$ rpki-client -vvf rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft File: 4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft (raw, json) Hash identifier: AIKQWIOOaGI48HAONTSmTTwnDcRbbonkzNsJ+97vFzQ= Subject key identifier: D0:BE:2C:B2:28:36:BD:16:0D:79:C9:43:A6:43:9F:BE:E6:84:B1:32 Authority key identifier: 4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83 Certificate issuer: /CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83 Certificate serial: 0EFB40F62652E2ACDDA3D973B7AC9D2FD48B53E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:16:13 +0000 Manifest this update: Tue 16 Jun 2026 22:11:13 +0000 Manifest next update: Thu 18 Jun 2026 01:12:13 +0000 Files and hashes: 1: 3130332e33302e3232332e302f32342d3234203d3e203338313438.roa (hash: qdqJ7c5Hmo5/x5QxaNzAn2E9rlL9+lJv31VY+Z/Gpyo=) 2: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (hash: cgIEuYKpgRxefyDoprlhU36lSQZoW3T5mu05arwSfsg=) 3: 3132322e3230302e3134342e302f32312d3234203d3e203338313438.roa (hash: wZnkGHXuoZIhhXDMd29VyKe8jWbDQIfBiqevRGFYhXw=) 4: 4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl (hash: lse/kvVEsulkDVB67paoURYXFuYxy5JgoXQIUEiqaNQ=) 5: 3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (hash: FAVDk3FaWOdSpOkw9ME+3ZGQ0KQHtVqOC+nSGAGC2Kw=) 6: 3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (hash: JJjFiNRoaXtW7r6WlFCed+2DZ0XR/8IciP9txj6h+7U=) 7: 3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (hash: 4wluMrlK+jd2rPJTz82Wk6jGjGeMH7puimCIfaMcuQc=) 8: 3130332e33302e3232312e302f32342d3234203d3e203338313438.roa (hash: 4Qok18i+EI2L8O6uVAPOVAbbB1P+8P/IPIRW3fo/nPM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:fb:40:f6:26:52:e2:ac:dd:a3:d9:73:b7:ac:9d:2f:d4:8b:53:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83 Validity Not Before: Jun 16 22:11:13 2026 GMT Not After : Jun 18 01:12:13 2026 GMT Subject: CN=D0BE2CB22836BD160D79C943A6439FBEE684B132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ef:01:31:a1:02:f5:05:67:0d:5e:c4:ef:ca: 31:64:92:79:14:b9:da:31:c0:fb:fb:bd:17:26:2f: 0c:10:86:72:b9:69:5a:dd:ff:97:08:1f:8f:33:f5: 3a:fa:c3:a7:5e:3c:8e:bd:1e:2f:6d:63:39:a9:ed: 34:9e:76:8e:f5:fa:23:9d:04:8b:78:85:d2:52:76: 87:86:9b:72:aa:2e:0c:0f:4b:ed:93:88:e4:c5:5f: db:e3:e5:b9:7b:26:9f:df:b8:90:d8:34:bb:5c:1f: 26:c5:9e:86:db:22:97:1a:97:18:42:3d:11:d1:d8: 1e:86:8d:1d:00:79:4a:40:cd:4a:25:fe:a3:41:c6: 93:c7:35:df:7d:a1:89:ec:b2:57:c3:7a:fe:f0:63: ca:9c:9f:e0:bf:d2:65:3a:c1:14:b8:d2:e7:4c:83: 72:2c:7e:2c:af:ff:a1:8a:45:3a:00:c4:97:48:ef: 4c:f1:be:fe:2a:df:95:6e:a6:11:6c:eb:ed:68:e3: 10:46:d0:39:ae:2c:40:3e:f4:ed:bd:80:97:99:13: 66:9b:41:c4:71:da:87:d2:55:18:58:e7:43:40:4a: 95:77:4e:ea:e5:99:14:52:02:71:a3:c6:de:83:fb: 61:d7:73:96:36:ed:e9:02:a3:f7:16:02:40:c7:cc: 