$ rpki-client -vvf rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft File: 4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft (raw, json) Hash identifier: wmhRe7V9k3O2VW4i9l5lbIfcxKCEBCCxRVlNnpOpGH8= Subject key identifier: 69:F9:03:71:AA:3F:7D:AE:40:BF:94:0C:30:1A:1E:EB:87:16:80:BE Authority key identifier: 4F:CC:5F:72:C8:4C:03:16:A4:33:3F:A5:DC:1D:8E:50:86:1D:CF:B4 Certificate issuer: /CN=4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4 Certificate serial: 2FE8BEABB5C00F3B34F1679B349162C7D3A7A89C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 08:18:00 +0000 Manifest this update: Wed 17 Jun 2026 08:13:00 +0000 Manifest next update: Thu 18 Jun 2026 10:54:00 +0000 Files and hashes: 1: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: 6RDMlBYKz+7bJ5EOXVwDOVFpA9NmUujfNeaVaTSvntE=) 2: 4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl (hash: /zbbNWYBCYXLStf9gqjZnk6XuDwzJbB+Ov/jZSCmJVg=) 3: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: k64Gbl+KVZNgSNBLh88ZvPWQiWwa2C0VFUdGvst00Zw=) 4: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: GvESsWLLWyGR/dTKAI2ZEQUDQyTILXzxCsEPsqKRlPc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e8:be:ab:b5:c0:0f:3b:34:f1:67:9b:34:91:62:c7:d3:a7:a8:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4 Validity Not Before: Jun 17 08:13:00 2026 GMT Not After : Jun 18 10:54:00 2026 GMT Subject: CN=69F90371AA3F7DAE40BF940C301A1EEB871680BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:30:3b:79:e3:d9:ad:56:08:6f:91:c5:b4: 5d:33:ce:3f:e8:a0:ee:b0:46:8e:92:db:d0:13:79: 39:17:99:42:ee:d0:08:4b:70:b4:ee:74:fa:e4:cf: 72:48:03:91:f7:c0:d5:3d:fc:da:ff:d3:1d:d9:04: bb:af:ce:68:11:dc:36:c3:e0:fc:83:41:9b:d9:84: 18:1c:dd:7a:57:39:23:6a:c7:e3:ba:2b:29:92:53: d2:d6:58:59:10:42:76:69:59:90:d3:a9:b9:d4:fa: fe:7a:09:4a:0d:ca:d7:fc:ab:d0:bb:2b:40:65:b0: 7c:85:8c:31:73:5f:f1:bc:f3:85:32:10:71:4a:e1: 9f:23:af:d9:66:96:d1:ac:24:2f:d5:6f:da:4a:de: ae:4f:59:5b:72:45:8d:9f:9d:6b:ab:8a:6d:3a:d0: 24:4f:5c:53:aa:20:cc:a5:34:1e:f2:ae:99:ff:86: ad:f7:a1:58:aa:e3:28:2c:13:be:f6:9d:ae:7c:f7: c5:24:b9:02:ab:bc:3b:7a:b9:af:3e:37:6e:67:a1: ad:77:85:73:1f:7d:69:88:57:43:68:51:84:06:15: e7:c6:aa:e0:30:e1:39:57:99:9e:4d:56:b7:07:95: 4b:5c:ab:aa:76:eb:ca:d3:a6:db:88:db:92:d8:03: 74:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F9:03:71:AA:3F:7D:AE:40:BF:94:0C:30:1A:1E:EB:87:16:80:BE X509v3 Authority Key Identifier: keyid:4F:CC:5F:72:C8:4C:03:16:A4:33:3F:A5:DC:1D:8E:50:86:1D:CF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e3:85:7f:83:64:e7:20:3b:26:5d:3b:88:05:01:a8:28:08: 1c:e1:b8:89:7f:db:cd:17:da:0f:26:82:d8:67:44:aa:3b:3d: cd:58:90:b5:a8:b2:e4:f2:9e:bc:4c:90:99:61:ed:a2:87:0b: 67:a1:1a:ec:33:ff:98:e6:68:81:d1:b6:71:65:03:81:c0:38: 0b:8d:e9:c8:8b:65:71:65:29:c7:e2:22:b2:8d:b1:60:d7:6f: 1b:04:32:62:cb:a1:a3:14:9b:13:7f:c2:48:c3:30:07:43:f4: b4:68:41:fa:b7:55:c3:4e:5e:32:13:51:d0:29:38:8d:a8:c1: 9b:7f:49:4c:28:c2:01:d9:00:80:64:a6:13:b6:dc:ca:ac:df: c2:8e:be:cf:e4:f2:cc:6f:94:12:d2:a0:d4:13:68:74:11:06: a1:d4:a0:71:31:28:0e:4d:4b:2c:a8:e7:18:83:11:d9:66:7f: 96:53:69:89:ff:ff:a4:68:a7:d6:6c:36:3b:b7:04:a7:bd:3e: 27:28:94:73:08:84:77:35:e1:d7:97:18:6e:a9:5d:da:27:06: f5:da:8f:0d:a6:f0:cf:81:c8:f1:91:99:80:72:72:83:98:98: ab:34:6d:ac:f9:3a:32:4c:24:8d:ab:fc:6a:db:13:e0:e8:5b: 43:9d:4f:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+i+q7XADzs08WebNJFix9OnqJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDQzVGNzJDODRDMDMxNkE0MzMzRkE1REMxRDhFNTA4 NjFEQ0ZCNDAeFw0yNjA2MTcwODEzMDBaFw0yNjA2MTgxMDU0MDBaMDMxMTAvBgNV BAMTKDY5RjkwMzcxQUEzRjdEQUU0MEJGOTQwQzMwMUExRUVCODcxNjgwQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3aDA7eePZrVYIb5HFtF0zzj/o oO6wRo6S29ATeTkXmULu0AhLcLTudPrkz3JIA5H3wNU9/Nr/0x3ZBLuvzmgR3DbD 4PyDQZvZhBgc3XpXOSNqx+O6KymSU9LWWFkQQnZpWZDTqbnU+v56CUoNytf8q9C7 K0BlsHyFjDFzX/G884UyEHFK4Z8jr9lmltGsJC/Vb9pK3q5PWVtyRY2fnWurim06 0CRPXFOqIMylNB7yrpn/hq33oViq4ygsE772na5898UkuQKrvDt6ua8+N25noa13 hXMffWmIV0NoUYQGFefGquAw4TlXmZ5NVrcHlUtcq6p268rTptuI25LYA3Q1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUafkDcao/fa5Av5QMMBoe64cWgL4wHwYDVR0j BBgwFoAUT8xfcshMAxakMz+l3B2OUIYdz7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk4YjM1NDktZTI1My00ZmQ5LWE3MDQtMjk2OTQ0ZTVhMDYzLzAvNEZDQzVGNzJD ODRDMDMxNkE0MzMzRkE1REMxRDhFNTA4NjFEQ0ZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkNDNUY3MkM4NEMwMzE2QTQzMzNGQTVEQzFEOEU1MDg2MURD RkI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvNEZDQzVGNzJDODRDMDMxNkE0MzMzRkE1REMxRDhF NTA4NjFEQ0ZCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfjhX+DZOcgOyZdO4gFAagoCBzhuIl/280X 2g8mgthnRKo7Pc1YkLWosuTynrxMkJlh7aKHC2ehGuwz/5jmaIHRtnFlA4HAOAuN 6ciLZXFlKcfiIrKNsWDXbxsEMmLLoaMUmxN/wkjDMAdD9LRoQfq3VcNOXjITUdAp OI2owZt/SUwowgHZAIBkphO23Mqs38KOvs/k8sxvlBLSoNQTaHQRBqHUoHExKA5N Syyo5xiDEdlmf5ZTaYn//6Rop9ZsNju3BKe9PicolHMIhHc14deXGG6pXdonBvXa jw2m8M+ByPGRmYBycoOYmKs0baz5OjJMJI2r/GrbE+DoW0OdT/s= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:10 2026 by rpki-client