$ rpki-client -vvf rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft File: 479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft (raw, json) Hash identifier: 2VJdagfv2mhOxjtCiOZeGia5075iwDJuiV4MPTlulIs= Subject key identifier: BD:90:C2:59:75:20:D7:92:73:33:30:B3:8F:23:B2:B7:A0:AE:AF:04 Authority key identifier: 47:9B:92:8D:BE:E9:00:1B:99:B2:1F:C3:CA:0B:A5:F3:7D:10:CC:A6 Certificate issuer: /CN=479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6 Certificate serial: 25C0FC21E2C69C45E875C9ACCF06094CDBD42C3E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft Manifest number: 3B Signing time: Sun 14 Jun 2026 22:24:18 +0000 Manifest this update: Sun 14 Jun 2026 22:19:18 +0000 Manifest next update: Mon 15 Jun 2026 22:35:18 +0000 Files and hashes: 1: 479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl (hash: nlO/foznSUTb3r7rF/EuGh9jQ7HyeWPR1UqBRVRzFa8=) 2: 3130332e332e3233332e302f32342d3234203d3e203538343837.roa (hash: Cw+u02HjQBz4UCjHcubQmRW6z/LpqGrri/10Si/nkow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 22:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c0:fc:21:e2:c6:9c:45:e8:75:c9:ac:cf:06:09:4c:db:d4:2c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6 Validity Not Before: Jun 14 22:19:18 2026 GMT Not After : Jun 15 22:35:18 2026 GMT Subject: CN=BD90C2597520D792733330B38F23B2B7A0AEAF04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c9:ef:68:75:27:c7:69:3f:35:cf:ab:a6:1f: 05:61:e0:eb:97:59:9c:83:24:8f:a2:0e:0c:03:bd: 0e:50:57:da:f9:9f:6a:5c:71:da:13:44:af:71:70: 39:87:27:a1:9f:01:89:76:3d:fd:ec:42:14:30:67: 44:a9:34:1c:0e:70:9c:26:9a:c0:dd:95:cf:7a:0a: 49:bf:e3:c8:d5:47:02:82:70:e4:b0:a9:77:35:1e: 07:8a:f8:ca:bf:e4:9d:2d:3d:76:fc:fe:44:e4:fa: b7:82:69:e2:bc:c2:cf:d1:1f:be:2c:1f:50:24:ee: c7:f8:1d:9b:7e:b8:da:a9:79:d0:ff:ab:d5:f0:56: 6b:64:24:35:bb:90:4d:ec:7d:00:8e:71:58:6b:35: b1:e6:06:fe:eb:87:2a:86:08:28:3e:64:1f:15:12: fd:42:ab:54:d4:47:84:f2:a1:89:53:16:2a:03:91: 75:bb:64:aa:65:dc:b1:31:fe:bf:29:e6:b6:41:c6: 97:d5:a1:e9:eb:58:4d:25:d3:08:e1:5e:2b:bc:31: 4f:54:02:85:40:c9:c3:b3:09:65:b4:e7:3b:e8:40: 1d:82:92:a8:ea:cb:16:27:c9:e3:7c:7d:01:79:cf: 2a:be:35:c3:e0:21:77:d4:ea:59:11:d0:39:58:04: e1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:90:C2:59:75:20:D7:92:73:33:30:B3:8F:23:B2:B7:A0:AE:AF:04 X509v3 Authority Key Identifier: keyid:47:9B:92:8D:BE:E9:00:1B:99:B2:1F:C3:CA:0B:A5:F3:7D:10:CC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:21:dd:cf:e6:d7:92:e5:78:4c:e4:a2:b5:49:29:f6:8c:b1: 