$ rpki-client -vvf rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft File: 4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft (raw, json) Hash identifier: Q4ucLjNm+6eUFKA1jR4U+ox6Er720LC0hVJouRn47vA= Subject key identifier: 4B:62:48:80:E7:38:80:65:4C:2A:5D:52:93:92:06:48:7E:AE:A1:FF Authority key identifier: 4A:18:E5:54:0F:B9:CF:E0:7A:95:ED:F8:9B:AF:7C:E9:78:E9:42:58 Certificate issuer: /CN=4A18E5540FB9CFE07A95EDF89BAF7CE978E94258 Certificate serial: 5E89E79092A76A45E23CB723F148C80EB68815BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 15:48:23 +0000 Manifest this update: Tue 16 Jun 2026 15:43:23 +0000 Manifest next update: Wed 17 Jun 2026 17:01:23 +0000 Files and hashes: 1: 4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl (hash: BiIsJ6SBjv77Cg3K18VxE7oa6Pqz+RxD2xfcHEuwCEA=) 2: 3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa (hash: CHd91Km0nR+qP58cZt8MMTA3jronphrVjPNjJ4FduNs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:89:e7:90:92:a7:6a:45:e2:3c:b7:23:f1:48:c8:0e:b6:88:15:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A18E5540FB9CFE07A95EDF89BAF7CE978E94258 Validity Not Before: Jun 16 15:43:23 2026 GMT Not After : Jun 17 17:01:23 2026 GMT Subject: CN=4B624880E73880654C2A5D52939206487EAEA1FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0f:4c:d5:6d:1d:9e:33:ad:a4:6f:bf:62:7b: 14:1a:65:36:9c:87:b3:b5:76:bb:49:50:c0:8e:82: cc:a4:a4:8f:bb:74:c0:8c:fa:52:75:96:02:86:4b: e3:2f:a6:dd:52:f0:bd:18:78:df:90:1f:70:45:25: 5c:09:6e:72:fe:d6:49:84:4d:47:96:1e:5d:91:42: 65:dd:5c:78:84:60:ff:ce:cc:02:ee:85:d7:ec:86: 3a:30:0a:ea:5e:9d:e9:f9:92:97:0e:7f:09:3d:d0: e6:78:58:76:a8:00:04:3f:97:42:76:93:6f:dd:6b: 3a:44:89:2b:2f:71:36:b0:94:01:29:f6:df:da:af: a0:2c:48:ea:da:83:f0:3e:ee:d2:77:6b:df:40:67: 30:d7:e6:6d:70:3f:f8:4f:b3:64:31:bb:a1:01:48: 0a:59:e3:c0:00:c6:a9:d2:cf:e0:a7:c4:e6:18:ad: c0:51:11:76:4c:49:85:9c:91:20:2e:d1:2d:56:94: 39:1b:a0:81:1e:60:7d:15:f9:54:d5:f7:4c:f4:e7: 75:95:da:78:32:73:6d:27:d6:34:58:4c:b0:7a:00: 86:12:23:aa:56:d5:ac:d0:af:c7:c0:11:fb:56:b0: 94:fc:d0:16:e7:da:0f:06:4f:c7:41:51:6f:b9:ee: 84:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:62:48:80:E7:38:80:65:4C:2A:5D:52:93:92:06:48:7E:AE:A1:FF X509v3 Authority Key Identifier: keyid:4A:18:E5:54:0F:B9:CF:E0:7A:95:ED:F8:9B:AF:7C:E9:78:E9:42:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:4e:7d:89:57:f7:72:c2:5f:e7:ae:e3:63:cb:2a:44:a5:a8: 