$ rpki-client -vvf rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft File: 49F46115365EBDF5886E7F2CF139E606717666E0.mft (raw, json) Hash identifier: dw9Ym1qESOobCqNRk1UXQG0/iMicD9hmk9P3GNq8ajQ= Subject key identifier: 72:C3:10:04:45:D5:9D:D0:03:07:BB:BF:A1:15:B8:3F:64:F6:59:EC Authority key identifier: 49:F4:61:15:36:5E:BD:F5:88:6E:7F:2C:F1:39:E6:06:71:76:66:E0 Certificate issuer: /CN=49F46115365EBDF5886E7F2CF139E606717666E0 Certificate serial: 48A57A59D00C84E7784778C7867C10130990955B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 14:36:51 +0000 Manifest this update: Tue 16 Jun 2026 14:31:51 +0000 Manifest next update: Wed 17 Jun 2026 18:10:51 +0000 Files and hashes: 1: 49F46115365EBDF5886E7F2CF139E606717666E0.crl (hash: jRxJ/+zC6KYgez/ogM9nRFc9wLwOLreRwnsvGRiLJGI=) 2: 3130332e3136322e302e302f32332d3233203d3e20313431363334.roa (hash: /WJInhgSCHask4I5VFsuoFBnkjbFAmOBsJyj+3cOySg=) 3: 3130332e3136322e312e302f32342d3234203d3e20313431363334.roa (hash: fP8potPrA/fz7UKmgPpWsbOpb4DAv/qcdg5GmnTFDgc=) 4: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (hash: OGTDZ4C85+sk0i3Bo0o5Tb8rraHPH4OeiZ0vyZPql84=) 5: 3130332e3136322e302e302f32342d3234203d3e20313431363334.roa (hash: shIk0vp+51TO0gQD+rZf7i9F4/QvmPZ8BnhQXbq9Zj8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.crl rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a5:7a:59:d0:0c:84:e7:78:47:78:c7:86:7c:10:13:09:90:95:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49F46115365EBDF5886E7F2CF139E606717666E0 Validity Not Before: Jun 16 14:31:51 2026 GMT Not After : Jun 17 18:10:51 2026 GMT Subject: CN=72C3100445D59DD00307BBBFA115B83F64F659EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6d:8e:5c:19:cf:b5:78:d8:24:65:87:30:2a: e1:c9:59:10:60:d2:79:df:6f:67:32:83:d6:2c:e8: fb:16:0f:08:87:ca:f0:2e:85:49:5d:05:39:31:ed: 8c:c9:cc:24:7c:08:82:df:57:d6:dd:57:1f:55:c7: 65:51:01:f7:5a:86:b3:70:4f:75:e5:86:29:35:7e: 6c:9a:8e:c7:2d:52:12:82:d5:55:cc:34:29:57:5e: 6c:2c:16:6b:3e:56:32:17:11:24:40:b0:93:c2:d5: e5:57:47:ce:30:04:b6:dd:0c:46:3f:52:4f:90:3c: 1b:51:80:21:d0:d4:6b:cc:00:ac:c3:eb:0b:8d:72: 6e:68:b0:41:ea:0d:f6:b5:aa:49:bc:cc:b3:0d:dc: 1a:36:c0:77:6e:3d:42:e9:25:96:bc:2a:f5:20:12: 39:3c:44:d9:10:d0:1d:46:9e:4c:2c:02:b3:44:56: 9a:7f:a8:59:f5:ee:fe:cf:0c:fa:c1:52:5b:73:f1: a7:da:a1:25:b8:9c:e3:75:d3:94:bf:97:7c:3e:bb: ab:dc:7a:51:7e:a2:09:d8:bd:8d:89:be:e5:2f:91: 38:7c:1b:9f:a1:81:3d:2e:7d:5d:91:e7:00:91:3f: a6:9e:c4:f0:28:40:92:b5:00:79:16:35:e5:49:2c: d3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C3:10:04:45:D5:9D:D0:03:07:BB:BF:A1:15:B8:3F:64:F6:59:EC X509v3 Authority Key Identifier: keyid:49:F4:61:15:36:5E:BD:F5:88:6E:7F:2C:F1:39:E6:06:71:76:66:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f3:46:5a:82:6b:8b:27:01:ff:1e:2d:c4:91:34:5e:de:bb: dd:fd:0e:e5:17:61:e1:57:ec:57:f9:5c:bc:f6:e4:19:23:fe: ff:9d:3b:89:af:93:c2:31:7d:6e:25:c6:c8:b8:e8:34:d8:7e: e4:31:6c:24:0d:76:b1:68:e2:10:b4:8d:e4:2c:85:0c:5b:5d: 0d:3d:2e:16:e0:93:ab:e4:d6:d4:fe:9c:cc:eb:2d:3d:84:e7: b3:0d:f3:d6:a5:31:16:f8:41:44:7c:6f:6f:1a:14:cd:a0:6f: 13:3a:de:b2:05:6b:43:4d:c2:15:97:f3:d6:56:3e:67:dc:94: c8:46:1f:27:ad:d4:ea:38:87:68:a1:d3:9d:ed:c8:27:53:55: a3:44:3f:bc:e9:5f:82:60:98:96:98:47:e8:7f:97:13:ac:88: c0:4d:37:13:bd:9e:2d:1d:8f:87:7f:b5:c9:3b:90:5c:7b:ae: 51:44:bb:59:20:a9:54:53:af:a5:eb:ed:d3:97:14:76:70:85: 8b:4c:e0:a6:46:ee:76:ff:ee:82:79:15:2d:3f:40:2f:9d:b0: 1e:4e:12:86:31:31:52:1f:d3:11:cc:27:c4:1e:6b:4e:a1:7e: 55:cf:9a:7d:41:72:eb:00:59:96:5c:48:95:3d:54:f5:15:0a: 8c:19:55:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSKV6WdAMhOd4R3jHhnwQEwmQlVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlGNDYxMTUzNjVFQkRGNTg4NkU3RjJDRjEzOUU2MDY3 MTc2NjZFMDAeFw0yNjA2MTYxNDMxNTFaFw0yNjA2MTcxODEwNTFaMDMxMTAvBgNV BAMTKDcyQzMxMDA0NDVENTlERDAwMzA3QkJCRkExMTVCODNGNjRGNjU5RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtbY5cGc+1eNgkZYcwKuHJWRBg 0nnfb2cyg9Ys6PsWDwiHyvAuhUldBTkx7YzJzCR8CILfV9bdVx9Vx2VRAfdahrNw T3Xlhik1fmyajsctUhKC1VXMNClXXmwsFms+VjIXESRAsJPC1eVXR84wBLbdDEY/ Uk+QPBtRgCHQ1GvMAKzD6wuNcm5osEHqDfa1qkm8zLMN3Bo2wHduPULpJZa8KvUg Ejk8RNkQ0B1GnkwsArNEVpp/qFn17v7PDPrBUltz8afaoSW4nON105S/l3w+u6vc elF+ognYvY2JvuUvkTh8G5+hgT0ufV2R5wCRP6aexPAoQJK1AHkWNeVJLNOtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcsMQBEXVndADB7u/oRW4P2T2WewwHwYDVR0j BBgwFoAUSfRhFTZevfWIbn8s8TnmBnF2ZuAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE0MTkzYzQtNGFiZC00ZTJjLWExZDAtMWI1Y2UzMmU0MjBiLzAvNDlGNDYxMTUz NjVFQkRGNTg4NkU3RjJDRjEzOUU2MDY3MTc2NjZFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OUY0NjExNTM2NUVCREY1ODg2RTdGMkNGMTM5RTYwNjcxNzY2 NkUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE0MTkzYzQtNGFiZC00ZTJjLWEx ZDAtMWI1Y2UzMmU0MjBiLzAvNDlGNDYxMTUzNjVFQkRGNTg4NkU3RjJDRjEzOUU2 MDY3MTc2NjZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/zRlqCa4snAf8eLcSRNF7eu939DuUXYeFX 7Ff5XLz25Bkj/v+dO4mvk8IxfW4lxsi46DTYfuQxbCQNdrFo4hC0jeQshQxbXQ09 Lhbgk6vk1tT+nMzrLT2E57MN89alMRb4QUR8b28aFM2gbxM63rIFa0NNwhWX89ZW PmfclMhGHyet1Oo4h2ih053tyCdTVaNEP7zpX4JgmJaYR+h/lxOsiMBNNxO9ni0d j4d/tck7kFx7rlFEu1kgqVRTr6Xr7dOXFHZwhYtM4KZG7nb/7oJ5FS0/QC+dsB5O EoYxMVIf0xHMJ8Qea06hflXPmn1BcusAWZZcSJU9VPUVCowZVUI= -----END CERTIFICATE-----Generated at Wed Jun 17 09:25:45 2026 by rpki-client