$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft File: 4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft (raw, json) Hash identifier: VR0CXtk6Pgcl1Ub6gv2GY7Y3LTCyRJkBDR5XJpH5fHA= Subject key identifier: 5B:90:18:A6:6F:1E:17:2D:95:33:AA:36:12:B6:4D:86:3E:7F:6D:6B Authority key identifier: 4A:B7:BD:8A:13:F8:8A:9A:CC:16:3E:CD:B0:8E:E4:9E:AB:29:00:E0 Certificate issuer: /CN=4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0 Certificate serial: 3CAA56CDF44D696484C321FE939E57072215F54B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 23:42:46 +0000 Manifest this update: Tue 16 Jun 2026 23:37:46 +0000 Manifest next update: Thu 18 Jun 2026 00:26:46 +0000 Files and hashes: 1: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: U4x7nHOIPSopo3seWvdUR/rW9/Lem7oTQ8rb2DjIll4=) 2: 4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl (hash: 3NRqJqLHBzB/JhQZFISbXu+epVtxMsZ504oqAizzdmM=) 3: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 4GyYBNeN6eFsPcbI1361ngWI6JUq/EEA9jGEIXv0P9w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:aa:56:cd:f4:4d:69:64:84:c3:21:fe:93:9e:57:07:22:15:f5:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0 Validity Not Before: Jun 16 23:37:46 2026 GMT Not After : Jun 18 00:26:46 2026 GMT Subject: CN=5B9018A66F1E172D9533AA3612B64D863E7F6D6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:44:38:a9:f6:03:04:52:2d:e8:ca:03:03:9b: bf:55:26:7f:71:21:05:c6:de:ec:9a:f1:3c:5d:d2: 3b:a1:36:72:09:84:05:2c:39:70:bf:7c:6d:8f:59: d3:82:26:34:af:24:3f:d1:87:74:c6:2e:f7:4d:c3: 44:0e:3e:f6:2e:d9:a5:4f:29:93:52:6e:b4:5b:6f: eb:c2:17:40:0a:64:d6:66:8d:22:bb:5f:d5:f1:12: e4:cd:95:75:4f:98:ac:d3:9f:9f:24:17:cb:b4:e4: 11:87:08:be:3b:da:a2:a0:2d:16:b8:85:49:c5:8f: b9:20:64:48:1d:4c:5e:7d:d5:de:6b:0b:d8:9a:6e: d1:f4:5c:7d:a6:59:b0:18:5b:49:30:3d:9b:a3:40: a9:a4:93:83:1a:33:ac:a1:0d:3d:ce:17:8e:ad:b6: 1f:8c:08:e0:aa:7a:56:02:7d:0a:5a:ce:dc:f1:bc: d2:db:62:31:15:9b:fe:70:33:75:36:69:10:e3:78: 8d:5d:9b:79:d6:7f:af:e6:80:ad:7e:5c:fe:e9:c0: 0b:4b:c2:55:e6:65:79:fd:fd:9f:6c:11:8f:2f:3b: 07:8f:8d:1c:63:14:1d:e3:34:f3:0a:59:0e:45:a2: b8:26:50:7b:9c:d8:40:d0:4b:df:3a:ef:e1:57:ba: 0d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:90:18:A6:6F:1E:17:2D:95:33:AA:36:12:B6:4D:86:3E:7F:6D:6B X509v3 Authority Key Identifier: keyid:4A:B7:BD:8A:13:F8:8A:9A:CC:16:3E:CD:B0:8E:E4:9E:AB:29:00:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e8:57:72:3d:14:4a:db:19:2c:b1:44:4f:a7:53:00:a7:0f: d0:20:97:e1:73:6b:13:89:48:89:a6:cd:83:cf:59:5a:17:7d: e5:44:a8:f6:b8:49:f5:ad:96:a4:43:6b:cb:53:0a:81:0f:84: a0:90:23:6d:e0:74:8f:51:75:90:c8:0e:46:91:ec:9b:97:54: c4:05:0a:ef:11:8d:f1:00:23:2b:f5:fc:f7:55:20:6c:ff:00: 7b:94:6e:cf:32:89:b9:73:c6:b2:cd:d1:83:95:fa:de:61:0d: fa:06:b8:d7:f1:f3:fb:48:20:74:bc:98:e4:7b:1f:75:1b:f1: 3d:7a:0d:63:eb:19:aa:e9:16:1e:4c:a5:f6:9d:00:9b:fa:72: 90:5e:2e:64:47:8d:3a:57:6f:13:a6:19:49:3e:45:32:a9:1e: a3:32:4c:9a:ab:3f:77:c7:2e:aa:24:ae:2b:9a:15:fd:f8:c6: 5a:ca:e3:c3:a4:4d:3f:81:17:3d:80:46:f5:3e:9c:db:d8:32: 66:c6:65:d5:7a:56:e5:a2:f1:54:64:c3:d0:9e:11:ef:c6:ff: 00:2f:3c:5c:a6:06:85:37:ee:76:34:92:23:bf:30:d4:80:99: e9:9e:3f:20:f0:71:52:94:b4:8a:b0:bb:e8:20:33:8b:e9:1b: 9b:c4:10:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKpWzfRNaWSEwyH+k55XByIV9UswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFCN0JEOEExM0Y4OEE5QUNDMTYzRUNEQjA4RUU0OUVB QjI5MDBFMDAeFw0yNjA2MTYyMzM3NDZaFw0yNjA2MTgwMDI2NDZaMDMxMTAvBgNV BAMTKDVCOTAxOEE2NkYxRTE3MkQ5NTMzQUEzNjEyQjY0RDg2M0U3RjZENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQRDip9gMEUi3oygMDm79VJn9x IQXG3uya8Txd0juhNnIJhAUsOXC/fG2PWdOCJjSvJD/Rh3TGLvdNw0QOPvYu2aVP KZNSbrRbb+vCF0AKZNZmjSK7X9XxEuTNlXVPmKzTn58kF8u05BGHCL472qKgLRa4 hUnFj7kgZEgdTF591d5rC9iabtH0XH2mWbAYW0kwPZujQKmkk4MaM6yhDT3OF46t th+MCOCqelYCfQpaztzxvNLbYjEVm/5wM3U2aRDjeI1dm3nWf6/mgK1+XP7pwAtL wlXmZXn9/Z9sEY8vOwePjRxjFB3jNPMKWQ5ForgmUHuc2EDQS9867+FXug11AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW5AYpm8eFy2VM6o2ErZNhj5/bWswHwYDVR0j BBgwFoAUSre9ihP4iprMFj7NsI7knqspAOAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ3NTA4OGUtNDlhZi00NzJiLTliNjItODFlNzNkYWFmMWQ2LzAvNEFCN0JEOEEx M0Y4OEE5QUNDMTYzRUNEQjA4RUU0OUVBQjI5MDBFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUI3QkQ4QTEzRjg4QTlBQ0MxNjNFQ0RCMDhFRTQ5RUFCMjkw MEUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvNEFCN0JEOEExM0Y4OEE5QUNDMTYzRUNEQjA4RUU0 OUVBQjI5MDBFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjoV3I9FErbGSyxRE+nUwCnD9Agl+FzaxOJ SImmzYPPWVoXfeVEqPa4SfWtlqRDa8tTCoEPhKCQI23gdI9RdZDIDkaR7JuXVMQF Cu8RjfEAIyv1/PdVIGz/AHuUbs8yiblzxrLN0YOV+t5hDfoGuNfx8/tIIHS8mOR7 H3Ub8T16DWPrGarpFh5MpfadAJv6cpBeLmRHjTpXbxOmGUk+RTKpHqMyTJqrP3fH LqokriuaFf34xlrK48OkTT+BFz2ARvU+nNvYMmbGZdV6VuWi8VRkw9CeEe/G/wAv PFymBoU37nY0kiO/MNSAmemePyDwcVKUtIqwu+ggM4vpG5vEEMs= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:22 2026 by rpki-client