$ rpki-client -vvf rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft File: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft (raw, json) Hash identifier: S9gJHPu5/FQROw27+CFqiewoGkHjFYlUJ0nXw47cQ9M= Subject key identifier: FC:3D:BF:9A:DC:54:F2:EA:FA:C4:55:6A:E7:ED:91:DE:E2:CB:19:34 Authority key identifier: 4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B Certificate issuer: /CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Certificate serial: 5AB6FCDDFB6702994EECCCA427EAC77632EFAC6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft Manifest number: 14 Signing time: Sat 16 May 2026 08:09:07 +0000 Manifest this update: Sat 16 May 2026 08:04:07 +0000 Manifest next update: Sun 17 May 2026 11:04:07 +0000 Files and hashes: 1: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: IlV0vgNjpTuApXjZnZRsOZX0dY/TDSqULrpC6FIi3II=) 2: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl (hash: 8svXwoLwqkURRWNxrBPi761OK7TjgRzS+sNfu1dL05I=) 3: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: 7ql88/IJdY/aWaZ2NP20wpbVy2vo7/DTiipCEcxNsYM=) 4: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: RcYrOS6rHRHWdeyezVsL3GaabN57kfPwCIDe/5oYbMs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 10:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b6:fc:dd:fb:67:02:99:4e:ec:cc:a4:27:ea:c7:76:32:ef:ac:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Validity Not Before: May 16 08:04:07 2026 GMT Not After : May 17 11:04:07 2026 GMT Subject: CN=FC3DBF9ADC54F2EAFAC4556AE7ED91DEE2CB1934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fb:94:b0:45:15:ff:d1:12:da:db:8f:a7:a7: 8b:3f:4b:6c:c4:bb:47:43:0f:fb:a4:05:53:c0:7d: f2:18:2e:62:1f:40:a1:71:12:7c:fc:af:e5:e5:96: 74:30:5a:3d:39:a3:42:13:86:fa:d0:bb:23:5a:b9: f7:cb:88:5e:59:ed:e8:96:06:82:b7:19:54:5e:dd: ea:e3:76:82:ce:b4:d4:34:51:d8:ef:90:62:ea:c3: f6:42:ca:db:2a:62:c5:a4:08:88:69:22:7e:37:75: 15:21:72:e1:ef:c8:23:e1:1a:e9:d5:46:d9:79:3b: 98:7f:6c:cb:d2:ea:89:71:0f:d5:7d:7e:5e:c2:1f: fe:87:6d:68:d1:b6:1e:db:31:c8:1c:7a:0b:08:14: dd:ef:9e:c9:40:59:4d:36:94:f7:d6:94:6f:80:1a: 4c:84:dc:f5:be:9c:2b:6f:40:b1:17:e3:89:06:86: 0d:c4:52:17:b8:4d:88:79:ca:1c:22:f8:f3:c7:9e: b8:a9:af:c6:ed:5c:84:27:89:fc:8f:49:f0:55:30: 8b:85:c7:e4:b0:a8:4e:a5:c5:6d:1c:5e:7e:c2:fc: 8c:92:e8:a8:80:7b:56:ee:c5:02:81:fb:99:91:f3: d3:ea:39:4c:50:a4:f5:4f:34:29:5c:08:f1:27:1b: b5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3D:BF:9A:DC:54:F2:EA:FA:C4:55:6A:E7:ED:91:DE:E2:CB:19:34 X509v3 Authority Key Identifier: keyid:4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:77:20:2e:dc:8c:4f:02:65:3f:4f:58:a4:5d:1d:18:55:4b: 4c:53:c6:95:ef:a4:c1:02:70:d7:52:84:ff:c2:68:d9:03:32: f9:c5:5c:57:cd:22:e3:96:7e:6f:02:2c:36:1a:b8:a3:5d:09: b5:80:6b:d5:f7:81:eb:39:80:ac:6b:7d:b2:ea:4a:b8:7c:0d: 35:45:1b:53:d8:c0:da:b0:d0:e2:5c:82:91:21:b4:b0:e1:b7: d5:bb:78:40:b5:88:64:47:c6:68:f3:1f:49:33:2f:0a:2f:f4: 33:83:d8:0a:58:ae:c5:25:5f:8f:9f:36:88:0c:9d:83:6e:52: c2:0a:f0:5b:59:bd:61:e9:a9:90:07:cc:fd:00:13:d6:8e:ba: 1e:4c:f2:4a:97:63:eb:62:fe:47:8f:62:17:bb:2b:80:c7:12: 09:a7:aa:30:4a:36:a6:3a:6f:81:db:32:2e:7f:03:bc:f4:80: 68:8e:71:76:b5:e3:bd:e0:42:37:38:a4:dc:5a:51:75:89:0c: 6d:de:bc:22:bd:f0:90:30:a8:84:a8:59:5b:ef:7f:e9:8f:77: 05:64:4a:62:bc:47:7d:f0:9a:cc:18:fa:c1:3f:07:e7:0a:8b: ee:c5:6a:e8:ea:3e:ea:98:7d:91:16:7c:d0:fa:ca:9d:95:55: 3d:98:24:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWrb83ftnAplO7MykJ+rHdjLvrG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQy NjA2OUMyQjAeFw0yNjA1MTYwODA0MDdaFw0yNjA1MTcxMTA0MDdaMDMxMTAvBgNV BAMTKEZDM0RCRjlBREM1NEYyRUFGQUM0NTU2QUU3RUQ5MURFRTJDQjE5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+5SwRRX/0RLa24+np4s/S2zE u0dDD/ukBVPAffIYLmIfQKFxEnz8r+XllnQwWj05o0IThvrQuyNauffLiF5Z7eiW BoK3GVRe3erjdoLOtNQ0UdjvkGLqw/ZCytsqYsWkCIhpIn43dRUhcuHvyCPhGunV Rtl5O5h/bMvS6olxD9V9fl7CH/6HbWjRth7bMcgcegsIFN3vnslAWU02lPfWlG+A GkyE3PW+nCtvQLEX44kGhg3EUhe4TYh5yhwi+PPHnripr8btXIQnifyPSfBVMIuF x+SwqE6lxW0cXn7C/IyS6KiAe1buxQKB+5mR89PqOUxQpPVPNClcCPEnG7XxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/D2/mtxU8ur6xFVq5+2R3uLLGTQwHwYDVR0j BBgwFoAUSvelxvVMX9vYlXp/5bckJCYGnCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE1OWEzNjItOTUwYy00NWMyLWFlY2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZG NTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQyNjA2OUMyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QUY3QTVDNkY1NEM1RkRCRDg5NTdBN0ZFNUI3MjQyNDI2MDY5 QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0 MjQyNjA2OUMyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADx3IC7cjE8CZT9PWKRdHRhVS0xTxpXvpMEC cNdShP/CaNkDMvnFXFfNIuOWfm8CLDYauKNdCbWAa9X3ges5gKxrfbLqSrh8DTVF G1PYwNqw0OJcgpEhtLDht9W7eEC1iGRHxmjzH0kzLwov9DOD2ApYrsUlX4+fNogM nYNuUsIK8FtZvWHpqZAHzP0AE9aOuh5M8kqXY+ti/kePYhe7K4DHEgmnqjBKNqY6 b4HbMi5/A7z0gGiOcXa1473gQjc4pNxaUXWJDG3evCK98JAwqISoWVvvf+mPdwVk SmK8R33wmswY+sE/B+cKi+7FaujqPuqYfZEWfND6yp2VVT2YJHU= -----END CERTIFICATE-----Generated at Sat May 16 21:47:32 2026 by rpki-client