$ rpki-client -vvf rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft File: 4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft (raw, json) Hash identifier: yCZR5wlp75jeKSdozgshUghA459B2Ol0vNM1BDbY3SI= Subject key identifier: 48:D2:04:68:F2:BB:E6:03:C0:F4:75:A6:67:D4:F9:A4:4E:79:E7:A6 Authority key identifier: 4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15 Certificate issuer: /CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515 Certificate serial: 203883A7C87602D9ED339BC135B50BEDFC45B1F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 16:14:12 +0000 Manifest this update: Sat 13 Jun 2026 16:09:12 +0000 Manifest next update: Sun 14 Jun 2026 18:13:12 +0000 Files and hashes: 1: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: pqH7WpxtojGs6NyUT0vVoZIYUBKEAJzFb6PabPXpeUg=) 2: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: kEQuuE3MZPluiYnypOmYBPYLGkYCAstrSIg304qTUMU=) 3: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: xBC6wC0qaSZA17wYqb5z2deY4tddRBLazqglI6ol9r0=) 4: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: NFMSe8jpXIOrJJynKVDw112aSae0hUPV8Ycnly1ty30=) 5: 4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl (hash: F2Lq+5fgCDFBBeuf07Y6O11L8u37RQCEq0FPzPrNgFU=) 6: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: j4hOV3opgjAagd+hKmonrIvCvECab8tS3BbyVP+3UsM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:38:83:a7:c8:76:02:d9:ed:33:9b:c1:35:b5:0b:ed:fc:45:b1:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515 Validity Not Before: Jun 13 16:09:12 2026 GMT Not After : Jun 14 18:13:12 2026 GMT Subject: CN=48D20468F2BBE603C0F475A667D4F9A44E79E7A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a1:ae:cc:83:c4:5f:eb:98:d8:59:67:ec:c5: 4f:69:bd:13:11:dc:70:8a:36:9c:28:b8:82:35:85: 72:8a:f7:0a:41:af:0b:dd:fd:d2:8b:36:3f:14:07: 85:b0:15:1c:74:70:07:a4:4e:70:b3:89:f7:6a:71: ca:21:d6:5d:1c:1d:2a:a4:22:5e:5f:28:71:36:8d: 3e:57:97:00:44:40:02:b3:cc:66:09:5f:1d:cc:d9: 60:24:6c:37:5a:1e:32:c6:b9:c3:7d:6b:32:57:f0: 71:4e:9f:cb:98:cd:a2:94:a5:c8:f4:d4:21:3c:2b: 00:fa:ae:c8:0c:6d:2b:66:99:17:10:0e:85:72:68: e3:8c:e0:17:d5:d1:c1:c6:e6:52:3a:4f:2f:ee:31: dd:18:5a:f6:12:21:3c:f6:f2:65:d6:84:38:b8:76: b9:03:5e:da:c5:7d:46:1b:3b:d8:ca:84:13:94:20: f9:e7:bd:75:08:b1:9b:bf:a2:fc:34:db:20:df:78: ae:11:2d:e1:19:b1:cc:62:32:96:ae:6a:b2:b1:af: b8:11:bc:60:df:4c:7e:30:66:f1:89:09:6b:a0:14: 18:0b:5f:b0:1b:c9:67:09:ab:4e:c3:51:d5:33:06: 9f:3f:a7:f9:14:03:c4:d3:4b:44:bf:08:ec:36:53: dc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D2:04:68:F2:BB:E6:03:C0:F4:75:A6:67:D4:F9:A4:4E:79:E7:A6 