$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft File: 4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft (raw, json) Hash identifier: nWHkcz7PwTezQ/oKLmILQ2apXrEKb8baI/qvLrd2q80= Subject key identifier: A0:C2:13:74:25:1F:E7:C8:AB:0A:8B:3C:89:BF:DC:47:69:D4:ED:0F Authority key identifier: 4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE Certificate issuer: /CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Certificate serial: 094644638BD0130423BBE519FBEEF2B2EFFA0DF3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:25:58 +0000 Manifest this update: Tue 02 Jun 2026 21:20:58 +0000 Manifest next update: Wed 03 Jun 2026 23:30:58 +0000 Files and hashes: 1: 3130332e3232342e36352e302f32342d3234203d3e203539313538.roa (hash: h0Ywdp2xV/0uaBG2V+ZPA5ElWunEb3BnR0JL9D5MtcM=) 2: 4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl (hash: kXeZyums1XqdENASrejxUCvUhuk3LB2SNKP9ZC7im2Q=) 3: 3130332e3232342e36362e302f32342d3234203d3e203539313538.roa (hash: CaktXeTtnkylUI+n1xZGKMIR5SWqXLjJULrGhcPeRfc=) 4: 3130332e3232342e36372e302f32342d3234203d3e203539313538.roa (hash: Aw8k55kVz/A5ACNLxhHkCsixHFEWcXHRzRLrIEuRqgk=) 5: 3130332e3232342e36342e302f32342d3234203d3e203539313538.roa (hash: vQnWFglYbzJwVQsCkKEdFaQ62I0WzkhSOu2hoX2jL1c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 23:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:46:44:63:8b:d0:13:04:23:bb:e5:19:fb:ee:f2:b2:ef:fa:0d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Validity Not Before: Jun 2 21:20:58 2026 GMT Not After : Jun 3 23:30:58 2026 GMT Subject: CN=A0C21374251FE7C8AB0A8B3C89BFDC4769D4ED0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:e7:28:b6:bb:be:ab:26:ab:13:b2:ef:9c: d0:d1:e8:fc:a8:0d:2f:d1:21:92:a7:4d:de:9a:2a: bb:f6:c8:95:eb:ec:8b:eb:6b:21:77:d1:5f:66:86: 16:03:f0:f4:aa:79:65:f3:97:10:c6:87:8a:d1:82: 8a:9f:53:3e:35:1a:d4:95:e8:aa:4a:20:a5:80:05: c2:2d:56:ca:0e:a2:e1:cb:bc:da:0c:e8:f7:fb:30: 73:37:85:ce:40:ba:89:1c:fd:12:68:c3:6f:60:31: d7:52:9e:0f:9d:b7:cb:68:4d:b2:c7:ee:34:56:0e: d8:25:a2:09:63:a9:40:b3:d4:7a:e2:8c:1c:dd:74: 48:5b:ce:3f:42:c4:71:e5:68:8c:08:4d:2d:00:fc: e9:12:42:b9:33:f3:c8:e2:9a:42:b7:76:3f:f9:e8: cc:ec:dc:ff:f6:15:b4:9e:aa:6b:17:84:74:d1:b4: 24:dc:eb:2a:ae:28:2f:2b:7b:63:44:84:cc:a3:c8: 7f:bd:d1:c1:1b:e9:01:5a:2b:e4:7f:2c:e2:64:90: f1:ef:36:c4:a4:98:d9:62:4d:35:fd:0e:fb:0c:94: 7e:31:68:53:a4:fc:bd:8c:b9:11:60:ee:d9:02:02: 5a:df:05:93:d9:6b:f2:ff:10:6c:dd:ca:47:6b:88: a6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C2:13:74:25:1F:E7:C8:AB:0A:8B:3C:89:BF:DC:47:69:D4:ED:0F X509v3 Authority Key