$ rpki-client -vvf rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft File: 4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft (raw, json) Hash identifier: eZstdHKM2Fi+mXMKRhK/Ipm3LSp3IP1I6jzXeuW1F34= Subject key identifier: C3:59:50:C6:78:D8:96:8E:43:20:07:71:3C:6A:06:44:75:D1:5A:FF Authority key identifier: 4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2 Certificate issuer: /CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2 Certificate serial: 6F50BACEA9EC6EE4841D342F6A1536552C7BB5AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 15:53:34 +0000 Manifest this update: Tue 16 Jun 2026 15:48:34 +0000 Manifest next update: Wed 17 Jun 2026 18:44:34 +0000 Files and hashes: 1: 3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa (hash: IVSxWqHfsbpgTjNP8RzLROF59WJoZKS7+db35QQ4pHo=) 2: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (hash: Ud8zXVkaxOANWSpFsC422ZV+3rT9KJeF9ej6YaNldzs=) 3: 4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl (hash: ZmpT2XN62w9SZGamRL6T5C5XtguQzpS2LVHV+IgMmNY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:50:ba:ce:a9:ec:6e:e4:84:1d:34:2f:6a:15:36:55:2c:7b:b5:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2 Validity Not Before: Jun 16 15:48:34 2026 GMT Not After : Jun 17 18:44:34 2026 GMT Subject: CN=C35950C678D8968E432007713C6A064475D15AFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:19:1b:1b:fc:91:40:5f:51:1a:88:4c:c2:75: b4:c2:b5:e2:19:e6:48:96:21:80:b7:ca:4e:e4:f7: a5:11:c3:53:bd:53:de:86:97:c4:55:7c:da:f9:f9: f1:e3:b2:13:27:1a:3f:cb:b6:8c:80:1c:f6:fb:58: 74:f8:ac:24:6f:9e:f4:1b:d6:d6:f5:ac:66:2b:ef: f4:41:8c:27:37:9d:bd:11:7e:0f:5e:eb:ff:f9:a3: 12:a7:5f:8e:6a:a7:41:2f:4e:27:21:50:9c:55:bd: bb:48:e3:e1:67:68:1b:4a:d7:b3:61:e0:d2:22:99: 9e:8d:24:35:bc:52:9c:76:98:3a:4c:38:ef:00:8d: a4:3e:30:3f:1f:02:33:5b:05:be:5c:bf:31:02:cd: bd:29:c0:23:ad:fd:4e:b1:d0:eb:be:34:a6:8b:f2: 8e:1f:e5:56:d3:6d:9e:52:44:30:48:eb:22:90:79: b2:5f:b9:33:8f:54:09:17:1c:3d:9f:c4:23:70:77: 6d:60:dc:c6:28:67:16:f4:d0:75:27:2a:3d:30:b1: 03:28:0a:3c:54:47:f1:fd:00:06:32:3c:4c:1e:8f: a5:43:b5:ec:9e:5a:07:e6:d4:e0:09:54:52:31:92: 07:e9:dc:4f:81:c2:8d:21:be:35:79:8e:a8:29:37: 2b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:59:50:C6:78:D8:96:8E:43:20:07:71:3C:6A:06:44:75:D1:5A:FF X509v3 Authority Key Identifier: keyid:4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:31:79:4f:e7:e3:55:61:08:51:55:87:48:83:d3:98:91:6b: 