$ rpki-client -vvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft File: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft (raw, json) Hash identifier: LCkAb1PcfkwdUvYrdDTyeYQozfhXdBJKlh9odUqcKU4= Subject key identifier: 2E:0D:6C:27:F8:72:81:2D:D4:7B:7B:73:21:E0:59:3E:D9:E3:17:0C Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 Certificate issuer: /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Certificate serial: 63D674F92F037774B02C5A7953EADE002132263D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft Manifest number: 1E Signing time: Sat 23 May 2026 22:34:22 +0000 Manifest this update: Sat 23 May 2026 22:29:22 +0000 Manifest next update: Mon 25 May 2026 02:27:22 +0000 Files and hashes: 1: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: W25/R8+HpdSmi7KzPEgroFOQ480UBFrJ5yvQhWXeJXQ=) 2: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl (hash: DLy65UemeKjikRsOgjKdUGHLFHfgyvF4D1Aw9ymX6b8=) 3: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: FpwgktK1DQqLal+31qD50dL+9IE6iqH71YHo/zowge0=) 4: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: 66aA75QUcB6PMDAVxPn0l4kedL6JSinUSrD/FjvLrOY=) 5: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: JSmaKD9Eb9InTbBwEjQnvpvNRxQcyoooyCEpIv/JUMs=) 6: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: g1I0bBx5cjAJOzumuYvYP7lbpo4MSyJWdm8CedSYPpI=) 7: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: IW6kFtW7lOTzfvLnRGitZxVOzbp+5ns5aGwVJLG1nQc=) 8: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: urgfoaYh1o6UsdX1mUmdbsm+CcX88/2KXBm9Z1HG15I=) 9: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: F+gSAhyteOkmJD/CsnwawpfqMUKtHHVAzkHCqnUyAyI=) 10: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: q58scCW7sBCYqA/7Gndz9LKwymI96P89Wvy+Agpx7Mc=) 11: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: 8L5+IN2jLctjeA6EMT3ij4Mxdk3Uel+Y6ekXcJbLdyM=) 12: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: G52CYZhUDrFCUCiXjLaytTYVhllqOW5hgj+MEiJQrDA=) 13: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: WalfT1mL5d9q2qz66c+NikOGnrlzK5PgkQomXo+2N10=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 May 2026 02:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:d6:74:f9:2f:03:77:74:b0:2c:5a:79:53:ea:de:00:21:32:26:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Validity Not Before: May 23 22:29:22 2026 GMT Not After : May 25 02:27:22 2026 GMT Subject: CN=2E0D6C27F872812DD47B7B7321E0593ED9E3170C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f7:f0:e9:68:68:fe:64:7b:82:d9:e3:df:72: 71:1e:90:80:de:10:82:d8:7f:68:af:bf:f8:9e:3a: c6:fd:eb:21:6c:a9:bd:22:0e:51:d9:29:c5:06:6d: a3:00:dc:50:91:6a:9c:58:dc:08:fe:58:b2:b1:87: 8c:cd:aa:7d:95:ee:5b:b5:e4:2e:1e:c9:e2:ae:71: bb:89:3d:18:7f:cb:ba:3f:87:90:3c:f1:bf:35:c9: e6:1f:68:54:53:05:b2:24:b5:16:02:68:f0:b0:ef: 1e:3a:08:c8:4e:f7:6d:2d:e5:22:58:7d:87:dd:27: 55:4b:75:b9:2f:41:d2:71:6e:99:d9:64:bb:28:9a: 99:c2:57:14:a4:fc:d7:68:18:69:09:20:68:69:35: 93:4a:56:91:db:8b:dc:f4:40:f4:56:c5:aa:c7:49: 