$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft File: 4E0311031DBA1471A97F3183416162430EA78405.mft (raw, json) Hash identifier: ahBl2HEOVI43b2yWMl4MAWGMKA8U1PUy0riXuM5xbSE= Subject key identifier: 7B:CB:97:06:EB:8C:4C:37:EA:3E:69:4D:EB:5A:B0:DB:37:2E:BD:89 Authority key identifier: 4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05 Certificate issuer: /CN=4E0311031DBA1471A97F3183416162430EA78405 Certificate serial: 12A25AB6BF844F2125D885F9D2F6593596B85149 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 18:06:25 +0000 Manifest this update: Sat 13 Jun 2026 18:01:25 +0000 Manifest next update: Sun 14 Jun 2026 19:37:25 +0000 Files and hashes: 1: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: 45DsIwwkRRpg5bWvzaG3sx/NMYDeJXNq0PjvKzltS2I=) 2: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: LCoG5MBtVr1gnp0Cb9QG4F/kZ9BcJIu/HLJgqKdyZtQ=) 3: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: EeoLX1eQr3kbHp2go87fzfWuIm2QGRQurIS8zg4rg8k=) 4: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: kBF7Opi92U9hs5gCPj1VpLoXTbkOV0WaW1UNm3qxyr8=) 5: 4E0311031DBA1471A97F3183416162430EA78405.crl (hash: FP/LYtU9Kb5ujl385B+KllqQaeHphcQl+BbybRDnN9Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a2:5a:b6:bf:84:4f:21:25:d8:85:f9:d2:f6:59:35:96:b8:51:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E0311031DBA1471A97F3183416162430EA78405 Validity Not Before: Jun 13 18:01:25 2026 GMT Not After : Jun 14 19:37:25 2026 GMT Subject: CN=7BCB9706EB8C4C37EA3E694DEB5AB0DB372EBD89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e7:af:07:22:a2:7f:9d:cb:a2:68:2b:b3:11: 24:a2:91:fd:f9:db:b0:e4:57:d7:72:27:76:8e:34: 2e:42:b8:7b:93:cc:f2:c4:62:e9:ab:a2:12:9d:02: 1c:d1:35:81:c2:5e:2c:25:10:ad:c0:5f:3f:e9:25: f7:d4:cb:32:aa:ac:1e:16:d1:f7:b1:9e:8c:cc:2a: 8d:3d:a2:dd:6b:fc:09:b0:7c:34:23:58:a0:93:e2: ae:c5:e5:c9:0f:cf:89:8b:eb:93:51:68:de:19:83: c0:88:88:db:ee:68:f4:e6:3f:eb:41:a2:53:5d:a5: c4:16:c7:31:22:58:00:6f:19:cf:a0:04:5b:ac:5f: 26:cb:b1:f3:bd:3c:dc:9f:13:4a:38:8f:6e:25:5d: 04:03:7a:bd:78:bc:df:76:ee:f2:68:a7:a7:af:a7: c8:3c:5d:bb:96:83:6f:94:4d:f3:0f:25:1d:fc:ff: c6:19:77:2c:f5:47:44:d3:d4:b4:33:4c:47:d8:20: d7:36:7b:7f:0d:19:14:80:c8:e4:aa:04:43:9d:77: 57:c9:23:67:81:1b:26:5c:63:f9:2e:da:77:7e:45: c8:50:6f:58:c9:d3:84:0f:ca:0c:0b:94:42:f6:6a: 25:4e:a5:7d:95:11:ef:31:40:51:d8:5f:68:5b:88: e2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CB:97:06:EB:8C:4C:37:EA:3E:69:4D:EB:5A:B0:DB:37:2E:BD:89 X509v3 Authority Key Identifier: keyid:4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:69:b3:b4:f9:d1:96:4c:3b:87:af:af:f4:9e:00:72:fc:29: 85:db:5f:f4:73:10:7e:a2:a8:ac:aa:58:31:65:58:d6:78:cb: 8f:09:42:f7:29:5d:68:da:85:e0:e9:96:27:8e:c1:86:24:68: 72:a0:18:04:a8:4f:22:c8:5d:eb:a8:61:e5:c4:80:89:fc:2e: 38:a2:c4:76:77:9b:2c:f3:49:54:f3:0d:f1:04:7b:bd:c0:b9: 12:c1:f8:c0:55:b8:1d:0a:1c:26:33:15:b7:12:41:e3:de:3f: da:f5:66:44:f9:5a:1c:f3:f1:06:10:42:aa:fd:67:f8:5b:7e: f6:96:0a:f1:6f:2e:a6:ab:d3:ef:e4:6b:6d:e7:97:f5:c0:72: fb:f4:77:dd:9a:32:b3:a8:f4:17:d9:c3:06:e6:5f:a6:1d:d9: 63:48:db:8e:0a:09:20:7f:aa:4b:99:3b:ee:47:9a:f9:12:e7: 30:8b:bc:ff:75:be:e8:99:f3:12:2a:a1:3f:d4:eb:43:ba:14: 23:30:b2:f6:2b:44:96:76:2d:70:19:17:33:fe:d9:0b:f4:6a: 55:8d:a0:6d:9c:5d:36:45:f5:6e:15:50:f6:89:8b:26:19:b6: 85:de:7d:66:19:e9:10:4e:2c:06:f5:4f:78:6f:4c:bc:02:47: 08:ef:0f:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqJatr+ETyEl2IX50vZZNZa4UUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMzExMDMxREJBMTQ3MUE5N0YzMTgzNDE2MTYyNDMw RUE3ODQwNTAeFw0yNjA2MTMxODAxMjVaFw0yNjA2MTQxOTM3MjVaMDMxMTAvBgNV BAMTKDdCQ0I5NzA2RUI4QzRDMzdFQTNFNjk0REVCNUFCMERCMzcyRUJEODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq568HIqJ/ncuiaCuzESSikf35 27DkV9dyJ3aONC5CuHuTzPLEYumrohKdAhzRNYHCXiwlEK3AXz/pJffUyzKqrB4W 0fexnozMKo09ot1r/AmwfDQjWKCT4q7F5ckPz4mL65NRaN4Zg8CIiNvuaPTmP+tB olNdpcQWxzEiWABvGc+gBFusXybLsfO9PNyfE0o4j24lXQQDer14vN927vJop6ev p8g8XbuWg2+UTfMPJR38/8YZdyz1R0TT1LQzTEfYINc2e38NGRSAyOSqBEOdd1fJ I2eBGyZcY/ku2nd+RchQb1jJ04QPygwLlEL2aiVOpX2VEe8xQFHYX2hbiOJLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe8uXBuuMTDfqPmlN61qw2zcuvYkwHwYDVR0j BBgwFoAUTgMRAx26FHGpfzGDQWFiQw6nhAUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E4YjU0ZTYtMTAxNS00OGViLTliYmQtNTFjMTZjZDQ1NDQ1LzAvNEUwMzExMDMx REJBMTQ3MUE5N0YzMTgzNDE2MTYyNDMwRUE3ODQwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTAzMTEwMzFEQkExNDcxQTk3RjMxODM0MTYxNjI0MzBFQTc4 NDA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvNEUwMzExMDMxREJBMTQ3MUE5N0YzMTgzNDE2MTYy NDMwRUE3ODQwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRps7T50ZZMO4evr/SeAHL8KYXbX/RzEH6i qKyqWDFlWNZ4y48JQvcpXWjaheDplieOwYYkaHKgGASoTyLIXeuoYeXEgIn8Ljii xHZ3myzzSVTzDfEEe73AuRLB+MBVuB0KHCYzFbcSQePeP9r1ZkT5Whzz8QYQQqr9 Z/hbfvaWCvFvLqar0+/ka23nl/XAcvv0d92aMrOo9BfZwwbmX6Yd2WNI244KCSB/ qkuZO+5HmvkS5zCLvP91vuiZ8xIqoT/U60O6FCMwsvYrRJZ2LXAZFzP+2Qv0alWN oG2cXTZF9W4VUPaJiyYZtoXefWYZ6RBOLAb1T3hvTLwCRwjvD0g= -----END CERTIFICATE-----Generated at Sat Jun 13 19:56:10 2026 by rpki-client