$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft File: 4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft (raw, json) Hash identifier: LBE5nfxx0/B9uFr3Pjgla58+Ti3TTnNoVgZ2x1fFxr0= Subject key identifier: 46:28:22:1A:CB:6E:5D:67:3E:61:4B:40:A9:4F:BF:D5:AE:36:40:9F Authority key identifier: 4E:74:77:DA:BC:79:30:FE:18:09:FE:CA:C0:EA:75:1E:02:71:CB:4D Certificate issuer: /CN=4E7477DABC7930FE1809FECAC0EA751E0271CB4D Certificate serial: 68E17DCC5960736438530D389BCA2C9320778071 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:15:43 +0000 Manifest this update: Tue 02 Jun 2026 21:10:43 +0000 Manifest next update: Wed 03 Jun 2026 22:52:43 +0000 Files and hashes: 1: 4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl (hash: x4xp4N4l0T1wvk41UP+5AJUqnqRShBwf09WkO4VOadQ=) 2: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: Zw4QmhGoJFSvupLpsnKhkJ+LH7pcQWGQYF42nA48zgM=) 3: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: 1TQlSvM9bM0BPJInGgS17LfSaiZ9EQP3P7+JjRlSEnE=) 4: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: 6Yw4zWSLXh3EP0vz7URtYM2sAyDkZxqfeg6Oy1ZSbCU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e1:7d:cc:59:60:73:64:38:53:0d:38:9b:ca:2c:93:20:77:80:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E7477DABC7930FE1809FECAC0EA751E0271CB4D Validity Not Before: Jun 2 21:10:43 2026 GMT Not After : Jun 3 22:52:43 2026 GMT Subject: CN=4628221ACB6E5D673E614B40A94FBFD5AE36409F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3b:55:dc:a9:c8:21:3e:15:a8:4d:60:29:3e: ed:b3:0e:dd:cf:e3:73:4d:31:ef:40:d1:c2:81:db: 8a:99:db:48:06:31:ac:8c:bd:9b:5b:6d:26:20:bf: 53:1d:7c:73:3f:ff:ae:f0:1f:0c:0c:c2:6d:f1:90: f2:37:ae:da:b8:93:1c:8d:69:df:9a:ae:62:bb:ea: 55:56:0d:e1:ce:f3:a6:7b:09:77:c9:91:18:bf:0f: ab:14:a1:59:32:5a:af:0f:a9:33:1d:4c:45:35:72: 54:17:ac:a5:95:e9:f5:27:f5:89:5f:00:43:08:f8: 6e:e5:64:9e:0a:4a:f8:7f:55:a9:b4:1e:aa:5b:26: 0f:9f:73:9f:50:60:df:ef:8a:aa:5d:94:f9:80:b9: a2:71:05:f0:61:4a:56:38:fa:3f:a4:13:e1:57:52: 60:c1:1d:02:7c:ad:60:16:d1:33:3f:56:0a:e0:45: da:59:0d:dd:fa:73:74:e7:dc:53:f5:29:30:c4:0e: 32:c8:bc:35:5a:14:f6:49:39:0c:f9:1d:ff:e0:00: 21:25:a5:24:ad:88:13:fa:09:2a:5f:68:92:46:66: 12:ce:26:10:3d:bb:d8:23:1c:b0:81:99:7b:fd:a9: 33:fb:2a:b4:99:13:17:11:fe:cb:af:2b:65:98:f5: fa:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:28:22:1A:CB:6E:5D:67:3E:61:4B:40:A9:4F:BF:D5:AE:36:40:9F X509v3 Authority Key Identifier: keyid:4E:74:77:DA:BC:79:30:FE:18:09:FE:CA:C0:EA:75:1E:02:71:CB:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f9:3e:4e:34:d0:1b:6b:6e:02:0a:e2:83:18:b5:54:a1:ea: 29:9b:1d:93:1e:45:29:63:10:a2:35:f5:39:8d:59:22:32:b7: 1a:ab:a2:d1:7d:a4:1b:86:27:2e:46:27:41:ac:46:7a:19:cd: 77:87:f7:d3:86:0c:23:d0:01:57:7b:6e:56:76:8a:53:a6:4f: 2b:6b:ec:2b:a4:fb:1c:7e:73:d4:b3:13:06:38:13:83:1a:b2: 01:6a:94:92:63:d5:be:fa:5e:7a:e8:d5:58:b7:0e:5d:20:aa: 5e:c8:32:4c:69:2f:32:22:c1:ff:e7:c7:d9:cc:3d:a8:30:33: 33:9b:19:58:65:2b:e7:7f:cd:06:26:91:db:6d:83:70:22:03: d2:11:e7:5a:ff:4e:c6:15:8d:68:2d:f7:6c:29:dd:98:46:7d: a5:31:3d:19:ee:7d:f3:71:15:4c:e6:70:24:9c:b0:ec:c5:c5: f9:35:c0:86:fd:d0:f8:fb:b5:fe:28:3b:b5:a6:89:2b:c8:5d: 82:31:01:8b:20:fe:eb:5c:4b:ad:42:50:c0:58:ec:a5:5c:fa: 4f:c5:da:7d:30:5a:83:64:c1:a7:fa:95:61:22:12:9f:ba:98: 39:68:92:92:8f:a8:ec:90:39:01:5b:d3:bb:16:46:79:cb:48: c1:25:91:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaOF9zFlgc2Q4Uw04m8oskyB3gHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU3NDc3REFCQzc5MzBGRTE4MDlGRUNBQzBFQTc1MUUw MjcxQ0I0RDAeFw0yNjA2MDIyMTEwNDNaFw0yNjA2MDMyMjUyNDNaMDMxMTAvBgNV BAMTKDQ2MjgyMjFBQ0I2RTVENjczRTYxNEI0MEE5NEZCRkQ1QUUzNjQwOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQO1XcqcghPhWoTWApPu2zDt3P 43NNMe9A0cKB24qZ20gGMayMvZtbbSYgv1MdfHM//67wHwwMwm3xkPI3rtq4kxyN ad+armK76lVWDeHO86Z7CXfJkRi/D6sUoVkyWq8PqTMdTEU1clQXrKWV6fUn9Ylf AEMI+G7lZJ4KSvh/Vam0HqpbJg+fc59QYN/viqpdlPmAuaJxBfBhSlY4+j+kE+FX UmDBHQJ8rWAW0TM/VgrgRdpZDd36c3Tn3FP1KTDEDjLIvDVaFPZJOQz5Hf/gACEl pSStiBP6CSpfaJJGZhLOJhA9u9gjHLCBmXv9qTP7KrSZExcR/suvK2WY9fq1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURigiGstuXWc+YUtAqU+/1a42QJ8wHwYDVR0j BBgwFoAUTnR32rx5MP4YCf7KwOp1HgJxy00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJjOGNkYTUtMzQ4My00MmIwLWIzODUtZmMwNzA3MTZmYmNjLzAvNEU3NDc3REFC Qzc5MzBGRTE4MDlGRUNBQzBFQTc1MUUwMjcxQ0I0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTc0NzdEQUJDNzkzMEZFMTgwOUZFQ0FDMEVBNzUxRTAyNzFD QjRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvNEU3NDc3REFCQzc5MzBGRTE4MDlGRUNBQzBFQTc1 MUUwMjcxQ0I0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIP5Pk400BtrbgIK4oMYtVSh6imbHZMeRSlj EKI19TmNWSIytxqrotF9pBuGJy5GJ0GsRnoZzXeH99OGDCPQAVd7blZ2ilOmTytr 7Cuk+xx+c9SzEwY4E4MasgFqlJJj1b76Xnro1Vi3Dl0gql7IMkxpLzIiwf/nx9nM PagwMzObGVhlK+d/zQYmkdttg3AiA9IR51r/TsYVjWgt92wp3ZhGfaUxPRnuffNx FUzmcCScsOzFxfk1wIb90Pj7tf4oO7WmiSvIXYIxAYsg/utcS61CUMBY7KVc+k/F 2n0wWoNkwaf6lWEiEp+6mDlokpKPqOyQOQFb07sWRnnLSMElkUk= -----END CERTIFICATE-----Generated at Wed Jun 3 04:05:22 2026 by rpki-client