$ rpki-client -vvf rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft File: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft (raw, json) Hash identifier: Lse3CVYJjTWUBoZ8hc44A9PG3XyM8lC86KdRWf7lVU4= Subject key identifier: 78:09:17:1F:DD:1A:10:A7:CB:11:BB:B8:0B:FF:D8:69:A5:A1:D5:AE Authority key identifier: 4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3 Certificate issuer: /CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3 Certificate serial: 730A487C735C9077ACA4F20ECC6ABEE726549BC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:05:32 +0000 Manifest this update: Tue 02 Jun 2026 21:00:32 +0000 Manifest next update: Wed 03 Jun 2026 23:38:32 +0000 Files and hashes: 1: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: Dk9FmD1Gd6LwGA6mFHwlSjHioZF8VJSA0K7I5b1rqPY=) 2: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: +WxXMuFbrHKDjWOS8r0LmF3/UaAmCxzNKESEznXTLHE=) 3: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl (hash: ELL5amYXCIGW9d+ynTARp6puhroh1kURhRAYmlEaZGw=) 4: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: PWQir4scae8YfD6/q+bk0ejgh+XhSzNVifyQAj+tAMA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:0a:48:7c:73:5c:90:77:ac:a4:f2:0e:cc:6a:be:e7:26:54:9b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3 Validity Not Before: Jun 2 21:00:32 2026 GMT Not After : Jun 3 23:38:32 2026 GMT Subject: CN=7809171FDD1A10A7CB11BBB80BFFD869A5A1D5AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:57:4d:40:b7:b5:76:29:a0:9e:dd:1b:21:f3: 2d:d7:1c:90:f1:12:24:b2:95:3a:47:6a:06:3d:08: 09:47:6e:6b:f0:94:47:41:3a:36:5a:5d:7d:25:ed: 84:5e:93:a0:40:3d:65:a3:17:97:81:a2:85:c2:38: d7:d1:aa:29:96:50:2e:4d:eb:07:9a:24:f4:72:5c: f6:2d:3a:14:0b:98:e6:bc:34:11:91:9b:13:a4:c1: a7:fd:f9:a4:62:fd:4f:30:43:d3:f4:5f:ab:bb:00: 98:4c:1f:d5:ae:ac:74:7c:64:16:e7:03:b3:e9:60: 58:f3:6b:17:e5:9c:74:f7:cf:73:b0:f5:e0:25:a5: a9:49:64:40:d7:49:26:66:90:a9:65:b8:d5:eb:80: 14:94:bf:54:c4:42:23:71:e3:1a:55:ca:b6:6c:b3: ba:c6:3a:05:f8:1f:cb:ef:0f:04:a3:af:0f:ad:74: 49:8e:e4:d7:ae:a9:06:c6:d1:8f:df:7c:31:1f:91: 4a:53:26:db:a0:4e:be:43:78:84:22:29:18:c0:85: 2a:1e:50:fd:13:52:b7:0a:6f:46:f8:9d:70:b4:e4: 90:9e:16:71:4c:c2:82:15:b3:d4:0f:7d:a7:9a:23: b1:8f:68:85:48:0b:19:13:b3:14:7c:9f:38:60:76: 3a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:09:17:1F:DD:1A:10:A7:CB:11:BB:B8:0B:FF:D8:69:A5:A1:D5:AE X509v3 Authority Key Identifier: keyid:4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f4:c2:16:82:6b:01:94:e4:13:6f:48:f6:fb:17:32:6d:53: d6:47:8b:72:8a:97:15:1f:ce:ef:03:53:5c:b7:17:95:d8:90: 49:0a:af:be:68:40:31:bf:44:6a:96:f2:ec:e9:4c:1d:9e:5e: be:97:8a:53:59:6c:28:55:a0:45:86:2e:48:84:ef:1c:be:78: 14:55:9d:55:e6:d0:f3:b7:8e:7c:54:25:dd:71:a1:5b:ac:c4: 6e:57:4b:27:ca:e8:da:04:ae:e7:ab:6a:5c:6a:83:c0:8d:c3: 58:6c:34:5a:08:9c:2d:78:f9:25:ed:60:21:c9:dd:eb:cc:39: ed:02:a6:77:fb:e0:23:8f:2e:7f:69:9c:19:cf:68:0f:d9:04: 36:b7:9f:2a:af:02:f3:a2:97:09:78:06:f1:72:26:bb:57:5d: 5c:77:73:80:43:a7:23:42:28:f3:3b:86:64:e3:8e:af:fe:bb: dd:cc:aa:14:5c:c7:b8:91:ac:ed:ee:00:8a:34:3b:d0:07:7f: 54:05:ec:47:90:f8:d0:37:01:72:42:8b:28:47:12:ec:1b:12: 12:bc:9f:da:8d:4c:83:16:3d:c9:64:bd:db:22:f1:6d:9b:28: 70:e0:94:67:a5:a4:7a:18:7d:b3:9f:f6:40:6d:1b:b4:ef:28: 90:f7:34:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcwpIfHNckHespPIOzGq+5yZUm8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQwMDhBRDQ3NjFCQzcyRTNBREZBOEI0Njc3QTQ0MDc2 REE4OTBCMzAeFw0yNjA2MDIyMTAwMzJaFw0yNjA2MDMyMzM4MzJaMDMxMTAvBgNV BAMTKDc4MDkxNzFGREQxQTEwQTdDQjExQkJCODBCRkZEODY5QTVBMUQ1QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdV01At7V2KaCe3Rsh8y3XHJDx EiSylTpHagY9CAlHbmvwlEdBOjZaXX0l7YRek6BAPWWjF5eBooXCONfRqimWUC5N 6weaJPRyXPYtOhQLmOa8NBGRmxOkwaf9+aRi/U8wQ9P0X6u7AJhMH9WurHR8ZBbn A7PpYFjzaxflnHT3z3Ow9eAlpalJZEDXSSZmkKlluNXrgBSUv1TEQiNx4xpVyrZs s7rGOgX4H8vvDwSjrw+tdEmO5NeuqQbG0Y/ffDEfkUpTJtugTr5DeIQiKRjAhSoe UP0TUrcKb0b4nXC05JCeFnFMwoIVs9QPfaeaI7GPaIVICxkTsxR8nzhgdjp9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeAkXH90aEKfLEbu4C//YaaWh1a4wHwYDVR0j BBgwFoAUTQCK1HYbxy4636i0Z3pEB22okLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTIyOWNhNTAtZTk1Yy00NWJiLTljMzAtNjNlMTJhZjdhNWUxLzAvNEQwMDhBRDQ3 NjFCQzcyRTNBREZBOEI0Njc3QTQ0MDc2REE4OTBCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDAwOEFENDc2MUJDNzJFM0FERkE4QjQ2NzdBNDQwNzZEQTg5 MEIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj MzAtNjNlMTJhZjdhNWUxLzAvNEQwMDhBRDQ3NjFCQzcyRTNBREZBOEI0Njc3QTQ0 MDc2REE4OTBCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHz0whaCawGU5BNvSPb7FzJtU9ZHi3KKlxUf zu8DU1y3F5XYkEkKr75oQDG/RGqW8uzpTB2eXr6XilNZbChVoEWGLkiE7xy+eBRV nVXm0PO3jnxUJd1xoVusxG5XSyfK6NoErueralxqg8CNw1hsNFoInC14+SXtYCHJ 3evMOe0Cpnf74COPLn9pnBnPaA/ZBDa3nyqvAvOilwl4BvFyJrtXXVx3c4BDpyNC KPM7hmTjjq/+u93MqhRcx7iRrO3uAIo0O9AHf1QF7EeQ+NA3AXJCiyhHEuwbEhK8 n9qNTIMWPclkvdsi8W2bKHDglGelpHoYfbOf9kBtG7TvKJD3NBQ= -----END CERTIFICATE-----Generated at Wed Jun 3 03:42:49 2026 by rpki-client