$ rpki-client -vvf rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft File: 4BCE188DE42B539EBB860A376D13FE292B001147.mft (raw, json) Hash identifier: FM6zCsRxCOJio2W+tGCCTaAlqRVhWv1mfsZ5rFQxAvc= Subject key identifier: 4B:32:25:42:F7:73:36:A2:A4:B8:99:D8:E2:14:80:8F:A9:16:F4:DA Authority key identifier: 4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47 Certificate issuer: /CN=4BCE188DE42B539EBB860A376D13FE292B001147 Certificate serial: 6D67A6718D395FDCC3275E9DA77C960521DDF9C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:25:53 +0000 Manifest this update: Tue 02 Jun 2026 17:20:53 +0000 Manifest next update: Wed 03 Jun 2026 20:11:53 +0000 Files and hashes: 1: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: /L4LgvuxEYbH0dgsif++d85ZiL7YhQs+ni89j41DhXM=) 2: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: u8jjg+GiS9S6r5A4phLntvppacWIJllmMAB+9fmlXA0=) 3: 4BCE188DE42B539EBB860A376D13FE292B001147.crl (hash: 1xkffAHZFividz8MqRx6LWLGvh/uCOIVGNHfBx0RkxA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 20:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:67:a6:71:8d:39:5f:dc:c3:27:5e:9d:a7:7c:96:05:21:dd:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BCE188DE42B539EBB860A376D13FE292B001147 Validity Not Before: Jun 2 17:20:53 2026 GMT Not After : Jun 3 20:11:53 2026 GMT Subject: CN=4B322542F77336A2A4B899D8E214808FA916F4DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:0a:7f:f3:8f:9d:35:4e:26:d8:3b:4f:9f: 4a:e0:90:f0:c1:01:c3:13:ce:6e:2f:03:38:ec:5e: 91:84:ea:2c:82:3f:fc:2e:94:a2:b2:a7:61:fb:62: 3a:ea:7d:23:f2:7c:52:34:ec:2b:c0:64:73:73:63: e7:89:bb:7b:91:59:cf:ab:f8:8e:3d:64:15:61:02: 00:98:27:c9:63:c6:6e:16:c2:a1:9a:88:8c:60:05: 9a:b3:11:57:8d:18:72:94:c2:8c:26:79:90:f2:95: b3:fe:43:2f:02:43:e4:a4:92:d5:1f:ef:ce:cb:c7: 4f:fb:61:2e:7a:03:f3:4f:fe:32:b1:6d:33:db:60: 2b:6d:24:77:5b:3b:63:e1:10:92:d4:ea:ff:90:17: b2:82:17:fa:86:40:ab:28:f9:2e:3b:de:34:6d:81: f3:b5:4b:49:4e:62:26:d5:0d:9f:dc:e2:02:16:ae: 1d:cd:41:c3:04:7d:aa:97:bc:41:31:4d:ae:21:e1: af:f4:09:f3:e4:30:80:92:d3:56:37:2e:54:09:5a: 51:f3:77:bf:34:da:6d:2e:a3:9a:19:02:47:b4:32: c1:dc:c0:82:42:e4:8d:a1:e8:1c:b7:0b:44:06:79: 34:80:d2:e6:07:75:c5:c5:2e:ea:e0:a2:69:93:08: 8a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:32:25:42:F7:73:36:A2:A4:B8:99:D8:E2:14:80:8F:A9:16:F4:DA X509v3 Authority Key Identifier: keyid:4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e9:59:bf:ac:fa:b4:a8:e4:f1:79:e2:42:d4:1b:ff:d6:7a: 