47:74:61:63:0e:90:5e:3f:6d:ef:60:67:fc:34:8c:97:51:59: ae:db:79:51:83:69:6d:7f:20:71:85:14:2e:71:a0:1d:01:32: 3e:ac:a6:8e:23:3d:72:67:18:e0:5c:24:9b:cb:04:ba:d2:0b: 8f:2c:5e:c8:bc:76:3a:7e:10:1f:ef:61:40:bd:71:2c:27:b4: 17:4d:6a:23:e8:37:6d:9c:c9:51:5f:2c:f9:24:fe:66:2b:83: e2:f6:a3:01:1c:36:bf:e6:cb:13:37:8a:ce:d4:9b:8c:dd:d0: 80:ed:64:c2:5f:c5:5c:a2:24:f5:43:5c:02:53:07:19:56:92: c4:00:b6:1d:51:7e:a8:4c:eb:61:f5:ca:6c:f8:97:90:7b:78: cb:98:c6:af:f6:7a:a7:10:0f:c2:75:88:8c:00:99:d4:56:f9: fe:a0:95:33:1f:70:aa:95:75:88:a9:97:47:a4:30:0c:18:fc: 90:2e:64:19:e9:84:68:34:8d:f1:25:bd:ce:47:99:31:0c:bd: 0f:1e:13:e9:f8:35:f7:a4:f1:a1:d0:70:10:69:a9:45:36:f1: dd:34:e7:c0:ff:95:e3:0f:84:28:84:d0:64:39:1a:28:87:70: 93:14:1e:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1C6zqnsbuSEHTQvahU2VSx7taswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3MTVERTZFMjVCNzRCM0E2NzdCQUVEN0NFODFFMzEx OTAwNzFGMjAeFw0yNjA2MTYxNTQ4MzRaFw0yNjA2MTcxODQ0MzRaMDMxMTAvBgNV BAMTKEMzNTk1MEM2NzhEODk2OEU0MzIwMDc3MTNDNkEwNjQ0NzVEMTVBRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1GRsb/JFAX1EaiEzCdbTCteIZ 5kiWIYC3yk7k96URw1O9U96Gl8RVfNr5+fHjshMnGj/LtoyAHPb7WHT4rCRvnvQb 1tb1rGYr7/RBjCc3nb0Rfg9e6//5oxKnX45qp0EvTichUJxVvbtI4+FnaBtK17Nh 4NIimZ6NJDW8Upx2mDpMOO8AjaQ+MD8fAjNbBb5cvzECzb0pwCOt/U6x0Ou+NKaL 8o4f5VbTbZ5SRDBI6yKQebJfuTOPVAkXHD2fxCNwd21g3MYoZxb00HUnKj0wsQMo CjxUR/H9AAYyPEwej6VDteyeWgfm1OAJVFIxkgfp3E+Bwo0hvjV5jqgpNytZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw1lQxnjYlo5DIAdxPGoGRHXRWv8wHwYDVR0j BBgwFoAUTXFd5uJbdLOmd7rtfOgeMRkAcfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzRhYWEyZjEtNjNhOS00MjgxLTg5NDItZmI1ZDgyNDExOWE0LzAvNEQ3MTVERTZF MjVCNzRCM0E2NzdCQUVEN0NFODFFMzExOTAwNzFGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDcxNURFNkUyNUI3NEIzQTY3N0JBRUQ3Q0U4MUUzMTE5MDA3 MUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzRhYWEyZjEtNjNhOS00MjgxLTg5 NDItZmI1ZDgyNDExOWE0LzAvNEQ3MTVERTZFMjVCNzRCM0E2NzdCQUVEN0NFODFF MzExOTAwNzFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYxeU/n41VhCFFVh0iD05iRa0d0YWMOkF4/ be9gZ/w0jJdRWa7beVGDaW1/IHGFFC5xoB0BMj6spo4jPXJnGOBcJJvLBLrSC48s Xsi8djp+EB/vYUC9cSwntBdNaiPoN22cyVFfLPkk/mYrg+L2owEcNr/myxM3is7U m4zd0IDtZMJfxVyiJPVDXAJTBxlWksQAth1RfqhM62H1ymz4l5B7eMuYxq/2eqcQ D8J1iIwAmdRW+f6glTMfcKqVdYipl0ekMAwY/JAuZBnphGg0jfElvc5HmTEMvQ8e E+n4Nfek8aHQcBBpqUU28d0058D/leMPhCiE0GQ5GiiHcJMUHok= -----END CERTIFICATE-----Generated at Wed Jun 17 12:50:54 2026 by rpki-client