$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft File: 4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft (raw, json) Hash identifier: St/WYy9xGLDXzYQkzz1chOKdYIVgSTDD188DzMn3V9E= Subject key identifier: D0:33:81:1F:2E:5E:4B:CA:B7:B2:35:85:F9:CD:06:15:31:FC:6E:DD Authority key identifier: 4F:9D:EF:EA:18:F9:7C:95:D8:6B:C7:B3:9D:B7:D8:00:C1:F1:92:0F Certificate issuer: /CN=4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F Certificate serial: 63F7D4F5ECC19D94A71085334A52A74CA059AA2A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:43:39 +0000 Manifest this update: Wed 17 Jun 2026 04:38:39 +0000 Manifest next update: Thu 18 Jun 2026 08:16:39 +0000 Files and hashes: 1: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: uBR3IGblPNZJ3jWpF0OXwKYD/CzwZlm+xMvRiWr2v+Q=) 2: 4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl (hash: 9nuzvQL7HGb+UgY11E/H6eNmpSCwS9Duu69m0bAc0YE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f7:d4:f5:ec:c1:9d:94:a7:10:85:33:4a:52:a7:4c:a0:59:aa:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F Validity Not Before: Jun 17 04:38:39 2026 GMT Not After : Jun 18 08:16:39 2026 GMT Subject: CN=D033811F2E5E4BCAB7B23585F9CD061531FC6EDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5c:1e:ae:f3:33:09:3e:77:52:ba:21:da:41: 56:2d:74:0c:50:30:20:35:98:39:48:66:d2:58:c1: 2c:b4:8e:61:a6:a9:42:f4:78:1a:de:76:bc:1d:d5: 4f:5a:80:bf:06:5f:13:8c:12:89:6e:ae:9f:ba:39: f2:24:16:c5:0c:36:df:59:88:b1:b6:6e:e3:8f:66: e6:5d:0a:03:6f:78:1e:ce:d1:84:a1:51:23:b8:9c: c8:7c:6d:f4:cf:85:67:4e:e1:c1:98:a3:8d:35:35: 67:e4:fe:1d:4b:ae:9a:a2:b4:cc:d3:ab:31:69:69: a0:e8:da:4f:15:f1:bd:50:32:4f:bd:1c:6d:8c:13: b0:b9:4e:7c:2e:37:09:97:dd:fa:ea:cc:01:4f:f1: c7:b9:5b:61:d9:8d:b8:d9:ef:b4:bf:b7:e8:0d:aa: 7a:e0:2c:c5:0f:ac:61:6d:32:b5:db:85:48:98:d6: 3a:4e:c6:c1:43:57:f5:dc:70:00:74:11:4a:64:8a: ff:58:1a:91:b2:3f:b0:18:ff:9e:00:5c:1d:7a:61: 76:0f:f2:15:64:96:b7:9a:9c:a0:e4:41:8b:6f:b1: 71:f0:ec:24:22:4f:bf:83:8e:11:4e:77:5f:bf:c7: 47:f4:39:dc:d1:ca:64:bd:2d:a3:6e:06:1b:c6:53: e9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:33:81:1F:2E:5E:4B:CA:B7:B2:35:85:F9:CD:06:15:31:FC:6E:DD X509v3 Authority Key Identifier: keyid:4F:9D:EF:EA:18:F9:7C:95:D8:6B:C7:B3:9D:B7:D8:00:C1:F1:92:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:77:2e:d6:d4:da:ff:90:f7:54:0a:5b:d8:b4:e2:9c:7e:b2: 