$ rpki-client -vvf rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft File: 4FE0444622A2C111B372D11A38DAFE7648673D36.mft (raw, json) Hash identifier: YVqlU8eB3Dj7Wi1dzuSgfXFcJa98gdZmM0mAT0SSVmo= Subject key identifier: 9F:C1:F6:C9:6A:9C:9A:A6:F7:44:C7:17:46:8B:FF:83:8A:15:24:5D Authority key identifier: 4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36 Certificate issuer: /CN=4FE0444622A2C111B372D11A38DAFE7648673D36 Certificate serial: 75216508054DF298333D6F555317A4064B0D7254 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:12:14 +0000 Manifest this update: Tue 16 Jun 2026 19:07:14 +0000 Manifest next update: Wed 17 Jun 2026 19:59:14 +0000 Files and hashes: 1: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: jwm0S2hFDX+dZX8vIrEhkY9/01RjPCQuv88vNZDWSb8=) 2: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: EeoonxSdNuxOduC2I/c7vz+iodDJX+FOusUJ8W+8sks=) 3: 4FE0444622A2C111B372D11A38DAFE7648673D36.crl (hash: 8Zuxwc9MmKY9sLRTjPmNw1W8Njg6sZFh3liKklRLJPM=) 4: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: gRZjicumGEoblrElHZ58yAQf9cx0JwPN+oerGxN3DUY=) 5: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: KpYQSU+oal444FTCzAQqpO+RSPbHAZ+ta2JoMh51nbo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.crl rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:21:65:08:05:4d:f2:98:33:3d:6f:55:53:17:a4:06:4b:0d:72:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FE0444622A2C111B372D11A38DAFE7648673D36 Validity Not Before: Jun 16 19:07:14 2026 GMT Not After : Jun 17 19:59:14 2026 GMT Subject: CN=9FC1F6C96A9C9AA6F744C717468BFF838A15245D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:93:e1:66:01:1e:73:04:23:68:84:5c:8c:a8: 22:cb:a4:a3:4b:4f:7a:76:16:0c:2a:b7:ea:80:4b: 66:44:1e:7a:1b:97:30:bc:6d:30:fa:cc:17:00:49: 23:2e:3c:c3:16:9e:e9:3c:ec:d1:1b:05:69:77:6e: 93:07:af:6c:bd:94:df:89:c5:f2:36:33:e4:cf:6d: ab:57:90:be:b7:37:6c:c8:f4:29:ce:77:16:46:5f: cd:12:2e:f1:5f:d9:cb:dc:34:3f:5e:4f:7e:1c:1f: e4:fe:b9:7e:a5:bb:ca:ba:45:4d:6e:06:25:45:ad: 07:c0:60:0d:cb:5a:f6:9d:57:7d:08:bc:06:0f:0f: 79:f3:5e:86:40:be:8a:40:70:c8:9a:31:4c:e6:52: f7:68:04:9c:b4:a5:1b:20:93:61:41:85:45:0c:7b: 8c:7a:25:4a:18:29:75:50:e6:a1:de:97:52:d9:89: cb:9c:28:1f:c3:91:51:92:28:f6:ff:6b:fa:0f:0a: e9:69:13:f2:88:bc:7b:c1:0e:a0:cf:6e:59:9e:ba: 6b:ff:e6:49:df:6f:92:3f:5b:6d:f0:26:4c:cf:42: 6d:51:21:7c:d0:73:84:03:18:75:2b:1a:03:de:31: 1d:d3:7e:bd:8c:ec:51:9c:30:7b:13:8a:e3:39:06: 3b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C1:F6:C9:6A:9C:9A:A6:F7:44:C7:17:46:8B:FF:83:8A:15:24:5D