$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft File: 4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft (raw, json) Hash identifier: /7undKuN0L1vmjku9q7KDACBGhd3pKh705rC1Tl+elQ= Subject key identifier: F9:64:3A:69:39:9A:82:8D:B7:17:9F:06:40:BD:90:77:E1:30:51:06 Authority key identifier: 4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE Certificate issuer: /CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Certificate serial: 781D93F1B5539F8B3363730D1B3856D7E3D4EB85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:10:20 +0000 Manifest this update: Wed 17 Jun 2026 02:05:20 +0000 Manifest next update: Thu 18 Jun 2026 05:33:20 +0000 Files and hashes: 1: 4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl (hash: pOAF6Zs6ZQtYt63KcMkdN9nallsH6lxGSJaYN+hR9AM=) 2: 3130332e3232342e36352e302f32342d3234203d3e203539313538.roa (hash: h0Ywdp2xV/0uaBG2V+ZPA5ElWunEb3BnR0JL9D5MtcM=) 3: 3130332e3232342e36342e302f32342d3234203d3e203539313538.roa (hash: vQnWFglYbzJwVQsCkKEdFaQ62I0WzkhSOu2hoX2jL1c=) 4: 3130332e3232342e36362e302f32342d3234203d3e203539313538.roa (hash: CaktXeTtnkylUI+n1xZGKMIR5SWqXLjJULrGhcPeRfc=) 5: 3130332e3232342e36372e302f32342d3234203d3e203539313538.roa (hash: Aw8k55kVz/A5ACNLxhHkCsixHFEWcXHRzRLrIEuRqgk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1d:93:f1:b5:53:9f:8b:33:63:73:0d:1b:38:56:d7:e3:d4:eb:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Validity Not Before: Jun 17 02:05:20 2026 GMT Not After : Jun 18 05:33:20 2026 GMT Subject: CN=F9643A69399A828DB7179F0640BD9077E1305106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8a:67:cb:0e:6f:68:54:9d:2f:72:78:cb:fb: 09:15:c9:e1:ce:e9:a8:b9:be:f2:0b:78:fb:4b:94: 3b:e2:c9:e1:b2:81:60:b5:a1:e7:34:30:18:4c:2e: 36:f3:e5:14:76:12:dd:a5:f3:f3:e5:1d:f2:c0:f4: f3:e0:90:48:77:71:b1:fe:38:29:4c:93:30:3f:23: 9a:6b:7c:90:dc:93:93:96:4f:e7:a4:0b:95:57:e4: a0:10:a9:eb:f8:b6:56:6d:03:c0:23:ec:b0:f3:80: 24:77:d8:5f:a6:94:9d:6d:55:c5:af:b9:d5:9c:a1: f1:eb:89:89:35:c0:bd:8e:2d:bc:71:01:de:f6:4c: 18:bf:9d:c6:94:d2:96:6a:b8:2b:f7:af:40:a1:27: d4:43:eb:c4:45:72:dc:88:97:70:d7:24:eb:f5:f1: 50:5c:d0:85:ed:c9:c4:bf:45:32:20:38:89:b4:e0: 7c:6e:f8:e8:c5:28:87:ac:e6:a2:9e:dc:e6:0e:89: 77:e6:76:fc:09:af:cd:fd:4f:af:2f:1b:f1:e2:e1: 07:0b:f2:98:cd:9b:0e:db:eb:25:41:60:73:3a:12: 70:8e:d5:f8:c5:3c:10:4d:1f:57:eb:32:8f:a6:37: 4c:d6:4d:c6:db:8b:f7:34:81:86:4a:4d:60:31:69: 8e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:64:3A:69:39:9A:82:8D:B7:17:9F:06:40:BD:90:77:E1:30:51:06 X509v3 Authority Key Identifier: