$ rpki-client -vvf rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft File: 4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft (raw, json) Hash identifier: xbv1eK6pA2+NgYrO5nRZFSEKPJfBxuW7U0Sf0h/CnMQ= Subject key identifier: 22:6E:0C:43:B2:34:7B:58:34:C1:A1:87:D4:6B:9E:CA:0D:81:08:DF Authority key identifier: 4E:85:79:F4:6C:CA:51:CA:56:CD:9C:3E:A1:A3:A1:29:C1:98:70:4B Certificate issuer: /CN=4E8579F46CCA51CA56CD9C3EA1A3A129C198704B Certificate serial: 2047C7B8AFDCF092135109C178F3986CCDBFE944 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 00:38:46 +0000 Manifest this update: Wed 17 Jun 2026 00:33:46 +0000 Manifest next update: Thu 18 Jun 2026 02:44:46 +0000 Files and hashes: 1: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: cvnmUk/nxIx4kivdjBl5pAuWya0Ssizm0yja+4mpq3g=) 2: 4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl (hash: cJoUAf3KwTxkMO+3N9AXVrs7QrJKJv1M8b8cub+YAKM=) 3: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: S+rOrm27Es7W6Om8mBBRTFySKu0A8+vu3LzCH/NnAfQ=) 4: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: l0tvorHSkUZlt4zaL3Dl67F8jKKatHb3Uo7qW6XsBFY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:47:c7:b8:af:dc:f0:92:13:51:09:c1:78:f3:98:6c:cd:bf:e9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E8579F46CCA51CA56CD9C3EA1A3A129C198704B Validity Not Before: Jun 17 00:33:46 2026 GMT Not After : Jun 18 02:44:46 2026 GMT Subject: CN=226E0C43B2347B5834C1A187D46B9ECA0D8108DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4f:cb:5a:1f:33:42:9f:82:ba:c9:ba:6d:46: e3:0c:99:d9:08:e0:f8:71:78:0a:6b:56:10:29:b9: f5:3b:50:d9:22:ff:eb:24:e9:78:44:b8:1d:85:f2: e7:3d:c9:1e:b2:4c:b6:33:a4:c5:2b:0f:dd:d1:fd: d1:55:12:48:c9:3e:a0:3d:01:cd:38:62:c4:71:8a: 2c:73:50:ef:a6:56:87:d3:f1:7d:28:cb:31:4e:1e: e5:b7:27:55:e5:b2:d4:d6:04:36:8f:58:33:38:3b: 17:df:60:1b:ab:9c:37:88:03:bb:81:be:ab:19:68: e9:20:51:ac:27:eb:a8:2a:ef:27:77:0a:d7:b3:52: 1d:37:3a:9a:fd:ca:e9:c3:9c:42:b2:ef:c0:0a:84: 44:f8:16:72:d2:71:28:02:75:98:91:3c:f1:0e:07: 83:9f:ea:bb:fa:5b:61:62:4c:33:97:5b:8a:15:26: 6e:c1:dd:4c:c8:54:93:ec:4e:a7:0a:f4:e9:1a:d8: 59:36:71:6d:96:4d:1f:b0:c5:71:fc:46:a5:79:11: ec:2b:be:f7:be:43:fe:86:24:42:9b:90:ca:28:75: b7:76:18:e4:d3:d6:a4:8a:2e:30:00:c4:9e:5c:ea: 74:b0:d2:c1:78:dd:84:e1:c7:ba:63:b9:a3:0c:c5: 4d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6E:0C:43:B2:34:7B:58:34:C1:A1:87:D4:6B:9E:CA:0D:81:08:DF X509v3 Authority Key Identifier: