$ rpki-client -vvf rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.mft File: 4D81747956B88002B7CA79329A458E7D5CC04FC7.mft (raw, json) Hash identifier: EUgvvTs1bWjT5W2sQAWwj8iTCwXqXqwTn+1g6CawqGs= Subject key identifier: DD:E0:E3:A3:62:8A:F7:ED:19:87:81:5E:5B:F6:CA:62:F3:BD:B4:90 Authority key identifier: 4D:81:74:79:56:B8:80:02:B7:CA:79:32:9A:45:8E:7D:5C:C0:4F:C7 Certificate issuer: /CN=4D81747956B88002B7CA79329A458E7D5CC04FC7 Certificate serial: 4738B705118AD45F675E79C5CE30D955CDD67D3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D81747956B88002B7CA79329A458E7D5CC04FC7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:23:27 +0000 Manifest this update: Wed 17 Jun 2026 00:18:27 +0000 Manifest next update: Thu 18 Jun 2026 01:49:27 +0000 Files and hashes: 1: 3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa (hash: pJiC24QIjxd6JDAGc4IBUzAveppgmfr21Asl7pAU+wU=) 2: 4D81747956B88002B7CA79329A458E7D5CC04FC7.crl (hash: OxQAnYXCmqL3ne0Owc2BPQoYAcc84VZFdpFutZHQYhI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.crl rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D81747956B88002B7CA79329A458E7D5CC04FC7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:38:b7:05:11:8a:d4:5f:67:5e:79:c5:ce:30:d9:55:cd:d6:7d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D81747956B88002B7CA79329A458E7D5CC04FC7 Validity Not Before: Jun 17 00:18:27 2026 GMT Not After : Jun 18 01:49:27 2026 GMT Subject: CN=DDE0E3A3628AF7ED1987815E5BF6CA62F3BDB490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b7:a0:80:a4:3b:ac:db:4c:0c:1d:ed:71:0c: 3b:03:7b:6a:e1:95:3d:3b:c9:a8:f9:96:d5:53:ef: 87:3d:d6:e8:a4:2c:8e:86:7c:2e:29:e8:0a:20:bc: 18:dd:47:47:66:0a:6e:00:5d:e7:5d:29:36:b6:04: 6d:a9:ae:78:dd:8e:f2:c8:5e:21:d4:fc:81:6a:03: 6a:e2:ad:4b:fb:d1:14:8e:0f:90:61:af:43:f2:f4: f4:c2:74:04:c9:9d:58:56:35:68:31:ef:e3:f2:bd: 73:ac:34:d7:9c:a8:d3:05:bc:f9:f6:ef:b9:76:58: 2f:4d:94:30:47:e2:9c:af:68:68:59:40:d3:25:ac: 5b:d5:c4:74:a0:06:2a:46:e6:9a:c9:41:71:c9:1a: fc:db:e7:53:4c:c2:72:84:c1:32:bc:09:3d:a1:d0: 8c:1c:29:63:e5:fe:99:c9:9e:84:a4:b0:94:78:8b: 2b:6b:73:ec:2b:6f:ef:dc:7d:9e:18:ae:02:75:d1: 7d:0b:27:b4:3e:1d:5e:7b:c5:8f:b4:f3:66:91:e3: 5a:c3:9c:33:65:af:72:39:b8:9d:16:e6:4b:75:28: 51:cd:c6:94:aa:09:3e:29:56:ae:e0:8f:48:86:df: ae:67:7c:60:27:81:5b:fd:20:42:7e:e9:16:a3:74: 11:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E0:E3:A3:62:8A:F7:ED:19:87:81:5E:5B:F6:CA:62:F3:BD:B4:90 X509v3 Authority Key Identifier: keyid:4D:81:74:79:56:B8:80:02:B7:CA:79:32:9A:45:8E:7D:5C:C0:4F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D81747956B88002B7CA79329A458E7D5CC04FC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:ef:31:11:e0:3b:7d:f4:0e:22:5b:7f:0d:05:7b:a2:44:72: 8a:71:f1:88:de:68:be:37:7f:0f:14:5a:6e:e9:9a:21:ac:64: 68:c9:17:57:ae:59:5a:49:99:90:04:ac:fc:ff:7d:95:da:1f: 82:3f:08:15:8a:a8:6f:06:44:5e:a5:bf:4e:8c:ca:9b:35:e8: 38:fc:aa:7b:72:3e:03:44:c0:dd:4a:02:51:2c:f8:74:17:90: c5:84:33:3e:73:d6:22:5d:51:94:78:b8:d3:a0:d4:99:2b:c6: 90:16:1a:d1:1b:c8:6e:1c:d6:78:6d:23:5b:a3:b7:ec:95:b4: 3b:c7:1b:7f:8e:b9:b9:be:1d:b7:d5:93:9b:ff:d6:08:04:d1: 5a:45:33:f0:34:d3:b1:71:0a:d4:fe:6e:a4:ef:c7:a8:b3:46: 2f:e0:5d:e3:f2:16:2e:ba:c3:cc:0d:ef:11:bc:d2:14:d3:77: fe:8a:f9:19:17:db:0a:06:72:18:5a:7a:bf:e5:4f:0d:e5:6e: 46:40:f8:39:cf:e2:0e:e8:80:d8:3c:14:b0:e9:5d:f6:01:bb: 11:24:cc:d0:2e:64:be:7b:35:e4:b2:fd:c8:17:e5:44:d2:33: 86:74:79:e5:90:c8:e7:80:a1:03:17:be:45:92:b0:13:44:be: 2b:31:87:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURzi3BRGK1F9nXnnFzjDZVc3WfTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4MTc0Nzk1NkI4ODAwMkI3Q0E3OTMyOUE0NThFN0Q1 Q0MwNEZDNzAeFw0yNjA2MTcwMDE4MjdaFw0yNjA2MTgwMTQ5MjdaMDMxMTAvBgNV BAMTKERERTBFM0EzNjI4QUY3RUQxOTg3ODE1RTVCRjZDQTYyRjNCREI0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyt6CApDus20wMHe1xDDsDe2rh lT07yaj5ltVT74c91uikLI6GfC4p6AogvBjdR0dmCm4AXeddKTa2BG2prnjdjvLI XiHU/IFqA2rirUv70RSOD5Bhr0Py9PTCdATJnVhWNWgx7+PyvXOsNNecqNMFvPn2 77l2WC9NlDBH4pyvaGhZQNMlrFvVxHSgBipG5prJQXHJGvzb51NMwnKEwTK8CT2h 0IwcKWPl/pnJnoSksJR4iytrc+wrb+/cfZ4YrgJ10X0LJ7Q+HV57xY+082aR41rD nDNlr3I5uJ0W5kt1KFHNxpSqCT4pVq7gj0iG365nfGAngVv9IEJ+6RajdBGTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3eDjo2KK9+0Zh4FeW/bKYvO9tJAwHwYDVR0j BBgwFoAUTYF0eVa4gAK3ynkymkWOfVzAT8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWYwYTJiZWMtZjgxYS00YTNiLWExNDQtMTc1YjE2OGUyMmZkLzAvNEQ4MTc0Nzk1 NkI4ODAwMkI3Q0E3OTMyOUE0NThFN0Q1Q0MwNEZDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDgxNzQ3OTU2Qjg4MDAyQjdDQTc5MzI5QTQ1OEU3RDVDQzA0 RkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWYwYTJiZWMtZjgxYS00YTNiLWEx NDQtMTc1YjE2OGUyMmZkLzAvNEQ4MTc0Nzk1NkI4ODAwMkI3Q0E3OTMyOUE0NThF N0Q1Q0MwNEZDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjvMRHgO330DiJbfw0Fe6JEcopx8YjeaL43 fw8UWm7pmiGsZGjJF1euWVpJmZAErPz/fZXaH4I/CBWKqG8GRF6lv06Myps16Dj8 qntyPgNEwN1KAlEs+HQXkMWEMz5z1iJdUZR4uNOg1JkrxpAWGtEbyG4c1nhtI1uj t+yVtDvHG3+Oubm+HbfVk5v/1ggE0VpFM/A007FxCtT+bqTvx6izRi/gXePyFi66 w8wN7xG80hTTd/6K+RkX2woGchhaer/lTw3lbkZA+DnP4g7ogNg8FLDpXfYBuxEk zNAuZL57NeSy/cgX5UTSM4Z0eeWQyOeAoQMXvkWSsBNEvisxh0A= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:27 2026 by rpki-client