20:34:cb:75:32:30:0d:83:28:b0:05:06:25:66:ca: 6e:76:0c:dc:b7:ff:a9:d4:de:a3:22:08:69:56:1d: e8:13:3d:da:6f:a7:77:a6:eb:31:aa:38:d2:ef:39: 51:e1:f5:9b:9e:5c:c8:34:c5:ad:73:28:03:3b:e7: 7e:1f:a6:90:62:2a:c9:30:46:de:e7:a0:f5:76:ff: 83:f5:5b:a7:d9:4c:86:18:ed:4d:77:ee:51:65:9a: 97:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0D:6C:27:F8:72:81:2D:D4:7B:7B:73:21:E0:59:3E:D9:E3:17:0C X509v3 Authority Key Identifier: keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ca:88:63:31:8e:28:2a:9d:41:c1:c7:30:7a:22:b4:36:49: 32:92:d7:5f:af:2e:aa:0a:84:00:f6:77:80:6a:53:98:0f:52: 95:04:a1:34:00:fd:33:3e:9d:ab:26:10:14:4a:e4:46:09:1e: 31:73:03:a6:7d:33:bf:6b:1f:1c:92:44:3e:61:66:84:52:04: 8a:17:72:c3:d4:8c:bd:af:cb:2a:06:56:f2:c9:23:da:d4:1c: aa:b1:f2:f6:b0:10:07:13:45:f5:91:87:ff:60:37:1e:93:4c: 02:f9:70:54:e6:ac:a3:06:a6:9b:29:21:fc:21:e2:06:93:80: 5a:76:25:4a:ae:ea:94:12:fe:b7:2a:24:74:d6:13:b1:66:6d: 3f:0d:38:46:72:7e:e4:d0:4e:3e:4a:4c:f9:85:a4:07:be:1b: 8c:80:1a:46:84:c6:4a:ca:85:db:01:f6:c5:61:4d:d5:19:65: eb:f0:f3:78:80:a1:62:a3:9c:d6:38:c9:ca:e9:4c:0c:f6:e4: e7:a9:92:ff:e2:9d:0f:47:a6:07:94:96:12:41:c8:6c:d1:32: b8:d0:ba:cb:fa:44:63:9f:75:88:c1:da:e0:b6:69:34:9d:42: 69:79:5b:8d:cc:87:7d:03:ba:6a:4d:4a:0d:7e:b7:94:04:f8: c1:89:1a:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY9Z0+S8Dd3SwLFp5U+reACEyJj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3 NDI4MjA5MzAeFw0yNjA1MjMyMjI5MjJaFw0yNjA1MjUwMjI3MjJaMDMxMTAvBgNV BAMTKDJFMEQ2QzI3Rjg3MjgxMkRENDdCN0I3MzIxRTA1OTNFRDlFMzE3MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX9/DpaGj+ZHuC2ePfcnEekIDe EILYf2ivv/ieOsb96yFsqb0iDlHZKcUGbaMA3FCRapxY3Aj+WLKxh4zNqn2V7lu1 5C4eyeKucbuJPRh/y7o/h5A88b81yeYfaFRTBbIktRYCaPCw7x46CMhO920t5SJY fYfdJ1VLdbkvQdJxbpnZZLsompnCVxSk/NdoGGkJIGhpNZNKVpHbi9z0QPRWxarH SSA0y3UyMA2DKLAFBiVmym52DNy3/6nU3qMiCGlWHegTPdpvp3em6zGqONLvOVHh 9ZueXMg0xa1zKAM7534fppBiKskwRt7noPV2/4P1W6fZTIYY7U137lFlmpfdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULg1sJ/hygS3Ue3tzIeBZPtnjFwwwHwYDVR0j BBgwFoAUTYyv7L8S73kvHv1yJ2fl/nQoIJMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU1NDAxNjQtM2Q0Ni00Nzk0LWJmNTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNC RjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3NDI4MjA5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDhDQUZFQ0JGMTJFRjc5MkYxRUZENzIyNzY3RTVGRTc0Mjgy MDkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU1NDAxNjQtM2Q0Ni00Nzk0LWJm NTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1 RkU3NDI4MjA5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnKiGMxjigqnUHBxzB6IrQ2STKS11+vLqoK hAD2d4BqU5gPUpUEoTQA/TM+nasmEBRK5EYJHjFzA6Z9M79rHxySRD5hZoRSBIoX csPUjL2vyyoGVvLJI9rUHKqx8vawEAcTRfWRh/9gNx6TTAL5cFTmrKMGppspIfwh 4gaTgFp2JUqu6pQS/rcqJHTWE7FmbT8NOEZyfuTQTj5KTPmFpAe+G4yAGkaExkrK hdsB9sVhTdUZZevw83iAoWKjnNY4ycrpTAz25Oepkv/inQ9HpgeUlhJByGzRMrjQ usv6RGOfdYjB2uC2aTSdQml5W43Mh30DumpNSg1+t5QE+MGJGt0= -----END CERTIFICATE-----Generated at Sun May 24 18:42:25 2026 by rpki-client