$ rpki-client -vvf rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.mft File: A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.mft (raw, json) Hash identifier: QnIh9AP+7AiCgmxli3ku11ICjLHPw68y41L+OF+ZHks= Subject key identifier: 96:6D:96:8C:CA:79:AD:3C:22:21:18:F6:B8:6C:B2:A5:9D:70:95:5E Authority key identifier: A4:A6:D0:55:E5:68:DD:9D:FF:4F:A7:B8:A9:8E:26:E5:47:D2:E9:C4 Certificate issuer: /CN=A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4 Certificate serial: 50F359B14F9D5EC9F35F2FE542CEF271CD776537 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 18:16:15 +0000 Manifest this update: Tue 16 Jun 2026 18:11:15 +0000 Manifest next update: Wed 17 Jun 2026 18:36:15 +0000 Files and hashes: 1: 3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa (hash: Hhcr9VVOfd5FtvKI4zutV/Yegy8flj3mD3AHSU+kLcM=) 2: A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.crl (hash: 2KAcE5lrzvd0oiQi8qVoiHvBv69mR22FzxRSUQtSPmg=) 3: 3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa (hash: EarQVvbcyhKmaxD6rqFZgUQY/Ww5omgDD2NzWO0knDY=) 4: 3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa (hash: fD7AXzzRekNw/K0iCKi41nGKBP7FKJCCqtJkswohhe4=) 5: 323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa (hash: NPRzpEohzPWTI4fs5HCPZgCAeOv/KJaZwx4NYYDYA/U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.crl rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f3:59:b1:4f:9d:5e:c9:f3:5f:2f:e5:42:ce:f2:71:cd:77:65:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4 Validity Not Before: Jun 16 18:11:15 2026 GMT Not After : Jun 17 18:36:15 2026 GMT Subject: CN=966D968CCA79AD3C222118F6B86CB2A59D70955E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:d8:be:20:a4:d6:b0:eb:6f:3d:71:23:d7: 30:9f:f5:4d:95:66:7d:a0:ed:94:2d:4c:ec:da:5f: 66:21:13:23:0a:12:70:ce:1b:e6:a9:80:1f:97:c9: 8c:6f:38:89:4d:cc:ff:3d:aa:3f:90:44:23:2a:36: 3e:6b:be:ac:43:1d:f0:7b:fb:8c:11:3d:a1:0b:98: 5d:38:b9:5b:e8:c3:0b:81:85:b4:ce:4f:7a:cd:48: 83:8e:9a:7e:16:7c:19:57:23:e9:bd:44:9d:d4:1c: 43:f1:0b:c9:9e:91:49:5f:76:97:19:ad:56:80:e1: 44:ee:b6:9d:8d:a5:93:35:68:d6:59:3c:6c:8d:32: cd:51:51:57:7b:82:da:a0:a7:6d:85:d0:a5:9b:43: ca:68:6d:ce:2d:e1:43:58:f0:d2:b5:ae:db:11:c2: 6a:85:9f:c2:e1:ce:de:34:ef:11:1d:b2:93:d6:5f: 43:e3:80:2c:ad:d1:40:87:61:41:65:6c:43:03:c9: 6e:94:d8:d4:ba:39:de:0b:f9:42:b2:da:16:15:6b: 0d:b6:21:c0:e2:7c:11:0c:08:64:63:10:6d:82:24: 5c:db:cd:cb:58:83:44:bc:c5:6b:6b:7e:13:80:57: 27:8b:ca:5a:37:78:4c:42:6c:8c:ed:23:f2:52:c4: d9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6D:96:8C:CA:79:AD:3C:22:21:18:F6:B8:6C:B2:A5:9D:70:95:5E X509v3 Authority Key Identifier: keyid:A4:A6:D0:55:E5:68:DD:9D:FF:4F:A7:B8:A9:8E:26:E5:47:D2:E9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:63:63:5c:97:54:c6:ac:50:21:13:e7:2c:78:4f:9b:2f:c9: cc:5b:78:55:3f:6e:6f:ed:d9:38:ea:38:c2:af:b3:32:9a:9a: c8:38:15:33:58:9c:f1:cb:77:01:e6:53:e0:d1:60:f0:b8:a8: 07:95:f0:2a:4d:5b:36:02:3a:55:a3:e4:d0:91:e1:70:78:2f: c0:b9:24:b9:51:7a:c3:b7:d5:9b:95:39:38:a1:e9:b0:fa:96: de:00:30:cf:87:83:1f:3f:d1:8b:1f:54:55:66:02:37:12:1e: fb:4f:b0:85:62:b9:ee:f5:24:9e:37:5e:7f:7e:4e:45:a8:60: 01:4b:63:af:64:ef:0a:cb:ec:8d:dd:f3:f3:a3:9d:19:31:9c: 98:9a:6c:4a:b7:fd:17:a6:bd:6b:0c:2e:77:a2:4d:49:86:0a: 78:68:b3:d4:2d:ec:b1:4b:38:33:e3:11:0a:b8:a2:be:2a:8b: 97:ff:ba:92:41:00:e1:aa:4d:7d:92:5c:1b:e8:ef:03:a6:a1: 0a:3c:f0:bf:29:cb:0d:ec:28:d7:81:75:f5:b0:d6:23:e1:d5: 57:72:7b:9a:c5:11:5b:9f:d4:bc:6e:4e:57:c0:2b:8f:a1:c3: a8:6e:5b:e1:67:9b:f6:84:70:30:be:11:b6:fe:bd:52:8b:bc: 34:68:f4:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUPNZsU+dXsnzXy/lQs7ycc13ZTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBNkQwNTVFNTY4REQ5REZGNEZBN0I4QTk4RTI2RTU0 N0QyRTlDNDAeFw0yNjA2MTYxODExMTVaFw0yNjA2MTcxODM2MTVaMDMxMTAvBgNV BAMTKDk2NkQ5NjhDQ0E3OUFEM0MyMjIxMThGNkI4NkNCMkE1OUQ3MDk1NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCunNi+IKTWsOtvPXEj1zCf9U2V Zn2g7ZQtTOzaX2YhEyMKEnDOG+apgB+XyYxvOIlNzP89qj+QRCMqNj5rvqxDHfB7 +4wRPaELmF04uVvowwuBhbTOT3rNSIOOmn4WfBlXI+m9RJ3UHEPxC8mekUlfdpcZ rVaA4UTutp2NpZM1aNZZPGyNMs1RUVd7gtqgp22F0KWbQ8pobc4t4UNY8NK1rtsR wmqFn8Lhzt407xEdspPWX0PjgCyt0UCHYUFlbEMDyW6U2NS6Od4L+UKy2hYVaw22 IcDifBEMCGRjEG2CJFzbzctYg0S8xWtrfhOAVyeLylo3eExCbIztI/JSxNlVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlm2WjMp5rTwiIRj2uGyypZ1wlV4wHwYDVR0j BBgwFoAUpKbQVeVo3Z3/T6e4qY4m5UfS6cQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTUxN2ZlOTgtOGY1OC00OTdmLWJlNTctODY2NWE3YTA0YmIwLzAvQTRBNkQwNTVF NTY4REQ5REZGNEZBN0I4QTk4RTI2RTU0N0QyRTlDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNEE2RDA1NUU1NjhERDlERkY0RkE3QjhBOThFMjZFNTQ3RDJF OUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTUxN2ZlOTgtOGY1OC00OTdmLWJl NTctODY2NWE3YTA0YmIwLzAvQTRBNkQwNTVFNTY4REQ5REZGNEZBN0I4QTk4RTI2 RTU0N0QyRTlDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9jY1yXVMasUCET5yx4T5svycxbeFU/bm/t 2TjqOMKvszKamsg4FTNYnPHLdwHmU+DRYPC4qAeV8CpNWzYCOlWj5NCR4XB4L8C5 JLlResO31ZuVOTih6bD6lt4AMM+Hgx8/0YsfVFVmAjcSHvtPsIViue71JJ43Xn9+ TkWoYAFLY69k7wrL7I3d8/OjnRkxnJiabEq3/RemvWsMLneiTUmGCnhos9Qt7LFL ODPjEQq4or4qi5f/upJBAOGqTX2SXBvo7wOmoQo88L8pyw3sKNeBdfWw1iPh1Vdy e5rFEVuf1LxuTlfAK4+hw6huW+Fnm/aEcDC+Ebb+vVKLvDRo9Iw= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:34 2026 by rpki-client