$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft File: 4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft (raw, json) Hash identifier: uFrBbllvwkaJii2D2vBM4MvQoxyESNyrNgCH7J8TSTU= Subject key identifier: A9:29:C4:A2:80:FE:DC:1C:AC:D3:8A:AB:D3:DF:2E:68:C0:E7:51:8D Authority key identifier: 4A:CA:AD:0A:28:A6:50:A9:BD:65:B0:A6:E1:90:57:F4:7B:DB:94:2F Certificate issuer: /CN=4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F Certificate serial: 79A6ED594C631E65007373977E92D9C261B1405D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:18:05 +0000 Manifest this update: Wed 17 Jun 2026 04:13:05 +0000 Manifest next update: Thu 18 Jun 2026 06:34:05 +0000 Files and hashes: 1: 4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl (hash: uZkOFUGeED9mCxcsw3Ld437sXszpgge4f5UVuEDzqY4=) 2: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (hash: 7y1kc2AMpxx6evn2aDQV63VxhXeky0gM842l022bSD4=) 3: 3130332e3136332e3234302e302f32342d3234203d3e20313431383837.roa (hash: 5Ssmm5grz5Tl3MtkZw82jMEzuLc9usDz6SBlVHYxN7U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a6:ed:59:4c:63:1e:65:00:73:73:97:7e:92:d9:c2:61:b1:40:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F Validity Not Before: Jun 17 04:13:05 2026 GMT Not After : Jun 18 06:34:05 2026 GMT Subject: CN=A929C4A280FEDC1CACD38AABD3DF2E68C0E7518D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:95:9e:d3:aa:c0:54:1b:3a:f1:52:de:5b: db:82:ae:73:fd:ad:01:01:c4:f2:94:54:c4:e9:84: 87:8c:8c:47:27:c7:9a:d4:31:e8:72:cb:df:4b:2e: 1a:3c:96:0c:0f:83:28:d2:69:a4:6e:f2:95:a0:61: a4:65:23:5e:17:16:9b:ab:b0:79:52:b2:1d:72:2a: ef:2e:f7:95:27:0e:73:7b:74:20:40:ca:93:4e:50: 8a:4d:d8:f7:ba:e4:af:78:45:7b:a7:51:06:98:10: 97:06:7f:f4:76:d9:fb:90:23:f5:cf:46:e3:d3:49: 91:5b:a2:55:4f:87:1c:7e:9c:80:bc:f7:7e:41:61: dc:f8:96:98:ce:fb:c1:39:e9:30:9d:11:5f:e4:5a: c1:f3:15:a3:a1:c9:a5:11:c5:87:9d:ff:81:cd:80: 61:62:bc:75:40:0f:77:45:80:f6:07:79:12:53:e6: 50:e3:10:9a:a9:88:8c:58:ef:f5:43:2a:3e:cb:8a: 4e:01:0e:24:a3:97:62:6b:3e:4f:fa:da:77:0a:0d: 20:e2:3b:b0:bf:4e:c6:41:05:e3:cf:d2:86:bc:ca: 03:d2:eb:eb:5f:70:a6:c1:42:48:bd:b3:ce:55:50: 1a:98:58:38:ec:96:b4:05:37:eb:a9:21:c3:7a:80: 07:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:29:C4:A2:80:FE:DC:1C:AC:D3:8A:AB:D3:DF:2E:68:C0:E7:51:8D X509v3 Authority Key Identifier: keyid:4A:CA:AD:0A:28:A6:50:A9:BD:65:B0:A6:E1:90:57:F4:7B:DB:94:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:96:ab:23:f4:30:2e:e4:c0:3f:c2:05:ba:93:bf:4c:52:2d: 