$ rpki-client -vvf rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft File: 4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft (raw, json) Hash identifier: xa7SpD+HBjwONPxX7iiezb8/JG8Vf5DcLtt34ef/KGc= Subject key identifier: B8:10:D3:8C:96:2C:1C:C5:AE:E6:1B:0B:0A:7C:1B:EA:70:8E:66:76 Authority key identifier: 4C:3B:BD:86:83:DD:42:C4:70:F4:E3:F8:30:B1:FA:BF:89:F4:B5:F2 Certificate issuer: /CN=4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2 Certificate serial: 26ABBBBD127441B4E31F3883BA1C78FC10FBB7B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:46:46 +0000 Manifest this update: Tue 16 Jun 2026 22:41:46 +0000 Manifest next update: Wed 17 Jun 2026 23:40:46 +0000 Files and hashes: 1: 4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl (hash: VtTWRJQAFw8x3hS3hFfpBzTBrg875Ev4I7WMMWN7Gnw=) 2: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: ic2hBdRaZAyBk1MlONf57Uzem8Aq/501RDCs5wnZzAc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ab:bb:bd:12:74:41:b4:e3:1f:38:83:ba:1c:78:fc:10:fb:b7:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2 Validity Not Before: Jun 16 22:41:46 2026 GMT Not After : Jun 17 23:40:46 2026 GMT Subject: CN=B810D38C962C1CC5AEE61B0B0A7C1BEA708E6676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:79:3f:08:f6:c9:eb:02:01:3f:c4:64:c8:77: 9a:eb:54:ee:76:30:2d:df:9c:40:a5:5a:59:13:1b: f4:cd:50:ce:e4:d4:21:11:e5:75:18:e9:d7:76:29: d2:ad:57:9e:c5:01:f8:8a:a8:8d:7d:20:4b:b1:67: b6:96:9a:5f:22:44:13:24:4b:9d:34:a1:c7:3e:7f: 8d:53:9a:02:13:e1:dc:d7:86:36:9f:33:f9:d0:69: 4a:0a:82:54:ac:18:b5:42:bf:00:61:7e:6e:56:18: e6:5c:1f:27:8d:98:11:03:ac:30:c4:42:a3:8b:56: df:0f:e9:4b:b2:f0:36:0b:74:01:e5:08:8b:1f:fd: 73:f2:61:77:41:dd:16:1d:1b:60:43:86:b5:55:de: d7:47:48:44:ec:c3:e3:0e:38:16:ab:17:78:01:12: 7f:49:62:0e:98:19:b0:cd:26:3b:bc:4b:2d:80:1f: 6e:ea:2f:3c:1f:61:11:bd:e5:49:a2:49:57:f2:ce: 9a:75:cf:f1:1c:3b:72:dc:35:75:9c:60:e6:5b:be: 39:37:5d:55:50:bb:9d:e0:5d:dd:d5:78:2b:52:e5: 1b:8d:57:d3:02:1c:6d:74:39:a7:d7:40:ee:ba:ba: 2f:73:cf:cc:d8:e9:93:94:b1:3d:8c:b9:75:2b:95: 06:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:10:D3:8C:96:2C:1C:C5:AE:E6:1B:0B:0A:7C:1B:EA:70:8E:66:76 X509v3 Authority Key Identifier: keyid:4C:3B:BD:86:83:DD:42:C4:70:F4:E3:F8:30:B1:FA:BF:89:F4:B5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:41:cc:54:ee:c7:7f:fd:4d:de:97:28:af:5b:46:fe:29:c5: 