8d:3a:e5:48:17:d3:62:08:bb:58:cd:31:cd:2d:3e:af:a4:78: 4e:6b:45:96:de:ca:80:59:d2:aa:83:d3:f5:a8:94:ac:6d:25: fa:40:45:66:d4:bc:e4:91:c3:64:d0:c7:2d:69:17:06:af:28: 58:22:27:23:d1:ee:2d:5f:1b:f4:af:e1:35:78:b3:58:76:7f: d3:10:5f:e2:9a:92:76:5f:95:74:8f:db:9f:80:54:ce:7d:1b: 5d:2a:32:ba:ac:14:ac:0a:d4:7e:03:bb:66:45:ee:23:69:55: 16:36:d2:a4:d9:7a:d3:e8:53:76:43:54:53:b2:aa:50:60:bb: 46:21:cb:84:6c:4c:35:34:f5:78:c4:c3:97:4c:9a:5b:72:f0: 9b:ea:e6:66:13:44:e5:c3:0d:ca:af:35:ec:96:e7:93:af:8f: 3c:f1:e0:04:9f:33:b1:2f:68:fd:ef:e4:01:8c:38:b0:29:51: 2d:2a:0f:bd:7f:43:88:98:59:b6:7c:fd:87:e1:33:8d:3a:4d: 54:27:03:8d:f9:09:f2:ac:ae:e7:dd:76:de:6e:4b:d4:57:e8: 38:58:6d:a9:57:10:c2:d6:6b:dd:1f:ed:de:d2:d6:f6:47:4f: da:2a:b3:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJcD8IeLGnEXodcmszwYJTNvULD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc5QjkyOERCRUU5MDAxQjk5QjIxRkMzQ0EwQkE1RjM3 RDEwQ0NBNjAeFw0yNjA2MTQyMjE5MThaFw0yNjA2MTUyMjM1MThaMDMxMTAvBgNV BAMTKEJEOTBDMjU5NzUyMEQ3OTI3MzMzMzBCMzhGMjNCMkI3QTBBRUFGMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgye9odSfHaT81z6umHwVh4OuX WZyDJI+iDgwDvQ5QV9r5n2pccdoTRK9xcDmHJ6GfAYl2Pf3sQhQwZ0SpNBwOcJwm msDdlc96Ckm/48jVRwKCcOSwqXc1HgeK+Mq/5J0tPXb8/kTk+reCaeK8ws/RH74s H1Ak7sf4HZt+uNqpedD/q9XwVmtkJDW7kE3sfQCOcVhrNbHmBv7rhyqGCCg+ZB8V Ev1Cq1TUR4TyoYlTFioDkXW7ZKpl3LEx/r8p5rZBxpfVoenrWE0l0wjhXiu8MU9U AoVAycOzCWW05zvoQB2CkqjqyxYnyeN8fQF5zyq+NcPgIXfU6lkR0DlYBOHpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvZDCWXUg15JzMzCzjyOyt6CurwQwHwYDVR0j BBgwFoAUR5uSjb7pABuZsh/Dygul830QzKYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQzZjI5ZWEtODc0YS00ZDFhLWFiY2MtNzUyOTNjYjUxYTZkLzAvNDc5QjkyOERC RUU5MDAxQjk5QjIxRkMzQ0EwQkE1RjM3RDEwQ0NBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzlCOTI4REJFRTkwMDFCOTlCMjFGQzNDQTBCQTVGMzdEMTBD Q0E2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQzZjI5ZWEtODc0YS00ZDFhLWFi Y2MtNzUyOTNjYjUxYTZkLzAvNDc5QjkyOERCRUU5MDAxQjk5QjIxRkMzQ0EwQkE1 RjM3RDEwQ0NBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACch3c/m15LleEzkorVJKfaMsY065UgX02II u1jNMc0tPq+keE5rRZbeyoBZ0qqD0/WolKxtJfpARWbUvOSRw2TQxy1pFwavKFgi JyPR7i1fG/Sv4TV4s1h2f9MQX+KaknZflXSP25+AVM59G10qMrqsFKwK1H4Du2ZF 7iNpVRY20qTZetPoU3ZDVFOyqlBgu0Yhy4RsTDU09XjEw5dMmlty8Jvq5mYTROXD DcqvNeyW55Ovjzzx4ASfM7EvaP3v5AGMOLApUS0qD71/Q4iYWbZ8/YfhM406TVQn A435CfKsrufddt5uS9RX6DhYbalXEMLWa90f7d7S1vZHT9oqsy0= -----END CERTIFICATE-----Generated at Mon Jun 15 13:58:42 2026 by rpki-client