$ rpki-client -vvf rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft File: 4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft (raw, json) Hash identifier: TezxDkEWxxcQs1BhZ5F2jDA8ygmgAttH8uFdqDBHaoU= Subject key identifier: 1A:33:61:1F:55:19:2F:C1:BD:FA:5B:F2:F8:F9:C7:46:23:91:7D:BF Authority key identifier: 4C:8D:B8:E3:4E:AF:27:84:6F:22:F0:E5:6C:A7:6B:56:1E:1F:BE:0B Certificate issuer: /CN=4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B Certificate serial: 60A82B965926D4570D7EE3B07E758A5318B6A351 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:04:51 +0000 Manifest this update: Tue 16 Jun 2026 16:59:51 +0000 Manifest next update: Wed 17 Jun 2026 20:15:51 +0000 Files and hashes: 1: 4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl (hash: 5HcA6IFUlAfRDSkW5PWq9U86QB01LroVxKq/jf5h5Bo=) 2: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: 3gsgdaMq9Jj1/PX8R0V/r0v44RenatE6Kq23gLzdu68=) 3: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: uOrrnMFrPoXL03YICCzOHjByECp/J3X4Q9+yuwlgUIA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a8:2b:96:59:26:d4:57:0d:7e:e3:b0:7e:75:8a:53:18:b6:a3:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B Validity Not Before: Jun 16 16:59:51 2026 GMT Not After : Jun 17 20:15:51 2026 GMT Subject: CN=1A33611F55192FC1BDFA5BF2F8F9C74623917DBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:03:37:cf:08:91:e2:02:4c:c7:65:ab:8a:af: 05:73:14:d9:aa:c5:59:8e:81:cf:a7:0a:1b:1b:28: 29:1e:ec:48:9f:d7:cf:47:d4:ea:d9:d9:86:51:b1: 12:08:23:0d:13:18:03:7a:50:b0:ac:15:50:3a:36: a7:54:dc:ca:76:8b:a7:14:c9:d9:bd:b1:6f:00:59: 19:f1:e5:01:34:06:9f:a0:a9:4c:d7:60:4b:cc:df: 67:5e:1c:0b:51:73:46:7b:3f:8b:bc:3c:77:30:94: a6:cc:cf:93:e4:6a:69:30:70:8a:3d:ff:7c:11:91: 82:be:fc:85:2d:7c:df:16:8d:d9:53:c2:62:a1:0e: 9a:58:da:aa:fd:c1:1d:b7:bb:4f:84:28:88:01:08: e5:51:6d:89:1a:f2:4e:9d:99:16:59:f6:fa:cc:d2: 21:c6:b2:e7:96:ff:38:30:f5:5d:25:d6:e9:32:a8: 08:9c:d8:ad:79:f1:67:5c:2f:a2:d3:20:c8:d3:0a: d9:ce:e9:a6:b5:8a:c9:52:9f:d2:7a:67:f5:63:e2: de:10:fd:fd:dc:73:92:70:0a:c2:b2:c0:a5:80:b6: 1a:d3:a9:c9:a2:7a:9f:36:d2:bd:46:96:c6:3e:3c: 87:cd:a4:67:d2:25:80:59:ac:13:b9:36:47:44:14: d1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:33:61:1F:55:19:2F:C1:BD:FA:5B:F2:F8:F9:C7:46:23:91:7D:BF X509v3 Authority Key Identifier: keyid:4C:8D:B8:E3:4E:AF:27:84:6F:22:F0:E5:6C:A7:6B:56:1E:1F:BE:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:64:ca:d5:5d:cd:3a:d7:8e:49:6c:ba:2d:dc:b8:f3:c5:96: 