$ rpki-client -vvf rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft File: 4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft (raw, json) Hash identifier: QNiZKqjLex7Lg2MyP4/OUEbwQOChE0KyDdNZV/D+ygk= Subject key identifier: 95:C3:33:F6:4B:6E:A2:1F:B5:33:C7:F7:53:CF:D3:3A:43:9F:35:4A Authority key identifier: 4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83 Certificate issuer: /CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83 Certificate serial: 0F5A8701BE23B54868B2D1AD7773CBC6D5ACDB46 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:05:38 +0000 Manifest this update: Tue 02 Jun 2026 17:00:38 +0000 Manifest next update: Wed 03 Jun 2026 19:01:38 +0000 Files and hashes: 1: 3130332e33302e3232312e302f32342d3234203d3e203338313438.roa (hash: 4Qok18i+EI2L8O6uVAPOVAbbB1P+8P/IPIRW3fo/nPM=) 2: 3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (hash: 4wluMrlK+jd2rPJTz82Wk6jGjGeMH7puimCIfaMcuQc=) 3: 4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl (hash: EHb7zOkdwN/klb0tNVqehySPVoWM8qUz4JUp2TxyyhA=) 4: 3132322e3230302e3134342e302f32312d3234203d3e203338313438.roa (hash: wZnkGHXuoZIhhXDMd29VyKe8jWbDQIfBiqevRGFYhXw=) 5: 3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (hash: JJjFiNRoaXtW7r6WlFCed+2DZ0XR/8IciP9txj6h+7U=) 6: 3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (hash: FAVDk3FaWOdSpOkw9ME+3ZGQ0KQHtVqOC+nSGAGC2Kw=) 7: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (hash: cgIEuYKpgRxefyDoprlhU36lSQZoW3T5mu05arwSfsg=) 8: 3130332e33302e3232332e302f32342d3234203d3e203338313438.roa (hash: qdqJ7c5Hmo5/x5QxaNzAn2E9rlL9+lJv31VY+Z/Gpyo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:5a:87:01:be:23:b5:48:68:b2:d1:ad:77:73:cb:c6:d5:ac:db:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83 Validity Not Before: Jun 2 17:00:38 2026 GMT Not After : Jun 3 19:01:38 2026 GMT Subject: CN=95C333F64B6EA21FB533C7F753CFD33A439F354A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:15:aa:0e:5e:7b:55:b0:19:1d:37:a5:83:c0: e5:39:25:df:8a:21:ca:35:14:a3:94:be:5f:f3:4e: a8:8f:37:bc:25:22:3b:96:08:f4:2b:39:c5:f2:16: a5:24:eb:88:5e:7e:17:ce:b3:83:08:da:e5:06:26: fd:e2:e5:cb:fa:2b:fe:1e:f1:29:12:72:fc:ac:48: 48:a5:86:2e:ef:cb:dc:4f:0d:63:98:0c:bf:b3:62: 98:36:c2:3d:4d:14:38:8e:d6:95:58:ae:e6:35:4a: 25:fd:09:5b:8a:68:7d:2c:c1:89:32:6e:68:9d:41: 18:11:7b:c8:b8:b7:15:86:04:e3:87:31:cd:66:72: 16:87:5c:63:7f:ba:62:df:29:ba:89:93:74:98:b8: 8a:1a:3e:83:30:96:44:38:ca:f1:03:8b:cb:9f:71: 75:d8:e0:6f:c2:d3:64:fb:54:bd:bf:9a:51:88:65: 38:d3:91:b2:3f:eb:0b:f3:3a:93:f4:43:0d:28:9d: f6:99:63:92:be:f9:79:cd:6b:26:52:a4:a5:f8:78: f3:f7:4e:6c:e7:eb:9d:5e:ce:ba:90:89:3f:5b:61: e3:93:06:e1:e0:a4:c3:07:b8:24:fc:df:c4:8a:08: f8:4d:92:86:b0:d7:d1:c8:b2:4f:06:d2:b8:23:f5: 17:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C3:33:F6:4B:6E:A2:1F:B5:33:C7:F7:53:CF:D3:3A:43:9F:35:4A X509v3 Authority Key Identifier: keyid:4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b1:1f:11:b9:9b:3f:f1:d3:07:c0:9f:45:d6:d2:83:75:52: 43:d4:8d:b9:8e:3c:6d:1a:92:f6:50:ba:b2:ab:8b:c0:d6:b9: 56:6a:c8:86:11:50:a5:7d:4b:c2:1f:08:6b:71:35:98:91:e8: 01:92:73:55:da:02:47:b8:08:1b:05:c7:96:83:63:07:fa:c9: 06:f8:97:43:11:d0:82:bf:aa:68:56:23:11:e0:3a:6e:7a:d3: ec:b3:76:a2:64:41:f3:f9:64:7c:db:bd:86:29:ba:0a:51:30: 18:73:ff:c4:40:98:74:61:41:f9:74:0f:83:41:b1:74:54:78: ea:1a:cc:b0:62:a9:6b:0d:6e:4e:4e:7c:31:0a:7f:96:96:eb: 00:05:6f:99:e5:55:ba:7b:dc:ba:42:0c:4f:27:f7:26:7d:51: aa:e3:8e:5a:c1:69:7f:92:88:ac:16:b1:0b:51:4e:ea:d9:5f: e4:54:f8:1e:87:a9:03:8c:7a:06:0f:4f:2c:b4:0a:f4:67:97: fd:2d:6c:fd:3e:62:3f:b9:a2:9e:fe:66:2c:4c:5b:e4:fd:ea: a9:ea:bd:d1:77:45:20:de:8c:fa:69:66:20:76:19:da:29:76: ba:dc:9e:2b:79:5a:ab:d1:82:f3:65:ad:ed:c6:c5:9b:ba:36: 7a:cb:18:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD1qHAb4jtUhostGtd3PLxtWs20YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEOUM0Q0I2MjQwODFDRUM0Nzc0OEEwQUI2N0JFMjdC Q0RGOEI4MzAeFw0yNjA2MDIxNzAwMzhaFw0yNjA2MDMxOTAxMzhaMDMxMTAvBgNV BAMTKDk1QzMzM0Y2NEI2RUEyMUZCNTMzQzdGNzUzQ0ZEMzNBNDM5RjM1NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbFaoOXntVsBkdN6WDwOU5Jd+K Ico1FKOUvl/zTqiPN7wlIjuWCPQrOcXyFqUk64hefhfOs4MI2uUGJv3i5cv6K/4e 8SkScvysSEilhi7vy9xPDWOYDL+zYpg2wj1NFDiO1pVYruY1SiX9CVuKaH0swYky bmidQRgRe8i4txWGBOOHMc1mchaHXGN/umLfKbqJk3SYuIoaPoMwlkQ4yvEDi8uf cXXY4G/C02T7VL2/mlGIZTjTkbI/6wvzOpP0Qw0onfaZY5K++XnNayZSpKX4ePP3 Tmzn651ezrqQiT9bYeOTBuHgpMMHuCT838SKCPhNkoaw19HIsk8G0rgj9RdJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlcMz9ktuoh+1M8f3U8/TOkOfNUowHwYDVR0j BBgwFoAUT9nEy2JAgc7Ed0igq2e+J7zfi4MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTU5MmMyNzQtMTFkYi00MTI3LWJhYmItYWVhZTk5Mjg0YjAwLzAvNEZEOUM0Q0I2 MjQwODFDRUM0Nzc0OEEwQUI2N0JFMjdCQ0RGOEI4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkQ5QzRDQjYyNDA4MUNFQzQ3NzQ4QTBBQjY3QkUyN0JDREY4 QjgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTU5MmMyNzQtMTFkYi00MTI3LWJh YmItYWVhZTk5Mjg0YjAwLzAvNEZEOUM0Q0I2MjQwODFDRUM0Nzc0OEEwQUI2N0JF MjdCQ0RGOEI4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6xHxG5mz/x0wfAn0XW0oN1UkPUjbmOPG0a kvZQurKri8DWuVZqyIYRUKV9S8IfCGtxNZiR6AGSc1XaAke4CBsFx5aDYwf6yQb4 l0MR0IK/qmhWIxHgOm560+yzdqJkQfP5ZHzbvYYpugpRMBhz/8RAmHRhQfl0D4NB sXRUeOoazLBiqWsNbk5OfDEKf5aW6wAFb5nlVbp73LpCDE8n9yZ9UarjjlrBaX+S iKwWsQtRTurZX+RU+B6HqQOMegYPTyy0CvRnl/0tbP0+Yj+5op7+ZixMW+T96qnq vdF3RSDejPppZiB2Gdopdrrcnit5WqvRgvNlre3GxZu6NnrLGJk= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:41 2026 by rpki-client