9d:00:b6:30:5e:67:2d:12:3c:7f:bc:d8:b3:cf:15:4e:2a:10: 0a:67:68:ea:ed:0e:fe:af:2f:a1:c2:fa:76:8e:9d:f6:38:af: 6a:85:08:ea:d2:be:8b:ee:0b:e2:9e:ce:f4:e8:e1:1f:e3:a7: 1b:c4:c7:e8:e0:63:f9:d0:f0:35:09:6d:08:f5:70:e7:89:c6: 04:34:a8:78:52:e9:47:6d:ee:ad:74:4f:2d:0e:dd:b7:3a:bc: 62:40:38:99:3c:63:bb:27:d2:9d:06:8d:d4:a5:3b:c9:a7:6a: 99:db:7d:ea:4f:e1:d2:97:76:33:0d:a4:b6:64:81:38:3a:a9: 81:70:28:ed:be:78:af:70:92:b3:15:08:44:d4:f7:d0:29:fc: 62:86:82:c0:9c:fa:12:7c:a7:48:f4:b7:d7:8d:36:28:49:af: 53:a7:99:90:ae:5b:d5:80:79:fe:87:fb:df:ee:12:23:a2:56: 8f:37:ec:cd:5a:df:e0:35:6d:71:74:1e:83:c2:63:5a:9a:13: 50:f3:0c:4c:c7:12:93:04:01:0c:45:13:07:a3:a4:51:77:21: 11:fa:90:4a:64:ad:c3:13:ea:81:6a:81:7f:09:76:e0:54:4d: b5:c8:7d:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY/fU9ezBnZSnEIUzSlKnTKBZqiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY5REVGRUExOEY5N0M5NUQ4NkJDN0IzOURCN0Q4MDBD MUYxOTIwRjAeFw0yNjA2MTcwNDM4MzlaFw0yNjA2MTgwODE2MzlaMDMxMTAvBgNV BAMTKEQwMzM4MTFGMkU1RTRCQ0FCN0IyMzU4NUY5Q0QwNjE1MzFGQzZFREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQXB6u8zMJPndSuiHaQVYtdAxQ MCA1mDlIZtJYwSy0jmGmqUL0eBredrwd1U9agL8GXxOMEolurp+6OfIkFsUMNt9Z iLG2buOPZuZdCgNveB7O0YShUSO4nMh8bfTPhWdO4cGYo401NWfk/h1LrpqitMzT qzFpaaDo2k8V8b1QMk+9HG2ME7C5TnwuNwmX3frqzAFP8ce5W2HZjbjZ77S/t+gN qnrgLMUPrGFtMrXbhUiY1jpOxsFDV/XccAB0EUpkiv9YGpGyP7AY/54AXB16YXYP 8hVklreanKDkQYtvsXHw7CQiT7+DjhFOd1+/x0f0OdzRymS9LaNuBhvGU+mpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0DOBHy5eS8q3sjWF+c0GFTH8bt0wHwYDVR0j BBgwFoAUT53v6hj5fJXYa8eznbfYAMHxkg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE4ZjA0MzUtNGQzOC00N2VmLTg1MGYtNTFiYTQ2MTdmYjNkLzAvNEY5REVGRUEx OEY5N0M5NUQ4NkJDN0IzOURCN0Q4MDBDMUYxOTIwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RjlERUZFQTE4Rjk3Qzk1RDg2QkM3QjM5REI3RDgwMEMxRjE5 MjBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvNEY5REVGRUExOEY5N0M5NUQ4NkJDN0IzOURCN0Q4 MDBDMUYxOTIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEd3LtbU2v+Q91QKW9i04px+sp0AtjBeZy0S PH+82LPPFU4qEApnaOrtDv6vL6HC+naOnfY4r2qFCOrSvovuC+KezvTo4R/jpxvE x+jgY/nQ8DUJbQj1cOeJxgQ0qHhS6Udt7q10Ty0O3bc6vGJAOJk8Y7sn0p0GjdSl O8mnapnbfepP4dKXdjMNpLZkgTg6qYFwKO2+eK9wkrMVCETU99Ap/GKGgsCc+hJ8 p0j0t9eNNihJr1OnmZCuW9WAef6H+9/uEiOiVo837M1a3+A1bXF0HoPCY1qaE1Dz DEzHEpMEAQxFEwejpFF3IRH6kEpkrcMT6oFqgX8JduBUTbXIfW8= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:43 2026 by rpki-client