$ rpki-client -vvf rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft File: 411E8C45894267DCEFA20514C89165EE7C17C4C4.mft (raw, json) Hash identifier: ZhPeRoqMHsBr2tSwRu3+oz92dRd7gsTNd7eErfPcXLE= Subject key identifier: 6A:EE:31:60:7F:A9:B0:F0:9E:7B:8C:30:0A:EB:66:D2:6E:9D:77:C2 Authority key identifier: 41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4 Certificate issuer: /CN=411E8C45894267DCEFA20514C89165EE7C17C4C4 Certificate serial: 4363F1A6F63F25A7894277BAE03FD6E2FD4D08CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 08:33:15 +0000 Manifest this update: Wed 17 Jun 2026 08:28:15 +0000 Manifest next update: Thu 18 Jun 2026 09:00:15 +0000 Files and hashes: 1: 411E8C45894267DCEFA20514C89165EE7C17C4C4.crl (hash: A5lAyxDKDsVqDyOWT8qrc4nPiEAW7rJS2NZqSHOkWRU=) 2: 3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa (hash: RWaRXWbQIpLKoTQziPLdF6KyPF26oe/DwncsbN1gjuY=) 3: 323030313a6466303a323363303a3a2f34382d3438203d3e20313437313235.roa (hash: Gd2IM01O7z8fqk7GpG61d/HhlCVHlpL3rkOIOFXsAII=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.crl rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:63:f1:a6:f6:3f:25:a7:89:42:77:ba:e0:3f:d6:e2:fd:4d:08:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411E8C45894267DCEFA20514C89165EE7C17C4C4 Validity Not Before: Jun 17 08:28:15 2026 GMT Not After : Jun 18 09:00:15 2026 GMT Subject: CN=6AEE31607FA9B0F09E7B8C300AEB66D26E9D77C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:2c:54:a8:73:97:c3:8e:7f:28:39:65:47: e2:71:95:19:26:f6:d0:1d:49:0b:69:d7:4f:8c:74: 9c:83:6a:5b:1f:b8:70:c6:b9:00:9d:5a:10:82:d3: 43:27:69:3b:0e:23:02:86:a5:00:6b:63:a8:16:1c: 52:64:ae:84:1d:5f:00:07:b8:d4:db:b7:45:a5:27: 36:35:46:e1:59:b0:32:0f:a4:e9:40:a1:fa:5e:17: d9:4f:69:7c:8e:e8:b7:d8:80:1c:f1:18:66:9e:62: ce:24:c9:a2:8c:58:ed:b0:56:b7:66:5f:84:5a:ba: 0d:b4:e6:66:c5:31:be:b9:a8:bf:1b:b5:3a:11:92: c8:34:bd:41:f5:a2:85:00:2a:81:2f:b1:e6:de:a6: 8c:32:70:7d:93:a3:d6:c3:d2:56:5e:4d:4a:6d:fe: 51:c6:be:07:39:1c:48:1d:7a:ba:e7:d6:17:8e:78: 1b:10:c9:67:8f:42:a6:d6:64:10:c4:70:39:cd:ce: a1:76:5f:22:d4:e4:57:03:d9:bb:4c:27:f9:44:70: 56:f6:5b:5c:b0:7c:37:6e:0b:2e:85:e9:ad:4a:98: 3a:c1:bd:46:92:b0:23:b7:f6:48:4a:99:de:4c:06: d8:e9:7c:ac:de:12:49:94:1b:87:88:1e:6e:d7:a6: 2c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EE:31:60:7F:A9:B0:F0:9E:7B:8C:30:0A:EB:66:D2:6E:9D:77:C2 X509v3 Authority Key Identifier: keyid:41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:32:bc:6e:94:51:38:94:0a:3a:25:4c:03:fc:f3:79:6f:68: 