X509v3 Authority Key Identifier: keyid:4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:90:0c:eb:c9:21:a7:92:29:e9:54:8e:88:c5:79:cf:38:02: dd:5d:31:3d:11:ab:d1:6a:08:d4:e5:54:06:ed:c3:d7:f3:5e: 28:ce:b4:5d:1b:28:d9:49:b7:62:b1:99:b9:d2:68:40:6f:3b: df:41:c5:88:91:1a:d5:5b:2e:68:cc:55:93:35:b9:0a:f7:26: 04:47:1a:54:8d:36:ed:ce:0b:e7:34:fe:c0:12:fa:62:fb:2c: d3:85:77:be:c5:55:93:87:5f:1c:fa:88:4a:6e:9a:4a:12:6b: 4d:13:52:98:15:6e:ac:14:e2:f7:e4:59:9a:0c:0b:63:90:90: f0:c3:6c:0a:9c:44:6d:61:61:8c:6f:ff:31:ef:f1:77:f0:cd: 28:c2:8e:56:3b:3c:e6:02:16:c8:de:73:5e:29:4e:02:a6:4d: ea:99:b1:6e:98:62:66:aa:9c:d3:78:65:72:c3:9f:be:9b:c9: a3:4a:1b:34:35:87:ca:bb:9a:58:9a:21:90:fe:aa:ec:5c:ed: ba:b6:9f:af:a0:c9:f8:0b:98:15:e3:97:5c:46:47:82:dc:2c: 51:9f:bf:fc:7e:fe:da:ce:40:b6:97:0e:1c:70:5b:b0:0d:40: c4:62:b6:fa:c0:43:63:8e:dd:95:b9:a9:9a:11:f0:21:c7:82: 55:47:5a:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDiDp8h2AtntM5vBNbUL7fxFsfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0QkY4NEU3RDZGMzlENjI3QkU1QjUwQTkxNzMxNURG RUJGMTUxNTAeFw0yNjA2MTMxNjA5MTJaFw0yNjA2MTQxODEzMTJaMDMxMTAvBgNV BAMTKDQ4RDIwNDY4RjJCQkU2MDNDMEY0NzVBNjY3RDRGOUE0NEU3OUU3QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCroa7Mg8Rf65jYWWfsxU9pvRMR 3HCKNpwouII1hXKK9wpBrwvd/dKLNj8UB4WwFRx0cAekTnCzifdqccoh1l0cHSqk Il5fKHE2jT5XlwBEQAKzzGYJXx3M2WAkbDdaHjLGucN9azJX8HFOn8uYzaKUpcj0 1CE8KwD6rsgMbStmmRcQDoVyaOOM4BfV0cHG5lI6Ty/uMd0YWvYSITz28mXWhDi4 drkDXtrFfUYbO9jKhBOUIPnnvXUIsZu/ovw02yDfeK4RLeEZscxiMpauarKxr7gR vGDfTH4wZvGJCWugFBgLX7AbyWcJq07DUdUzBp8/p/kUA8TTS0S/COw2U9z7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSNIEaPK75gPA9HWmZ9T5pE5556YwHwYDVR0j BBgwFoAUTUv4Tn1vOdYnvltQqRcxXf6/FRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0ZTZiMmQtM2RkYi00NmViLTgzZWYtYzk5YjIwMDM3ODNmLzAvNEQ0QkY4NEU3 RDZGMzlENjI3QkU1QjUwQTkxNzMxNURGRUJGMTUxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRCRjg0RTdENkYzOUQ2MjdCRTVCNTBBOTE3MzE1REZFQkYx NTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz ZWYtYzk5YjIwMDM3ODNmLzAvNEQ0QkY4NEU3RDZGMzlENjI3QkU1QjUwQTkxNzMx NURGRUJGMTUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6QDOvJIaeSKelUjojFec84At1dMT0Rq9Fq CNTlVAbtw9fzXijOtF0bKNlJt2KxmbnSaEBvO99BxYiRGtVbLmjMVZM1uQr3JgRH GlSNNu3OC+c0/sAS+mL7LNOFd77FVZOHXxz6iEpumkoSa00TUpgVbqwU4vfkWZoM C2OQkPDDbAqcRG1hYYxv/zHv8XfwzSjCjlY7POYCFsjec14pTgKmTeqZsW6YYmaq nNN4ZXLDn76byaNKGzQ1h8q7mliaIZD+quxc7bq2n6+gyfgLmBXjl1xGR4LcLFGf v/x+/trOQLaXDhxwW7ANQMRitvrAQ2OO3ZW5qZoR8CHHglVHWnY= -----END CERTIFICATE-----Generated at Sat Jun 13 20:28:12 2026 by rpki-client