$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft File: 4DD4106B03003D9C5B51BF893631C8E467E07F65.mft (raw, json) Hash identifier: nlTUpQ7ydOZ2l1kbzHT/DHDNzG9qoCfsDHStW+ulONI= Subject key identifier: BB:ED:29:87:A3:63:AE:4F:AD:5B:51:92:24:6F:6A:A6:11:16:97:83 Authority key identifier: 4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65 Certificate issuer: /CN=4DD4106B03003D9C5B51BF893631C8E467E07F65 Certificate serial: 6A3A2115E63565BFAF3EB00EA23E67B48B84873B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft Manifest number: 05 Signing time: Tue 05 May 2026 04:42:09 +0000 Manifest this update: Tue 05 May 2026 04:37:09 +0000 Manifest next update: Wed 06 May 2026 08:25:09 +0000 Files and hashes: 1: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: vt8DYAXcs1pDLyawi9vIroRmMQYzGKkbfW81Knq/qWg=) 2: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: 1g+y0imkE46p3egXComeqIG0umuFfgQzJzzyy2lkq6g=) 3: 4DD4106B03003D9C5B51BF893631C8E467E07F65.crl (hash: JsBr+y1MK1XTrhAb8NaVjfzeDp38JuaA27J9okX+59k=) 4: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: 8wp+UX0eKC57lngDUIgSZuJvHJ5tDAZofYJHo8cFmpA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 08:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3a:21:15:e6:35:65:bf:af:3e:b0:0e:a2:3e:67:b4:8b:84:87:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD4106B03003D9C5B51BF893631C8E467E07F65 Validity Not Before: May 5 04:37:09 2026 GMT Not After : May 6 08:25:09 2026 GMT Subject: CN=BBED2987A363AE4FAD5B5192246F6AA611169783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ad:e8:50:c2:79:ff:3f:6e:b4:a9:aa:57:2d: 1c:5e:36:ef:8f:43:19:aa:9e:e9:57:4c:b6:9c:fa: 0c:d6:05:af:4e:62:15:bd:4e:e2:da:59:43:98:64: 68:fb:f0:9a:46:b8:0b:b6:6d:e9:92:d7:99:20:9f: c6:7d:b8:63:06:7a:1c:91:8b:cd:49:5b:d8:99:9b: 95:ac:68:b3:3f:1d:bd:4f:33:b6:98:7c:7d:9c:b5: 5a:87:ae:f5:0e:5d:6f:ce:7c:97:52:08:86:38:54: ff:38:85:82:4d:38:71:89:64:7c:fb:05:c1:04:1b: f4:77:97:35:64:3e:fb:e6:8c:f6:98:77:1c:88:aa: ee:3b:46:83:75:35:ad:58:7d:d0:4d:d5:78:b3:0f: 94:f1:93:49:e2:09:be:bb:22:aa:ad:11:a2:90:cc: ff:a0:6b:72:5b:fd:2e:b8:b3:3a:e2:16:ac:2b:53: 18:c3:0f:09:95:af:f1:ce:bd:18:05:6d:93:8f:6c: 14:7e:9d:7a:ed:c8:72:03:49:49:25:be:47:b9:86: 9d:1d:a1:17:8d:8d:0e:19:04:b1:57:72:63:da:8d: 66:a1:c3:ff:79:d3:3d:bb:f1:ba:22:b5:d0:c8:f7: 4f:f8:af:f4:d6:39:9f:51:3f:b4:ce:2a:cd:f5:9e: c8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:ED:29:87:A3:63:AE:4F:AD:5B:51:92:24:6F:6A:A6:11:16:97:83 X509v3 Authority Key Identifier: keyid:4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c7:45:0b:26:43:f8:30:ff:0f:e3:01:79:92:22:af:92:cf: 37:f4:d2:95:d3:32:23:97:9d:92:e4:4f:19:58:bc:f3:46:e6: b3:c8:25:88:dd:5a:ac:bb:5a:af:d3:b2:0f:0b:24:7b:e1:1e: 3c:2f:e1:c7:26:8d:a4:f1:9a:87:0c:62:2a:6c:f4:b0:c7:86: 5b:04:f7:7f:ed:49:06:5d:69:97:1f:bf:70:76:47:6a:56:85: c1:ec:df:50:ae:96:08:51:a0:81:c8:d4:f7:cd:a1:84:0c:cc: 37:06:8b:86:55:9c:54:63:49:9f:3d:89:ac:07:2d:15:c1:43: 45:51:3b:0e:29:fb:e4:f8:46:7c:13:9b:2a:d1:b3:b0:dd:2f: e0:2a:b8:ea:19:db:9d:9b:3c:e6:1a:05:d7:b9:40:39:89:1f: 15:71:d3:e1:96:e6:6a:e8:5d:20:24:40:6b:bd:5a:23:95:50: a2:3d:c2:fa:94:ee:d9:24:0f:26:6c:00:e2:11:f7:39:96:67: 26:99:dd:c7:ef:ec:43:6f:b8:0b:93:ad:da:5d:3d:2f:e0:f6: 29:27:05:ad:39:e4:3d:c3:bb:35:eb:9a:e7:1f:df:7d:f9:69: 77:12:05:1d:e8:33:71:ec:6f:67:59:1f:19:c7:4f:31:b6:d5: 79:b7:fe:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUajohFeY1Zb+vPrAOoj5ntIuEhzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERENDEwNkIwMzAwM0Q5QzVCNTFCRjg5MzYzMUM4RTQ2 N0UwN0Y2NTAeFw0yNjA1MDUwNDM3MDlaFw0yNjA1MDYwODI1MDlaMDMxMTAvBgNV BAMTKEJCRUQyOTg3QTM2M0FFNEZBRDVCNTE5MjI0NkY2QUE2MTExNjk3ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOrehQwnn/P260qapXLRxeNu+P QxmqnulXTLac+gzWBa9OYhW9TuLaWUOYZGj78JpGuAu2bemS15kgn8Z9uGMGehyR i81JW9iZm5WsaLM/Hb1PM7aYfH2ctVqHrvUOXW/OfJdSCIY4VP84hYJNOHGJZHz7 BcEEG/R3lzVkPvvmjPaYdxyIqu47RoN1Na1YfdBN1XizD5Txk0niCb67IqqtEaKQ zP+ga3Jb/S64szriFqwrUxjDDwmVr/HOvRgFbZOPbBR+nXrtyHIDSUklvke5hp0d oReNjQ4ZBLFXcmPajWahw/950z278boitdDI90/4r/TWOZ9RP7TOKs31nsirAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu+0ph6Njrk+tW1GSJG9qphEWl4MwHwYDVR0j BBgwFoAUTdQQawMAPZxbUb+JNjHI5Gfgf2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkZTkzNmItNTNjZi00YjA4LWI1ZjctMmI5MGRlMjFmZTk0LzAvNERENDEwNkIw MzAwM0Q5QzVCNTFCRjg5MzYzMUM4RTQ2N0UwN0Y2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REQ0MTA2QjAzMDAzRDlDNUI1MUJGODkzNjMxQzhFNDY3RTA3 RjY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvNERENDEwNkIwMzAwM0Q5QzVCNTFCRjg5MzYzMUM4 RTQ2N0UwN0Y2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7HRQsmQ/gw/w/jAXmSIq+Szzf00pXTMiOX nZLkTxlYvPNG5rPIJYjdWqy7Wq/Tsg8LJHvhHjwv4ccmjaTxmocMYips9LDHhlsE 93/tSQZdaZcfv3B2R2pWhcHs31CulghRoIHI1PfNoYQMzDcGi4ZVnFRjSZ89iawH LRXBQ0VROw4p++T4RnwTmyrRs7DdL+AquOoZ252bPOYaBde5QDmJHxVx0+GW5mro XSAkQGu9WiOVUKI9wvqU7tkkDyZsAOIR9zmWZyaZ3cfv7ENvuAuTrdpdPS/g9ikn Ba055D3DuzXrmucf3335aXcSBR3oM3Hsb2dZHxnHTzG21Xm3/tc= -----END CERTIFICATE-----Generated at Tue May 5 17:52:37 2026 by rpki-client