$ rpki-client -vvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft File: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft (raw, json) Hash identifier: sdxldUfy4+BNE/Ndt4+yEh0Lm1imoXX2/ETitGSJ3a4= Subject key identifier: E1:15:89:3B:55:5A:D8:BA:2E:CC:63:DD:0C:4B:ED:18:8D:42:EC:16 Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 5EB5E4A0479EE1734F55215EFF7BBBF52375CB32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 11:13:10 +0000 Manifest this update: Sat 13 Jun 2026 11:08:10 +0000 Manifest next update: Sun 14 Jun 2026 11:40:10 +0000 Files and hashes: 1: 3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa (hash: 2ukK53+fe7S5M2zaDBH1WtDgIsIsj4+Dshs68GBh99o=) 2: 323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa (hash: Q+ngoFu885sNrsbrQRL3AeApBJ1Eb5cBUZ33V1u7hNU=) 3: 3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (hash: z5zbKQho3avhtYmaIotiPUiQQJ/mO8YtqexQXDW4gG0=) 4: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (hash: lcj9Lo8ozccThBUG7wqDK1apaR2k1E0ODhzzBgFVW1M=) 5: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl (hash: zFrWTBCqzNJauIz45Qc3zjy0a8XvRfLKJV3MDlrV+ck=) 6: 3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa (hash: 1SNuWHPKyjm9i33KVxLucA1qoW0DruITzpVEbkOYzp4=) 7: 323430313a626534303a3a2f33322d3438203d3e20313336383431.roa (hash: pUzTSX764GWtHHO9jcVOxnVCQQd9HOcC1kC/yiGkLr8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 11:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b5:e4:a0:47:9e:e1:73:4f:55:21:5e:ff:7b:bb:f5:23:75:cb:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: Jun 13 11:08:10 2026 GMT Not After : Jun 14 11:40:10 2026 GMT Subject: CN=E115893B555AD8BA2ECC63DD0C4BED188D42EC16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:96:53:18:a0:d6:54:0d:06:4b:31:4c:6c:07: 64:eb:5e:8f:45:e7:f2:dd:89:96:2e:36:d7:fa:80: 66:7e:ca:27:22:a6:a3:03:47:e0:44:ab:f7:b4:76: 57:19:c5:ad:fc:f9:ef:0c:70:30:e1:93:9c:82:d3: 07:04:e0:32:39:2b:fc:52:7f:92:b6:53:4d:d9:f6: 64:5a:52:77:0c:9b:e0:40:d3:b8:9d:62:67:51:3f: 75:61:8f:6a:88:9f:29:43:9e:17:bb:9d:9b:5b:06: 6f:e9:31:ed:59:8e:1a:a9:aa:97:d5:76:19:9b:ae: 74:60:66:ff:f3:06:4c:c1:2e:1f:f5:84:0b:b7:75: 06:dc:e7:d5:50:d0:fd:77:b7:eb:33:6e:16:98:07: 44:ae:4c:a2:ef:0c:ee:c8:db:5f:5f:d3:54:a6:6b: 1b:72:23:6e:a5:30:de:7e:f9:2e:48:7e:69:ab:14: 0c:15:46:fc:8e:32:16:06:44:cb:67:19:3d:62:66: 77:ff:18:ae:f5:90:c6:62:98:1c:86:da:c8:de:af: 35:be:ea:7b:b8:42:43:a6:71:db:0f:05:86:df:e1: f8:80:40:0a:f2:5b:b9:f1:e2:a3:f4:d3:a4:49:cd: 67:02:5b:08:37:da:1f:d7:e0:60:94:c1:fa:0d:b9: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:15:89:3B:55:5A:D8:BA:2E:CC:63:DD:0C:4B:ED:18:8D:42:EC:16 