$ rpki-client -vvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft File: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft (raw, json) Hash identifier: Yb6vxkEC2QZ2gj9zQtWAPRtK+sTouQyWOUC+uezLIVo= Subject key identifier: 88:E0:DE:6F:FD:CA:C3:AF:13:1B:2A:BC:EB:2E:A9:83:43:DE:84:52 Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 7DAEC86FD123D02A8C50B4A0A0F81360436EAA4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:20:56 +0000 Manifest this update: Tue 02 Jun 2026 21:15:56 +0000 Manifest next update: Thu 04 Jun 2026 00:39:56 +0000 Files and hashes: 1: 323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa (hash: Q+ngoFu885sNrsbrQRL3AeApBJ1Eb5cBUZ33V1u7hNU=) 2: 323430313a626534303a3a2f33322d3438203d3e20313336383431.roa (hash: pUzTSX764GWtHHO9jcVOxnVCQQd9HOcC1kC/yiGkLr8=) 3: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl (hash: AB9mmwaJ5iDG6JA9bEH/Jch4T/1lmRFa2O+qsY+bBcA=) 4: 3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa (hash: 1SNuWHPKyjm9i33KVxLucA1qoW0DruITzpVEbkOYzp4=) 5: 3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (hash: z5zbKQho3avhtYmaIotiPUiQQJ/mO8YtqexQXDW4gG0=) 6: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (hash: lcj9Lo8ozccThBUG7wqDK1apaR2k1E0ODhzzBgFVW1M=) 7: 3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa (hash: 2ukK53+fe7S5M2zaDBH1WtDgIsIsj4+Dshs68GBh99o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ae:c8:6f:d1:23:d0:2a:8c:50:b4:a0:a0:f8:13:60:43:6e:aa:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: Jun 2 21:15:56 2026 GMT Not After : Jun 4 00:39:56 2026 GMT Subject: CN=88E0DE6FFDCAC3AF131B2ABCEB2EA98343DE8452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:15:35:98:5f:f1:08:9e:ba:b4:e5:55:db: d2:b4:9c:16:d8:18:63:bf:05:f1:85:8f:2b:c3:50: 0e:9d:d1:b2:13:41:6c:d6:55:6c:45:c6:f2:3b:de: 22:0c:a5:7a:6d:92:ef:22:85:78:39:5c:29:93:43: 73:2c:bb:89:f9:74:21:ce:be:a3:3c:bd:3e:74:98: 15:05:6c:0f:bb:ee:29:7e:61:f8:8f:63:f3:09:d1: 68:b4:7e:84:4f:57:a5:4a:7d:68:1f:a9:ca:e0:26: 61:ab:60:7e:00:f2:59:9d:63:5f:6e:ab:2e:16:f6: 3c:45:ca:6a:54:d5:c6:21:a7:d8:ea:91:99:8b:f3: 79:c0:cc:31:d5:ce:42:3e:0c:66:2a:a4:8e:e5:da: 42:a7:63:a1:ce:47:65:8c:1b:dd:79:94:0d:9f:3b: b1:96:6e:d1:4b:3f:bf:8f:4c:46:cc:f3:4d:81:36: a7:ff:2f:2d:f0:d8:b2:59:d7:71:f4:a1:d2:c7:0e: b0:bf:c7:b2:6a:4c:4e:bc:56:a4:b1:0d:78:fa:bb: 70:d8:01:f0:13:2e:f4:b7:17:ae:db:4c:1e:8d:cf: bf:7e:03:b0:64:68:a9:1c:65:d3:d1:25:32:6c:56: 53:79:f0:48:23:e2:b2:7a:4a:85:df:bd:0a:05:22: 91:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E0:DE:6F:FD:CA:C3:AF:13:1B:2A:BC:EB:2E:A9:83:43:DE:84:52 