$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft File: 4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft (raw, json) Hash identifier: CPwAFoGnE+nD8fOO2nR8IIU8W7njge3IC8nzmi7pl0I= Subject key identifier: FE:F5:EF:75:4E:5A:43:B3:6F:4E:84:A5:35:8D:80:38:ED:A4:10:1F Authority key identifier: 4B:3B:54:F4:A1:20:3D:9D:F5:E8:09:42:28:C9:1F:C2:1F:F2:C5:C4 Certificate issuer: /CN=4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4 Certificate serial: 3599CBDF96976CA58C88EC1529054B64496CD5D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:02:06 +0000 Manifest this update: Tue 16 Jun 2026 18:57:06 +0000 Manifest next update: Wed 17 Jun 2026 21:02:06 +0000 Files and hashes: 1: 4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl (hash: fco3fWj79oA+KpQgI6enfK1YC7OL1ujFCH9yhuAOXZI=) 2: 3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (hash: esc3McyAl6hUlG4d1U+cxH9phLSFNKnapu2B7Ix2aTI=) 3: 323030313a6466343a343938303a3a2f34382d3438203d3e20313430343633.roa (hash: rk63OWefzg4vng4Tc3mM68t8dHw3/EWO+Sh3DRDdtqA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:99:cb:df:96:97:6c:a5:8c:88:ec:15:29:05:4b:64:49:6c:d5:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4 Validity Not Before: Jun 16 18:57:06 2026 GMT Not After : Jun 17 21:02:06 2026 GMT Subject: CN=FEF5EF754E5A43B36F4E84A5358D8038EDA4101F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ef:b0:f5:8d:4c:c5:17:d7:24:09:a1:36:37: dc:fe:d8:cc:44:46:c3:69:11:77:9d:15:5b:a4:a0: b9:ac:2b:34:97:8b:01:1a:d2:db:0e:91:61:bc:e0: 69:9c:91:f2:8b:db:06:c3:db:48:92:e2:34:05:0f: b8:48:77:6b:66:03:d4:b6:bb:30:9c:a5:f0:cb:92: 0d:d9:6e:8e:ac:81:5b:92:61:31:9a:df:1b:7a:8c: f5:6a:ba:10:fe:65:d1:99:ea:92:da:fb:01:7d:64: bb:5e:04:25:08:0e:f4:71:62:57:7d:b3:e2:9a:2f: 61:8f:d0:24:a5:f5:36:a3:38:6c:8b:89:4f:ea:3e: 65:35:08:6d:4c:ff:2d:a2:b3:c5:95:7a:d5:0a:7b: fe:fa:bb:b0:2c:0c:a1:ba:ae:cb:81:fe:b8:b8:c5: 00:0a:1d:93:a3:4e:a7:1f:4f:42:b2:22:a2:58:20: db:91:70:60:d6:26:71:63:fa:dc:8e:c2:70:2e:47: 4e:45:f3:e6:19:ae:1b:ac:17:07:cd:a8:ed:7e:ac: 83:3f:c3:d5:16:48:f3:b5:a8:00:c5:41:db:a1:12: 84:db:03:a7:ae:1e:a1:66:eb:81:9a:40:5c:e4:fd: c6:b6:85:22:a0:85:af:00:88:b3:4e:fa:75:5b:1f: d7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F5:EF:75:4E:5A:43:B3:6F:4E:84:A5:35:8D:80:38:ED:A4:10:1F X509v3 Authority Key Identifier: keyid:4B:3B:54:F4:A1:20:3D:9D:F5:E8:09:42:28:C9:1F:C2:1F:F2:C5:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7c:4b:6e:a4:e4:51:0c:e5:e3:a6:95:c2:b6:cf:10:8f:c7: 