X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:81:53:35:4b:40:fe:65:d2:e0:41:ba:c6:0e:a6:45:25:3c: b6:86:10:fd:95:a0:4c:e3:ac:9d:81:5b:49:3f:f8:92:bc:b0: 8a:80:c9:43:60:70:99:3d:05:67:71:ce:14:00:a8:1b:4f:32: be:fb:fa:11:89:63:90:a0:a7:a0:c6:ae:0b:1d:cc:1d:82:58: 6e:c3:6e:5d:5d:ed:01:75:e6:e0:c2:21:89:e5:aa:fd:72:c1: be:56:d3:a9:7b:e9:e8:a9:ce:eb:f3:b2:ff:e6:68:03:5b:b4: d1:cf:ee:48:44:d1:03:e1:23:71:8c:2f:da:ce:dc:93:0c:e4: 2b:a6:9f:b4:77:4b:b2:0d:72:b8:6c:fe:7c:12:42:b5:75:28: 62:31:58:5e:63:fb:6d:25:ec:95:6b:82:31:74:77:cb:2a:43: 9f:40:d3:09:66:ea:93:da:6d:05:01:7e:cc:db:c1:20:4a:14: 6a:3c:2e:74:d3:72:f2:ab:c6:a1:78:ac:33:49:1a:e8:5d:d8: fe:8a:76:bf:37:20:7e:14:57:c0:a8:3a:4e:6c:4b:a0:61:84: e7:9b:a9:ca:a1:95:90:aa:d4:88:87:ad:0a:2f:2e:ca:50:41: f5:0c:f2:ab:f7:17:3c:81:9b:4d:9b:bf:23:30:a5:38:e7:88: 71:46:f4:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXrXkoEee4XNPVSFe/3u79SN1yzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVF NTdENTI0NDAeFw0yNjA2MTMxMTA4MTBaFw0yNjA2MTQxMTQwMTBaMDMxMTAvBgNV BAMTKEUxMTU4OTNCNTU1QUQ4QkEyRUNDNjNERDBDNEJFRDE4OEQ0MkVDMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdllMYoNZUDQZLMUxsB2TrXo9F 5/LdiZYuNtf6gGZ+yicipqMDR+BEq/e0dlcZxa38+e8McDDhk5yC0wcE4DI5K/xS f5K2U03Z9mRaUncMm+BA07idYmdRP3Vhj2qInylDnhe7nZtbBm/pMe1ZjhqpqpfV dhmbrnRgZv/zBkzBLh/1hAu3dQbc59VQ0P13t+szbhaYB0SuTKLvDO7I219f01Sm axtyI26lMN5++S5IfmmrFAwVRvyOMhYGRMtnGT1iZnf/GK71kMZimByG2sjerzW+ 6nu4QkOmcdsPBYbf4fiAQAryW7nx4qP006RJzWcCWwg32h/X4GCUwfoNuarNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4RWJO1Va2LouzGPdDEvtGI1C7BYwHwYDVR0j BBgwFoAUTaEdWvXxeucWUZ+EomPhpeV9UkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDczMDRiODMtMzBhYS00YmJmLTlmZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFG NUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVFNTdENTI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1 MjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDczMDRiODMtMzBhYS00YmJmLTlm ZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0Ux QTVFNTdENTI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+BUzVLQP5l0uBBusYOpkUlPLaGEP2VoEzj rJ2BW0k/+JK8sIqAyUNgcJk9BWdxzhQAqBtPMr77+hGJY5Cgp6DGrgsdzB2CWG7D bl1d7QF15uDCIYnlqv1ywb5W06l76eipzuvzsv/maANbtNHP7khE0QPhI3GML9rO 3JMM5Cumn7R3S7INcrhs/nwSQrV1KGIxWF5j+20l7JVrgjF0d8sqQ59A0wlm6pPa bQUBfszbwSBKFGo8LnTTcvKrxqF4rDNJGuhd2P6Kdr83IH4UV8CoOk5sS6BhhOeb qcqhlZCq1IiHrQovLspQQfUM8qv3FzyBm02bvyMwpTjniHFG9EE= -----END CERTIFICATE-----Generated at Sat Jun 13 21:18:30 2026 by rpki-client