$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft File: 4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft (raw, json) Hash identifier: 1Qsezlm8ATWEA28WdjiMaDW671Mr3HpK4ZLFHnHBldQ= Subject key identifier: 02:4E:4C:04:E9:CE:4E:0D:96:55:10:CE:F6:89:44:4A:26:76:A1:0D Authority key identifier: 4C:83:95:0E:B9:8A:8B:1F:12:41:09:BD:E0:91:02:A2:EB:C2:8A:CC Certificate issuer: /CN=4C83950EB98A8B1F124109BDE09102A2EBC28ACC Certificate serial: 71A6823E8D655199CDE169503A31D300F4263FAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:11:38 +0000 Manifest this update: Wed 17 Jun 2026 03:06:38 +0000 Manifest next update: Thu 18 Jun 2026 06:36:38 +0000 Files and hashes: 1: 3130332e3230362e3138362e302f32342d3234203d3e20313336313036.roa (hash: pLkBoj+4v20DRaLcdp6cqFNpj/dZk322J8DmIWECxxQ=) 2: 4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl (hash: YlRcqLgnTCsdJelh7jHaBZuIeovcTMDoiRwarEyFxTU=) 3: 3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa (hash: 3oTd3qA7oalGsSJ103eTjg8luLc4IR3P9iD0vCHZrto=) 4: 3130332e38372e3138342e302f32322d3234203d3e20313336313036.roa (hash: cUNZmidOsIWQTz94E3YG+Xk0D06jdYQy+G4cYD1Jgrg=) 5: 3132332e3137362e3132322e302f32332d3234203d3e20313336313036.roa (hash: Fm5DIjTwEczH/woDzsRLyNQNU1aSAK7oH6OWe3cCsR0=) 6: 3132332e3137362e3132342e302f32322d3234203d3e20313336313036.roa (hash: L0MFIY3SqIZyxWL0GLOuM9CG7lSHx8DFxNDzapVGoYg=) 7: 323430303a643734303a3a2f33322d3438203d3e20313336313036.roa (hash: RIa7J3LAvz/WgKYY384LNu37wMI9xVMGk5ERckCbrdg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a6:82:3e:8d:65:51:99:cd:e1:69:50:3a:31:d3:00:f4:26:3f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C83950EB98A8B1F124109BDE09102A2EBC28ACC Validity Not Before: Jun 17 03:06:38 2026 GMT Not After : Jun 18 06:36:38 2026 GMT Subject: CN=024E4C04E9CE4E0D965510CEF689444A2676A10D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:90:7e:f0:42:6f:37:b9:c3:00:36:8f:44: 6f:c7:ab:1d:1d:e8:d4:da:89:dc:ed:d0:71:dd:43: 67:6d:70:74:cc:8f:4f:55:60:72:cf:e8:82:51:51: b9:cf:66:ee:d6:35:a3:06:4b:ca:9b:f2:b1:60:8c: fe:2e:22:67:0c:6a:15:26:52:4a:d3:e2:69:95:09: bf:e6:0f:4a:40:56:d0:83:ae:cc:3f:c9:62:21:4d: 8f:7d:73:dc:b0:28:90:1c:d8:4d:35:46:28:1d:15: 28:6d:a3:ee:70:8a:76:4d:df:a7:4c:9d:6d:f4:ee: 15:16:ac:08:61:5b:a1:88:9f:06:11:99:2b:ab:1e: 65:8c:7d:53:2d:90:3e:83:bc:f1:d0:ab:4f:cc:63: 44:ad:88:d8:ac:ed:29:02:a3:e5:84:ac:ec:8c:41: e3:e6:08:fe:6f:df:b7:32:ca:b7:6b:b6:49:41:f9: 86:d2:0d:9b:90:0b:12:21:5b:ee:4a:4f:9f:d8:15: eb:83:5c:0f:0a:72:48:43:05:d6:ad:d0:7a:92:a4: d5:c5:4a:5a:b6:02:2c:2c:17:46:df:f0:7b:c0:d4: 98:46:75:fd:09:2d:4b:2c:a3:25:28:5c:82:cb:8d: 61:35:cf:32:6a:b8:da:13:b2:5e:e8:c0:45:1a:1f: c1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4E:4C:04:E9:CE:4E:0D:96:55:10:CE:F6:89:44:4A:26:76:A1:0D X509v3 Authority Key Identifier: keyid:4C:83:95:0E:B9:8A:8B:1F:12:41:09:BD:E0:91:02:A2:EB:C2:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a0:ec:62:0b:91:66:b9:b7:b8:36:d1:72:64:e4:7f:23:43: 6f:ba:6f:a0:b0:af:6a:44:d2:37:5b:9c:78:63:af:93:d2:8d: 02:85:07:67:8a:24:69:b0:6c:25:ec:96:3d:bd:7c:73:42:5d: 54:94:d0:ea:db:24:91:9c:7d:b5:8f:0a:56:21:3a:f2:0b:4f: 72:67:5c:ad:a6:20:26:6d:5d:52:ba:4b:3d:3b:94:09:44:c7: e9:96:4b:1b:fb:b1:cd:8e:e9:b2:38:10:95:37:91:68:80:25: 6a:95:52:b3:18:2a:f8:c5:f2:bc:2d:9c:e9:0c:5d:02:90:50: 84:7c:e7:40:86:0a:9c:72:d5:37:f7:6a:91:76:fb:30:19:83: 58:d3:2f:b8:2a:62:da:ab:fa:b3:af:a5:47:6e:84:93:b2:a5: 12:81:27:12:d2:62:e1:4a:1c:74:bb:d2:e3:92:c7:a2:e4:ad: 48:8d:3a:08:e7:92:4c:80:53:a5:c9:f4:f3:fe:7c:fc:cd:a4: 27:55:7d:3c:ec:bb:b4:2f:19:24:a8:f5:5f:52:e0:af:b1:51: c5:a9:ab:81:c3:64:42:82:2f:02:b9:a5:9f:7e:e7:41:24:20: 8c:0d:18:60:2e:9b:03:69:d2:b4:2c:6b:41:1b:a5:a8:2e:fc: 63:7a:82:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcaaCPo1lUZnN4WlQOjHTAPQmP64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4Mzk1MEVCOThBOEIxRjEyNDEwOUJERTA5MTAyQTJF QkMyOEFDQzAeFw0yNjA2MTcwMzA2MzhaFw0yNjA2MTgwNjM2MzhaMDMxMTAvBgNV BAMTKDAyNEU0QzA0RTlDRTRFMEQ5NjU1MTBDRUY2ODk0NDRBMjY3NkExMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuMZB+8EJvN7nDADaPRG/Hqx0d 6NTaidzt0HHdQ2dtcHTMj09VYHLP6IJRUbnPZu7WNaMGS8qb8rFgjP4uImcMahUm UkrT4mmVCb/mD0pAVtCDrsw/yWIhTY99c9ywKJAc2E01RigdFShto+5winZN36dM nW307hUWrAhhW6GInwYRmSurHmWMfVMtkD6DvPHQq0/MY0StiNis7SkCo+WErOyM QePmCP5v37cyyrdrtklB+YbSDZuQCxIhW+5KT5/YFeuDXA8KckhDBdat0HqSpNXF Slq2AiwsF0bf8HvA1JhGdf0JLUssoyUoXILLjWE1zzJquNoTsl7owEUaH8FBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAk5MBOnOTg2WVRDO9olESiZ2oQ0wHwYDVR0j BBgwFoAUTIOVDrmKix8SQQm94JECouvCiswwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2M5NzZlYzUtYjA1YS00ODBmLTg2ZGEtZDU1N2Y4NGEyMzY0LzAvNEM4Mzk1MEVC OThBOEIxRjEyNDEwOUJERTA5MTAyQTJFQkMyOEFDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzgzOTUwRUI5OEE4QjFGMTI0MTA5QkRFMDkxMDJBMkVCQzI4 QUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2M5NzZlYzUtYjA1YS00ODBmLTg2 ZGEtZDU1N2Y4NGEyMzY0LzAvNEM4Mzk1MEVCOThBOEIxRjEyNDEwOUJERTA5MTAy QTJFQkMyOEFDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGg7GILkWa5t7g20XJk5H8jQ2+6b6Cwr2pE 0jdbnHhjr5PSjQKFB2eKJGmwbCXslj29fHNCXVSU0OrbJJGcfbWPClYhOvILT3Jn XK2mICZtXVK6Sz07lAlEx+mWSxv7sc2O6bI4EJU3kWiAJWqVUrMYKvjF8rwtnOkM XQKQUIR850CGCpxy1Tf3apF2+zAZg1jTL7gqYtqr+rOvpUduhJOypRKBJxLSYuFK HHS70uOSx6LkrUiNOgjnkkyAU6XJ9PP+fPzNpCdVfTzsu7QvGSSo9V9S4K+xUcWp q4HDZEKCLwK5pZ9+50EkIIwNGGAumwNp0rQsa0Ebpagu/GN6gnk= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:50 2026 by rpki-client