$ rpki-client -vvf rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft File: 4D687A8309B055D62F3035664A59E96297B81009.mft (raw, json) Hash identifier: n6g5WoaID6nZkDt2yc/FhgWFyenfrYM4uyMlHFGru/E= Subject key identifier: 58:53:EA:1F:5F:86:D4:69:41:82:B5:1F:3B:26:5E:8D:C1:01:EA:56 Authority key identifier: 4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 Certificate issuer: /CN=4D687A8309B055D62F3035664A59E96297B81009 Certificate serial: 0C6236082ACDF74F9A01315EB0BFA8A93778EE38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 09:40:34 +0000 Manifest this update: Sat 13 Jun 2026 09:35:34 +0000 Manifest next update: Sun 14 Jun 2026 12:25:34 +0000 Files and hashes: 1: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: qwKrohM8yd0iJN/MCZ42zzEDzwWYAIoaAZk2ayeImcw=) 2: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: tjAZ37II5WIJfFalAyrLUGpbSIz9sgJWYsOEq442hNI=) 3: 4D687A8309B055D62F3035664A59E96297B81009.crl (hash: ao7waA2/7WGzT42giEHuIbCsMeZiBQE9ZS64WYQ8jxg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:62:36:08:2a:cd:f7:4f:9a:01:31:5e:b0:bf:a8:a9:37:78:ee:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D687A8309B055D62F3035664A59E96297B81009 Validity Not Before: Jun 13 09:35:34 2026 GMT Not After : Jun 14 12:25:34 2026 GMT Subject: CN=5853EA1F5F86D4694182B51F3B265E8DC101EA56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8a:94:f6:9e:47:6c:08:9b:61:67:b9:84:52: ea:e8:d8:44:7e:c2:d7:7b:c6:da:38:9a:1e:45:0b: d1:3f:33:eb:05:ef:fd:cd:be:eb:f9:d8:91:59:43: b8:cf:46:f2:75:6e:14:74:a7:16:3d:a3:bd:3f:f5: ad:48:c9:47:15:d6:66:9c:39:3e:e3:1e:9e:06:4b: 6e:d3:49:dc:ec:11:e2:8a:49:26:a1:38:ad:23:f1: b5:c1:e8:5c:e3:1a:39:28:2f:a6:a6:11:c0:df:43: dc:6a:fb:5e:18:51:e0:ae:65:87:82:81:9d:2f:69: 55:98:47:e4:4e:d0:26:d1:04:42:ae:e4:7d:ac:a3: 43:a7:48:56:ef:a0:27:d5:2e:b9:24:cd:e5:d8:ec: 3d:f3:f9:6d:97:f5:66:12:e8:a9:64:a0:89:2c:43: f4:5d:c2:29:1b:16:99:3e:5a:ee:b3:16:f5:cd:58: a3:79:b2:69:4a:fd:03:2a:3f:0b:62:f3:b4:e1:f7: 84:59:ae:b2:50:60:70:ac:4f:24:b3:df:57:bd:d8: 50:5e:e0:5b:12:18:e9:c4:25:1d:71:96:80:b1:fa: 70:46:12:af:ff:71:68:d7:eb:74:eb:2c:db:af:37: da:ae:b5:ab:28:fa:b2:25:29:67:e8:12:72:7b:49: 90:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:53:EA:1F:5F:86:D4:69:41:82:B5:1F:3B:26:5E:8D:C1:01:EA:56 X509v3 Authority Key Identifier: keyid:4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a1:6a:f1:e7:b5:54:2f:0a:03:f6:53:cd:be:d4:66:8c:fc: 