$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft File: 4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft (raw, json) Hash identifier: 6NdUzUQd2wQVVaJJeGSlPGGdubn6G+LdzGohk46RXIo= Subject key identifier: 19:55:0B:EF:55:B2:01:B3:3F:E5:7B:3F:5C:0E:AA:77:9F:CD:5F:CE Authority key identifier: 4F:C4:8D:D4:A0:4D:6F:39:93:1A:F1:E8:DE:E3:5A:BD:F9:C7:76:FA Certificate issuer: /CN=4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA Certificate serial: 1CBBD598045D808A46894F10E11B400F03162404 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 07:47:17 +0000 Manifest this update: Wed 17 Jun 2026 07:42:17 +0000 Manifest next update: Thu 18 Jun 2026 09:46:17 +0000 Files and hashes: 1: 4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl (hash: TYONe/fd3U4ubGXDsx1DgPvTqRHGQnVJYqfFTAFkcCM=) 2: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (hash: H/rwQ/f8aUBtc58OK4kWZL1DduHZ4X5rHCUaLkdQAjM=) 3: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (hash: Y5XB9rqhcbsV9IQfUbYmWZisnqag3EEZWqXjsPcCSU4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:bb:d5:98:04:5d:80:8a:46:89:4f:10:e1:1b:40:0f:03:16:24:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA Validity Not Before: Jun 17 07:42:17 2026 GMT Not After : Jun 18 09:46:17 2026 GMT Subject: CN=19550BEF55B201B33FE57B3F5C0EAA779FCD5FCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:08:80:14:25:a3:46:3b:cf:39:0f:b4:0f:30: 61:35:3c:e2:dd:1d:bc:ec:96:2f:61:61:7a:c4:b5: 7e:93:ba:bc:0d:06:10:8c:b1:97:5f:91:4c:72:fe: 15:bc:d4:e7:47:50:de:3b:24:50:30:36:83:13:40: 87:95:20:e4:59:25:61:66:f6:36:70:65:a8:8c:64: 24:fc:e4:88:07:f9:0a:39:43:8a:03:09:9a:f4:da: 64:04:35:5d:50:ba:44:7e:fd:d5:50:4e:bb:17:ec: ce:50:f0:82:df:a1:dd:68:76:4b:30:22:d6:22:0b: fe:89:96:2e:97:c3:f7:f7:68:75:0f:b8:8c:ef:0f: a4:83:be:b0:3c:7b:ff:64:1f:bd:85:f6:be:df:96: 8e:58:75:e9:61:8b:56:e3:a7:d4:c9:46:03:25:14: c7:dc:31:01:55:29:a6:34:82:2f:0a:fc:83:77:fa: 6c:07:a7:fb:79:7f:cc:b5:46:42:18:99:5e:5a:78: 4a:ad:b6:2b:7b:5f:6c:57:e5:56:05:0f:c7:af:d8: 78:47:16:47:a4:71:34:af:30:ba:82:9c:86:c9:38: f5:d3:0c:1e:e0:e8:dd:bf:81:d7:4b:0a:11:d8:0a: 22:31:0d:40:16:c1:d1:2b:dd:93:72:e6:7d:6e:00: 77:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:55:0B:EF:55:B2:01:B3:3F:E5:7B:3F:5C:0E:AA:77:9F:CD:5F:CE X509v3 Authority Key Identifier: keyid:4F:C4:8D:D4:A0:4D:6F:39:93:1A:F1:E8:DE:E3:5A:BD:F9:C7:76:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:54:6c:45:89:6c:02:66:20:e5:24:44:f0:44:6c:d4:51:e5: 