7d:ff:5c:22:2f:20:29:46:09:87:08:05:71:76:69:b8:92:51: f2:b3:43:e0:88:d6:15:e4:74:5c:d5:b6:c8:41:0b:db:3d:9f: 44:85:54:68:e2:c3:8c:eb:b4:87:d7:7a:fd:1c:2e:d6:75:0e: 64:65:e7:91:6b:04:a0:4c:f8:c8:ef:c0:90:e0:12:40:63:9b: 23:bb:75:9d:d5:af:67:76:f7:70:52:f3:f8:28:21:d2:07:40: f9:45:b3:17:88:a3:58:45:4e:31:b8:b1:b0:35:43:63:e9:a7: 1b:36:b3:ed:28:59:c9:fd:95:86:62:b5:af:18:00:3f:99:83: b7:ae:f0:b9:34:9b:11:ed:b7:99:43:2f:fe:c7:03:c7:98:e8: d2:20:77:58:8c:b0:c6:fd:38:2c:c9:cd:85:96:1b:ee:cc:db: 07:ce:57:86:e3:52:44:34:96:8c:44:d7:28:59:e9:39:e9:ef: e0:7c:02:89:61:da:e7:b6:e1:53:55:14:1b:7d:c8:44:aa:f2: 73:1e:07:af:f5:07:1e:60:c9:f4:8f:c2:62:3b:ee:43:5d:34: 12:59:e8:41:e5:b2:02:0e:24:59:94:36:52:27:13:04:03:b2: b7:a8:6d:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXonnkJKnakXiPLcj8UjIDraIFbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEExOEU1NTQwRkI5Q0ZFMDdBOTVFREY4OUJBRjdDRTk3 OEU5NDI1ODAeFw0yNjA2MTYxNTQzMjNaFw0yNjA2MTcxNzAxMjNaMDMxMTAvBgNV BAMTKDRCNjI0ODgwRTczODgwNjU0QzJBNUQ1MjkzOTIwNjQ4N0VBRUExRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDID0zVbR2eM62kb79iexQaZTac h7O1drtJUMCOgsykpI+7dMCM+lJ1lgKGS+Mvpt1S8L0YeN+QH3BFJVwJbnL+1kmE TUeWHl2RQmXdXHiEYP/OzALuhdfshjowCupenen5kpcOfwk90OZ4WHaoAAQ/l0J2 k2/dazpEiSsvcTawlAEp9t/ar6AsSOrag/A+7tJ3a99AZzDX5m1wP/hPs2Qxu6EB SApZ48AAxqnSz+CnxOYYrcBREXZMSYWckSAu0S1WlDkboIEeYH0V+VTV90z053WV 2ngyc20n1jRYTLB6AIYSI6pW1azQr8fAEftWsJT80Bbn2g8GT8dBUW+57oQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS2JIgOc4gGVMKl1Sk5IGSH6uof8wHwYDVR0j BBgwFoAUShjlVA+5z+B6le34m6986XjpQlgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjlmYzk5NmYtNzJjYS00ZDZiLWEwZTctZmY1YmM0MmIwNTg5LzAvNEExOEU1NTQw RkI5Q0ZFMDdBOTVFREY4OUJBRjdDRTk3OEU5NDI1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTE4RTU1NDBGQjlDRkUwN0E5NUVERjg5QkFGN0NFOTc4RTk0 MjU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjlmYzk5NmYtNzJjYS00ZDZiLWEw ZTctZmY1YmM0MmIwNTg5LzAvNEExOEU1NTQwRkI5Q0ZFMDdBOTVFREY4OUJBRjdD RTk3OEU5NDI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBOfYlX93LCX+eu42PLKkSlqH3/XCIvIClG CYcIBXF2abiSUfKzQ+CI1hXkdFzVtshBC9s9n0SFVGjiw4zrtIfXev0cLtZ1DmRl 55FrBKBM+MjvwJDgEkBjmyO7dZ3Vr2d293BS8/goIdIHQPlFsxeIo1hFTjG4sbA1 Q2Pppxs2s+0oWcn9lYZita8YAD+Zg7eu8Lk0mxHtt5lDL/7HA8eY6NIgd1iMsMb9 OCzJzYWWG+7M2wfOV4bjUkQ0loxE1yhZ6Tnp7+B8Aolh2ue24VNVFBt9yESq8nMe B6/1Bx5gyfSPwmI77kNdNBJZ6EHlsgIOJFmUNlInEwQDsreobbc= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:53 2026 by rpki-client