$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft File: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft (raw, json) Hash identifier: QNnRElznoO4gHArt0xpUkVmi+DJgHUSKWjzWx/jsoNU= Subject key identifier: FA:97:31:1E:92:13:A7:79:79:69:71:61:4D:33:69:1B:94:2F:68:81 Authority key identifier: 4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5 Certificate issuer: /CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5 Certificate serial: 10A3489280E9E533433C6239385DA18FD92B6CA8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:12:54 +0000 Manifest this update: Wed 17 Jun 2026 04:07:54 +0000 Manifest next update: Thu 18 Jun 2026 04:24:54 +0000 Files and hashes: 1: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: wL6gjmzCFjkZlG1aqyBw0D/I6Abo7eZzV1pr7Z6kz7k=) 2: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: eAc+mnltXFWM2Zo7C5pCUJCKXwlG3JzkV70vxAzWX04=) 3: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl (hash: 6/vbTrWY+kTFGPnUbFVij21xfYptW5bLfelNYEArXBA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a3:48:92:80:e9:e5:33:43:3c:62:39:38:5d:a1:8f:d9:2b:6c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5 Validity Not Before: Jun 17 04:07:54 2026 GMT Not After : Jun 18 04:24:54 2026 GMT Subject: CN=FA97311E9213A779796971614D33691B942F6881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dc:6e:a3:33:a9:e5:31:45:fe:59:8d:7f:38: 47:39:fc:f4:b9:58:ad:7d:5d:4f:43:d3:f8:97:61: 4c:53:d5:a2:34:a2:5e:64:b8:f9:cb:7f:68:19:de: ec:68:aa:4d:63:1e:e8:08:0c:cc:ff:f4:b7:6f:aa: 98:2b:ab:b5:15:18:f8:5c:6d:4d:6a:d6:f4:69:2e: 0e:c7:c2:8a:09:ef:fb:42:f6:40:c1:48:4e:4a:fe: 03:88:29:f9:de:36:0e:cb:73:a3:3f:45:72:28:d5: e7:ac:73:6e:f3:29:f8:44:23:ea:be:d4:90:df:c6: 68:03:b5:0f:c1:3e:01:06:17:07:13:cd:97:39:54: e0:90:20:c4:5d:19:24:c1:cd:d9:f1:21:17:79:e6: 39:47:24:c1:1d:a2:78:a8:6d:a7:f1:8a:e2:52:b5: 24:4a:4f:ae:60:41:64:77:5e:2a:39:32:35:46:6c: 74:68:bf:a3:f0:47:92:8f:6e:08:3a:ca:83:29:3c: 39:51:49:c7:b1:c2:44:bb:75:ca:b7:1f:98:b0:ea: 84:05:a8:f1:e6:a0:71:a8:69:39:a1:ae:79:7d:33: d0:72:0c:16:23:3a:14:94:a1:36:11:52:f8:ea:af: f7:97:5c:84:5b:ab:7e:a6:4d:58:98:bf:1e:aa:a1: 74:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:97:31:1E:92:13:A7:79:79:69:71:61:4D:33:69:1B:94:2F:68:81 X509v3 Authority Key Identifier: keyid:4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:47:c3:05:5d:de:af:c1:e9:67:8d:db:a0:81:b9:18:d5:a4: af:1e:37:c4:9a:04:d6:d9:8b:46:4b:01:72:8e:0b:aa:24:f8: 14:aa:1f:2d:cd:cd:80:d8:29:91:23:01:e2:e8:0b:9a:90:2d: a8:e4:02:43:a0:fa:b6:93:c0:90:aa:4d:b0:71:d9:31:b9:7a: b8:c6:73:6e:06:6c:88:17:3b:8f:de:33:2e:ab:81:d6:26:71: d3:4d:35:32:59:3f:b6:77:27:b0:77:70:d0:e9:f2:b2:5e:b7: 90:12:1a:60:41:7e:4f:3d:2f:f8:6a:75:69:11:9d:15:d1:96: aa:c9:da:5b:19:30:f5:fe:4e:74:25:a8:22:fd:87:67:72:48: 5d:30:60:d5:78:b3:52:f8:83:ae:7b:ae:68:c2:bf:72:c4:59: 39:d7:84:57:a2:bf:89:f3:8f:e3:81:a3:7b:a2:dc:a5:0f:f6: 58:64:ad:81:90:65:b4:0a:f7:16:f6:2a:e4:0d:ca:8c:d6:95: a6:85:c4:75:ae:fc:01:fc:4c:7a:4f:4e:ed:9a:d0:6a:36:7b: ab:50:ab:42:04:65:9d:a3:c7:5b:2c:1c:b7:7d:9d:ae:94:f2: 91:24:c4:f3:e6:74:a2:ee:c8:3b:9e:4c:b1:ed:11:a9:a1:aa: 50:40:53:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEKNIkoDp5TNDPGI5OF2hj9krbKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzQTYwNjg4M0IxMjI3MTYxOUM3Q0I0OURGQ0QzNTlG MEYzRTZGNTAeFw0yNjA2MTcwNDA3NTRaFw0yNjA2MTgwNDI0NTRaMDMxMTAvBgNV BAMTKEZBOTczMTFFOTIxM0E3Nzk3OTY5NzE2MTREMzM2OTFCOTQyRjY4ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT3G6jM6nlMUX+WY1/OEc5/PS5 WK19XU9D0/iXYUxT1aI0ol5kuPnLf2gZ3uxoqk1jHugIDMz/9Ldvqpgrq7UVGPhc bU1q1vRpLg7HwooJ7/tC9kDBSE5K/gOIKfneNg7Lc6M/RXIo1eesc27zKfhEI+q+ 1JDfxmgDtQ/BPgEGFwcTzZc5VOCQIMRdGSTBzdnxIRd55jlHJMEdoniobafxiuJS tSRKT65gQWR3Xio5MjVGbHRov6PwR5KPbgg6yoMpPDlRScexwkS7dcq3H5iw6oQF qPHmoHGoaTmhrnl9M9ByDBYjOhSUoTYRUvjqr/eXXIRbq36mTViYvx6qoXTlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+pcxHpITp3l5aXFhTTNpG5QvaIEwHwYDVR0j BBgwFoAUSjpgaIOxInFhnHy0nfzTWfDz5vUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY5Mjk5MDEtYTEzNy00YTM1LTgxMzQtMTgwNGY5NDc5MmRmLzAvNEEzQTYwNjg4 M0IxMjI3MTYxOUM3Q0I0OURGQ0QzNTlGMEYzRTZGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTNBNjA2ODgzQjEyMjcxNjE5QzdDQjQ5REZDRDM1OUYwRjNF NkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvNEEzQTYwNjg4M0IxMjI3MTYxOUM3Q0I0OURGQ0Qz NTlGMEYzRTZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5HwwVd3q/B6WeN26CBuRjVpK8eN8SaBNbZ i0ZLAXKOC6ok+BSqHy3NzYDYKZEjAeLoC5qQLajkAkOg+raTwJCqTbBx2TG5erjG c24GbIgXO4/eMy6rgdYmcdNNNTJZP7Z3J7B3cNDp8rJet5ASGmBBfk89L/hqdWkR nRXRlqrJ2lsZMPX+TnQlqCL9h2dySF0wYNV4s1L4g657rmjCv3LEWTnXhFeiv4nz j+OBo3ui3KUP9lhkrYGQZbQK9xb2KuQNyozWlaaFxHWu/AH8THpPTu2a0Go2e6tQ q0IEZZ2jx1ssHLd9na6U8pEkxPPmdKLuyDueTLHtEamhqlBAU6o= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:35 2026 by rpki-client