01:1d:89:f4:a9:7a:99:e0:61:ca:4c:b8:db:e3:80:ce:41:6e: 2a:5f:0b:01:82:d6:95:49:9b:07:3b:dc:1e:15:e9:d9:5b:a1: 4a:c8:e9:18:3b:5c:1e:d4:03:67:0f:9e:e4:72:bb:93:1c:63: 4b:08:80:b3:d3:13:90:42:28:4b:f7:21:51:5f:8c:d8:04:cb: 55:02:cb:f2:24:ce:eb:f8:7d:30:b2:e0:cb:34:36:5c:2b:a4: 27:b2:86:33:75:f1:0d:4e:3b:65:8d:7c:28:3f:9b:69:34:d7: c5:ab:f6:f0:42:38:5b:53:f2:9f:47:14:58:af:8f:b4:50:54: b6:d0:89:98:a0:fc:7a:99:b4:72:85:84:8a:56:0d:15:17:6e: 26:95:4e:69:ac:86:5a:2f:a3:76:5e:15:69:fd:8b:bc:fc:30: dc:5b:57:85:30:78:00:be:e4:c2:a1:71:fa:d9:c4:34:cb:98: cd:e2:f8:c6:0f:93:2d:6b:68:b0:7d:12:35:a3:86:28:70:0a: 97:8e:b3:12:ef:a5:00:6e:5f:d7:75:be:8c:f5:1e:27:c3:da: 6b:5a:bb:78:6b:45:bd:e8:ef:26:45:f1:76:b9:ba:68:44:f8: 55:72:ca:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHLvVmARdgIpGiU8Q4RtADwMWJAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDNDhERDRBMDRENkYzOTkzMUFGMUU4REVFMzVBQkRG OUM3NzZGQTAeFw0yNjA2MTcwNzQyMTdaFw0yNjA2MTgwOTQ2MTdaMDMxMTAvBgNV BAMTKDE5NTUwQkVGNTVCMjAxQjMzRkU1N0IzRjVDMEVBQTc3OUZDRDVGQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqCIAUJaNGO885D7QPMGE1POLd Hbzsli9hYXrEtX6TurwNBhCMsZdfkUxy/hW81OdHUN47JFAwNoMTQIeVIORZJWFm 9jZwZaiMZCT85IgH+Qo5Q4oDCZr02mQENV1QukR+/dVQTrsX7M5Q8ILfod1odksw ItYiC/6Jli6Xw/f3aHUPuIzvD6SDvrA8e/9kH72F9r7flo5Ydelhi1bjp9TJRgMl FMfcMQFVKaY0gi8K/IN3+mwHp/t5f8y1RkIYmV5aeEqttit7X2xX5VYFD8ev2HhH FkekcTSvMLqCnIbJOPXTDB7g6N2/gddLChHYCiIxDUAWwdEr3ZNy5n1uAHddAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGVUL71WyAbM/5Xs/XA6qd5/NX84wHwYDVR0j BBgwFoAUT8SN1KBNbzmTGvHo3uNavfnHdvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2IwMWM5NjctOTlkMC00YzIxLTk2NDItODdhZGE2NzE1NWM4LzAvNEZDNDhERDRB MDRENkYzOTkzMUFGMUU4REVFMzVBQkRGOUM3NzZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkM0OERENEEwNEQ2RjM5OTMxQUYxRThERUUzNUFCREY5Qzc3 NkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2IwMWM5NjctOTlkMC00YzIxLTk2 NDItODdhZGE2NzE1NWM4LzAvNEZDNDhERDRBMDRENkYzOTkzMUFGMUU4REVFMzVB QkRGOUM3NzZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtUbEWJbAJmIOUkRPBEbNRR5QEdifSpepng YcpMuNvjgM5BbipfCwGC1pVJmwc73B4V6dlboUrI6Rg7XB7UA2cPnuRyu5McY0sI gLPTE5BCKEv3IVFfjNgEy1UCy/Ikzuv4fTCy4Ms0NlwrpCeyhjN18Q1OO2WNfCg/ m2k018Wr9vBCOFtT8p9HFFivj7RQVLbQiZig/HqZtHKFhIpWDRUXbiaVTmmshlov o3ZeFWn9i7z8MNxbV4UweAC+5MKhcfrZxDTLmM3i+MYPky1raLB9EjWjhihwCpeO sxLvpQBuX9d1voz1HifD2mtau3hrRb3o7yZF8Xa5umhE+FVyyq8= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:31 2026 by rpki-client