1d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BE:2C:B2:28:36:BD:16:0D:79:C9:43:A6:43:9F:BE:E6:84:B1:32 X509v3 Authority Key Identifier: keyid:4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:34:6b:2b:ee:6e:b8:a5:e7:89:c7:09:19:b7:e6:33:96:3d: 8e:0b:c1:fe:08:41:05:ae:40:24:5b:81:67:74:aa:c1:96:d3: 7f:80:d5:d2:04:b1:0e:00:ee:0f:ed:40:70:d2:ea:23:3a:ed: 20:12:3a:c5:e9:18:ea:a0:d7:94:79:b1:4d:2e:b3:59:49:3f: e2:85:69:61:46:99:d3:56:27:cb:8c:66:d5:91:ed:cb:c6:c7: 01:9d:77:25:8b:cd:d5:ce:82:6b:2d:ba:b9:7e:eb:79:08:18: 52:98:05:37:fb:7a:c1:b4:22:11:27:9a:af:18:86:25:18:96: 0e:f7:56:1e:98:99:60:d1:89:39:02:a6:e8:ae:07:7f:85:62: 9d:88:00:d1:99:42:89:74:05:6a:0f:53:cb:42:66:f1:a8:4c: ee:85:e9:b9:9e:c4:50:2d:53:70:fc:7e:d5:f9:2c:1d:fe:64: 73:ff:fb:60:3a:81:98:74:c6:6e:31:8c:7e:5f:7e:54:d3:19: 7a:83:3d:8a:cc:39:6e:2f:c7:ba:11:df:94:c1:6a:64:6c:8f: 09:ee:2d:98:1e:f0:33:f6:4b:f2:17:e2:09:f0:f6:c0:18:e8: 22:95:60:78:d6:01:a7:e4:0a:5d:5e:23:2f:ed:42:fc:49:65: ce:b4:bb:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDvtA9iZS4qzdo9lzt6ydL9SLU+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEOUM0Q0I2MjQwODFDRUM0Nzc0OEEwQUI2N0JFMjdC Q0RGOEI4MzAeFw0yNjA2MTYyMjExMTNaFw0yNjA2MTgwMTEyMTNaMDMxMTAvBgNV BAMTKEQwQkUyQ0IyMjgzNkJEMTYwRDc5Qzk0M0E2NDM5RkJFRTY4NEIxMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk7wExoQL1BWcNXsTvyjFkknkU udoxwPv7vRcmLwwQhnK5aVrd/5cIH48z9Tr6w6dePI69Hi9tYzmp7TSedo71+iOd BIt4hdJSdoeGm3KqLgwPS+2TiOTFX9vj5bl7Jp/fuJDYNLtcHybFnobbIpcalxhC PRHR2B6GjR0AeUpAzUol/qNBxpPHNd99oYnsslfDev7wY8qcn+C/0mU6wRS40udM g3Isfiyv/6GKRToAxJdI70zxvv4q35VuphFs6+1o4xBG0DmuLEA+9O29gJeZE2ab QcRx2ofSVRhY50NASpV3TurlmRRSAnGjxt6D+2HXc5Y27ekCo/cWAkDHzB3XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0L4ssig2vRYNeclDpkOfvuaEsTIwHwYDVR0j BBgwFoAUT9nEy2JAgc7Ed0igq2e+J7zfi4MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTU5MmMyNzQtMTFkYi00MTI3LWJhYmItYWVhZTk5Mjg0YjAwLzAvNEZEOUM0Q0I2 MjQwODFDRUM0Nzc0OEEwQUI2N0JFMjdCQ0RGOEI4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkQ5QzRDQjYyNDA4MUNFQzQ3NzQ4QTBBQjY3QkUyN0JDREY4 QjgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTU5MmMyNzQtMTFkYi00MTI3LWJh YmItYWVhZTk5Mjg0YjAwLzAvNEZEOUM0Q0I2MjQwODFDRUM0Nzc0OEEwQUI2N0JF MjdCQ0RGOEI4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQ0ayvubril54nHCRm35jOWPY4Lwf4IQQWu QCRbgWd0qsGW03+A1dIEsQ4A7g/tQHDS6iM67SASOsXpGOqg15R5sU0us1lJP+KF aWFGmdNWJ8uMZtWR7cvGxwGddyWLzdXOgmsturl+63kIGFKYBTf7esG0IhEnmq8Y hiUYlg73Vh6YmWDRiTkCpuiuB3+FYp2IANGZQol0BWoPU8tCZvGoTO6F6bmexFAt U3D8ftX5LB3+ZHP/+2A6gZh0xm4xjH5fflTTGXqDPYrMOW4vx7oR35TBamRsjwnu LZge8DP2S/IX4gnw9sAY6CKVYHjWAafkCl1eIy/tQvxJZc60u5g= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:20 2026 by rpki-client