$ rpki-client -vvf rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft File: 4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft (raw, json) Hash identifier: DmOcZMjGaW87BE1i8o3JrHHj5FfHON+IlldM742lWkM= Subject key identifier: 66:2B:25:9B:2D:85:58:41:D2:05:C6:66:EF:0F:7A:9D:42:28:A2:F7 Authority key identifier: 45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36 Certificate issuer: /CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36 Certificate serial: 49D9DAC32216FAC3D45F3C92C02076CC15167C79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 21:40:30 +0000 Manifest this update: Tue 16 Jun 2026 21:35:30 +0000 Manifest next update: Wed 17 Jun 2026 23:51:30 +0000 Files and hashes: 1: 4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl (hash: dawNeahnBHReYZhuOKferRoYJFAErdJLVCm4wT8Knos=) 2: 3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa (hash: P9vNVfY/gnSAC1gUwy4cPedcB+rYejwkV7mz34Jb55c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d9:da:c3:22:16:fa:c3:d4:5f:3c:92:c0:20:76:cc:15:16:7c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36 Validity Not Before: Jun 16 21:35:30 2026 GMT Not After : Jun 17 23:51:30 2026 GMT Subject: CN=662B259B2D855841D205C666EF0F7A9D4228A2F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a4:17:96:ea:49:21:98:f6:de:66:88:b1:05: ec:ce:34:01:8b:1d:2b:e7:8a:7d:bb:0a:66:39:06: c6:ca:91:64:76:9c:eb:1a:ec:a7:79:a5:d0:d8:e2: 0f:f2:71:06:4b:a0:74:dc:dc:13:f9:7f:ec:1c:2e: 6c:4e:2b:e0:81:40:13:57:c2:25:6c:73:e6:d4:93: bb:3b:b8:ae:a0:ce:83:bd:5b:8c:7c:de:7f:df:f6: a9:a9:ab:71:32:2e:85:b7:76:70:a5:0e:46:4a:1e: 2a:9b:de:bd:56:bb:1d:d3:01:f4:a9:cf:dd:91:35: d9:96:79:92:ca:14:76:be:c4:d0:2d:19:a2:c6:01: be:4a:22:82:a3:b2:a0:e2:cf:0d:b3:7c:d1:d0:c2: 2d:6d:50:97:d3:ae:e4:4d:78:4c:60:10:bf:c1:f0: c2:ee:ad:15:69:87:7c:eb:0a:07:80:59:1f:70:ea: f9:aa:e5:75:4e:b7:f0:2c:81:e2:1c:ce:4c:3e:a9: 4a:ac:f3:44:dd:61:0a:f6:a3:4a:d1:30:81:34:f4: db:9f:d5:d0:42:bd:26:96:db:2f:94:f0:d9:a6:bc: 05:ea:0a:47:40:c4:e6:00:a3:2a:1b:df:66:5e:78: 30:56:c5:ae:d2:25:55:9b:7e:7b:37:66:e4:36:15: ec:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2B:25:9B:2D:85:58:41:D2:05:C6:66:EF:0F:7A:9D:42:28:A2:F7 X509v3 Authority Key Identifier: keyid:45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:f5:5b:56:24:e0:c6:47:4f:18:6e:2d:c5:ce:5d:62:84:41: b9:89:48:d5:78:17:dd:f5:de:f0:1b:e3:02:d4:84:91:43:f3: b2:d7:0c:e3:39:b8:79:a3:f9:8b:ea:69:c8:9d:7a:c0:c2:02: 88:0e:ce:3d:01:05:96:d4:85:6f:56:6b:71:ea:89:8c:37:fe: 69:8a:a5:3a:b1:3e:44:98:de:10:ff:c2:0b:71:8c:7d:69:66: 9b:26:5c:73:19:04:12:a2:33:db:ab:ef:b4:f9:d2:19:b5:6b: c5:9b:32:a2:c6:85:f1:e5:a3:4e:11:af:7c:d5:39:32:78:9a: 10:a2:86:21:e4:bb:16:8c:4a:c9:a1:b7:ad:df:41:e4:4b:d1: 8f:df:e2:36:73:ca:bd:29:90:07:03:ad:67:28:48:03:02:b0: d9:3e:f3:2d:24:58:ca:14:72:b0:c0:d1:98:bd:2f:5b:6e:2f: 69:25:8c:f0:d2:3d:eb:54:f9:1e:19:15:37:6e:75:89:c8:95: 95:82:dc:c3:49:79:12:a9:b9:40:b3:ba:1f:6c:e3:73:e5:ca: c9:57:c8:2b:a4:22:5a:1b:33:3e:2e:c7:52:91:ea:be:7c:aa: 90:ed:eb:2f:21:04:49:86:21:11:8c:0b:73:76:b4:47:b6:d6: 30:e2:2a:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSdnawyIW+sPUXzySwCB2zBUWfHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzMkY4MDBBN0VCNUJDQjVEQjA1Njk5QzZEREFBN0Y5 NUZBRUMzNjAeFw0yNjA2MTYyMTM1MzBaFw0yNjA2MTcyMzUxMzBaMDMxMTAvBgNV BAMTKDY2MkIyNTlCMkQ4NTU4NDFEMjA1QzY2NkVGMEY3QTlENDIyOEEyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0pBeW6kkhmPbeZoixBezONAGL HSvnin27CmY5BsbKkWR2nOsa7Kd5pdDY4g/ycQZLoHTc3BP5f+wcLmxOK+CBQBNX wiVsc+bUk7s7uK6gzoO9W4x83n/f9qmpq3EyLoW3dnClDkZKHiqb3r1Wux3TAfSp z92RNdmWeZLKFHa+xNAtGaLGAb5KIoKjsqDizw2zfNHQwi1tUJfTruRNeExgEL/B 8MLurRVph3zrCgeAWR9w6vmq5XVOt/AsgeIczkw+qUqs80TdYQr2o0rRMIE09Nuf 1dBCvSaW2y+U8NmmvAXqCkdAxOYAoyob32ZeeDBWxa7SJVWbfns3ZuQ2Fey3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZislmy2FWEHSBcZm7w96nUIoovcwHwYDVR0j BBgwFoAURTL4AKfrW8tdsFaZxt2qf5X67DYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg0MjNiOGEtZmUyMi00M2FkLTk1MDctMWE5OWFiYmE3ZDk0LzAvNDUzMkY4MDBB N0VCNUJDQjVEQjA1Njk5QzZEREFBN0Y5NUZBRUMzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NTMyRjgwMEE3RUI1QkNCNURCMDU2OTlDNkREQUE3Rjk1RkFF QzM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg0MjNiOGEtZmUyMi00M2FkLTk1 MDctMWE5OWFiYmE3ZDk0LzAvNDUzMkY4MDBBN0VCNUJDQjVEQjA1Njk5QzZEREFB N0Y5NUZBRUMzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMz1W1Yk4MZHTxhuLcXOXWKEQbmJSNV4F931 3vAb4wLUhJFD87LXDOM5uHmj+YvqacidesDCAogOzj0BBZbUhW9Wa3HqiYw3/mmK pTqxPkSY3hD/wgtxjH1pZpsmXHMZBBKiM9ur77T50hm1a8WbMqLGhfHlo04Rr3zV OTJ4mhCihiHkuxaMSsmht63fQeRL0Y/f4jZzyr0pkAcDrWcoSAMCsNk+8y0kWMoU crDA0Zi9L1tuL2kljPDSPetU+R4ZFTdudYnIlZWC3MNJeRKpuUCzuh9s43PlyslX yCukIlobMz4ux1KR6r58qpDt6y8hBEmGIRGMC3N2tEe21jDiKqc= -----END CERTIFICATE-----Generated at Wed Jun 17 09:19:49 2026 by rpki-client