5d:7c:4f:95:18:9d:a7:f0:5f:e5:a6:72:67:78:26:1e:91:af: 06:e8:38:3e:73:56:78:8b:24:89:0b:64:b4:d0:58:35:b3:fc: b3:52:bb:b2:f5:43:d1:ba:bc:2e:8f:2f:3c:aa:b4:08:03:9a: 1b:78:55:0b:c2:c3:83:a3:83:bd:9e:07:70:85:13:4b:8e:ef: 26:b4:72:1d:e5:9f:2b:1b:87:7e:96:8f:c4:fb:e8:96:cc:fb: 3a:d1:b2:f1:b3:b1:fa:d2:71:da:0c:66:df:e4:c1:69:83:82: 7b:6b:9b:10:87:43:a7:c9:7d:07:7f:80:a5:59:51:47:92:58: 64:de:9f:2c:e0:a0:a8:39:c6:22:b8:c9:d8:99:8e:74:b8:49: 6b:58:63:4d:40:55:bd:ed:a9:e6:a0:18:d2:ab:24:52:a3:ce: 67:08:ce:cf:79:eb:ce:f1:06:2c:6d:8c:b3:c9:d9:76:4f:42: dc:7e:84:8d:8f:cd:60:a9:82:64:9e:4d:05:b7:77:c3:15:1d: fb:89:80:74:cd:d7:a4:24:fe:49:f6:8e:ae:a9:b6:09:76:22: 8e:53:ba:02:eb:47:ba:cc:28:a8:00:b0:c3:b8:66:9e:ab:e6: f5:ba:b5:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDGI2CCrN90+aATFesL+oqTd47jgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5 N0I4MTAwOTAeFw0yNjA2MTMwOTM1MzRaFw0yNjA2MTQxMjI1MzRaMDMxMTAvBgNV BAMTKDU4NTNFQTFGNUY4NkQ0Njk0MTgyQjUxRjNCMjY1RThEQzEwMUVBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiipT2nkdsCJthZ7mEUuro2ER+ wtd7xto4mh5FC9E/M+sF7/3Nvuv52JFZQ7jPRvJ1bhR0pxY9o70/9a1IyUcV1mac OT7jHp4GS27TSdzsEeKKSSahOK0j8bXB6FzjGjkoL6amEcDfQ9xq+14YUeCuZYeC gZ0vaVWYR+RO0CbRBEKu5H2so0OnSFbvoCfVLrkkzeXY7D3z+W2X9WYS6KlkoIks Q/RdwikbFpk+Wu6zFvXNWKN5smlK/QMqPwti87Th94RZrrJQYHCsTySz31e92FBe 4FsSGOnEJR1xloCx+nBGEq//cWjX63TrLNuvN9qutaso+rIlKWfoEnJ7SZCzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWFPqH1+G1GlBgrUfOyZejcEB6lYwHwYDVR0j BBgwFoAUTWh6gwmwVdYvMDVmSlnpYpe4EAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg5MTM4OTMtNWY2NC00YTVlLWE4ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMw OUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5N0I4MTAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80RDY4N0E4MzA5QjA1NUQ2MkYzMDM1NjY0QTU5RTk2Mjk3Qjgx MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5 NjI5N0I4MTAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEehavHntVQvCgP2U82+1GaM/F18T5UYnafw X+Wmcmd4Jh6RrwboOD5zVniLJIkLZLTQWDWz/LNSu7L1Q9G6vC6PLzyqtAgDmht4 VQvCw4Ojg72eB3CFE0uO7ya0ch3lnysbh36Wj8T76JbM+zrRsvGzsfrScdoMZt/k wWmDgntrmxCHQ6fJfQd/gKVZUUeSWGTenyzgoKg5xiK4ydiZjnS4SWtYY01AVb3t qeagGNKrJFKjzmcIzs95687xBixtjLPJ2XZPQtx+hI2PzWCpgmSeTQW3d8MVHfuJ gHTN16Qk/kn2jq6ptgl2Io5TugLrR7rMKKgAsMO4Zp6r5vW6tV0= -----END CERTIFICATE-----Generated at Sat Jun 13 15:29:42 2026 by rpki-client