28:a8:74:4e:ee:af:aa:4b:82:38:98:2e:66:31:56:85:a9:be: 67:61:46:a6:29:e4:c0:d1:c3:dc:78:bb:1b:9b:ba:f1:d3:5e: 7d:db:b0:69:c8:fd:c5:76:39:15:81:0c:7a:7d:c1:7c:aa:73: b0:4c:b5:e0:e0:04:b1:26:75:b1:dd:ec:70:3e:1f:73:3e:a8: 1a:c3:2b:2c:b7:f9:10:45:b5:94:9a:9a:b3:54:a1:b1:21:78: 50:3d:79:d8:d5:1a:a5:f4:1e:d7:eb:aa:38:05:13:a2:f7:2a: 27:98:48:59:74:3d:c7:c3:da:e9:2d:0d:ec:b0:2b:87:e3:35: fc:10:77:04:c7:83:ff:59:9b:9e:0a:c1:0c:ac:39:2b:cf:31: 04:40:70:33:e0:e8:4b:4f:f0:6d:f9:a3:1e:48:42:ba:45:bb: f1:0d:29:7c:d3:f9:e4:ff:b5:42:ca:df:9d:d2:20:42:cf:e3: e8:92:e3:c6:58:1a:a7:89:e9:99:64:00:4b:fd:65:ca:d6:b5: 6e:a4:96:0a:a4:75:ea:f7:ea:01:ae:64:29:57:aa:29:18:df: fd:46:a8:01:e4:77:ad:25:1d:1e:c2:14:cc:46:0a:8e:8f:38: 24:50:1d:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJqu7vRJ0QbTjHziDuhx4/BD7t7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzQkJEODY4M0RENDJDNDcwRjRFM0Y4MzBCMUZBQkY4 OUY0QjVGMjAeFw0yNjA2MTYyMjQxNDZaFw0yNjA2MTcyMzQwNDZaMDMxMTAvBgNV BAMTKEI4MTBEMzhDOTYyQzFDQzVBRUU2MUIwQjBBN0MxQkVBNzA4RTY2NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDreT8I9snrAgE/xGTId5rrVO52 MC3fnEClWlkTG/TNUM7k1CER5XUY6dd2KdKtV57FAfiKqI19IEuxZ7aWml8iRBMk S500occ+f41TmgIT4dzXhjafM/nQaUoKglSsGLVCvwBhfm5WGOZcHyeNmBEDrDDE QqOLVt8P6Uuy8DYLdAHlCIsf/XPyYXdB3RYdG2BDhrVV3tdHSETsw+MOOBarF3gB En9JYg6YGbDNJju8Sy2AH27qLzwfYRG95UmiSVfyzpp1z/EcO3LcNXWcYOZbvjk3 XVVQu53gXd3VeCtS5RuNV9MCHG10OafXQO66ui9zz8zY6ZOUsT2MuXUrlQYtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuBDTjJYsHMWu5hsLCnwb6nCOZnYwHwYDVR0j BBgwFoAUTDu9hoPdQsRw9OP4MLH6v4n0tfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA2NDljNDctZGZjMy00YTIwLWI1YjQtODc5Njc1ZTVkYjkyLzAvNEMzQkJEODY4 M0RENDJDNDcwRjRFM0Y4MzBCMUZBQkY4OUY0QjVGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzNCQkQ4NjgzREQ0MkM0NzBGNEUzRjgzMEIxRkFCRjg5RjRC NUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvNEMzQkJEODY4M0RENDJDNDcwRjRFM0Y4MzBCMUZB QkY4OUY0QjVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZBzFTux3/9Td6XKK9bRv4pxSiodE7ur6pL gjiYLmYxVoWpvmdhRqYp5MDRw9x4uxubuvHTXn3bsGnI/cV2ORWBDHp9wXyqc7BM teDgBLEmdbHd7HA+H3M+qBrDKyy3+RBFtZSamrNUobEheFA9edjVGqX0HtfrqjgF E6L3KieYSFl0PcfD2uktDeywK4fjNfwQdwTHg/9Zm54KwQysOSvPMQRAcDPg6EtP 8G35ox5IQrpFu/ENKXzT+eT/tULK353SIELP4+iS48ZYGqeJ6ZlkAEv9ZcrWtW6k lgqkder36gGuZClXqikY3/1GqAHkd60lHR7CFMxGCo6POCRQHU8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:43:46 2026 by rpki-client