$ rpki-client -vvf rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft File: 4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft (raw, json) Hash identifier: bU5Izgx3lak4H3Bn8nBZI20uPoeAJFK4B3EXOX/86JM= Subject key identifier: 44:DF:DD:D8:8C:7B:A7:B3:FC:D3:6E:BA:52:F9:D5:06:A9:15:87:F6 Authority key identifier: 4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD Certificate issuer: /CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Certificate serial: 4543B137CE04BA00AFE78FDBDD46A071FFCCB4B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:36:56 +0000 Manifest this update: Tue 02 Jun 2026 09:31:56 +0000 Manifest next update: Wed 03 Jun 2026 10:10:56 +0000 Files and hashes: 1: 4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl (hash: vRj4zW1445R3YRfH9i7w0rm9lxvV6qo595QKDOUQKwo=) 2: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: ZfYq00HTDjpvUdw6nAEEEqjvY8Q+YEiON1rQ+odVxcw=) 3: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: OQGBTyYct40Pw4G0aqEIxJAdvOkNRB0tfWNHiKyDkc0=) 4: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: NuzvjRElosYE2UG7+eZwvvIrrAeM5hY3Zl0vPo88tlQ=) 5: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: JeyiXx4erlba3GA8MtFHqgBMpzij5IWYDmBP3qqgmrQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:43:b1:37:ce:04:ba:00:af:e7:8f:db:dd:46:a0:71:ff:cc:b4:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Validity Not Before: Jun 2 09:31:56 2026 GMT Not After : Jun 3 10:10:56 2026 GMT Subject: CN=44DFDDD88C7BA7B3FCD36EBA52F9D506A91587F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:7a:ed:b2:87:d1:33:f7:b6:49:ed:b2:ba: f5:f5:a6:53:01:80:f5:54:d0:70:03:9e:11:36:8b: 88:60:33:ec:9e:1e:6d:8a:ca:24:b2:83:b9:65:1e: ed:cd:88:61:db:c5:ae:7d:07:17:24:3c:cc:d9:b6: a6:cf:a9:38:19:a9:08:94:05:04:e1:3b:2a:29:7f: 8a:7e:68:49:04:92:36:fc:b1:34:48:e1:6b:2b:1e: 4d:23:46:f8:ee:03:2a:1f:06:40:3a:e9:aa:de:96: 3d:b6:02:09:9e:1a:10:6e:99:cc:39:f8:1a:3e:6f: 3a:8a:15:db:c1:68:6d:1e:4f:e6:07:cb:a6:0f:fe: 20:0c:9e:06:bc:11:ff:b6:b9:db:9d:54:63:ad:ff: 0d:1c:0b:3c:4f:ea:de:33:11:5c:71:ad:08:f6:74: 36:1f:b8:1f:fd:86:64:d5:56:6c:68:97:5b:ad:ec: fe:4f:8f:b9:9f:ce:3e:8b:ad:1a:73:80:17:3d:c3: 42:35:2c:47:5e:7d:d9:5b:dd:6a:78:f2:c1:83:e5: c2:4f:a2:04:ef:a4:ce:97:23:a9:fb:db:9a:61:27: bc:fd:90:66:cd:63:a3:60:ed:97:e8:0e:2a:ce:0a: c4:a3:af:3f:99:7a:4d:0a:83:d5:ca:4b:96:51:df: 19:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DF:DD:D8:8C:7B:A7:B3:FC:D3:6E:BA:52:F9:D5:06:A9:15:87:F6 X509v3 Authority Key Identifier: keyid:4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:7f:88:90:25:93:5e:bd:cd:6a:7d:e8:a4:e0:2a:d9:5e:99: 62:ef:4b:2d:eb:41:97:8f:87:9d:64:bd:55:9b:39:2e:81:0e: 7e:d2:a2:47:15:02:23:d4:70:36:1f:6f:11:d7:d1:8c:78:6f: 49:22:41:bf:99:4b:85:33:c4:b0:bb:08:cd:cd:78:ff:b0:50: b5:b3:b8:1d:51:47:62:f3:fc:43:8a:08:33:76:f0:4a:eb:f3: 8e:53:00:cb:65:bc:30:fd:81:61:98:8c:6b:ac:bd:cf:f8:74: 1c:f2:20:d4:a5:de:1e:42:d4:ef:46:1d:d3:75:72:48:98:7c: ae:7f:aa:51:3d:72:c9:89:ee:17:5c:58:44:40:8a:19:72:68: fd:af:a0:53:19:79:40:23:0b:9c:db:41:b3:59:8b:16:9b:e4: ca:dc:ce:18:83:86:b2:8c:fa:b4:e2:25:4a:83:75:ff:f9:d2: bd:4b:45:b9:01:4e:88:d3:32:7f:5f:40:89:62:cf:6d:84:e1: 31:36:3f:a8:5f:41:c6:9e:93:7e:e7:0c:ea:16:40:7f:37:14: 41:eb:1b:c6:f4:24:1a:24:47:70:d5:d9:97:9e:07:dd:ca:0b: d8:63:4f:28:f8:38:3f:8c:2c:23:56:65:1d:62:61:b9:d7:43: 7d:12:c1:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURUOxN84EugCv54/b3Uagcf/MtLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBQzRCMDVDNjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYz MkIzNkRDRDAeFw0yNjA2MDIwOTMxNTZaFw0yNjA2MDMxMDEwNTZaMDMxMTAvBgNV BAMTKDQ0REZEREQ4OEM3QkE3QjNGQ0QzNkVCQTUyRjlENTA2QTkxNTg3RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+tHrtsofRM/e2Se2yuvX1plMB gPVU0HADnhE2i4hgM+yeHm2KyiSyg7llHu3NiGHbxa59BxckPMzZtqbPqTgZqQiU BQThOyopf4p+aEkEkjb8sTRI4WsrHk0jRvjuAyofBkA66arelj22AgmeGhBumcw5 +Bo+bzqKFdvBaG0eT+YHy6YP/iAMnga8Ef+2ududVGOt/w0cCzxP6t4zEVxxrQj2 dDYfuB/9hmTVVmxol1ut7P5Pj7mfzj6LrRpzgBc9w0I1LEdefdlb3Wp48sGD5cJP ogTvpM6XI6n725phJ7z9kGbNY6Ng7ZfoDirOCsSjrz+Zek0Kg9XKS5ZR3xlJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURN/d2Ix7p7P80266UvnVBqkVh/YwHwYDVR0j BBgwFoAUTKxLBcYiClqRf+qRfTR2bzKzbc0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZTljOWYtZDYwNy00NDk3LWFmMjgtNGQyYjkwOTJkNWE2LzAvNENBQzRCMDVD NjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYzMkIzNkRDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0FDNEIwNUM2MjIwQTVBOTE3RkVBOTE3RDM0NzY2RjMyQjM2 RENELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvNENBQzRCMDVDNjIyMEE1QTkxN0ZFQTkxN0QzNDc2 NkYzMkIzNkRDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHB/iJAlk169zWp96KTgKtlemWLvSy3rQZeP h51kvVWbOS6BDn7SokcVAiPUcDYfbxHX0Yx4b0kiQb+ZS4UzxLC7CM3NeP+wULWz uB1RR2Lz/EOKCDN28Err845TAMtlvDD9gWGYjGusvc/4dBzyINSl3h5C1O9GHdN1 ckiYfK5/qlE9csmJ7hdcWERAihlyaP2voFMZeUAjC5zbQbNZixab5MrczhiDhrKM +rTiJUqDdf/50r1LRbkBTojTMn9fQIliz22E4TE2P6hfQcaek37nDOoWQH83FEHr G8b0JBokR3DV2ZeeB93KC9hjTyj4OD+MLCNWZR1iYbnXQ30Sweo= -----END CERTIFICATE-----Generated at Wed Jun 3 04:20:57 2026 by rpki-client