$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft File: 4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft (raw, json) Hash identifier: CAZJEG3VioVOWPxaeGgMvVNUM8FiDeJWhyYfdZBlYiA= Subject key identifier: EE:FF:12:B4:0B:06:5A:3E:7C:5D:6D:34:CE:E5:D3:F9:EA:1D:4E:C2 Authority key identifier: 4F:9D:EF:EA:18:F9:7C:95:D8:6B:C7:B3:9D:B7:D8:00:C1:F1:92:0F Certificate issuer: /CN=4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F Certificate serial: 6E624C513F13990F37D4003183C7EDA4B6292AB5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:33:44 +0000 Manifest this update: Tue 02 Jun 2026 19:28:44 +0000 Manifest next update: Wed 03 Jun 2026 19:55:44 +0000 Files and hashes: 1: 4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl (hash: UQzxBlCc46PPzOZUrSBb1UNanxtXX7kpjwhBu1gVv6g=) 2: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: uBR3IGblPNZJ3jWpF0OXwKYD/CzwZlm+xMvRiWr2v+Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 19:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:62:4c:51:3f:13:99:0f:37:d4:00:31:83:c7:ed:a4:b6:29:2a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F Validity Not Before: Jun 2 19:28:44 2026 GMT Not After : Jun 3 19:55:44 2026 GMT Subject: CN=EEFF12B40B065A3E7C5D6D34CEE5D3F9EA1D4EC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:76:bf:27:7a:80:d6:e7:80:f3:3f:a2:91:b1: ed:8a:34:4b:80:e7:72:a7:26:ec:75:69:82:14:c7: f4:22:6d:d9:5d:87:54:cb:a8:16:e6:49:b1:0a:e1: 1c:45:21:87:c8:3d:26:99:a5:36:58:d1:b1:9f:39: 71:6b:a2:e1:8a:74:9b:08:bf:17:0a:0f:33:0f:fd: e0:31:13:84:2d:66:55:40:0d:f0:73:f0:d1:89:d4: 19:1c:3e:ba:2a:2a:d5:7f:dd:82:59:7a:ae:26:0c: c2:9b:67:a3:3d:0c:f8:f4:88:03:ee:1d:75:8e:78: b3:6c:ce:20:0c:00:fc:65:ac:72:1d:c0:a8:3e:f7: ff:58:57:08:d9:25:76:e3:cc:c7:98:c2:25:c4:ac: 7d:04:79:45:43:fd:c2:36:87:c2:b0:df:5c:b7:31: 18:cd:8b:2c:1a:80:77:fd:48:52:19:9b:10:07:a3: d0:c1:89:a6:29:43:2d:bd:6e:5a:5b:68:c7:d2:56: 49:c2:c6:8f:1f:9c:a5:39:71:18:29:2e:03:67:6e: be:09:e9:5b:e0:02:8f:d0:61:1f:bc:4f:bb:16:fa: b4:71:d0:27:e1:10:21:39:27:06:9e:84:20:0b:7a: d5:f9:77:96:32:6f:09:b3:06:ab:e7:b1:20:72:9c: 77:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FF:12:B4:0B:06:5A:3E:7C:5D:6D:34:CE:E5:D3:F9:EA:1D:4E:C2 X509v3 Authority Key Identifier: keyid:4F:9D:EF:EA:18:F9:7C:95:D8:6B:C7:B3:9D:B7:D8:00:C1:F1:92:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:a9:61:e9:30:b2:40:a0:09:f1:fe:15:bb:54:ac:d6:e5:77: 