keyid:4E:85:79:F4:6C:CA:51:CA:56:CD:9C:3E:A1:A3:A1:29:C1:98:70:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ad:73:c3:58:8a:77:e7:44:ce:ca:e9:0e:9a:e9:4e:67:50: ec:04:5e:a7:d5:af:81:df:7d:de:fd:c6:3d:dc:16:a7:5e:ac: 0a:a0:41:a3:91:00:12:25:56:e6:86:c3:68:32:16:9e:84:37: 70:f6:b7:ae:ac:7a:bb:71:55:20:3d:21:cd:ff:6b:f1:70:36: 4a:15:13:4d:38:7d:66:12:df:56:8c:98:df:e6:23:93:bd:00: da:cf:91:d1:d8:e0:fb:96:c1:59:ec:58:ee:62:d1:fe:4b:91: 56:01:1d:a9:10:7e:bf:cd:25:21:08:5f:b1:ef:b9:e9:93:a0: e4:ce:a0:79:4a:84:56:12:e7:17:f2:86:92:57:4d:a6:ee:12: e9:bd:86:fc:63:50:6c:95:56:e4:56:97:da:32:4c:0c:71:6f: 2b:14:f3:2e:9f:05:5c:61:f0:e6:4f:ae:38:92:a6:80:79:9c: 43:0e:f6:dc:e9:89:b3:7f:47:9b:e8:99:66:c1:67:55:a7:9a: 3a:08:0f:ee:d1:c0:2d:7e:f1:0d:eb:d1:ad:5e:24:9d:4c:91: 01:16:e4:99:a9:2f:c1:33:9e:0c:e7:ca:12:45:aa:5d:45:dc: 14:8e:d9:1a:ab:49:ae:25:45:9a:b7:38:03:2d:20:41:63:7c: d9:a1:a8:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIEfHuK/c8JITUQnBePOYbM2/6UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU4NTc5RjQ2Q0NBNTFDQTU2Q0Q5QzNFQTFBM0ExMjlD MTk4NzA0QjAeFw0yNjA2MTcwMDMzNDZaFw0yNjA2MTgwMjQ0NDZaMDMxMTAvBgNV BAMTKDIyNkUwQzQzQjIzNDdCNTgzNEMxQTE4N0Q0NkI5RUNBMEQ4MTA4REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLT8taHzNCn4K6ybptRuMMmdkI 4PhxeAprVhApufU7UNki/+sk6XhEuB2F8uc9yR6yTLYzpMUrD93R/dFVEkjJPqA9 Ac04YsRxiixzUO+mVofT8X0oyzFOHuW3J1XlstTWBDaPWDM4OxffYBurnDeIA7uB vqsZaOkgUawn66gq7yd3CtezUh03Opr9yunDnEKy78AKhET4FnLScSgCdZiRPPEO B4Of6rv6W2FiTDOXW4oVJm7B3UzIVJPsTqcK9Oka2Fk2cW2WTR+wxXH8RqV5Eewr vve+Q/6GJEKbkMoodbd2GOTT1qSKLjAAxJ5c6nSw0sF43YThx7pjuaMMxU2dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIm4MQ7I0e1g0waGH1Gueyg2BCN8wHwYDVR0j BBgwFoAUToV59GzKUcpWzZw+oaOhKcGYcEswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM1MjI0YzYtMzM0ZC00ZjNkLTk4MzctMWJhY2NhNWEwMjJiLzAvNEU4NTc5RjQ2 Q0NBNTFDQTU2Q0Q5QzNFQTFBM0ExMjlDMTk4NzA0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTg1NzlGNDZDQ0E1MUNBNTZDRDlDM0VBMUEzQTEyOUMxOTg3 MDRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvNEU4NTc5RjQ2Q0NBNTFDQTU2Q0Q5QzNFQTFBM0Ex MjlDMTk4NzA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6tc8NYinfnRM7K6Q6a6U5nUOwEXqfVr4Hf fd79xj3cFqderAqgQaORABIlVuaGw2gyFp6EN3D2t66sertxVSA9Ic3/a/FwNkoV E004fWYS31aMmN/mI5O9ANrPkdHY4PuWwVnsWO5i0f5LkVYBHakQfr/NJSEIX7Hv uemToOTOoHlKhFYS5xfyhpJXTabuEum9hvxjUGyVVuRWl9oyTAxxbysU8y6fBVxh 8OZPrjiSpoB5nEMO9tzpibN/R5vomWbBZ1WnmjoID+7RwC1+8Q3r0a1eJJ1MkQEW 5JmpL8EzngznyhJFql1F3BSO2RqrSa4lRZq3OAMtIEFjfNmhqAE= -----END CERTIFICATE-----Generated at Wed Jun 17 11:14:55 2026 by rpki-client