$ rpki-client -vvf rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft File: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft (raw, json) Hash identifier: SuCHO3QMt36igUnLy7K1AxHsIqjP96jDvGaZ+jSSSyE= Subject key identifier: A1:20:00:B8:1A:15:22:A8:8E:8E:D7:EE:1C:EF:9C:0F:4A:0E:3C:E4 Authority key identifier: 4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 Certificate issuer: /CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Certificate serial: 393DEF2E37D279DF87D2A016C0EB9ECA8412CD83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 03:16:52 +0000 Manifest this update: Sun 14 Jun 2026 03:11:52 +0000 Manifest next update: Mon 15 Jun 2026 06:29:52 +0000 Files and hashes: 1: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: 2oQBF0OAu+x3jbAGDBl7jZuo1w7C20ONHzk/GqcpbO8=) 2: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ZDLtfAp4S3OvopOek/8l4bhhMLZjILy0rUvNj5yf6Os=) 3: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: 3oF8VGb692CsHNpL5bkpsSKeUmhwgndjMYRrWhUNaPo=) 4: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl (hash: 4uWS8VZFqjNSHoDiWWtTTvL3s2v76ojY7N0160LVtJk=) 5: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: Nzw87BQmmq5JXKfqP++4H/0NcBCIzysxSEpNOfcwqIA=) 6: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: 3V56nSlss2prGjnCh8yc0uAcD+eYYddXTnS1OxpPoV0=) 7: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: xFJ6YkI92aDNdIdb2cb47Lr1FqvCvQqQCoyTJtEq2Co=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3d:ef:2e:37:d2:79:df:87:d2:a0:16:c0:eb:9e:ca:84:12:cd:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Validity Not Before: Jun 14 03:11:52 2026 GMT Not After : Jun 15 06:29:52 2026 GMT Subject: CN=A12000B81A1522A88E8ED7EE1CEF9C0F4A0E3CE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:6d:a6:65:fe:52:e8:75:77:81:d6:03:a9: 26:a9:82:6a:44:94:7d:fd:91:a8:91:24:69:bb:c5: 8c:8a:93:4e:6d:44:05:07:06:fd:cc:2c:8d:22:f5: c0:9b:d9:de:86:b4:90:45:d2:33:d8:e4:3f:8b:1f: 35:28:bc:ca:99:cd:19:03:bd:91:2a:42:8c:ad:ea: bc:ed:e8:96:55:23:ed:96:68:a4:0e:7b:b0:bb:e7: 76:f3:9f:2b:42:b7:cf:4b:fb:25:49:7c:d9:41:69: 7f:1a:aa:d5:8a:98:63:5e:97:04:9c:86:4f:7d:5d: f0:0a:6d:e8:51:3d:53:fc:34:e8:68:9e:27:27:fa: 1b:3c:fc:61:cb:63:75:67:7c:a0:2d:03:b6:92:0d: 3d:d1:8d:36:d7:83:e4:f3:db:26:96:ec:11:0c:b2: 9f:40:83:cf:d6:39:6a:85:c9:aa:39:8b:c9:fc:57: c2:66:6e:d0:6d:d9:a3:a8:29:df:9e:f5:1c:77:d0: 4a:30:09:67:b3:7f:59:8c:05:c9:4f:13:3c:23:c0: 88:94:1f:bd:d1:ad:f0:da:89:fc:79:4d:7a:b4:e6: 12:85:11:22:bc:bb:5d:81:1d:83:e7:17:3d:36:1a: 9d:e1:38:79:af:35:e8:0b:2a:3d:0d:1d:91:68:c4: 8e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:20:00:B8:1A:15:22:A8:8E:8E:D7:EE:1C:EF:9C:0F:4A:0E:3C:E4 