25:9f:7e:b1:bd:9f:2d:ca:3e:76:af:b6:ad:d6:7b:98:ba:78: 32:f3:b7:28:02:ab:62:32:a9:7d:ed:07:cf:6c:f2:8a:7b:44: 4f:48:c8:12:55:31:3f:d5:61:74:c0:b0:95:a9:f9:09:8b:7e: ce:62:aa:a4:ce:b3:63:b2:36:4a:29:8f:3d:1a:19:ec:e8:c0: cb:79:ea:9d:2d:80:a1:33:1b:e0:f1:1a:29:5a:4f:e1:8d:81: f9:61:dd:c2:6f:fd:79:f2:e5:44:5a:03:07:8a:b3:d2:2a:2e: 9b:b8:9d:4a:a0:0a:ce:8d:31:45:84:cc:b5:b0:b0:a4:e0:57: 4e:9b:ff:c5:dd:0a:98:42:70:db:8a:54:e3:02:4d:66:b9:ad: 49:20:5b:49:77:10:fb:0e:4c:10:9f:8f:da:e6:b7:ae:5c:df: 2f:2f:05:77:98:a2:f8:e7:35:17:a0:93:7b:c8:d1:1e:a8:d2: 8a:28:5b:97:75:c1:8d:03:63:47:41:f9:d0:df:bb:a1:89:31: 36:8e:fa:ca:02:42:c2:e5:db:cd:3d:b6:bb:ac:52:c4:2a:5e: 6c:be:56:5a:80:de:b8:fb:5c:eb:80:cc:7c:d8:c1:43:04:33: c0:68:77:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbWemcY05X9zDJ16dp3yWBSHd+cAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDRTE4OERFNDJCNTM5RUJCODYwQTM3NkQxM0ZFMjky QjAwMTE0NzAeFw0yNjA2MDIxNzIwNTNaFw0yNjA2MDMyMDExNTNaMDMxMTAvBgNV BAMTKDRCMzIyNTQyRjc3MzM2QTJBNEI4OTlEOEUyMTQ4MDhGQTkxNkY0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2uwp/84+dNU4m2DtPn0rgkPDB AcMTzm4vAzjsXpGE6iyCP/wulKKyp2H7YjrqfSPyfFI07CvAZHNzY+eJu3uRWc+r +I49ZBVhAgCYJ8ljxm4WwqGaiIxgBZqzEVeNGHKUwowmeZDylbP+Qy8CQ+SkktUf 787Lx0/7YS56A/NP/jKxbTPbYCttJHdbO2PhEJLU6v+QF7KCF/qGQKso+S473jRt gfO1S0lOYibVDZ/c4gIWrh3NQcMEfaqXvEExTa4h4a/0CfPkMICS01Y3LlQJWlHz d7802m0uo5oZAke0MsHcwIJC5I2h6By3C0QGeTSA0uYHdcXFLurgommTCIpVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSzIlQvdzNqKkuJnY4hSAj6kW9NowHwYDVR0j BBgwFoAUS84YjeQrU567hgo3bRP+KSsAEUcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNjZDYwYjItMGY1Ny00ZmM1LWJjNjItMWQ5YjZjNDhmY2YwLzAvNEJDRTE4OERF NDJCNTM5RUJCODYwQTM3NkQxM0ZFMjkyQjAwMTE0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkNFMTg4REU0MkI1MzlFQkI4NjBBMzc2RDEzRkUyOTJCMDAx MTQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNjZDYwYjItMGY1Ny00ZmM1LWJj NjItMWQ5YjZjNDhmY2YwLzAvNEJDRTE4OERFNDJCNTM5RUJCODYwQTM3NkQxM0ZF MjkyQjAwMTE0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADpWb+s+rSo5PF54kLUG//WeiWffrG9ny3K Pnavtq3We5i6eDLztygCq2IyqX3tB89s8op7RE9IyBJVMT/VYXTAsJWp+QmLfs5i qqTOs2OyNkopjz0aGezowMt56p0tgKEzG+DxGilaT+GNgflh3cJv/Xny5URaAweK s9IqLpu4nUqgCs6NMUWEzLWwsKTgV06b/8XdCphCcNuKVOMCTWa5rUkgW0l3EPsO TBCfj9rmt65c3y8vBXeYovjnNRegk3vI0R6o0oooW5d1wY0DY0dB+dDfu6GJMTaO +soCQsLl2809trusUsQqXmy+VlqA3rj7XOuAzHzYwUMEM8Bod14= -----END CERTIFICATE-----Generated at Wed Jun 3 04:09:37 2026 by rpki-client