Identifier: keyid:4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:4b:62:27:e4:ca:b5:f1:c2:3b:11:34:85:f3:c9:7d:b7:10: 5b:b7:36:e1:b9:60:9b:e2:0c:52:e4:fa:9e:11:34:5c:94:8f: ca:f5:33:14:97:e0:bf:56:54:92:aa:ba:d1:19:94:a4:0f:9d: 0f:99:f6:65:69:6d:b5:a1:77:82:83:74:91:c1:26:ba:8f:80: 0e:9b:f1:80:2e:6d:86:6a:c3:fa:5e:00:58:6b:ac:a4:52:ff: f1:dd:da:9b:dc:48:d6:de:63:a4:3b:8d:e0:21:f9:80:d1:d5: 8e:6a:60:b3:74:2d:99:70:ee:46:f0:a8:70:62:83:69:3f:11: 64:49:47:8b:2f:78:4d:97:6a:17:ff:ed:9e:1b:54:1e:db:a2: c4:4a:35:b4:05:c8:5c:01:2f:b9:cd:02:25:2c:8b:aa:38:59: 91:3e:cf:db:0a:fa:4d:84:25:3a:40:39:ab:c7:8e:e1:61:e6: 1a:60:ed:27:61:59:e8:d1:b0:0d:4d:df:f0:06:e3:04:73:69: a8:d9:32:5f:1d:43:83:59:dc:0e:b7:23:09:42:e7:70:d2:5e: ef:0b:3e:10:6a:c4:da:df:e8:f4:a5:ea:bc:e8:47:20:6b:c5: 07:1b:90:0d:bc:53:5d:38:29:9c:a8:82:02:a8:a6:ce:ea:a6: 43:f0:c1:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCUZEY4vQEwQju+UZ++7ysu/6DfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNG Q0Q5QThBRTAeFw0yNjA2MDIyMTIwNThaFw0yNjA2MDMyMzMwNThaMDMxMTAvBgNV BAMTKEEwQzIxMzc0MjUxRkU3QzhBQjBBOEIzQzg5QkZEQzQ3NjlENEVEMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVc+cotru+qyarE7LvnNDR6Pyo DS/RIZKnTd6aKrv2yJXr7IvrayF30V9mhhYD8PSqeWXzlxDGh4rRgoqfUz41GtSV 6KpKIKWABcItVsoOouHLvNoM6Pf7MHM3hc5Auokc/RJow29gMddSng+dt8toTbLH 7jRWDtglogljqUCz1HrijBzddEhbzj9CxHHlaIwITS0A/OkSQrkz88jimkK3dj/5 6Mzs3P/2FbSeqmsXhHTRtCTc6yquKC8re2NEhMyjyH+90cEb6QFaK+R/LOJkkPHv NsSkmNliTTX9DvsMlH4xaFOk/L2MuRFg7tkCAlrfBZPZa/L/EGzdykdriKavAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoMITdCUf58irCos8ib/cR2nU7Q8wHwYDVR0j BBgwFoAUTL6OBwyTDnsCvlZXxVKObPzZqK4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4ZDU0YWUtODcwZC00MzQ4LWFiNTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcw QzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNGQ0Q5QThBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0JFOEUwNzBDOTMwRTdCMDJCRTU2NTdDNTUyOEU2Q0ZDRDlB OEFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE4ZDU0YWUtODcwZC00MzQ4LWFi NTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhF NkNGQ0Q5QThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNLYifkyrXxwjsRNIXzyX23EFu3NuG5YJvi DFLk+p4RNFyUj8r1MxSX4L9WVJKqutEZlKQPnQ+Z9mVpbbWhd4KDdJHBJrqPgA6b 8YAubYZqw/peAFhrrKRS//Hd2pvcSNbeY6Q7jeAh+YDR1Y5qYLN0LZlw7kbwqHBi g2k/EWRJR4sveE2Xahf/7Z4bVB7bosRKNbQFyFwBL7nNAiUsi6o4WZE+z9sK+k2E JTpAOavHjuFh5hpg7SdhWejRsA1N3/AG4wRzaajZMl8dQ4NZ3A63IwlC53DSXu8L PhBqxNrf6PSl6rzoRyBrxQcbkA28U104KZyoggKops7qpkPwwVE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:25 2026 by rpki-client