X509v3 Authority Key Identifier: keyid:4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6b:fb:70:32:8f:e1:b8:71:3d:c1:1d:75:c5:8e:6f:04:c7: f6:aa:33:d7:15:49:cf:ef:be:fe:5f:15:7d:5a:87:ff:15:18: af:a1:ea:62:77:f5:8d:2e:17:52:ae:28:a8:b6:4a:11:53:0a: 97:8d:4c:96:f5:28:9a:d8:21:2d:62:d0:1d:b7:9a:54:42:74: 36:07:ad:8f:a4:0b:88:30:3c:a9:53:17:ce:74:6e:e1:53:09: a9:d0:42:1a:3e:38:68:09:fa:1b:6d:62:1f:99:fe:9f:71:93: 3c:07:5e:98:94:bc:90:cf:b1:d0:1f:fb:8a:24:a2:54:c0:ad: 4a:98:de:3d:20:b4:ff:ee:43:58:d3:bf:3b:7d:a1:be:b6:51: 3d:4a:5f:dc:07:b0:14:a8:0f:e7:68:a8:11:8b:42:e2:b6:04: c6:81:59:73:75:63:c3:dc:a8:60:b2:50:2d:e4:9f:b4:57:80: 93:13:02:54:d6:e0:ed:8e:d3:26:cd:70:bf:6b:ba:85:c8:62: b2:41:a2:fa:ff:76:7e:27:dc:11:cb:d2:0d:64:ec:3d:45:62: 0a:2e:54:66:d2:fd:90:6c:ce:03:48:0b:31:3f:4d:b0:a7:56: a3:99:eb:e1:85:39:6b:84:66:95:a0:19:64:68:24:92:c7:eb: bd:be:fa:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOT3vLjfSed+H0qAWwOueyoQSzYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMx RjI3RTU4NDAeFw0yNjA2MTQwMzExNTJaFw0yNjA2MTUwNjI5NTJaMDMxMTAvBgNV BAMTKEExMjAwMEI4MUExNTIyQTg4RThFRDdFRTFDRUY5QzBGNEEwRTNDRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxc22mZf5S6HV3gdYDqSapgmpE lH39kaiRJGm7xYyKk05tRAUHBv3MLI0i9cCb2d6GtJBF0jPY5D+LHzUovMqZzRkD vZEqQoyt6rzt6JZVI+2WaKQOe7C753bznytCt89L+yVJfNlBaX8aqtWKmGNelwSc hk99XfAKbehRPVP8NOhonicn+hs8/GHLY3VnfKAtA7aSDT3RjTbXg+Tz2yaW7BEM sp9Ag8/WOWqFyao5i8n8V8JmbtBt2aOoKd+e9Rx30EowCWezf1mMBclPEzwjwIiU H73RrfDaifx5TXq05hKFESK8u12BHYPnFz02Gp3hOHmvNegLKj0NHZFoxI6pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoSAAuBoVIqiOjtfuHO+cD0oOPOQwHwYDVR0j BBgwFoAUSsXcQXKq9DGWIvThwD/+Qx8n5YQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQwMTQzNmItMDI2Ny00NjZiLWEzNDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3 MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMxRjI3RTU4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUM1REM0MTcyQUFGNDMxOTYyMkY0RTFDMDNGRkU0MzFGMjdF NTg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQwMTQzNmItMDI2Ny00NjZiLWEz NDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZF NDMxRjI3RTU4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtr+3Ayj+G4cT3BHXXFjm8Ex/aqM9cVSc/v vv5fFX1ah/8VGK+h6mJ39Y0uF1KuKKi2ShFTCpeNTJb1KJrYIS1i0B23mlRCdDYH rY+kC4gwPKlTF850buFTCanQQho+OGgJ+httYh+Z/p9xkzwHXpiUvJDPsdAf+4ok olTArUqY3j0gtP/uQ1jTvzt9ob62UT1KX9wHsBSoD+doqBGLQuK2BMaBWXN1Y8Pc qGCyUC3kn7RXgJMTAlTW4O2O0ybNcL9ruoXIYrJBovr/dn4n3BHL0g1k7D1FYgou VGbS/ZBszgNICzE/TbCnVqOZ6+GFOWuEZpWgGWRoJJLH672++mA= -----END CERTIFICATE-----Generated at Sun Jun 14 07:05:10 2026 by rpki-client