$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft File: 14649B106FA0C411D7FCD73A4B0147226E8A8454.mft (raw, json) Hash identifier: Tq6RFwWNxFuDgjxz3PiaLkQ4O6/7rnCnyl+ErymEMSI= Subject key identifier: 18:16:C6:FE:0D:24:A5:78:BA:C8:A8:EF:20:E9:CF:8A:56:23:95:33 Authority key identifier: 14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54 Certificate issuer: /CN=14649B106FA0C411D7FCD73A4B0147226E8A8454 Certificate serial: 4AEA0263194420C11BBF5AB5F9AEF6AB4D3F7551 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 17:20:31 +0000 Manifest this update: Sat 13 Jun 2026 17:15:31 +0000 Manifest next update: Sun 14 Jun 2026 19:05:31 +0000 Files and hashes: 1: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (hash: HpCznd8LAemIm49TlwLV1GhAVKIU4sZ5BY+7TeR1EA4=) 2: 14649B106FA0C411D7FCD73A4B0147226E8A8454.crl (hash: jwdyPpooSBuHcDUNI51Cg3TActp+xGoKcj3UQRD1aSA=) 3: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (hash: O5MLHMcohhvApO1/L1RvpM2jYbsZVQ8eLBzNQkddTHQ=) 4: 3130332e38392e3136342e302f32342d3234203d3e20313333383030.roa (hash: eR7s3iDJUbgwn7vG0iEll3YQrHiAYjHNsvD28zhjxXY=) 5: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (hash: j+ssfk4JgFO6Pb/CGHEOZfos8czQhoSwZB6YERcUzUI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ea:02:63:19:44:20:c1:1b:bf:5a:b5:f9:ae:f6:ab:4d:3f:75:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14649B106FA0C411D7FCD73A4B0147226E8A8454 Validity Not Before: Jun 13 17:15:31 2026 GMT Not After : Jun 14 19:05:31 2026 GMT Subject: CN=1816C6FE0D24A578BAC8A8EF20E9CF8A56239533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:85:d6:d9:7d:02:a3:7a:1d:e3:28:9c:7b:80: e2:09:74:e9:f7:bd:7b:4c:df:da:da:33:bc:d3:ff: db:1c:6b:e1:43:f1:55:eb:85:cf:3d:d4:a6:fe:36: 75:43:1a:5e:62:d1:51:9f:5a:7f:bf:1a:30:b1:5a: e4:f0:d5:f8:b7:49:57:a1:de:d8:32:e3:90:35:f9: f2:86:1c:76:6c:e9:fc:80:1a:b5:44:60:b4:7f:56: 47:9a:36:e7:dc:e3:02:14:45:25:47:33:bd:67:48: 23:69:f0:7c:1c:2d:b0:23:bc:19:eb:e5:da:69:65: 0a:c2:b3:5a:44:fe:36:a1:95:3f:02:1d:27:33:b9: 95:12:92:86:a1:20:97:cb:c2:50:a2:61:91:9d:3f: 42:2e:ee:bf:b4:be:df:35:0c:97:47:0e:01:d9:05: 9d:2a:ce:87:dd:27:18:69:71:27:72:b1:82:3a:a0: e9:57:4a:a6:ee:57:a5:e1:94:66:07:01:2c:40:41: 6d:cc:85:15:74:fe:ad:f8:64:9b:00:ef:18:d5:ae: 45:f1:c2:10:58:6e:27:07:f5:ad:35:90:8c:7f:90: cf:42:5f:c3:e8:c4:5c:59:e5:ad:82:75:5e:9a:ca: 8a:74:f7:c5:d3:29:a0:eb:04:0e:22:8a:8b:27:e7: ed:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:16:C6:FE:0D:24:A5:78:BA:C8:A8:EF:20:E9:CF:8A:56:23:95:33 X509v3 Authority Key Identifier: keyid:14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:60:34:ac:a1:be:de:21:4d:9a:8c:81:d7:1f:80:16:99:51: 6b:59:07:c4:55:8e:c7:fb:fe:0f:4b:8d:a3:f0:23:e1:24:f3: ed:e3:31:c7:ba:0b:96:a1:5c:c4:2e:96:f6:05:7d:0c:7e:2e: bc:f3:67:ba:8a:79:5d:8e:83:2e:74:ae:ee:50:18:af:31:28: 0d:11:4f:ca:b4:7d:be:a3:43:c2:50:03:e7:aa:ce:f3:84:be: 9c:41:fa:80:24:d7:4a:55:e6:88:73:b8:0c:4b:4a:7a:06:da: fc:50:5e:e7:4f:af:1c:dc:b2:65:be:12:be:10:fe:ef:df:40: 7c:2c:80:6a:00:95:34:49:10:f5:93:51:a2:b8:75:9f:ce:ec: 5a:d3:96:e7:68:f9:88:db:a0:81:05:b9:7d:b6:81:34:7a:df: 9b:d6:ed:79:7f:02:f4:df:59:35:ec:d0:71:f0:0a:1d:37:4f: 7c:1c:29:93:cc:a5:30:46:46:b0:23:0e:15:33:65:de:ff:7f: 28:1f:34:09:20:a8:51:0f:01:77:d0:a8:7f:b3:73:71:d3:f7: 64:93:f0:30:f0:fa:78:fc:1b:f9:42:0f:08:15:64:e0:69:12: b3:b3:f7:69:d1:29:0d:8c:d4:ff:54:29:88:79:23:45:94:5d: 12:91:5f:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSuoCYxlEIMEbv1q1+a72q00/dVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2NDlCMTA2RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2 RThBODQ1NDAeFw0yNjA2MTMxNzE1MzFaFw0yNjA2MTQxOTA1MzFaMDMxMTAvBgNV BAMTKDE4MTZDNkZFMEQyNEE1NzhCQUM4QThFRjIwRTlDRjhBNTYyMzk1MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYhdbZfQKjeh3jKJx7gOIJdOn3 vXtM39raM7zT/9sca+FD8VXrhc891Kb+NnVDGl5i0VGfWn+/GjCxWuTw1fi3SVeh 3tgy45A1+fKGHHZs6fyAGrVEYLR/VkeaNufc4wIURSVHM71nSCNp8HwcLbAjvBnr 5dppZQrCs1pE/jahlT8CHSczuZUSkoahIJfLwlCiYZGdP0Iu7r+0vt81DJdHDgHZ BZ0qzofdJxhpcSdysYI6oOlXSqbuV6XhlGYHASxAQW3MhRV0/q34ZJsA7xjVrkXx whBYbicH9a01kIx/kM9CX8PoxFxZ5a2CdV6ayop098XTKaDrBA4iiosn5+0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGBbG/g0kpXi6yKjvIOnPilYjlTMwHwYDVR0j BBgwFoAUFGSbEG+gxBHX/Nc6SwFHIm6KhFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQxNzZkZGQtYTk4MC00M2Q2LTk0YTctOTVlZWRhNTM5NjY1LzAvMTQ2NDlCMTA2 RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2RThBODQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDY0OUIxMDZGQTBDNDExRDdGQ0Q3M0E0QjAxNDcyMjZFOEE4 NDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQxNzZkZGQtYTk4MC00M2Q2LTk0 YTctOTVlZWRhNTM5NjY1LzAvMTQ2NDlCMTA2RkEwQzQxMUQ3RkNENzNBNEIwMTQ3 MjI2RThBODQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdgNKyhvt4hTZqMgdcfgBaZUWtZB8RVjsf7 /g9LjaPwI+Ek8+3jMce6C5ahXMQulvYFfQx+LrzzZ7qKeV2Ogy50ru5QGK8xKA0R T8q0fb6jQ8JQA+eqzvOEvpxB+oAk10pV5ohzuAxLSnoG2vxQXudPrxzcsmW+Er4Q /u/fQHwsgGoAlTRJEPWTUaK4dZ/O7FrTludo+YjboIEFuX22gTR635vW7Xl/AvTf WTXs0HHwCh03T3wcKZPMpTBGRrAjDhUzZd7/fygfNAkgqFEPAXfQqH+zc3HT92ST 8DDw+nj8G/lCDwgVZOBpErOz92nRKQ2M1P9UKYh5I0WUXRKRX4o= -----END CERTIFICATE-----Generated at Sun Jun 14 04:11:28 2026 by rpki-client