$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft File: 4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft (raw, json) Hash identifier: 5M9kuaq6Da6UppFPUiIH9R3LLkUxFr1L0k3+Q0r6aPk= Subject key identifier: 64:A2:DA:1E:45:2B:61:D4:DB:49:19:3F:B9:54:31:0D:69:61:58:6D Authority key identifier: 4A:CA:AD:0A:28:A6:50:A9:BD:65:B0:A6:E1:90:57:F4:7B:DB:94:2F Certificate issuer: /CN=4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F Certificate serial: 32E2814315E4B7CB7A821FAFCB07168365DB1973 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:38:19 +0000 Manifest this update: Tue 02 Jun 2026 22:33:19 +0000 Manifest next update: Thu 04 Jun 2026 02:22:19 +0000 Files and hashes: 1: 3130332e3136332e3234302e302f32342d3234203d3e20313431383837.roa (hash: 5Ssmm5grz5Tl3MtkZw82jMEzuLc9usDz6SBlVHYxN7U=) 2: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (hash: 7y1kc2AMpxx6evn2aDQV63VxhXeky0gM842l022bSD4=) 3: 4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl (hash: xyb1xKNWHTY/T757occ3nlM4TEvrFkx5PFvlMvDV88U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e2:81:43:15:e4:b7:cb:7a:82:1f:af:cb:07:16:83:65:db:19:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F Validity Not Before: Jun 2 22:33:19 2026 GMT Not After : Jun 4 02:22:19 2026 GMT Subject: CN=64A2DA1E452B61D4DB49193FB954310D6961586D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f9:bb:6b:a4:35:4c:b2:54:9f:b7:9a:60:a6: 7f:77:fa:7c:c1:5e:dc:47:7d:ba:5e:93:95:26:27: ab:5e:93:63:a7:38:69:09:86:fb:40:b3:35:af:51: fd:67:81:67:b5:47:31:9f:e7:4e:34:fa:ac:91:ab: e9:86:bf:f9:81:77:a7:f9:46:98:2a:29:d5:66:7a: ef:77:d6:72:7b:b6:bf:6a:18:22:ad:6c:ae:b3:4b: 6d:da:f1:e8:5e:c8:6f:4d:02:7b:51:82:c5:f9:8c: 36:cd:b4:f2:b2:e2:a8:9a:8d:65:78:67:c0:1d:9f: ba:95:70:2a:43:74:c9:18:b1:26:3b:b2:6c:a4:c0: 50:0b:17:c2:cd:7a:66:b7:73:42:fa:dd:ff:03:af: 12:b3:a7:d7:2c:84:9b:e3:29:59:ea:d5:a9:a1:0b: 63:f3:e4:c6:00:f7:f6:4b:17:e2:96:b1:89:a4:1e: e6:0b:09:07:39:79:33:01:61:c3:b3:9b:52:a9:88: 69:d1:36:00:bf:c1:88:2f:fb:f5:d4:e1:aa:b8:ff: 98:65:be:3e:19:95:f3:b7:f3:b0:19:d2:d9:dd:da: 0c:48:1b:13:c9:f7:1f:0b:e5:1a:07:87:8e:12:21: 03:ec:94:4a:36:a6:e9:64:4d:1e:fc:95:74:84:5e: bf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A2:DA:1E:45:2B:61:D4:DB:49:19:3F:B9:54:31:0D:69:61:58:6D X509v3 Authority Key Identifier: keyid:4A:CA:AD:0A:28:A6:50:A9:BD:65:B0:A6:E1:90:57:F4:7B:DB:94:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:a5:f0:46:70:d2:1b:97:96:62:15:bb:77:e7:5f:99:02:0e: 