1b:1e:29:e4:1f:18:7a:ca:39:26:ce:1f:0a:9a:00:9b:c0:5c: 5d:25:f7:87:06:5f:50:0f:dc:e6:df:3d:5b:3f:71:6f:8d:89: 22:41:b1:eb:2c:c9:4d:0f:81:05:72:22:87:c7:23:97:7f:b9: 5a:d5:a3:84:03:b6:84:9d:33:1a:a3:73:69:bb:b4:9e:d6:2f: ab:71:b9:71:6a:18:c0:fa:fb:41:92:dd:4b:ef:60:80:3c:00: 20:a5:ce:22:d1:f5:a7:d2:e4:58:e9:a8:40:7a:0a:f6:e2:44: 13:be:96:19:05:72:38:97:49:6a:39:83:75:17:a9:b0:91:b4: 6c:aa:28:6b:89:71:f2:09:e1:b7:4a:2d:4a:dc:09:e8:54:6f: c7:2f:d9:66:83:9b:74:a4:de:3a:d3:48:4e:4c:df:4e:af:4f: 86:16:9f:99:85:a6:fe:0d:bd:df:9c:fa:dd:c1:e5:1e:ab:34: dd:e7:57:7b:82:f1:e8:f2:c0:1e:30:09:da:32:67:a0:9b:06: c6:6a:1a:29:42:27:c0:19:30:ae:8f:eb:3b:a9:26:08:3d:63: c9:87:13:44:29:b0:03:f3:03:3b:1b:80:ad:f0:bd:3e:ef:e1: 65:5e:e3:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYKgrllkm1FcNfuOwfnWKUxi2o1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4REI4RTM0RUFGMjc4NDZGMjJGMEU1NkNBNzZCNTYx RTFGQkUwQjAeFw0yNjA2MTYxNjU5NTFaFw0yNjA2MTcyMDE1NTFaMDMxMTAvBgNV BAMTKDFBMzM2MTFGNTUxOTJGQzFCREZBNUJGMkY4RjlDNzQ2MjM5MTdEQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkAzfPCJHiAkzHZauKrwVzFNmq xVmOgc+nChsbKCke7Eif189H1OrZ2YZRsRIIIw0TGAN6ULCsFVA6NqdU3Mp2i6cU ydm9sW8AWRnx5QE0Bp+gqUzXYEvM32deHAtRc0Z7P4u8PHcwlKbMz5PkamkwcIo9 /3wRkYK+/IUtfN8WjdlTwmKhDppY2qr9wR23u0+EKIgBCOVRbYka8k6dmRZZ9vrM 0iHGsueW/zgw9V0l1ukyqAic2K158WdcL6LTIMjTCtnO6aa1islSn9J6Z/Vj4t4Q /f3cc5JwCsKywKWAthrTqcmiep820r1GlsY+PIfNpGfSJYBZrBO5NkdEFNHLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGjNhH1UZL8G9+lvy+PnHRiORfb8wHwYDVR0j BBgwFoAUTI24406vJ4RvIvDlbKdrVh4fvgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM3M2JjNjEtYzVmOS00MTU5LTk4YmMtYTA1MzBiNGRkOGI0LzAvNEM4REI4RTM0 RUFGMjc4NDZGMjJGMEU1NkNBNzZCNTYxRTFGQkUwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzhEQjhFMzRFQUYyNzg0NkYyMkYwRTU2Q0E3NkI1NjFFMUZC RTBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvNEM4REI4RTM0RUFGMjc4NDZGMjJGMEU1NkNBNzZC NTYxRTFGQkUwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1kytVdzTrXjklsui3cuPPFlhseKeQfGHrK OSbOHwqaAJvAXF0l94cGX1AP3ObfPVs/cW+NiSJBsessyU0PgQVyIofHI5d/uVrV o4QDtoSdMxqjc2m7tJ7WL6txuXFqGMD6+0GS3UvvYIA8ACClziLR9afS5FjpqEB6 CvbiRBO+lhkFcjiXSWo5g3UXqbCRtGyqKGuJcfIJ4bdKLUrcCehUb8cv2WaDm3Sk 3jrTSE5M306vT4YWn5mFpv4Nvd+c+t3B5R6rNN3nV3uC8ejywB4wCdoyZ6CbBsZq GilCJ8AZMK6P6zupJgg9Y8mHE0QpsAPzAzsbgK3wvT7v4WVe4xw= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:14 2026 by rpki-client