$ rpki-client -vvf rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft File: 4DC2282186B6221A7A52575CE005F2B42354E4A6.mft (raw, json) Hash identifier: kWW8KsvExUEdYjVo6+TA4mKmH+beZCSQJe9o8gIG7pE= Subject key identifier: 46:CB:B6:A2:BC:51:5F:20:FE:4B:4B:7D:DA:DE:7B:72:54:79:EF:36 Authority key identifier: 4D:C2:28:21:86:B6:22:1A:7A:52:57:5C:E0:05:F2:B4:23:54:E4:A6 Certificate issuer: /CN=4DC2282186B6221A7A52575CE005F2B42354E4A6 Certificate serial: 0BBF4BDE2CBA7F299342F5C1DB466775B2F5F4E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:25:56 +0000 Manifest this update: Tue 02 Jun 2026 21:20:56 +0000 Manifest next update: Wed 03 Jun 2026 22:31:56 +0000 Files and hashes: 1: 4DC2282186B6221A7A52575CE005F2B42354E4A6.crl (hash: 23rtt/2cdcpAm5UYaxKQ1ZQZEuBBO0N2ZnE1/rKtYtg=) 2: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: Z0k2HMfcMKksaFrziJOtsyyQXBDq/OhSupVq38YlMrI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.crl rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:bf:4b:de:2c:ba:7f:29:93:42:f5:c1:db:46:67:75:b2:f5:f4:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC2282186B6221A7A52575CE005F2B42354E4A6 Validity Not Before: Jun 2 21:20:56 2026 GMT Not After : Jun 3 22:31:56 2026 GMT Subject: CN=46CBB6A2BC515F20FE4B4B7DDADE7B725479EF36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6a:10:a9:3e:e8:e9:bb:b0:ce:00:51:d5:f3: b6:a7:2b:5c:c2:0e:2b:bd:fe:68:2e:45:08:8e:9c: 14:b9:01:aa:0e:5a:48:f4:75:80:28:fe:19:36:10: 80:04:cb:d9:c0:82:04:5c:3e:70:39:7a:69:3e:cd: de:73:db:70:f6:20:74:4e:f7:c6:92:46:4c:f6:47: 05:79:44:f6:46:d0:cf:41:02:9b:61:47:c9:1a:95: 95:7c:24:aa:ce:55:a7:62:50:c5:c1:08:2e:4e:a0: 87:b0:51:df:ba:ca:3e:a9:dc:9c:43:1e:82:88:46: 20:ac:d9:9c:4f:f9:30:86:36:fc:ad:2d:cc:2b:bd: c6:a4:e8:62:b8:45:b5:13:56:0d:4f:63:70:d2:cb: 7c:33:f9:42:08:56:46:77:a4:16:31:81:e4:23:26: 88:da:5e:60:d4:17:79:de:d2:ef:6d:e9:bc:b4:c4: e4:00:1d:97:79:ef:91:bc:a1:03:dd:60:f5:44:7f: cc:6a:74:c6:48:7e:cc:a4:7b:b4:f5:98:5d:20:62: 6d:f7:95:c2:9e:30:1a:d2:51:07:4f:6c:5c:cb:ef: f2:96:10:bb:1b:c4:95:17:19:78:88:e2:b3:0e:c4: e2:2b:32:37:37:25:8c:f8:02:3a:8a:83:b8:69:95: bb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CB:B6:A2:BC:51:5F:20:FE:4B:4B:7D:DA:DE:7B:72:54:79:EF:36 X509v3 Authority Key Identifier: keyid:4D:C2:28:21:86:B6:22:1A:7A:52:57:5C:E0:05:F2:B4:23:54:E4:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:d1:0c:0b:dc:44:ba:65:2b:25:cf:a3:d6:3b:69:52:a4:44: ee:62:4b:e1:6d:e0:e7:0d:db:64:d5:78:15:89:8b:65:7b:dc: 60:83:34:6c:3e:f4:99:b1:78:bb:4f:43:e8:a3:fa:51:41:9c: ba:51:20:f1:77:52:a1:a9:df:15:72:14:61:16:ba:89:73:ca: 28:af:e9:64:b4:86:9c:cb:5c:39:cc:96:e9:b0:dc:96:42:1f: 77:47:73:3b:91:5b:ac:f3:67:a7:38:10:fe:1b:b7:35:ff:2a: fb:98:d7:70:bd:58:cb:84:13:5f:1f:82:6f:20:25:5d:63:9d: 28:cf:69:2c:f7:b2:e6:aa:80:e0:97:cc:45:9d:17:0b:5f:40: 9d:81:34:c1:f6:e6:ba:f1:aa:2b:86:9f:ae:c8:7c:29:61:26: e8:a4:f9:28:b5:78:93:37:1d:aa:f7:4b:5f:57:cb:80:ae:1a: d3:55:2e:95:96:56:2d:03:fe:9c:99:8f:ec:f3:4b:8c:3b:85: 6a:95:d5:b9:82:62:a1:3f:b4:0d:23:85:64:c4:a5:04:8d:c8: 87:65:c1:91:35:57:a6:f1:b9:e2:21:00:cd:cf:78:15:5e:dc: 25:ee:72:ae:d2:c7:53:a0:86:d7:81:ac:01:04:23:68:52:40: c8:15:9f:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC79L3iy6fymTQvXB20ZndbL19OUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDMjI4MjE4NkI2MjIxQTdBNTI1NzVDRTAwNUYyQjQy MzU0RTRBNjAeFw0yNjA2MDIyMTIwNTZaFw0yNjA2MDMyMjMxNTZaMDMxMTAvBgNV BAMTKDQ2Q0JCNkEyQkM1MTVGMjBGRTRCNEI3RERBREU3QjcyNTQ3OUVGMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZahCpPujpu7DOAFHV87anK1zC Diu9/mguRQiOnBS5AaoOWkj0dYAo/hk2EIAEy9nAggRcPnA5emk+zd5z23D2IHRO 98aSRkz2RwV5RPZG0M9BApthR8kalZV8JKrOVadiUMXBCC5OoIewUd+6yj6p3JxD HoKIRiCs2ZxP+TCGNvytLcwrvcak6GK4RbUTVg1PY3DSy3wz+UIIVkZ3pBYxgeQj JojaXmDUF3ne0u9t6by0xOQAHZd575G8oQPdYPVEf8xqdMZIfsyke7T1mF0gYm33 lcKeMBrSUQdPbFzL7/KWELsbxJUXGXiI4rMOxOIrMjc3JYz4AjqKg7hplbubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURsu2orxRXyD+S0t92t57clR57zYwHwYDVR0j BBgwFoAUTcIoIYa2Ihp6Uldc4AXytCNU5KYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmUxMWU5OGYtZjU0ZS00NjBiLTg4ZjMtYmY5MWUwNDQzZTkwLzAvNERDMjI4MjE4 NkI2MjIxQTdBNTI1NzVDRTAwNUYyQjQyMzU0RTRBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REMyMjgyMTg2QjYyMjFBN0E1MjU3NUNFMDA1RjJCNDIzNTRF NEE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvNERDMjI4MjE4NkI2MjIxQTdBNTI1NzVDRTAwNUYy QjQyMzU0RTRBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvRDAvcRLplKyXPo9Y7aVKkRO5iS+Ft4OcN 22TVeBWJi2V73GCDNGw+9JmxeLtPQ+ij+lFBnLpRIPF3UqGp3xVyFGEWuolzyiiv 6WS0hpzLXDnMlumw3JZCH3dHczuRW6zzZ6c4EP4btzX/KvuY13C9WMuEE18fgm8g JV1jnSjPaSz3suaqgOCXzEWdFwtfQJ2BNMH25rrxqiuGn67IfClhJuik+Si1eJM3 Har3S19Xy4CuGtNVLpWWVi0D/pyZj+zzS4w7hWqV1bmCYqE/tA0jhWTEpQSNyIdl wZE1V6bxueIhAM3PeBVe3CXucq7Sx1OghteBrAEEI2hSQMgVn4M= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:35 2026 by rpki-client