$ rpki-client -vvf rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft File: 4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft (raw, json) Hash identifier: zo/I8zxyXAJs6HbNxd5c3FQAI/+UDv1bnfn3LNukDyc= Subject key identifier: A9:01:88:16:48:56:E1:EF:9C:92:AD:EA:D4:B3:90:53:38:84:87:B0 Authority key identifier: 4E:B1:60:AE:98:58:8B:60:D5:AE:42:91:EF:D8:D1:D4:E4:1D:EA:0C Certificate issuer: /CN=4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C Certificate serial: 68FE309587C405B4B87FC5A33F42CFDCF2E98B89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 12:09:22 +0000 Manifest this update: Sat 13 Jun 2026 12:04:22 +0000 Manifest next update: Sun 14 Jun 2026 12:53:22 +0000 Files and hashes: 1: 4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.crl (hash: L97DmVwjkZ4J0r4tS4r2UWojATX5sTMH7jzBnEFVpQA=) 2: 3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (hash: UTTE4RHMUx5iXqdVFLmPyr84/+QQI3n2et5AtGkuCdU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.crl rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:fe:30:95:87:c4:05:b4:b8:7f:c5:a3:3f:42:cf:dc:f2:e9:8b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C Validity Not Before: Jun 13 12:04:22 2026 GMT Not After : Jun 14 12:53:22 2026 GMT Subject: CN=A90188164856E1EF9C92ADEAD4B39053388487B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8b:9c:dd:fc:28:42:87:27:92:f2:86:da:63: e4:5b:13:e3:b7:a5:02:58:2a:0d:94:6b:8a:e5:50: ae:36:a0:c6:7c:5f:c9:f2:6d:80:e8:97:57:3f:e6: 9e:46:e1:1d:01:51:15:a9:89:21:e9:d6:3f:43:a1: ce:d5:62:0a:dc:91:fb:b3:ef:86:1e:b7:f4:6d:bf: fb:c8:98:25:67:5d:c6:2a:72:6e:3b:6c:59:9b:f6: 69:18:0c:9d:f9:9e:46:cf:04:e7:ce:39:dc:a0:fe: b0:93:d9:a7:06:74:66:98:1b:3a:62:08:3b:5f:07: 42:d3:b2:f4:e6:fb:d3:47:df:4f:db:6b:ad:c7:c5: 01:a2:21:a0:5e:b1:dd:e0:50:26:01:f4:b7:c5:ee: 26:56:ed:5e:06:e6:44:01:c3:f0:05:c5:09:8b:c1: 44:1f:f9:16:55:89:00:8f:c7:45:c7:4b:6e:98:60: 25:71:ea:63:23:69:bf:5f:e8:77:df:d0:11:58:5c: e6:b3:18:84:bf:57:bd:bd:64:14:24:68:f0:f9:43: 6b:06:ed:d1:6e:1c:9e:01:39:31:51:7a:33:58:18: 8d:14:94:d0:28:83:b2:8a:69:cd:d3:e4:a3:4b:e7: 4c:a5:91:cc:81:ed:6f:9f:83:78:01:07:8b:ed:60: b1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:01:88:16:48:56:E1:EF:9C:92:AD:EA:D4:B3:90:53:38:84:87:B0 X509v3 Authority Key Identifier: keyid:4E:B1:60:AE:98:58:8B:60:D5:AE:42:91:EF:D8:D1:D4:E4:1D:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:18:87:a5:07:dd:06:1c:29:70:67:e3:d8:8f:39:7e:73:40: 