11:ef:60:50:62:dd:e7:df:ab:63:1d:5b:02:0a:7b:7d:7b:d7: 04:cd:a5:e4:0a:f9:b2:7f:a4:0e:e3:ff:f3:34:e7:d9:7a:2a: bf:0d:7c:c3:5a:a6:09:2b:c6:f6:b2:01:98:18:e2:bb:8b:a7: b1:31:1d:37:16:30:d8:f1:d3:6b:39:c8:40:66:69:4d:4c:5c: b2:05:f7:4b:9a:03:b9:05:06:b4:69:8c:04:fd:0c:30:f4:a8: 1c:61:22:c5:22:e7:dd:06:f2:e4:76:1e:3a:c1:55:01:15:c0: b1:78:69:63:2e:ef:f8:2e:6b:fc:f7:5c:86:df:56:2c:82:a9: 1e:c1:08:d2:f3:ee:0b:cc:6b:c5:bf:4d:a9:7a:58:cf:59:99: f9:d4:3c:3d:19:01:00:b5:f4:88:c9:7f:57:d6:32:f9:d3:d6: a1:aa:79:54:8c:2d:15:62:51:e1:84:d7:70:40:05:d0:93:07: 8e:d7:06:c8:b6:c5:25:95:9a:89:45:33:5c:72:fd:2d:58:10: 5e:3f:34:c3:4c:da:ba:2c:8e:61:53:79:31:f5:39:d0:6b:44: 2e:7f:be:fb:34:f3:cd:cd:8a:40:2e:69:05:d3:e2:79:0d:08: d3:ed:ad:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNZnL35aXbKWMiOwVKQVLZEls1dkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzQjU0RjRBMTIwM0Q5REY1RTgwOTQyMjhDOTFGQzIx RkYyQzVDNDAeFw0yNjA2MTYxODU3MDZaFw0yNjA2MTcyMTAyMDZaMDMxMTAvBgNV BAMTKEZFRjVFRjc1NEU1QTQzQjM2RjRFODRBNTM1OEQ4MDM4RURBNDEwMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm77D1jUzFF9ckCaE2N9z+2MxE RsNpEXedFVukoLmsKzSXiwEa0tsOkWG84GmckfKL2wbD20iS4jQFD7hId2tmA9S2 uzCcpfDLkg3Zbo6sgVuSYTGa3xt6jPVquhD+ZdGZ6pLa+wF9ZLteBCUIDvRxYld9 s+KaL2GP0CSl9TajOGyLiU/qPmU1CG1M/y2is8WVetUKe/76u7AsDKG6rsuB/ri4 xQAKHZOjTqcfT0KyIqJYINuRcGDWJnFj+tyOwnAuR05F8+YZrhusFwfNqO1+rIM/ w9UWSPO1qADFQduhEoTbA6euHqFm64GaQFzk/ca2hSKgha8AiLNO+nVbH9c3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/vXvdU5aQ7NvToSlNY2AOO2kEB8wHwYDVR0j BBgwFoAUSztU9KEgPZ316AlCKMkfwh/yxcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWExZTBiZDctMjgxYS00ZWJhLWI5OGMtODI5MzkzMjdkZGQ3LzAvNEIzQjU0RjRB MTIwM0Q5REY1RTgwOTQyMjhDOTFGQzIxRkYyQzVDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QjNCNTRGNEExMjAzRDlERjVFODA5NDIyOEM5MUZDMjFGRjJD NUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWExZTBiZDctMjgxYS00ZWJhLWI5 OGMtODI5MzkzMjdkZGQ3LzAvNEIzQjU0RjRBMTIwM0Q5REY1RTgwOTQyMjhDOTFG QzIxRkYyQzVDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD18S26k5FEM5eOmlcK2zxCPxxHvYFBi3eff q2MdWwIKe3171wTNpeQK+bJ/pA7j//M059l6Kr8NfMNapgkrxvayAZgY4ruLp7Ex HTcWMNjx02s5yEBmaU1MXLIF90uaA7kFBrRpjAT9DDD0qBxhIsUi590G8uR2HjrB VQEVwLF4aWMu7/gua/z3XIbfViyCqR7BCNLz7gvMa8W/Tal6WM9ZmfnUPD0ZAQC1 9IjJf1fWMvnT1qGqeVSMLRViUeGE13BABdCTB47XBsi2xSWVmolFM1xy/S1YEF4/ NMNM2rosjmFTeTH1OdBrRC5/vvs0883NikAuaQXT4nkNCNPtrTg= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:16 2026 by rpki-client