23:48:ac:b3:7e:6d:a7:ac:b4:d4:49:27:c3:bc:77:d2:c2:95: 4b:d9:b8:c2:04:ba:cd:e4:09:b1:c8:1d:30:d4:5d:32:1c:e7: ea:3e:4d:e8:86:81:bb:8c:01:58:80:ff:a6:8d:70:0e:c6:59: a0:c9:3e:84:31:ba:8e:27:bc:7f:9c:52:2d:31:45:13:65:36: 3d:93:57:23:42:26:35:5a:fc:d1:e4:b7:e0:ad:86:1a:45:b8: 47:67:aa:c8:cc:c7:0c:2a:93:23:ab:82:84:37:5b:40:6f:26: b5:ed:c9:15:fd:20:4a:fa:c1:68:15:95:b3:7e:80:a8:84:bb: fb:e9:97:b4:27:ad:a2:b1:92:07:f5:6b:c7:ca:f5:41:7b:0b: 3a:34:8e:63:9e:6f:9f:3c:54:82:23:d1:4a:99:ae:c6:78:a8: fa:12:1a:b9:d7:b9:ad:d6:c8:2d:b8:b8:ab:99:59:52:5f:68: 19:33:56:b3:e9:57:d4:c3:13:4e:fa:b7:c5:11:02:4a:63:b6: 4c:60:0f:f7:9b:7c:7a:ce:d3:b1:7d:02:d7:df:33:b6:81:07: 35:f6:0b:8b:79:df:65:51:14:76:64:90:ea:8a:83:10:ed:ed: 58:e8:92:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuKBQxXkt8t6gh+vywcWg2XbGXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDQUFEMEEyOEE2NTBBOUJENjVCMEE2RTE5MDU3RjQ3 QkRCOTQyRjAeFw0yNjA2MDIyMjMzMTlaFw0yNjA2MDQwMjIyMTlaMDMxMTAvBgNV BAMTKDY0QTJEQTFFNDUyQjYxRDREQjQ5MTkzRkI5NTQzMTBENjk2MTU4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY+btrpDVMslSft5pgpn93+nzB XtxHfbpek5UmJ6tek2OnOGkJhvtAszWvUf1ngWe1RzGf5040+qyRq+mGv/mBd6f5 RpgqKdVmeu931nJ7tr9qGCKtbK6zS23a8eheyG9NAntRgsX5jDbNtPKy4qiajWV4 Z8Adn7qVcCpDdMkYsSY7smykwFALF8LNema3c0L63f8DrxKzp9cshJvjKVnq1amh C2Pz5MYA9/ZLF+KWsYmkHuYLCQc5eTMBYcOzm1KpiGnRNgC/wYgv+/XU4aq4/5hl vj4ZlfO387AZ0tnd2gxIGxPJ9x8L5RoHh44SIQPslEo2pulkTR78lXSEXr+NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZKLaHkUrYdTbSRk/uVQxDWlhWG0wHwYDVR0j BBgwFoAUSsqtCiimUKm9ZbCm4ZBX9HvblC8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M1Yjc4NWQtODMwMy00NWM1LTlhNTgtZWMxMjg4NzQwODY2LzAvNEFDQUFEMEEy OEE2NTBBOUJENjVCMEE2RTE5MDU3RjQ3QkRCOTQyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUNBQUQwQTI4QTY1MEE5QkQ2NUIwQTZFMTkwNTdGNDdCREI5 NDJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvNEFDQUFEMEEyOEE2NTBBOUJENjVCMEE2RTE5MDU3 RjQ3QkRCOTQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWl8EZw0huXlmIVu3fnX5kCDiNIrLN+baes tNRJJ8O8d9LClUvZuMIEus3kCbHIHTDUXTIc5+o+TeiGgbuMAViA/6aNcA7GWaDJ PoQxuo4nvH+cUi0xRRNlNj2TVyNCJjVa/NHkt+CthhpFuEdnqsjMxwwqkyOrgoQ3 W0BvJrXtyRX9IEr6wWgVlbN+gKiEu/vpl7QnraKxkgf1a8fK9UF7Czo0jmOeb588 VIIj0UqZrsZ4qPoSGrnXua3WyC24uKuZWVJfaBkzVrPpV9TDE076t8URAkpjtkxg D/ebfHrO07F9AtffM7aBBzX2C4t532VRFHZkkOqKgxDt7VjokmY= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:30 2026 by rpki-client