$ rpki-client -vvf rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft File: 4958ACA345C7658A0DAF8E986F7577A772837161.mft (raw, json) Hash identifier: dJ/FfMap4GKQSPAZJkvJfZNa2eK4/5kfasMQw4UnEyI= Subject key identifier: FB:19:24:0A:6E:B5:CB:29:F4:C4:38:12:FC:39:99:BA:FA:40:13:B5 Authority key identifier: 49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61 Certificate issuer: /CN=4958ACA345C7658A0DAF8E986F7577A772837161 Certificate serial: 02031948E56281703E944BC397BDC4420CD6CDB9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:34:40 +0000 Manifest this update: Wed 17 Jun 2026 05:29:40 +0000 Manifest next update: Thu 18 Jun 2026 08:36:40 +0000 Files and hashes: 1: 3130332e3137392e36342e302f32342d3234203d3e20313439333335.roa (hash: ERSYk3hZf9PVzWt1WH0Bk7NUbuFdmrm4ZK2jNR3DM5g=) 2: 4958ACA345C7658A0DAF8E986F7577A772837161.crl (hash: zTwsEJk6Zgnj76qxc1f0dRZEw5r9zoq2TAfNJ3vKLHI=) 3: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (hash: HGbCMrvkn9HLdb/84AEUgwBryTJVzNaclVbYnTuUOj0=) 4: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (hash: KtDrnG9lvgnRMSX5R+jeLWfcRpbu+ptwzkE+z8AdY3o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:03:19:48:e5:62:81:70:3e:94:4b:c3:97:bd:c4:42:0c:d6:cd:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4958ACA345C7658A0DAF8E986F7577A772837161 Validity Not Before: Jun 17 05:29:40 2026 GMT Not After : Jun 18 08:36:40 2026 GMT Subject: CN=FB19240A6EB5CB29F4C43812FC3999BAFA4013B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a4:ed:f4:9a:ce:2c:ac:09:1b:11:6b:6e:f0: a1:e3:66:9c:1e:37:96:ee:76:33:cb:ac:d9:84:ae: e1:1e:4a:87:40:ec:c7:e6:ea:96:46:4a:08:56:1d: 19:77:90:cf:95:b4:53:8b:27:2f:98:57:cf:42:6e: aa:6e:58:ea:f1:76:9b:68:9e:b6:d0:23:79:c6:2d: be:72:3b:b9:0c:15:f3:7c:56:7b:b0:49:e7:fe:32: 3f:4d:7c:d1:86:d9:81:bc:4a:57:8d:16:c6:2b:a8: 43:30:1d:97:8b:3c:b3:4c:b8:2e:1f:37:40:bb:b9: 70:01:c1:be:45:e8:96:70:f9:de:40:85:b1:a4:15: cc:49:87:52:e6:18:4a:f2:d2:10:12:18:e3:e8:85: eb:86:17:08:a4:8d:19:89:a5:3a:a7:9f:af:5c:ca: 7b:7b:6f:ec:dd:e9:58:42:5a:dd:33:44:26:e7:18: 9b:a3:89:ea:f4:40:7d:9d:93:1d:41:9b:30:9e:0c: 1a:90:07:1e:33:e5:21:9a:17:ab:d3:8c:e6:87:a7: 68:62:a5:c1:d8:44:b3:2f:ed:9e:6a:20:bc:00:f2: e3:eb:e0:23:ef:e4:3c:9a:b1:e0:30:23:67:4f:d2: dd:83:57:6a:1b:47:5c:b6:c9:34:3c:99:09:2c:2e: 61:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:19:24:0A:6E:B5:CB:29:F4:C4:38:12:FC:39:99:BA:FA:40:13:B5 X509v3 Authority Key Identifier: keyid:49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:41:46:a5:3c:40:de:73:04:65:32:db:4b:7d:81:b2:be:61: 