9Mq7g0BCYZjkSj5KunFV28SYgiHR1NCge8B2hSOflcUl81BdBxcX J114h0/z1ClUz3q12r9GEO45vKGhvhcry08axpAJF4+O4XBeprJXRO/GaFm+wRWr hw2/3EuGFR99K2mbCaWDA7ObhvAvhSKrjZld1UbRcuRSxIfhPcyKCo0r8e+KlY5u g3xnfhuvjHKexEwaHudjEqdCHbP2d6orJA5u6zpmyXKzmnp1znIBfikcvHUFHXTl 2fJGg6IiP1fuZRnY/ZRI2EoEOdjx9yTSUHfl4HxlcB6ahhGvEUg3QdlI5K/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU18FTagtCOlidDhLsjgtM7x/lNP0wHwYDVR0j BBgwFoAUSsXcQXKq9DGWIvThwD/+Qx8n5YQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQwMTQzNmItMDI2Ny00NjZiLWEzNDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3 MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMxRjI3RTU4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUM1REM0MTcyQUFGNDMxOTYyMkY0RTFDMDNGRkU0MzFGMjdF NTg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQwMTQzNmItMDI2Ny00NjZiLWEz NDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZF NDMxRjI3RTU4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6E7p3RA2VBqRE8PKQsli7dLT+mXBn+jOey b38SF9x3/d6z5asSHr4ErQinL/v8RG2YnbnH0eOjqe6TwjAKXS4bLvtPwHoYmFhv IjqqjbGxWiQbPxnbVstczmqZ3Z0cojHFLjXRFwU3o2Dzk4MRhftVmz4hpDZB4v6s idAnu2hQ9hU/M047f4a3zB/f2H8L0ha+1berN8zPe24uwPEnoGuJtgxIiJClZ0RL 7bfnSfIoXUDMg17QWb9iMtJOYgriR6IZp/wCjp02jfnYy78hWToHAbwFXA47dZOF rJ/TfDKeN1J3B7gXgZoUjqQLY4XQV6+XqnHbUU3oM8/Y72K6Srg= -----END CERTIFICATE-----Generated at Sun May 17 10:55:03 2026 by rpki-client