86:c9:17:0f:0e:41:5b:f4:3e:36:9e:d9:a0:bf:d4:69:a9:38: b8:c9:58:50:80:d4:aa:f6:c3:d1:6f:fa:ff:c7:c3:cb:8c:17: 00:5d:57:49:59:1c:c8:c0:a4:ab:56:87:1b:d6:e2:45:35:3b: 11:38:1e:8b:83:cd:85:4f:19:4e:0b:f2:d4:39:58:8b:5c:05: 45:76:7e:31:e0:47:3d:27:87:dd:3b:b3:c9:b4:2c:c4:e8:4a: 3e:6e:39:92:c4:dc:d7:10:3b:95:95:dd:61:ef:8c:d5:a7:27: 02:9c:bd:c8:48:c6:c8:8e:ba:ae:19:cb:b3:c6:17:a9:46:62: ec:45:e4:aa:10:7c:bf:84:7d:78:14:cf:1c:ea:0b:71:4d:be: a3:40:79:fb:7d:04:5e:05:6c:36:60:9c:0a:5c:6a:5e:c8:ca: 62:89:48:e0:37:f6:70:9f:07:d2:2c:12:4e:a4:e1:b5:38:9e: fc:22:1a:b1:b3:b5:69:1d:08:bd:cf:dd:26:5c:02:b6:f8:66: 55:f4:92:d4:6c:a8:63:08:7e:ea:fa:d8:c7:bc:8e:97:1b:3f: 3b:a7:7c:31:d1:eb:a6:55:1b:07:5d:13:14:27:78:ca:bc:28: 13:93:77:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ2PxpvY/JaeJQne64D/W4v1NCMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExRThDNDU4OTQyNjdEQ0VGQTIwNTE0Qzg5MTY1RUU3 QzE3QzRDNDAeFw0yNjA2MTcwODI4MTVaFw0yNjA2MTgwOTAwMTVaMDMxMTAvBgNV BAMTKDZBRUUzMTYwN0ZBOUIwRjA5RTdCOEMzMDBBRUI2NkQyNkU5RDc3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpBCxUqHOXw45/KDllR+JxlRkm 9tAdSQtp10+MdJyDalsfuHDGuQCdWhCC00MnaTsOIwKGpQBrY6gWHFJkroQdXwAH uNTbt0WlJzY1RuFZsDIPpOlAofpeF9lPaXyO6LfYgBzxGGaeYs4kyaKMWO2wVrdm X4Raug205mbFMb65qL8btToRksg0vUH1ooUAKoEvsebepowycH2To9bD0lZeTUpt /lHGvgc5HEgderrn1heOeBsQyWePQqbWZBDEcDnNzqF2XyLU5FcD2btMJ/lEcFb2 W1ywfDduCy6F6a1KmDrBvUaSsCO39khKmd5MBtjpfKzeEkmUG4eIHm7XpiwrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUau4xYH+psPCee4wwCutm0m6dd8IwHwYDVR0j BBgwFoAUQR6MRYlCZ9zvogUUyJFl7nwXxMQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGMwMjAxZTMtODc1ZC00OWM0LThlMTQtOTk5OTQ5MzZkNDkxLzAvNDExRThDNDU4 OTQyNjdEQ0VGQTIwNTE0Qzg5MTY1RUU3QzE3QzRDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTFFOEM0NTg5NDI2N0RDRUZBMjA1MTRDODkxNjVFRTdDMTdD NEM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGMwMjAxZTMtODc1ZC00OWM0LThl MTQtOTk5OTQ5MzZkNDkxLzAvNDExRThDNDU4OTQyNjdEQ0VGQTIwNTE0Qzg5MTY1 RUU3QzE3QzRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsyvG6UUTiUCjolTAP883lvaIbJFw8OQVv0 Pjae2aC/1GmpOLjJWFCA1Kr2w9Fv+v/Hw8uMFwBdV0lZHMjApKtWhxvW4kU1OxE4 HouDzYVPGU4L8tQ5WItcBUV2fjHgRz0nh907s8m0LMToSj5uOZLE3NcQO5WV3WHv jNWnJwKcvchIxsiOuq4Zy7PGF6lGYuxF5KoQfL+EfXgUzxzqC3FNvqNAeft9BF4F bDZgnApcal7IymKJSOA39nCfB9IsEk6k4bU4nvwiGrGztWkdCL3P3SZcArb4ZlX0 ktRsqGMIfur62Me8jpcbPzunfDHR66ZVGwddExQneMq8KBOTd8I= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:38 2026 by rpki-client