9d:ea:f2:3a:4e:f2:ef:75:0f:c3:01:fe:4e:d5:d2:93:f5:25: bc:cb:4c:bf:f5:46:e8:1e:53:b4:20:5a:35:a6:bd:12:ae:e4: 0a:15:64:ae:16:89:bd:a2:db:f2:a6:73:e9:f9:cb:41:04:9b: ab:be:88:6b:d6:bf:7a:3c:ec:47:41:1b:15:a3:70:1e:a5:e2: 4e:69:ff:05:97:9b:00:58:5f:13:fe:1b:71:23:3e:90:76:7e: d7:e1:5c:35:63:82:94:99:e0:7a:0d:26:86:09:fb:49:e4:8f: d4:4e:93:98:8c:30:c1:f6:4d:21:ef:13:c4:06:47:44:a2:da: cb:40:3c:5c:5a:8a:26:c4:d5:d0:e7:60:92:86:9e:13:2c:38: d0:5e:94:40:30:3c:4f:53:eb:c5:b1:77:37:34:db:c0:aa:cf: 46:64:f1:eb:ad:4b:b1:7d:53:5d:b8:33:f4:15:35:b1:2f:7a: ee:f9:ea:f4:94:55:9f:8a:a9:0a:79:23:4c:c3:35:e1:f3:55: 8e:61:f3:9c:a4:5f:ed:1e:1f:85:5a:b9:a1:66:7a:53:37:80: 6a:c0:8e:b1:01:de:49:e2:3d:5b:50:42:4b:8a:f4:58:5f:b3: a0:36:67:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeabtWUxjHmUAc3OXfpLZwmGxQF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDQUFEMEEyOEE2NTBBOUJENjVCMEE2RTE5MDU3RjQ3 QkRCOTQyRjAeFw0yNjA2MTcwNDEzMDVaFw0yNjA2MTgwNjM0MDVaMDMxMTAvBgNV BAMTKEE5MjlDNEEyODBGRURDMUNBQ0QzOEFBQkQzREYyRTY4QzBFNzUxOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8SZWe06rAVBs68VLeW9uCrnP9 rQEBxPKUVMTphIeMjEcnx5rUMehyy99LLho8lgwPgyjSaaRu8pWgYaRlI14XFpur sHlSsh1yKu8u95UnDnN7dCBAypNOUIpN2Pe65K94RXunUQaYEJcGf/R22fuQI/XP RuPTSZFbolVPhxx+nIC8935BYdz4lpjO+8E56TCdEV/kWsHzFaOhyaURxYed/4HN gGFivHVAD3dFgPYHeRJT5lDjEJqpiIxY7/VDKj7Lik4BDiSjl2JrPk/62ncKDSDi O7C/TsZBBePP0oa8ygPS6+tfcKbBQki9s85VUBqYWDjslrQFN+upIcN6gAejAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqSnEooD+3Bys04qr098uaMDnUY0wHwYDVR0j BBgwFoAUSsqtCiimUKm9ZbCm4ZBX9HvblC8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M1Yjc4NWQtODMwMy00NWM1LTlhNTgtZWMxMjg4NzQwODY2LzAvNEFDQUFEMEEy OEE2NTBBOUJENjVCMEE2RTE5MDU3RjQ3QkRCOTQyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUNBQUQwQTI4QTY1MEE5QkQ2NUIwQTZFMTkwNTdGNDdCREI5 NDJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvNEFDQUFEMEEyOEE2NTBBOUJENjVCMEE2RTE5MDU3 RjQ3QkRCOTQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWWqyP0MC7kwD/CBbqTv0xSLZ3q8jpO8u91 D8MB/k7V0pP1JbzLTL/1RugeU7QgWjWmvRKu5AoVZK4Wib2i2/Kmc+n5y0EEm6u+ iGvWv3o87EdBGxWjcB6l4k5p/wWXmwBYXxP+G3EjPpB2ftfhXDVjgpSZ4HoNJoYJ +0nkj9ROk5iMMMH2TSHvE8QGR0Si2stAPFxaiibE1dDnYJKGnhMsONBelEAwPE9T 68Wxdzc028Cqz0Zk8eutS7F9U124M/QVNbEveu756vSUVZ+KqQp5I0zDNeHzVY5h 85ykX+0eH4VauaFmelM3gGrAjrEB3kniPVtQQkuK9Fhfs6A2Z+s= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:30 2026 by rpki-client