X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:7e:35:57:51:a5:3e:a8:19:6c:80:c0:34:a9:09:e9:d7:59: ce:94:35:a4:5b:03:19:56:69:cb:93:a7:c4:76:22:1b:41:d3: 29:74:d3:a2:af:4c:7c:b1:2f:c2:9a:6d:f2:2d:bc:32:3f:09: a2:62:9c:2e:7c:82:47:62:d2:2b:cb:31:8f:be:76:c6:35:d2: cd:9e:79:d5:ff:98:2a:73:4c:a5:20:b6:27:b9:23:19:f4:95: 80:d9:f9:d5:52:98:a8:3b:e3:fc:1a:e8:2e:45:06:99:c8:41: aa:36:54:51:91:d9:f0:da:d8:10:17:b1:05:10:f2:5e:27:be: 19:d5:eb:54:b7:4c:7c:b5:2d:af:86:d6:18:ca:46:03:d9:02: b0:db:95:12:bf:5e:ed:29:a1:09:9a:60:3c:b1:80:fb:e0:04: e6:04:e3:49:6e:80:a1:81:2c:62:bd:33:f8:43:00:e7:af:c9: 02:ee:61:be:33:d0:c4:9e:2f:05:31:a8:ae:0f:01:df:91:68: cb:bf:34:23:ec:ef:3a:46:11:eb:53:3a:5d:64:95:fe:1d:0b: e9:04:39:28:67:5f:18:de:49:64:f5:d2:0f:6e:0a:0b:3b:e6: e1:0c:6e:be:ab:99:86:7e:a8:61:64:eb:c3:be:b8:e1:47:05: f5:f0:b0:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfa7Ib9Ej0CqMULSgoPgTYENuqk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVF NTdENTI0NDAeFw0yNjA2MDIyMTE1NTZaFw0yNjA2MDQwMDM5NTZaMDMxMTAvBgNV BAMTKDg4RTBERTZGRkRDQUMzQUYxMzFCMkFCQ0VCMkVBOTgzNDNERTg0NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmXhU1mF/xCJ66tOVV29K0nBbY GGO/BfGFjyvDUA6d0bITQWzWVWxFxvI73iIMpXptku8ihXg5XCmTQ3Msu4n5dCHO vqM8vT50mBUFbA+77il+YfiPY/MJ0Wi0foRPV6VKfWgfqcrgJmGrYH4A8lmdY19u qy4W9jxFympU1cYhp9jqkZmL83nAzDHVzkI+DGYqpI7l2kKnY6HOR2WMG915lA2f O7GWbtFLP7+PTEbM802BNqf/Ly3w2LJZ13H0odLHDrC/x7JqTE68VqSxDXj6u3DY AfATLvS3F67bTB6Nz79+A7BkaKkcZdPRJTJsVlN58Egj4rJ6SoXfvQoFIpErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiODeb/3Kw68TGyq86y6pg0PehFIwHwYDVR0j BBgwFoAUTaEdWvXxeucWUZ+EomPhpeV9UkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDczMDRiODMtMzBhYS00YmJmLTlmZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFG NUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVFNTdENTI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1 MjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDczMDRiODMtMzBhYS00YmJmLTlm ZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0Ux QTVFNTdENTI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9+NVdRpT6oGWyAwDSpCenXWc6UNaRbAxlW acuTp8R2IhtB0yl006KvTHyxL8KabfItvDI/CaJinC58gkdi0ivLMY++dsY10s2e edX/mCpzTKUgtie5Ixn0lYDZ+dVSmKg74/wa6C5FBpnIQao2VFGR2fDa2BAXsQUQ 8l4nvhnV61S3THy1La+G1hjKRgPZArDblRK/Xu0poQmaYDyxgPvgBOYE40lugKGB LGK9M/hDAOevyQLuYb4z0MSeLwUxqK4PAd+RaMu/NCPs7zpGEetTOl1klf4dC+kE OShnXxjeSWT10g9uCgs75uEMbr6rmYZ+qGFk68O+uOFHBfXwsJ0= -----END CERTIFICATE-----Generated at Wed Jun 3 03:28:24 2026 by rpki-client