$ rpki-client -vvf rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft File: 4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft (raw, json) Hash identifier: D+m2xPJQFBkVkFKqrwMCCCMelppj2aVLh25Ks0iMtlQ= Subject key identifier: 58:4A:7E:18:58:79:24:9E:3A:28:D4:00:3C:BA:F7:4F:6C:F3:8C:A4 Authority key identifier: 4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD Certificate issuer: /CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Certificate serial: 41FB1D5C6225E575FA17BC0658B79A0A04BC20AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:44:27 +0000 Manifest this update: Tue 16 Jun 2026 16:39:27 +0000 Manifest next update: Wed 17 Jun 2026 19:04:27 +0000 Files and hashes: 1: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: NuzvjRElosYE2UG7+eZwvvIrrAeM5hY3Zl0vPo88tlQ=) 2: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: JeyiXx4erlba3GA8MtFHqgBMpzij5IWYDmBP3qqgmrQ=) 3: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: ZfYq00HTDjpvUdw6nAEEEqjvY8Q+YEiON1rQ+odVxcw=) 4: 4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl (hash: BsmfPgRuoRB0P42P+pIkFDGNzgtwS4QYokvznBELHdQ=) 5: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: OQGBTyYct40Pw4G0aqEIxJAdvOkNRB0tfWNHiKyDkc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:fb:1d:5c:62:25:e5:75:fa:17:bc:06:58:b7:9a:0a:04:bc:20:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Validity Not Before: Jun 16 16:39:27 2026 GMT Not After : Jun 17 19:04:27 2026 GMT Subject: CN=584A7E185879249E3A28D4003CBAF74F6CF38CA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ab:13:74:a8:9b:e2:7c:fa:76:b1:ed:ed:00: cd:0b:ce:20:9f:7c:2d:d9:51:aa:bc:1b:5a:92:6b: 64:54:5a:a4:a9:4f:c7:d3:01:67:a0:02:25:a2:d6: c7:d1:57:f3:b1:64:8b:98:41:ce:77:f2:58:d0:f4: fa:89:71:2f:02:05:73:a7:c3:10:ff:71:45:85:b6: 54:03:0c:2a:74:45:b3:1b:10:ff:8e:1e:3d:68:d0: 46:73:06:68:ac:d2:e4:39:48:d0:6a:0a:c7:4a:cd: ae:3a:1e:61:b2:d9:4b:f8:fe:41:99:e2:03:b7:7d: 0c:0f:ec:33:93:da:ef:f5:55:9b:b8:92:cc:0b:fc: 5a:85:84:2e:b6:6a:ad:ac:48:dd:3c:71:d4:cd:06: 3e:d4:1f:53:69:e5:12:6a:87:5c:a9:19:f0:cb:c3: 9a:83:7b:93:5e:3e:2a:c2:27:14:db:dc:02:e9:31: 8f:9c:63:37:56:e5:98:c6:4d:b5:89:82:ef:26:ad: df:d7:13:83:ab:43:f4:75:85:2d:82:b0:20:84:04: 74:d4:c4:3b:1a:9b:5e:10:00:db:11:f5:68:8e:6c: 80:18:53:9d:60:a3:e5:0b:d3:dd:00:93:36:c0:ee: cc:03:67:09:68:4b:15:83:7b:a6:b4:c4:b9:ed:66: 4c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4A:7E:18:58:79:24:9E:3A:28:D4:00:3C:BA:F7:4F:6C:F3:8C:A4 X509v3 Authority Key Identifier: keyid:4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:43:f5:91:75:16:6d:83:b0:65:f2:4c:59:8a:32:59:06:f5: 4d:97:5f:49:66:1a:45:5e:b4:26:4a:60:5f:d2:54:54:03:3c: d8:18:ff:a6:fe:d9:6c:1c:ce:0e:fa:67:af:97:34:ca:aa:49: cf:d6:dd:9f:db:a2:1c:fc:eb:b2:c7:58:87:34:2b:f8:04:2c: 0d:0a:7b:24:79:f5:23:c3:4d:32:88:d5:17:1a:8a:0f:e0:10: e3:cc:f0:bf:84:0d:a8:f0:3e:aa:6c:87:ed:7c:31:2c:b3:ca: 2e:ce:04:6c:a0:e5:b8:df:c9:61:74:4b:4e:9f:79:0e:08:a6: 10:a3:0c:99:d0:eb:8e:35:c6:c3:53:02:b9:c8:71:fb:b2:8d: 83:cd:02:1d:d1:2d:0c:71:45:b4:f0:57:94:2b:93:3b:cd:15: 6f:13:82:b1:5a:f0:f1:22:73:bb:7e:4e:b9:f0:a9:dc:29:2a: da:83:54:00:8d:3b:a5:42:c1:0d:19:79:91:dc:39:87:94:fc: fd:1f:4c:15:f5:e8:94:cd:fa:20:98:cf:fc:cf:2f:92:5a:44: 61:41:97:5b:e8:6f:ae:c9:5f:0f:f3:6a:f2:10:7b:b5:03:20: 55:6b:70:1a:44:78:eb:d2:1d:bd:4c:7f:1c:bd:38:80:22:9e: 9c:6a:ff:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQfsdXGIl5XX6F7wGWLeaCgS8IK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBQzRCMDVDNjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYz MkIzNkRDRDAeFw0yNjA2MTYxNjM5MjdaFw0yNjA2MTcxOTA0MjdaMDMxMTAvBgNV BAMTKDU4NEE3RTE4NTg3OTI0OUUzQTI4RDQwMDNDQkFGNzRGNkNGMzhDQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjqxN0qJvifPp2se3tAM0LziCf fC3ZUaq8G1qSa2RUWqSpT8fTAWegAiWi1sfRV/OxZIuYQc538ljQ9PqJcS8CBXOn wxD/cUWFtlQDDCp0RbMbEP+OHj1o0EZzBmis0uQ5SNBqCsdKza46HmGy2Uv4/kGZ 4gO3fQwP7DOT2u/1VZu4kswL/FqFhC62aq2sSN08cdTNBj7UH1Np5RJqh1ypGfDL w5qDe5NePirCJxTb3ALpMY+cYzdW5ZjGTbWJgu8mrd/XE4OrQ/R1hS2CsCCEBHTU xDsam14QANsR9WiObIAYU51go+UL090AkzbA7swDZwloSxWDe6a0xLntZkx7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWEp+GFh5JJ46KNQAPLr3T2zzjKQwHwYDVR0j BBgwFoAUTKxLBcYiClqRf+qRfTR2bzKzbc0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZTljOWYtZDYwNy00NDk3LWFmMjgtNGQyYjkwOTJkNWE2LzAvNENBQzRCMDVD NjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYzMkIzNkRDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0FDNEIwNUM2MjIwQTVBOTE3RkVBOTE3RDM0NzY2RjMyQjM2 RENELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvNENBQzRCMDVDNjIyMEE1QTkxN0ZFQTkxN0QzNDc2 NkYzMkIzNkRDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZD9ZF1Fm2DsGXyTFmKMlkG9U2XX0lmGkVe tCZKYF/SVFQDPNgY/6b+2Wwczg76Z6+XNMqqSc/W3Z/bohz867LHWIc0K/gELA0K eyR59SPDTTKI1Rcaig/gEOPM8L+EDajwPqpsh+18MSyzyi7OBGyg5bjfyWF0S06f eQ4IphCjDJnQ6441xsNTArnIcfuyjYPNAh3RLQxxRbTwV5QrkzvNFW8TgrFa8PEi c7t+TrnwqdwpKtqDVACNO6VCwQ0ZeZHcOYeU/P0fTBX16JTN+iCYz/zPL5JaRGFB l1vob67JXw/zavIQe7UDIFVrcBpEeOvSHb1Mfxy9OIAinpxq/6k= -----END CERTIFICATE-----Generated at Wed Jun 17 12:18:34 2026 by rpki-client