$ rpki-client -vvf rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft File: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft (raw, json) Hash identifier: vUEIt5RST5FV5iE5JmJ94ZqJTxglg9CjRGX4oQmePjI= Subject key identifier: 8A:30:79:C8:27:45:1E:F8:E8:76:78:E9:1A:0E:07:F7:99:6F:72:73 Authority key identifier: 4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B Certificate issuer: /CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Certificate serial: 2478E8EC58F7BEBF36709619B9CA7DF37C4C8D60 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 02:30:52 +0000 Manifest this update: Sun 14 Jun 2026 02:25:52 +0000 Manifest next update: Mon 15 Jun 2026 02:42:52 +0000 Files and hashes: 1: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: RcYrOS6rHRHWdeyezVsL3GaabN57kfPwCIDe/5oYbMs=) 2: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: IlV0vgNjpTuApXjZnZRsOZX0dY/TDSqULrpC6FIi3II=) 3: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: 7ql88/IJdY/aWaZ2NP20wpbVy2vo7/DTiipCEcxNsYM=) 4: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl (hash: mB9ggBzW7uWABNFWcEgnCQL1ODZq5aRKAwexhwlYG5g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 15:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:78:e8:ec:58:f7:be:bf:36:70:96:19:b9:ca:7d:f3:7c:4c:8d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Validity Not Before: Jun 14 02:25:52 2026 GMT Not After : Jun 15 02:42:52 2026 GMT Subject: CN=8A3079C827451EF8E87678E91A0E07F7996F7273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d1:83:c7:38:f2:6e:ca:ae:bf:45:5f:f8:07: 65:b2:d2:5a:39:d3:7e:b4:91:dd:5d:07:06:7a:41: cc:b0:bb:e4:4a:9a:cc:c7:53:cd:ac:02:dd:49:c0: c0:c2:97:9f:7a:ae:f7:09:9e:f0:eb:a8:67:7a:6e: ea:46:79:2c:6d:27:96:bf:f8:b2:4b:a7:d7:41:16: 07:2a:b7:3d:11:58:2e:5b:fb:70:88:00:7b:8e:87: f9:8c:91:f1:28:1e:c6:d1:80:34:1c:a2:b3:b0:32: 89:ec:8c:b7:60:f0:c0:96:e3:bb:ae:20:92:05:6f: ed:a7:ec:66:bb:a5:ad:18:8b:09:f4:96:81:a2:01: 68:c9:e7:dc:43:93:8a:5b:e5:0c:75:05:ff:a8:d3: c7:fc:f3:04:33:ea:b0:16:ec:2b:16:b3:59:3f:6c: 8c:6d:03:b9:0c:b1:e9:3e:b4:8e:e3:ef:10:56:b8: 83:1f:64:80:a3:ce:5a:80:7d:c3:1c:de:cc:83:e7: 99:d3:9c:b5:bd:63:67:70:9c:eb:71:7a:b4:6c:d5: 53:32:17:64:b2:b6:19:db:3d:64:1d:08:ea:87:68: 7f:f8:da:22:5e:88:74:e7:cf:cc:b9:0e:39:71:ea: 3e:70:7f:a3:d3:46:2d:99:9c:a5:2a:34:97:74:e4: 23:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:30:79:C8:27:45:1E:F8:E8:76:78:E9:1A:0E:07:F7:99:6F:72:73 X509v3 Authority Key Identifier: keyid:4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ad:6c:20:ba:b8:a8:53:60:2b:e4:bf:ed:4c:70:1b:6c:9d: d3:fc:50:0e:f2:3b:7c:e4:07:7e:73:f2:54:ce:62:88:a7:5e: a1:cc:a4:c3:7f:17:18:a2:d8:ae:c1:77:84:6c:b9:40:25:4d: 99:8a:0b:b4:38:92:30:ae:fe:02:64:3a:cf:56:65:fc:a7:4f: 9f:a4:91:ca:0e:59:bc:49:47:c4:75:14:60:df:52:61:9d:e2: b7:7d:cc:90:85:fc:f1:22:3e:04:96:cb:8b:b5:8f:bf:7d:e2: ed:52:cb:a3:88:58:b4:4d:c7:e4:93:b1:af:b2:60:cd:b8:4e: b9:1b:65:99:99:a5:10:42:22:56:84:9d:c2:76:57:61:d9:5d: c5:36:70:bc:72:b2:bc:3e:42:7c:16:08:e6:0d:ba:ea:79:e4: 3d:06:d0:de:ac:6f:a5:19:f5:12:7d:bb:2a:40:9d:be:1d:32: 9b:e5:c0:34:71:de:8c:b3:34:40:63:50:df:94:c9:d8:c7:8b: 21:ea:39:10:5b:4c:9a:fa:d9:40:e0:50:a1:51:06:0a:e0:f0: f6:71:ea:5c:da:2c:4e:86:8c:cd:55:b1:42:c8:b8:b7:70:f5: a7:a6:36:e6:ba:5c:29:1e:8e:1e:27:90:0a:88:34:bb:04:00: 4f:7d:02:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJHjo7Fj3vr82cJYZucp983xMjWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQy NjA2OUMyQjAeFw0yNjA2MTQwMjI1NTJaFw0yNjA2MTUwMjQyNTJaMDMxMTAvBgNV BAMTKDhBMzA3OUM4Mjc0NTFFRjhFODc2NzhFOTFBMEUwN0Y3OTk2RjcyNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC20YPHOPJuyq6/RV/4B2Wy0lo5 0360kd1dBwZ6Qcywu+RKmszHU82sAt1JwMDCl596rvcJnvDrqGd6bupGeSxtJ5a/ +LJLp9dBFgcqtz0RWC5b+3CIAHuOh/mMkfEoHsbRgDQcorOwMonsjLdg8MCW47uu IJIFb+2n7Ga7pa0Yiwn0loGiAWjJ59xDk4pb5Qx1Bf+o08f88wQz6rAW7CsWs1k/ bIxtA7kMsek+tI7j7xBWuIMfZICjzlqAfcMc3syD55nTnLW9Y2dwnOtxerRs1VMy F2SythnbPWQdCOqHaH/42iJeiHTnz8y5Djlx6j5wf6PTRi2ZnKUqNJd05COjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUijB5yCdFHvjodnjpGg4H95lvcnMwHwYDVR0j BBgwFoAUSvelxvVMX9vYlXp/5bckJCYGnCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE1OWEzNjItOTUwYy00NWMyLWFlY2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZG NTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQyNjA2OUMyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QUY3QTVDNkY1NEM1RkRCRDg5NTdBN0ZFNUI3MjQyNDI2MDY5 QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0 MjQyNjA2OUMyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6tbCC6uKhTYCvkv+1McBtsndP8UA7yO3zk B35z8lTOYoinXqHMpMN/Fxii2K7Bd4RsuUAlTZmKC7Q4kjCu/gJkOs9WZfynT5+k kcoOWbxJR8R1FGDfUmGd4rd9zJCF/PEiPgSWy4u1j7994u1Sy6OIWLRNx+STsa+y YM24TrkbZZmZpRBCIlaEncJ2V2HZXcU2cLxysrw+QnwWCOYNuup55D0G0N6sb6UZ 9RJ9uypAnb4dMpvlwDRx3oyzNEBjUN+UydjHiyHqORBbTJr62UDgUKFRBgrg8PZx 6lzaLE6GjM1VsULIuLdw9aemNua6XCkejh4nkAqINLsEAE99AuY= -----END CERTIFICATE-----Generated at Sun Jun 14 09:51:36 2026 by rpki-client