$ rpki-client -vvf rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft File: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft (raw, json) Hash identifier: RsPJyWgkXM3GXSxXY0KGIA7ufT9XGkvrCgVQjtdyZRg= Subject key identifier: B1:D8:87:26:3F:99:A4:73:61:5C:6C:B6:1C:EE:54:E7:45:62:9D:4F Authority key identifier: 4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3 Certificate issuer: /CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3 Certificate serial: 24FFBAF2AEA2C87BDBD8C2828F94E73D9C8657E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:05:13 +0000 Manifest this update: Wed 17 Jun 2026 02:00:13 +0000 Manifest next update: Thu 18 Jun 2026 03:09:13 +0000 Files and hashes: 1: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: Dk9FmD1Gd6LwGA6mFHwlSjHioZF8VJSA0K7I5b1rqPY=) 2: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: PWQir4scae8YfD6/q+bk0ejgh+XhSzNVifyQAj+tAMA=) 3: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: +WxXMuFbrHKDjWOS8r0LmF3/UaAmCxzNKESEznXTLHE=) 4: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl (hash: 2ENc3q0WGMmXYZvhA2vhZhWr8j3hdCMhoKpJTO8FgR0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ff:ba:f2:ae:a2:c8:7b:db:d8:c2:82:8f:94:e7:3d:9c:86:57:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3 Validity Not Before: Jun 17 02:00:13 2026 GMT Not After : Jun 18 03:09:13 2026 GMT Subject: CN=B1D887263F99A473615C6CB61CEE54E745629D4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:97:34:53:63:56:c9:13:3e:50:3b:14:c0:21: 1a:bd:e8:f2:32:1f:13:6b:50:92:f4:7f:b7:e3:88: 81:42:5a:86:33:e4:f7:a0:22:b2:ca:4c:bf:5c:72: 56:53:22:e2:f0:40:99:8c:30:85:fc:c9:ed:c1:3b: 23:79:aa:73:aa:1b:04:32:3d:a1:c1:89:ff:cd:25: 23:11:cb:d1:4c:7f:89:0c:7b:91:56:a0:15:d5:df: 35:1c:48:5f:1c:dd:21:bf:a6:50:d0:d9:76:b1:23: 14:bd:63:88:37:55:40:60:60:01:58:d4:f1:42:6d: fa:00:e8:ae:5b:99:51:e5:dc:f2:47:9a:c6:2c:de: 4a:46:04:6c:ba:8d:c2:eb:b0:39:5e:76:be:a6:a2: 1b:f2:5b:43:55:ae:19:4c:cd:1c:13:5e:b3:f9:e0: 44:38:c1:3f:50:44:85:5b:9e:af:f5:eb:26:bc:c6: 5c:d7:bd:69:70:5c:87:5d:5e:c7:d5:64:c2:c6:12: 32:f2:a8:01:89:37:22:1d:ab:1f:66:b1:41:94:6e: 2c:4b:02:42:7e:45:5c:ec:3d:af:e6:57:eb:61:28: 19:09:ee:fa:a0:f5:84:71:2c:7b:96:ee:6f:b9:4c: c2:4e:0a:ba:54:7d:9c:c6:6b:2c:70:6a:5c:49:ad: 20:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D8:87:26:3F:99:A4:73:61:5C:6C:B6:1C:EE:54:E7:45:62:9D:4F X509v3 Authority Key Identifier: keyid:4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:39:c6:ea:d0:16:63:d4:ce:bd:a5:21:9d:f4:6f:f1:d9:72: 