$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft File: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft (raw, json) Hash identifier: bpMlmpQ/MdMhcdbHcnWHEu38jq5BZuDTmXoQd+Khr/I= Subject key identifier: 38:5A:F3:2D:C2:CC:16:31:D9:11:6B:FB:E6:95:3B:6D:0F:DD:59:11 Authority key identifier: 4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 Certificate issuer: /CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Certificate serial: 55C945E659BDE6B308E2E7DB5AF48C221020C0B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft Manifest number: 05 Signing time: Tue 05 May 2026 08:08:51 +0000 Manifest this update: Tue 05 May 2026 08:03:51 +0000 Manifest next update: Wed 06 May 2026 12:05:51 +0000 Files and hashes: 1: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: fT4vbblEyZhxJwWJVYRrx1888tV3IqafJdFzwCoLzIU=) 2: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl (hash: Ab0xHAZiFGRuMOlQHeL+P85FKwbodzxp4eYtBZVOn2A=) 3: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: 6pyTfAlzYTBLrXJyXEzbPma6QqEhBhRMnugG93bjYxI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 12:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c9:45:e6:59:bd:e6:b3:08:e2:e7:db:5a:f4:8c:22:10:20:c0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Validity Not Before: May 5 08:03:51 2026 GMT Not After : May 6 12:05:51 2026 GMT Subject: CN=385AF32DC2CC1631D9116BFBE6953B6D0FDD5911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:da:03:fd:53:e2:61:61:5d:94:18:08:65:fb: d4:f5:8d:9f:fe:59:16:e8:97:b1:ec:fb:fe:d6:ef: 5d:86:5c:e8:cc:52:bc:f9:b8:7e:e2:1d:bb:35:ff: 0b:90:76:50:39:df:76:74:f4:ac:37:16:e0:b4:22: f6:ba:28:b1:4f:aa:88:5d:d1:c5:82:29:78:0b:01: 46:33:e6:22:4a:de:a1:8c:7d:7e:62:64:aa:ca:e9: 1f:23:42:96:83:8d:cc:fc:cd:c3:fc:00:ef:09:83: 0f:e9:50:19:c7:5b:63:71:13:f1:41:33:e8:c4:0c: f2:a1:f5:8b:4a:93:b7:c0:33:57:26:17:dd:c9:d8: 08:6a:86:98:cb:c9:eb:93:b4:5e:83:b0:9b:a3:69: ae:67:61:ab:ba:63:f8:fb:1b:0c:c9:49:be:27:31: e8:76:5d:0f:b2:cc:70:b0:21:6a:e0:b2:49:0d:80: 27:2b:44:41:06:dc:05:c1:17:eb:e4:70:46:92:7f: d5:52:ef:09:20:30:18:97:dd:bd:17:45:cf:c0:33: 1f:7b:3e:ac:d2:7e:9d:ac:c2:8a:3d:69:0d:07:8b: c1:87:a2:af:99:05:07:b9:97:15:b8:34:1b:76:6f: 45:e8:1c:fd:fd:54:ef:2f:f0:95:06:d6:a6:25:d6: fd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5A:F3:2D:C2:CC:16:31:D9:11:6B:FB:E6:95:3B:6D:0F:DD:59:11 X509v3 Authority Key Identifier: keyid:4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:0b:79:b1:5a:85:b6:16:d0:07:b1:3a:cc:c3:89:aa:bd:3f: ba:b0:2c:14:6c:8b:ec:6e:21:81:9f:b5:dd:53:ee:0c:26:15: 6e:d8:0b:48:f8:f9:a7:92:1d:56:5d:f4:ab:04:92:03:72:69: 95:30:99:85:3c:c3:d4:19:d4:2d:4d:40:52:07:25:1d:92:a8: 6b:f6:41:71:44:ee:90:c3:f5:b5:b7:b6:f1:d2:70:b1:20:76: a2:47:54:86:00:18:bf:f8:46:9e:bb:6a:11:a7:69:7e:5a:14: cd:13:80:62:4a:a8:2a:79:85:bc:40:69:c7:6f:19:21:71:47: 40:f1:53:9f:b4:5d:92:71:6f:00:6f:59:6d:c3:bf:66:55:4b: 5d:80:b9:64:c5:60:bd:a3:85:95:9c:1e:8e:c8:3f:da:27:ff: 01:0c:d1:44:a2:0a:cb:a6:14:c9:18:17:b6:2a:9a:3f:23:e8: 74:79:a9:ea:35:37:a5:59:67:f3:a5:10:be:d5:54:20:e8:52: e5:98:3b:65:a2:c7:22:50:03:72:6b:08:13:6c:cd:97:4d:8c: 49:93:e2:8d:e3:0a:a2:2b:d0:7e:15:e6:4d:8a:fc:75:6a:12: 53:5b:b0:92:f6:c6:f3:04:08:da:9e:c1:0e:46:d5:bb:e0:99: 92:e7:5d:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVclF5lm95rMI4ufbWvSMIhAgwLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JCRTJE MEUwRDM5MTAeFw0yNjA1MDUwODAzNTFaFw0yNjA1MDYxMjA1NTFaMDMxMTAvBgNV BAMTKDM4NUFGMzJEQzJDQzE2MzFEOTExNkJGQkU2OTUzQjZEMEZERDU5MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV2gP9U+JhYV2UGAhl+9T1jZ/+ WRbol7Hs+/7W712GXOjMUrz5uH7iHbs1/wuQdlA533Z09Kw3FuC0Iva6KLFPqohd 0cWCKXgLAUYz5iJK3qGMfX5iZKrK6R8jQpaDjcz8zcP8AO8Jgw/pUBnHW2NxE/FB M+jEDPKh9YtKk7fAM1cmF93J2AhqhpjLyeuTtF6DsJujaa5nYau6Y/j7GwzJSb4n Meh2XQ+yzHCwIWrgskkNgCcrREEG3AXBF+vkcEaSf9VS7wkgMBiX3b0XRc/AMx97 PqzSfp2swoo9aQ0Hi8GHoq+ZBQe5lxW4NBt2b0XoHP39VO8v8JUG1qYl1v0vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOFrzLcLMFjHZEWv75pU7bQ/dWREwHwYDVR0j BBgwFoAUTUy+ZRqiIPkIjk27vJe74tDg05EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwN2UzZDgtOWJmYy00NDgzLWEyZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUx QUEyMjBGOTA4OEU0REJCQkM5N0JCRTJEMEUwRDM5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRDQkU2NTFBQTIyMEY5MDg4RTREQkJCQzk3QkJFMkQwRTBE MzkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy ZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JC RTJEMEUwRDM5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKALebFahbYW0AexOszDiaq9P7qwLBRsi+xu IYGftd1T7gwmFW7YC0j4+aeSHVZd9KsEkgNyaZUwmYU8w9QZ1C1NQFIHJR2SqGv2 QXFE7pDD9bW3tvHScLEgdqJHVIYAGL/4Rp67ahGnaX5aFM0TgGJKqCp5hbxAacdv GSFxR0DxU5+0XZJxbwBvWW3Dv2ZVS12AuWTFYL2jhZWcHo7IP9on/wEM0USiCsum FMkYF7Yqmj8j6HR5qeo1N6VZZ/OlEL7VVCDoUuWYO2WixyJQA3JrCBNszZdNjEmT 4o3jCqIr0H4V5k2K/HVqElNbsJL2xvMECNqewQ5G1bvgmZLnXWo= -----END CERTIFICATE-----Generated at Tue May 5 17:52:00 2026 by rpki-client