keyid:4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e3:57:04:24:a5:21:4a:21:a4:72:e6:44:40:e7:a3:2f:f1: bb:7a:4e:42:9f:d1:48:7f:cd:95:41:95:ad:43:7b:7c:87:d5: c7:f7:70:ba:28:19:60:bb:95:ff:72:39:66:58:67:25:2f:de: f0:ab:c1:c2:5f:2f:2f:19:e1:32:46:2f:49:47:22:9c:3d:49: 6d:8a:99:92:6d:b8:8b:26:29:48:25:30:0e:f9:74:6f:4e:bd: 5d:8a:86:fe:b9:7f:14:fc:1d:a1:e2:2e:8c:8d:13:9f:35:b5: 3d:c3:9a:91:8d:02:60:c5:2c:52:5b:c3:f4:b3:d4:49:fe:45: 48:af:44:3d:ca:68:6c:3b:ac:48:6e:9f:79:78:4b:48:c2:3a: 01:db:4b:e7:1f:98:69:a9:ce:0a:14:ec:31:fa:0b:49:55:9e: 97:db:ea:96:b3:b0:f4:2c:18:61:81:d7:ca:5a:36:db:64:cd: 3e:e9:d0:7f:31:af:f7:da:ed:a6:04:57:31:f6:a0:47:11:48: 1d:c8:12:5f:4d:78:84:ff:f1:2e:3d:28:31:92:9d:65:e4:5d: 18:f4:ad:8c:04:62:7a:cc:6e:74:eb:02:d7:39:2e:68:d6:ff: cd:1d:43:0a:49:58:86:04:ea:7a:a5:f0:37:21:c2:7d:bd:03: 7f:91:ec:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeB2T8bVTn4szY3MNGzhW1+PU64UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNG Q0Q5QThBRTAeFw0yNjA2MTcwMjA1MjBaFw0yNjA2MTgwNTMzMjBaMDMxMTAvBgNV BAMTKEY5NjQzQTY5Mzk5QTgyOERCNzE3OUYwNjQwQkQ5MDc3RTEzMDUxMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoimfLDm9oVJ0vcnjL+wkVyeHO 6ai5vvILePtLlDviyeGygWC1oec0MBhMLjbz5RR2Et2l8/PlHfLA9PPgkEh3cbH+ OClMkzA/I5prfJDck5OWT+ekC5VX5KAQqev4tlZtA8Aj7LDzgCR32F+mlJ1tVcWv udWcofHriYk1wL2OLbxxAd72TBi/ncaU0pZquCv3r0ChJ9RD68RFctyIl3DXJOv1 8VBc0IXtycS/RTIgOIm04Hxu+OjFKIes5qKe3OYOiXfmdvwJr839T68vG/Hi4QcL 8pjNmw7b6yVBYHM6EnCO1fjFPBBNH1frMo+mN0zWTcbbi/c0gYZKTWAxaY4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+WQ6aTmago23F58GQL2Qd+EwUQYwHwYDVR0j BBgwFoAUTL6OBwyTDnsCvlZXxVKObPzZqK4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4ZDU0YWUtODcwZC00MzQ4LWFiNTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcw QzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNGQ0Q5QThBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0JFOEUwNzBDOTMwRTdCMDJCRTU2NTdDNTUyOEU2Q0ZDRDlB OEFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE4ZDU0YWUtODcwZC00MzQ4LWFi NTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhF NkNGQ0Q5QThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7jVwQkpSFKIaRy5kRA56Mv8bt6TkKf0Uh/ zZVBla1De3yH1cf3cLooGWC7lf9yOWZYZyUv3vCrwcJfLy8Z4TJGL0lHIpw9SW2K mZJtuIsmKUglMA75dG9OvV2Khv65fxT8HaHiLoyNE581tT3DmpGNAmDFLFJbw/Sz 1En+RUivRD3KaGw7rEhun3l4S0jCOgHbS+cfmGmpzgoU7DH6C0lVnpfb6pazsPQs GGGB18paNttkzT7p0H8xr/fa7aYEVzH2oEcRSB3IEl9NeIT/8S49KDGSnWXkXRj0 rYwEYnrMbnTrAtc5LmjW/80dQwpJWIYE6nql8Dchwn29A3+R7NQ= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:50 2026 by rpki-client