59:71:57:b0:25:58:9c:60:3a:e8:de:24:a8:e7:19:fa:dc:d9: 15:27:aa:24:ca:6d:68:7b:de:45:76:2a:5b:a2:63:ea:39:29: 22:eb:64:2d:0a:b7:7a:30:47:d6:86:0f:55:87:6d:07:ac:71: 8f:ec:e3:9b:f4:43:22:eb:17:f2:04:ce:29:7a:46:4f:46:a8: ed:e1:85:41:73:50:69:fa:f1:03:f1:f7:4a:48:e6:4d:66:35: cf:40:7b:4c:d9:b1:5b:11:c0:58:67:58:be:0b:ba:84:74:5b: 94:15:c7:9c:a3:f2:f4:68:59:2f:42:74:e7:84:ce:dc:04:38: 41:a8:b5:4c:04:39:7e:d3:35:04:fa:6c:4f:d1:48:ac:ed:73: fc:f1:39:91:f9:d6:1a:51:71:83:2f:c2:e2:42:9a:65:98:91: 38:c2:9b:24:d7:b0:e3:65:30:e3:a5:b4:08:df:c9:54:3b:eb: 5d:6f:52:a5:7e:dd:09:cd:f1:39:bd:7c:18:8d:4c:10:ad:45: 07:72:74:a3:78:ba:12:20:e1:b7:e3:9e:fd:d2:2c:2b:1f:26: 35:85:7c:3e:40:9e:f9:c9:27:84:af:39:29:6d:87:03:84:e7: a6:1c:0a:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJP+68q6iyHvb2MKCj5TnPZyGV+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQwMDhBRDQ3NjFCQzcyRTNBREZBOEI0Njc3QTQ0MDc2 REE4OTBCMzAeFw0yNjA2MTcwMjAwMTNaFw0yNjA2MTgwMzA5MTNaMDMxMTAvBgNV BAMTKEIxRDg4NzI2M0Y5OUE0NzM2MTVDNkNCNjFDRUU1NEU3NDU2MjlENEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWlzRTY1bJEz5QOxTAIRq96PIy HxNrUJL0f7fjiIFCWoYz5PegIrLKTL9cclZTIuLwQJmMMIX8ye3BOyN5qnOqGwQy PaHBif/NJSMRy9FMf4kMe5FWoBXV3zUcSF8c3SG/plDQ2XaxIxS9Y4g3VUBgYAFY 1PFCbfoA6K5bmVHl3PJHmsYs3kpGBGy6jcLrsDledr6mohvyW0NVrhlMzRwTXrP5 4EQ4wT9QRIVbnq/16ya8xlzXvWlwXIddXsfVZMLGEjLyqAGJNyIdqx9msUGUbixL AkJ+RVzsPa/mV+thKBkJ7vqg9YRxLHuW7m+5TMJOCrpUfZzGayxwalxJrSD7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsdiHJj+ZpHNhXGy2HO5U50VinU8wHwYDVR0j BBgwFoAUTQCK1HYbxy4636i0Z3pEB22okLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTIyOWNhNTAtZTk1Yy00NWJiLTljMzAtNjNlMTJhZjdhNWUxLzAvNEQwMDhBRDQ3 NjFCQzcyRTNBREZBOEI0Njc3QTQ0MDc2REE4OTBCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDAwOEFENDc2MUJDNzJFM0FERkE4QjQ2NzdBNDQwNzZEQTg5 MEIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj MzAtNjNlMTJhZjdhNWUxLzAvNEQwMDhBRDQ3NjFCQzcyRTNBREZBOEI0Njc3QTQ0 MDc2REE4OTBCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI85xurQFmPUzr2lIZ30b/HZcllxV7AlWJxg OujeJKjnGfrc2RUnqiTKbWh73kV2KluiY+o5KSLrZC0Kt3owR9aGD1WHbQescY/s 45v0QyLrF/IEzil6Rk9GqO3hhUFzUGn68QPx90pI5k1mNc9Ae0zZsVsRwFhnWL4L uoR0W5QVx5yj8vRoWS9CdOeEztwEOEGotUwEOX7TNQT6bE/RSKztc/zxOZH51hpR cYMvwuJCmmWYkTjCmyTXsONlMOOltAjfyVQ7611vUqV+3QnN8Tm9fBiNTBCtRQdy dKN4uhIg4bfjnv3SLCsfJjWFfD5AnvnJJ4SvOSlthwOE56YcCmA= -----END CERTIFICATE-----Generated at Wed Jun 17 10:53:16 2026 by rpki-client