$ rpki-client -vvf rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft File: 4DD279AECD518B9CE764AE03708B711A40048A1E.mft (raw, json) Hash identifier: MzAJq3gF0frzuiMkz0BYwXr/Lb53ixwGiVQlWedS6wY= Subject key identifier: F8:9D:A7:FE:A1:36:03:B8:E8:C0:29:D8:2C:1B:79:C7:32:EC:D0:93 Authority key identifier: 4D:D2:79:AE:CD:51:8B:9C:E7:64:AE:03:70:8B:71:1A:40:04:8A:1E Certificate issuer: /CN=4DD279AECD518B9CE764AE03708B711A40048A1E Certificate serial: 4218A94F1ECD5BC2B53B3D5B6C58DCC82499969B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD279AECD518B9CE764AE03708B711A40048A1E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft Manifest number: 19 Signing time: Wed 20 May 2026 17:01:58 +0000 Manifest this update: Wed 20 May 2026 16:56:58 +0000 Manifest next update: Thu 21 May 2026 20:44:58 +0000 Files and hashes: 1: 3130332e3133392e3132312e302f32342d3234203d3e20313336383234.roa (hash: mxXusZGfsr98abkNgqk3JfvCjZTqoXMC9/o99feBr+E=) 2: 4DD279AECD518B9CE764AE03708B711A40048A1E.crl (hash: QtMwPzGn4qm+1EMEAesi9kmOWC8tDZPGioGMPEjxgHk=) 3: 3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa (hash: 6Laf+3GLGNpNAkhIsFH3maUJ3BnydIt6ABswzC07SLU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.crl rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD279AECD518B9CE764AE03708B711A40048A1E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 21 May 2026 20:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:18:a9:4f:1e:cd:5b:c2:b5:3b:3d:5b:6c:58:dc:c8:24:99:96:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD279AECD518B9CE764AE03708B711A40048A1E Validity Not Before: May 20 16:56:58 2026 GMT Not After : May 21 20:44:58 2026 GMT Subject: CN=F89DA7FEA13603B8E8C029D82C1B79C732ECD093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:42:80:d2:7a:97:be:95:c6:0d:d3:c4:5e:00: 47:97:e5:a8:f8:57:ce:7a:c8:a0:f7:6c:82:a5:3b: fd:10:e9:66:c9:b0:3e:91:12:45:86:47:3e:09:43: 61:fc:8a:95:5f:4b:68:65:26:0d:82:c4:35:81:c6: 5e:8b:64:e4:b4:13:09:2a:5b:c9:54:ca:54:db:45: 61:5e:50:d3:dc:9c:3d:93:06:e6:ad:bf:cb:39:65: f4:c4:93:2c:b4:34:65:32:b3:d6:4e:6d:57:d6:2c: e5:04:97:d3:38:9b:e8:52:24:16:8b:f6:17:81:11: e0:04:3d:30:2f:10:a4:2e:15:95:e1:c1:45:34:95: c7:86:0f:5a:37:76:c7:c4:90:6e:2b:7e:08:8d:2b: 75:a5:61:3e:b2:4d:e7:24:ec:26:07:7f:38:57:7e: e6:16:2e:23:d2:20:a3:38:21:af:05:f0:6f:c5:f4: 1b:b3:e2:99:5f:18:d3:19:a8:05:7c:ed:85:31:95: 3a:d1:98:1e:68:13:12:b4:c3:64:29:13:b0:28:02: d4:71:bf:01:c0:3e:58:3d:c3:4e:f1:7d:fc:e1:da: 59:a3:8a:56:09:b9:41:15:d2:e2:d0:0f:ee:5c:9d: 7d:50:9a:4b:1d:a2:2b:de:9a:b0:76:32:30:42:1f: c5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9D:A7:FE:A1:36:03:B8:E8:C0:29:D8:2C:1B:79:C7:32:EC:D0:93 X509v3 Authority Key Identifier: keyid:4D:D2:79:AE:CD:51:8B:9C:E7:64:AE:03:70:8B:71:1A:40:04:8A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD279AECD518B9CE764AE03708B711A40048A1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:24:16:6a:81:0f:91:7e:e8:17:ca:bd:53:d6:dd:04:61:3a: f6:0c:db:c4:8c:72:2e:f8:34:e6:4e:db:fb:dd:b0:4d:94:eb: 4a:5a:1a:89:6d:40:e7:7a:6c:0c:0b:84:51:2c:9b:6a:60:1f: 07:c2:a3:e0:ed:19:71:63:bd:df:24:ad:45:bb:2f:87:22:5f: 28:cc:f8:d2:bc:ef:f9:5c:1d:d5:dd:26:db:89:af:20:b0:4c: d0:a2:a2:39:a5:8e:76:98:3a:af:ac:2c:cf:d1:81:b0:3a:5d: 7b:1d:bd:64:ca:c7:3f:9f:27:db:3d:ee:4e:d2:ca:7e:de:d0: 79:38:18:36:2b:59:8e:c6:fe:0c:a3:a4:f2:a1:89:06:8d:67: d1:f5:50:e0:02:51:14:bc:2d:e8:8a:38:08:33:b0:5e:89:dd: db:4a:b0:e9:b7:2a:ac:01:2e:94:fa:d6:a9:4c:e1:2a:56:4d: e8:dd:59:9c:1d:93:7c:3c:2e:80:10:09:e1:5a:5e:4b:5d:88: 6a:90:f0:67:49:84:b7:f0:c6:4d:1f:0c:68:01:0e:43:84:d5: 6f:84:65:98:14:42:22:bd:4a:66:a8:a0:a0:bd:f5:dd:10:fb: 27:6c:b6:49:78:3a:d1:f4:c0:5b:a1:db:32:a8:08:6c:93:1f: 92:b7:34:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQhipTx7NW8K1Oz1bbFjcyCSZlpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMjc5QUVDRDUxOEI5Q0U3NjRBRTAzNzA4QjcxMUE0 MDA0OEExRTAeFw0yNjA1MjAxNjU2NThaFw0yNjA1MjEyMDQ0NThaMDMxMTAvBgNV BAMTKEY4OURBN0ZFQTEzNjAzQjhFOEMwMjlEODJDMUI3OUM3MzJFQ0QwOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7QoDSepe+lcYN08ReAEeX5aj4 V856yKD3bIKlO/0Q6WbJsD6REkWGRz4JQ2H8ipVfS2hlJg2CxDWBxl6LZOS0Ewkq W8lUylTbRWFeUNPcnD2TBuatv8s5ZfTEkyy0NGUys9ZObVfWLOUEl9M4m+hSJBaL 9heBEeAEPTAvEKQuFZXhwUU0lceGD1o3dsfEkG4rfgiNK3WlYT6yTeck7CYHfzhX fuYWLiPSIKM4Ia8F8G/F9Buz4plfGNMZqAV87YUxlTrRmB5oExK0w2QpE7AoAtRx vwHAPlg9w07xffzh2lmjilYJuUEV0uLQD+5cnX1QmksdoivemrB2MjBCH8UTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+J2n/qE2A7jowCnYLBt5xzLs0JMwHwYDVR0j BBgwFoAUTdJ5rs1Ri5znZK4DcItxGkAEih4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ3MTQ2NjUtYzY3MC00NTFlLWJkY2ItOTA3NDIxOWQ1NWNlLzAvNEREMjc5QUVD RDUxOEI5Q0U3NjRBRTAzNzA4QjcxMUE0MDA0OEExRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REQyNzlBRUNENTE4QjlDRTc2NEFFMDM3MDhCNzExQTQwMDQ4 QTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ3MTQ2NjUtYzY3MC00NTFlLWJk Y2ItOTA3NDIxOWQ1NWNlLzAvNEREMjc5QUVDRDUxOEI5Q0U3NjRBRTAzNzA4Qjcx MUE0MDA0OEExRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4kFmqBD5F+6BfKvVPW3QRhOvYM28SMci74 NOZO2/vdsE2U60paGoltQOd6bAwLhFEsm2pgHwfCo+DtGXFjvd8krUW7L4ciXyjM +NK87/lcHdXdJtuJryCwTNCiojmljnaYOq+sLM/RgbA6XXsdvWTKxz+fJ9s97k7S yn7e0Hk4GDYrWY7G/gyjpPKhiQaNZ9H1UOACURS8LeiKOAgzsF6J3dtKsOm3KqwB LpT61qlM4SpWTejdWZwdk3w8LoAQCeFaXktdiGqQ8GdJhLfwxk0fDGgBDkOE1W+E ZZgUQiK9SmaooKC99d0Q+ydstkl4OtH0wFuh2zKoCGyTH5K3NIs= -----END CERTIFICATE-----Generated at Thu May 21 12:52:56 2026 by rpki-client