$ rpki-client -vvf rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft File: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft (raw, json) Hash identifier: vRHfJE76veDekbl5JdUJy6OqSdj0bybJAZ87kx0ivpc= Subject key identifier: 0D:52:61:5A:7D:87:C4:3D:52:13:E2:E4:93:37:FF:C1:06:87:B6:1B Authority key identifier: 48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 Certificate issuer: /CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Certificate serial: 22081379D693340955759EB38533F109EAF56109 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 23:27:27 +0000 Manifest this update: Tue 16 Jun 2026 23:22:27 +0000 Manifest next update: Wed 17 Jun 2026 23:58:27 +0000 Files and hashes: 1: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl (hash: 8rCuGdBPpKkuDRpghz+a5dZjDF10DUVxY2bBrmTRl9I=) 2: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: gNsJ7E8Wxy2p/7sU5QpT/62BpjOz3T6D3tTX9O4/j10=) 3: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: 5QHnLxUj5ToZbDP+kG+27eOW/Apgnrnl+qyMt1ibRXw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:08:13:79:d6:93:34:09:55:75:9e:b3:85:33:f1:09:ea:f5:61:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Validity Not Before: Jun 16 23:22:27 2026 GMT Not After : Jun 17 23:58:27 2026 GMT Subject: CN=0D52615A7D87C43D5213E2E49337FFC10687B61B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ee:c7:e1:76:6f:8c:b9:10:9c:9c:ee:0c:fa: 90:d8:6a:16:09:fd:af:d3:ee:e0:d1:da:b2:d0:0b: 95:d4:29:4f:62:58:00:7d:51:c0:65:03:78:33:c7: 8c:2b:5b:f8:87:13:a4:ff:18:fb:31:e4:57:e5:30: 9b:2a:de:62:29:ec:3e:30:f9:3c:e4:8a:b5:50:96: a1:39:d8:7d:ff:db:f9:12:e2:42:9a:78:9a:5d:0b: 54:db:64:93:0d:af:79:81:92:9c:a4:c7:22:25:da: 06:b1:38:c5:5c:a2:cb:81:a0:d0:c6:9e:52:47:ae: e0:5e:5f:3a:1a:10:2d:3b:5a:91:29:00:49:5a:d0: 06:8b:d2:7f:04:2c:0b:29:03:a9:d0:14:ee:e7:3f: 3f:e9:2a:cf:28:5b:02:ce:e7:58:52:ea:19:0f:26: e4:d9:94:12:9b:6a:c9:1f:f5:52:05:fc:bc:df:2d: d7:ba:a4:8d:98:32:a1:21:32:df:d2:ac:9c:c3:b5: 56:ce:46:aa:d1:a8:1a:93:53:96:4f:15:c8:22:9a: 8d:d8:8a:9a:bd:d0:36:de:bf:bf:05:9f:a9:0f:af: 5d:8b:c2:cc:97:73:09:8f:55:c1:9e:fb:60:d0:ed: 07:d6:95:23:a9:ec:18:ae:78:94:23:99:d6:66:ab: 75:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:52:61:5A:7D:87:C4:3D:52:13:E2:E4:93:37:FF:C1:06:87:B6:1B X509v3 Authority Key Identifier: keyid:48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:ef:07:5c:9e:f7:37:ab:04:63:7c:d8:ff:34:72:0e:4c:48: 65:da:bc:23:7e:27:37:7e:b0:44:91:e6:02:5d:2f:00:71:22: 55:8e:69:ec:e1:43:4a:da:55:94:29:96:ee:7d:90:a9:67:1f: 7c:06:cf:11:3f:ef:40:b6:af:50:25:08:28:40:db:33:d5:00: bb:26:73:ed:32:5f:93:77:f6:71:79:c2:97:01:29:9f:69:84: 17:17:e6:7f:c3:62:ad:f5:19:97:46:79:96:a9:94:ca:9b:81: 0a:81:21:75:6d:41:1a:58:75:b0:46:a9:8c:ed:cf:92:e6:21: 4d:71:ed:b2:85:d7:7f:8f:91:34:04:dc:81:64:10:44:d3:93: 08:29:e6:73:af:99:63:9c:1c:84:b4:c5:d3:44:b6:21:b9:80: e6:d1:e6:9e:c4:0a:a0:a8:f2:24:b0:f3:6f:e5:5c:49:60:74: ce:40:3c:2d:1f:57:7f:80:fd:ef:89:3a:09:13:19:46:a1:ae: 1d:00:c9:bf:d3:1f:8f:fb:27:ae:c8:2a:f9:b2:1e:00:f9:56: 17:03:74:5e:70:07:a2:1d:56:22:19:59:d0:a1:19:76:03:2b: 53:8b:59:c9:28:e9:ff:60:f3:44:4f:0b:b9:ee:4e:b7:36:44: 16:7b:0f:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIggTedaTNAlVdZ6zhTPxCer1YQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4 QUY2ODdEMzAeFw0yNjA2MTYyMzIyMjdaFw0yNjA2MTcyMzU4MjdaMDMxMTAvBgNV BAMTKDBENTI2MTVBN0Q4N0M0M0Q1MjEzRTJFNDkzMzdGRkMxMDY4N0I2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs7sfhdm+MuRCcnO4M+pDYahYJ /a/T7uDR2rLQC5XUKU9iWAB9UcBlA3gzx4wrW/iHE6T/GPsx5FflMJsq3mIp7D4w +TzkirVQlqE52H3/2/kS4kKaeJpdC1TbZJMNr3mBkpykxyIl2gaxOMVcosuBoNDG nlJHruBeXzoaEC07WpEpAEla0AaL0n8ELAspA6nQFO7nPz/pKs8oWwLO51hS6hkP JuTZlBKbaskf9VIF/LzfLde6pI2YMqEhMt/SrJzDtVbORqrRqBqTU5ZPFcgimo3Y ipq90Dbev78Fn6kPr12LwsyXcwmPVcGe+2DQ7QfWlSOp7BiueJQjmdZmq3XVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDVJhWn2HxD1SE+Lkkzf/wQaHthswHwYDVR0j BBgwFoAUSIXnXWsKk49f7jX6uibeoIr2h9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZmN2VmMzQtNDk5MS00YmIxLTk2YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2 QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4QUY2ODdEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg1RTc1RDZCMEE5MzhGNUZFRTM1RkFCQTI2REVBMDhBRjY4 N0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZmN2VmMzQtNDk5MS00YmIxLTk2 YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRF QTA4QUY2ODdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN3vB1ye9zerBGN82P80cg5MSGXavCN+Jzd+ sESR5gJdLwBxIlWOaezhQ0raVZQplu59kKlnH3wGzxE/70C2r1AlCChA2zPVALsm c+0yX5N39nF5wpcBKZ9phBcX5n/DYq31GZdGeZaplMqbgQqBIXVtQRpYdbBGqYzt z5LmIU1x7bKF13+PkTQE3IFkEETTkwgp5nOvmWOcHIS0xdNEtiG5gObR5p7ECqCo 8iSw82/lXElgdM5APC0fV3+A/e+JOgkTGUahrh0Ayb/TH4/7J67IKvmyHgD5VhcD dF5wB6IdViIZWdChGXYDK1OLWcko6f9g80RPC7nuTrc2RBZ7DyY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:55 2026 by rpki-client