X509v3 Authority Key Identifier: keyid:4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:45:33:78:cc:db:85:95:91:af:7a:11:1b:cb:bd:bc:af:de: 5b:40:9c:17:fb:70:cd:97:91:b0:92:cc:ae:d6:c5:3c:be:a7: b0:4b:49:36:fc:ba:9e:aa:b2:73:bf:ee:78:4c:a7:94:80:a0: 89:af:dc:c8:4f:8e:76:60:29:58:da:ba:12:25:cb:16:e8:e4: b0:24:c7:52:26:94:7f:50:5f:f5:2e:ef:14:a5:8b:54:8e:f3: b2:16:5e:db:d4:ac:95:6f:4d:8e:b2:9b:77:f8:f6:28:76:29: 1b:9f:ee:a1:98:d7:24:0c:86:35:77:6e:87:fc:b4:35:b7:4b: 8c:d1:e3:0f:4f:7f:54:1e:6d:5e:56:c5:6a:0f:8c:52:2b:84: 6b:da:7a:92:34:de:d9:63:19:4f:b7:41:cc:d9:e4:6b:f6:eb: 19:26:a9:07:53:11:cf:47:db:40:76:92:51:d0:2a:2b:8c:84: a2:73:34:a0:c4:5b:7c:07:ed:cf:a3:8b:6a:a1:88:3a:9e:b3: ca:6f:9d:5c:f3:33:b2:74:b1:46:b0:74:0b:9d:9a:2d:27:0d: 82:04:30:a3:c8:02:01:2f:f8:2c:8c:37:74:e8:a0:35:a9:2d: 06:01:60:18:19:6b:99:9a:b1:a7:4b:0f:12:6c:19:d4:77:4e: 19:72:35:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdSFlCAVN8pgzPW9VUxekBksNclQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZFMDQ0NDYyMkEyQzExMUIzNzJEMTFBMzhEQUZFNzY0 ODY3M0QzNjAeFw0yNjA2MTYxOTA3MTRaFw0yNjA2MTcxOTU5MTRaMDMxMTAvBgNV BAMTKDlGQzFGNkM5NkE5QzlBQTZGNzQ0QzcxNzQ2OEJGRjgzOEExNTI0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdk+FmAR5zBCNohFyMqCLLpKNL T3p2Fgwqt+qAS2ZEHnoblzC8bTD6zBcASSMuPMMWnuk87NEbBWl3bpMHr2y9lN+J xfI2M+TPbatXkL63N2zI9CnOdxZGX80SLvFf2cvcND9eT34cH+T+uX6lu8q6RU1u BiVFrQfAYA3LWvadV30IvAYPD3nzXoZAvopAcMiaMUzmUvdoBJy0pRsgk2FBhUUM e4x6JUoYKXVQ5qHel1LZicucKB/DkVGSKPb/a/oPCulpE/KIvHvBDqDPblmeumv/ 5knfb5I/W23wJkzPQm1RIXzQc4QDGHUrGgPeMR3Tfr2M7FGcMHsTiuM5Bjt5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn8H2yWqcmqb3RMcXRov/g4oVJF0wHwYDVR0j BBgwFoAUT+BERiKiwRGzctEaONr+dkhnPTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTFmZDM1MWUtMmJkNy00MTkxLTkxMDYtNTNmODc1MDE2ZjBlLzAvNEZFMDQ0NDYy MkEyQzExMUIzNzJEMTFBMzhEQUZFNzY0ODY3M0QzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkUwNDQ0NjIyQTJDMTExQjM3MkQxMUEzOERBRkU3NjQ4Njcz RDM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvNEZFMDQ0NDYyMkEyQzExMUIzNzJEMTFBMzhEQUZF NzY0ODY3M0QzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpFM3jM24WVka96ERvLvbyv3ltAnBf7cM2X kbCSzK7WxTy+p7BLSTb8up6qsnO/7nhMp5SAoImv3MhPjnZgKVjauhIlyxbo5LAk x1ImlH9QX/Uu7xSli1SO87IWXtvUrJVvTY6ym3f49ih2KRuf7qGY1yQMhjV3bof8 tDW3S4zR4w9Pf1QebV5WxWoPjFIrhGvaepI03tljGU+3QczZ5Gv26xkmqQdTEc9H 20B2klHQKiuMhKJzNKDEW3wH7c+ji2qhiDqes8pvnVzzM7J0sUawdAudmi0nDYIE MKPIAgEv+CyMN3TooDWpLQYBYBgZa5masadLDxJsGdR3ThlyNW0= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:17 2026 by rpki-client