$ rpki-client -vvf rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft File: A4249B719E5F988286AD3B4164C4E77F434FF948.mft (raw, json) Hash identifier: LobM3hLA7IHUd2Tie4zoymmjHu4VLynJQf1OyDfzcxk= Subject key identifier: 00:86:56:27:6C:C0:65:82:20:55:41:8D:83:41:50:C4:D9:E3:52:A6 Authority key identifier: A4:24:9B:71:9E:5F:98:82:86:AD:3B:41:64:C4:E7:7F:43:4F:F9:48 Certificate issuer: /CN=A4249B719E5F988286AD3B4164C4E77F434FF948 Certificate serial: 6F1F5B49CD25B7EB8B913EE64787F4734C08710C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 14:06:19 +0000 Manifest this update: Tue 16 Jun 2026 14:01:19 +0000 Manifest next update: Wed 17 Jun 2026 17:55:19 +0000 Files and hashes: 1: A4249B719E5F988286AD3B4164C4E77F434FF948.crl (hash: Kd0UIVf/LzK6k+w/GG9kbWgKkx+ea+8ZIUa9KNi0aTc=) 2: 3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa (hash: /8ZMrBAQoa3qQ8hBZzRb+TXTbN8qY8Wvj8VBQo+giW0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.crl rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:1f:5b:49:cd:25:b7:eb:8b:91:3e:e6:47:87:f4:73:4c:08:71:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4249B719E5F988286AD3B4164C4E77F434FF948 Validity Not Before: Jun 16 14:01:19 2026 GMT Not After : Jun 17 17:55:19 2026 GMT Subject: CN=008656276CC065822055418D834150C4D9E352A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:30:6b:cd:57:3a:c4:51:20:9c:cd:bf:3c: 79:6b:8e:c0:ea:3b:8e:f6:92:33:0e:eb:94:01:83: 4d:a0:01:d8:cd:eb:e2:ca:c7:df:56:e0:56:d8:38: 44:23:46:79:88:c4:8e:21:8e:32:90:e0:0e:18:60: 91:90:25:90:ef:13:a1:f1:9d:e4:5d:89:54:41:15: 7f:f7:8f:a7:70:07:93:a3:e3:a4:0b:19:00:10:98: b9:00:80:6c:6f:a8:3d:c6:50:d2:ab:73:67:f8:84: e6:36:83:53:ac:f5:60:36:de:05:fe:85:61:82:b2: 71:65:07:76:84:05:cb:01:a2:d3:41:e7:34:c3:61: 33:f2:f0:2a:cf:fe:7a:8f:76:6b:90:ba:05:3a:18: 0f:66:4c:b2:8f:2b:2b:1d:c4:a2:a7:75:d9:73:e3: ab:9f:fb:b5:c4:85:76:29:0c:45:9d:26:44:b6:6f: fc:39:90:80:e1:b6:8a:65:67:a5:1f:d9:8c:17:f6: 4f:f5:91:04:11:3b:cb:49:77:2c:6a:d2:0f:13:5e: 91:2a:ff:4e:96:7f:46:dd:22:f5:a4:da:da:13:17: 3f:1f:f5:14:77:45:de:9b:a1:8c:16:df:c6:fc:b2: f8:4e:00:c3:c8:ab:95:12:9e:c5:d6:9f:ea:75:c0: d6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:86:56:27:6C:C0:65:82:20:55:41:8D:83:41:50:C4:D9:E3:52:A6 X509v3 Authority Key Identifier: keyid:A4:24:9B:71:9E:5F:98:82:86:AD:3B:41:64:C4:E7:7F:43:4F:F9:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a8:d5:c9:29:ab:a6:0c:52:05:79:8d:9c:e6:0c:76:ae:50: a3:bf:9c:0c:6d:af:5b:b2:19:23:ef:a0:3a:50:db:60:8c:b4: a5:40:58:62:69:ff:86:45:8d:21:24:9d:02:e4:83:54:8d:b0: 1a:7f:c1:03:20:76:fd:f0:3c:c2:50:0a:b6:98:c6:3e:8e:eb: 9e:f2:22:59:2d:41:74:4d:7c:e6:ae:45:13:df:64:8e:64:7b: aa:78:3c:60:0a:85:2b:5f:75:3e:a8:37:e9:70:3f:99:42:7a: 9a:b1:41:be:cc:47:90:ad:7c:6e:ce:85:68:f9:df:28:5b:9c: d3:6e:85:23:58:2f:9b:f0:79:ac:07:26:7d:cd:52:ec:3b:0c: 84:98:41:54:eb:28:a5:cb:45:15:a5:83:68:42:54:dd:a2:ab: 8f:e2:2f:59:64:e2:e6:c6:56:10:3e:c6:c8:65:8c:77:f6:21: 35:f1:2d:01:7f:e5:f0:46:12:49:7d:12:37:cc:55:80:50:3b: 57:23:8c:5a:d4:12:40:86:82:ba:0d:e0:51:87:df:2b:51:32: c3:bb:59:48:ce:66:b1:40:fd:40:d8:f8:d1:2e:fd:3f:4c:ca: a8:ab:0e:5a:3d:e9:27:a3:62:67:84:bc:4b:cc:be:f8:a2:fe: cc:07:48:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbx9bSc0lt+uLkT7mR4f0c0wIcQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyNDlCNzE5RTVGOTg4Mjg2QUQzQjQxNjRDNEU3N0Y0 MzRGRjk0ODAeFw0yNjA2MTYxNDAxMTlaFw0yNjA2MTcxNzU1MTlaMDMxMTAvBgNV BAMTKDAwODY1NjI3NkNDMDY1ODIyMDU1NDE4RDgzNDE1MEM0RDlFMzUyQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CjBrzVc6xFEgnM2/PHlrjsDq O472kjMO65QBg02gAdjN6+LKx99W4FbYOEQjRnmIxI4hjjKQ4A4YYJGQJZDvE6Hx neRdiVRBFX/3j6dwB5Oj46QLGQAQmLkAgGxvqD3GUNKrc2f4hOY2g1Os9WA23gX+ hWGCsnFlB3aEBcsBotNB5zTDYTPy8CrP/nqPdmuQugU6GA9mTLKPKysdxKKnddlz 46uf+7XEhXYpDEWdJkS2b/w5kIDhtoplZ6Uf2YwX9k/1kQQRO8tJdyxq0g8TXpEq /06Wf0bdIvWk2toTFz8f9RR3Rd6boYwW38b8svhOAMPIq5USnsXWn+p1wNYXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAIZWJ2zAZYIgVUGNg0FQxNnjUqYwHwYDVR0j BBgwFoAUpCSbcZ5fmIKGrTtBZMTnf0NP+UgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWJjYzYyYWUtMjBjOC00OTc0LWFhZTktYjEwOGRmOGUyZjU5LzAvQTQyNDlCNzE5 RTVGOTg4Mjg2QUQzQjQxNjRDNEU3N0Y0MzRGRjk0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNDI0OUI3MTlFNUY5ODgyODZBRDNCNDE2NEM0RTc3RjQzNEZG OTQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWJjYzYyYWUtMjBjOC00OTc0LWFh ZTktYjEwOGRmOGUyZjU5LzAvQTQyNDlCNzE5RTVGOTg4Mjg2QUQzQjQxNjRDNEU3 N0Y0MzRGRjk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqo1ckpq6YMUgV5jZzmDHauUKO/nAxtr1uy GSPvoDpQ22CMtKVAWGJp/4ZFjSEknQLkg1SNsBp/wQMgdv3wPMJQCraYxj6O657y IlktQXRNfOauRRPfZI5ke6p4PGAKhStfdT6oN+lwP5lCepqxQb7MR5CtfG7OhWj5 3yhbnNNuhSNYL5vweawHJn3NUuw7DISYQVTrKKXLRRWlg2hCVN2iq4/iL1lk4ubG VhA+xshljHf2ITXxLQF/5fBGEkl9EjfMVYBQO1cjjFrUEkCGgroN4FGH3ytRMsO7 WUjOZrFA/UDY+NEu/T9MyqirDlo96SejYmeEvEvMvvii/swHSNg= -----END CERTIFICATE-----Generated at Wed Jun 17 09:26:57 2026 by rpki-client