96:6c:f8:be:e1:da:f3:89:8a:79:ad:f8:ec:1a:3f:df:1f:0b: d1:22:47:27:b1:ac:57:18:f0:ea:6f:dc:7e:ca:99:d4:f0:44: 4a:89:bc:54:bd:fe:4e:f3:3d:c7:d1:4a:2e:1b:42:60:84:fb: a2:af:6c:50:f1:d5:e2:c3:3f:46:3a:89:03:c9:61:7a:20:af: 59:6b:ae:52:90:97:70:f1:f2:d9:25:7c:b0:f9:0f:ba:d4:7b: 15:34:78:40:ac:67:1f:74:b0:1a:c6:56:80:86:dd:e6:a5:57: 92:17:f4:5c:a4:e8:ec:b2:fd:ed:4a:dd:9e:d5:7a:f5:d5:6e: 00:4b:33:78:c4:85:be:38:1b:c5:52:5e:49:3a:43:a6:80:c3: c6:a5:77:56:d5:fb:52:3e:c6:6f:ab:ae:3b:db:aa:d1:c0:f0: f2:6d:b5:4e:5d:c3:bb:3c:11:c5:bf:d4:97:7e:b4:32:d0:81: 6a:d1:dc:50:18:40:49:9c:e0:d8:59:af:08:56:47:d7:c7:d4: b9:d4:07:0d:df:56:81:e6:aa:81:0d:a0:0b:5b:20:80:00:c7: a2:a1:3c:2a:0a:a8:aa:9f:8d:2a:bf:ad:47:31:ae:25:c0:78: 9f:6c:c1:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAgMZSOVigXA+lEvDl73EQgzWzbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1OEFDQTM0NUM3NjU4QTBEQUY4RTk4NkY3NTc3QTc3 MjgzNzE2MTAeFw0yNjA2MTcwNTI5NDBaFw0yNjA2MTgwODM2NDBaMDMxMTAvBgNV BAMTKEZCMTkyNDBBNkVCNUNCMjlGNEM0MzgxMkZDMzk5OUJBRkE0MDEzQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+pO30ms4srAkbEWtu8KHjZpwe N5budjPLrNmEruEeSodA7Mfm6pZGSghWHRl3kM+VtFOLJy+YV89CbqpuWOrxdpto nrbQI3nGLb5yO7kMFfN8VnuwSef+Mj9NfNGG2YG8SleNFsYrqEMwHZeLPLNMuC4f N0C7uXABwb5F6JZw+d5AhbGkFcxJh1LmGEry0hASGOPoheuGFwikjRmJpTqnn69c ynt7b+zd6VhCWt0zRCbnGJujier0QH2dkx1BmzCeDBqQBx4z5SGaF6vTjOaHp2hi pcHYRLMv7Z5qILwA8uPr4CPv5DyaseAwI2dP0t2DV2obR1y2yTQ8mQksLmGbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+xkkCm61yyn0xDgS/DmZuvpAE7UwHwYDVR0j BBgwFoAUSViso0XHZYoNr46Yb3V3p3KDcWEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc3ZGUwMTMtOWI1Ni00OWZmLThiNzktMzY2N2EzNDVjYjhkLzAvNDk1OEFDQTM0 NUM3NjU4QTBEQUY4RTk4NkY3NTc3QTc3MjgzNzE2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTU4QUNBMzQ1Qzc2NThBMERBRjhFOTg2Rjc1NzdBNzcyODM3 MTYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc3ZGUwMTMtOWI1Ni00OWZmLThi NzktMzY2N2EzNDVjYjhkLzAvNDk1OEFDQTM0NUM3NjU4QTBEQUY4RTk4NkY3NTc3 QTc3MjgzNzE2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtBRqU8QN5zBGUy20t9gbK+YZZs+L7h2vOJ inmt+OwaP98fC9EiRyexrFcY8Opv3H7KmdTwREqJvFS9/k7zPcfRSi4bQmCE+6Kv bFDx1eLDP0Y6iQPJYXogr1lrrlKQl3Dx8tklfLD5D7rUexU0eECsZx90sBrGVoCG 3ealV5IX9Fyk6Oyy/e1K3Z7VevXVbgBLM3jEhb44G8VSXkk6Q6aAw8ald1bV+1I+ xm+rrjvbqtHA8PJttU5dw7s8EcW/1Jd+tDLQgWrR3FAYQEmc4NhZrwhWR9fH1LnU Bw3fVoHmqoENoAtbIIAAx6KhPCoKqKqfjSq/rUcxriXAeJ9swUI= -----END CERTIFICATE-----Generated at Wed Jun 17 13:32:47 2026 by rpki-client