87:8b:eb:d3:45:1d:50:3e:0e:f1:39:4f:ce:d0:6e:93:62:73: 0c:c7:d4:05:2d:7b:dc:88:d6:b1:b7:20:48:2c:26:b7:b5:b4: 61:aa:aa:87:f7:43:27:91:2e:16:7b:1a:c5:eb:cb:4b:cb:e1: e8:fa:3b:4e:36:87:a1:06:e5:78:41:4e:74:5b:21:40:75:85: f2:3d:af:8c:57:db:dc:3a:c1:40:ef:c3:c9:6c:1b:1f:04:25: ce:e5:26:d3:e2:43:d8:7f:08:58:ef:45:5a:a1:00:a6:07:fa: 38:5b:cd:9b:95:b2:aa:38:ea:8a:ed:f1:09:0a:09:16:81:de: a9:86:29:bf:3d:9e:0f:28:6b:29:d3:8f:8b:61:18:9c:f9:1c: f4:78:1b:04:63:36:b1:85:67:7c:af:68:7e:02:0d:69:47:68: d9:79:d0:5e:c1:74:f0:40:22:72:51:5d:af:42:16:d8:bb:3b: 88:a1:37:82:e6:f3:7e:1c:dd:f3:bb:9b:58:f6:f6:89:49:bc: f3:1d:c8:ea:e9:53:db:4e:0e:96:52:7e:76:5b:29:46:c0:ed: 60:d6:eb:12:2f:39:78:06:a4:bd:56:3e:68:9e:aa:26:2e:de: e0:1f:d4:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbmJMUT8TmQ831AAxg8ftpLYpKrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY5REVGRUExOEY5N0M5NUQ4NkJDN0IzOURCN0Q4MDBD MUYxOTIwRjAeFw0yNjA2MDIxOTI4NDRaFw0yNjA2MDMxOTU1NDRaMDMxMTAvBgNV BAMTKEVFRkYxMkI0MEIwNjVBM0U3QzVENkQzNENFRTVEM0Y5RUExRDRFQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDndr8neoDW54DzP6KRse2KNEuA 53KnJux1aYIUx/Qibdldh1TLqBbmSbEK4RxFIYfIPSaZpTZY0bGfOXFrouGKdJsI vxcKDzMP/eAxE4QtZlVADfBz8NGJ1BkcProqKtV/3YJZeq4mDMKbZ6M9DPj0iAPu HXWOeLNsziAMAPxlrHIdwKg+9/9YVwjZJXbjzMeYwiXErH0EeUVD/cI2h8Kw31y3 MRjNiywagHf9SFIZmxAHo9DBiaYpQy29blpbaMfSVknCxo8fnKU5cRgpLgNnbr4J 6VvgAo/QYR+8T7sW+rRx0CfhECE5JwaehCALetX5d5YybwmzBqvnsSBynHfZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7v8StAsGWj58XW00zuXT+eodTsIwHwYDVR0j BBgwFoAUT53v6hj5fJXYa8eznbfYAMHxkg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE4ZjA0MzUtNGQzOC00N2VmLTg1MGYtNTFiYTQ2MTdmYjNkLzAvNEY5REVGRUEx OEY5N0M5NUQ4NkJDN0IzOURCN0Q4MDBDMUYxOTIwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RjlERUZFQTE4Rjk3Qzk1RDg2QkM3QjM5REI3RDgwMEMxRjE5 MjBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvNEY5REVGRUExOEY5N0M5NUQ4NkJDN0IzOURCN0Q4 MDBDMUYxOTIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOpYekwskCgCfH+FbtUrNbld4eL69NFHVA+ DvE5T87QbpNicwzH1AUte9yI1rG3IEgsJre1tGGqqof3QyeRLhZ7GsXry0vL4ej6 O042h6EG5XhBTnRbIUB1hfI9r4xX29w6wUDvw8lsGx8EJc7lJtPiQ9h/CFjvRVqh AKYH+jhbzZuVsqo46ort8QkKCRaB3qmGKb89ng8oaynTj4thGJz5HPR4GwRjNrGF Z3yvaH4CDWlHaNl50F7BdPBAInJRXa9CFti7O4ihN4Lm834c3fO7m1j29olJvPMd yOrpU9tODpZSfnZbKUbA7WDW6xIvOXgGpL1WPmieqiYu3uAf1Ho= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:10 2026 by rpki-client