75:c5:96:42:c3:ff:b1:e1:c7:dc:c4:0b:d5:b4:c5:b6:71:17: e7:b0:07:11:31:9e:e0:94:93:6a:51:3f:a4:a2:81:42:2a:c8: 2d:e8:8d:54:ca:c4:06:bc:6c:45:2e:d0:17:44:6f:27:60:5e: c6:e9:79:5b:ba:fc:b9:47:68:f7:92:cb:31:18:ca:64:a8:9a: c9:a7:12:3b:23:a6:68:1a:7b:ec:6f:9f:1c:76:93:86:84:13: 3b:ca:80:8a:93:a9:4b:a1:7f:6c:37:22:15:ba:e1:19:ec:ef: d9:30:1f:2a:eb:92:3c:7f:2c:8b:81:13:07:d9:bb:a2:c4:d6: b9:f3:bf:48:b9:07:ee:0c:db:07:08:a7:62:86:9a:7e:9a:f2: a4:1a:d6:69:66:55:b0:a4:e4:a8:e9:a5:b6:b8:f6:c7:6d:da: e7:e3:7e:77:f3:7d:1b:05:79:b3:72:15:88:87:da:f8:af:13: 1d:16:e7:9e:27:06:33:89:d4:b2:fc:b4:10:9c:54:ff:91:3d: e7:9d:9d:b0:6e:23:ce:f2:7c:03:b3:41:b1:d9:be:cb:f5:b2: 23:93:3d:cb:06:d1:90:11:22:bb:1d:d1:6d:0c:22:9c:5f:ca: 80:5b:f8:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaP4wlYfEBbS4f8WjP0LP3PLpi4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVCMTYwQUU5ODU4OEI2MEQ1QUU0MjkxRUZEOEQxRDRF NDFERUEwQzAeFw0yNjA2MTMxMjA0MjJaFw0yNjA2MTQxMjUzMjJaMDMxMTAvBgNV BAMTKEE5MDE4ODE2NDg1NkUxRUY5QzkyQURFQUQ0QjM5MDUzMzg4NDg3QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOi5zd/ChChyeS8obaY+RbE+O3 pQJYKg2Ua4rlUK42oMZ8X8nybYDol1c/5p5G4R0BURWpiSHp1j9Doc7VYgrckfuz 74Yet/Rtv/vImCVnXcYqcm47bFmb9mkYDJ35nkbPBOfOOdyg/rCT2acGdGaYGzpi CDtfB0LTsvTm+9NH30/ba63HxQGiIaBesd3gUCYB9LfF7iZW7V4G5kQBw/AFxQmL wUQf+RZViQCPx0XHS26YYCVx6mMjab9f6Hff0BFYXOazGIS/V729ZBQkaPD5Q2sG 7dFuHJ4BOTFRejNYGI0UlNAog7KKac3T5KNL50ylkcyB7W+fg3gBB4vtYLEXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqQGIFkhW4e+ckq3q1LOQUziEh7AwHwYDVR0j BBgwFoAUTrFgrphYi2DVrkKR79jR1OQd6gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM1MGYwNzgtYzUzNS00ZjhlLTk2MGYtMzJjMTYyM2FhNGIxLzAvNEVCMTYwQUU5 ODU4OEI2MEQ1QUU0MjkxRUZEOEQxRDRFNDFERUEwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RUIxNjBBRTk4NTg4QjYwRDVBRTQyOTFFRkQ4RDFENEU0MURF QTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM1MGYwNzgtYzUzNS00ZjhlLTk2 MGYtMzJjMTYyM2FhNGIxLzAvNEVCMTYwQUU5ODU4OEI2MEQ1QUU0MjkxRUZEOEQx RDRFNDFERUEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0Yh6UH3QYcKXBn49iPOX5zQHXFlkLD/7Hh x9zEC9W0xbZxF+ewBxExnuCUk2pRP6SigUIqyC3ojVTKxAa8bEUu0BdEbydgXsbp eVu6/LlHaPeSyzEYymSomsmnEjsjpmgae+xvnxx2k4aEEzvKgIqTqUuhf2w3IhW6 4Rns79kwHyrrkjx/LIuBEwfZu6LE1rnzv0i5B+4M2wcIp2KGmn6a8qQa1mlmVbCk 5Kjppba49sdt2ufjfnfzfRsFebNyFYiH2vivEx0W554nBjOJ1LL8tBCcVP+RPeed nbBuI87yfAOzQbHZvsv1siOTPcsG0ZARIrsd0W0MIpxfyoBb+JM= -----END CERTIFICATE-----Generated at Sat Jun 13 22:50:32 2026 by rpki-client