$ rpki-client -vvf rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft File: 4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft (raw, json) Hash identifier: PxYmH2ZZEU8Vtp27KcANlDFGpARZs21MsRApjrnMxAU= Subject key identifier: 0F:26:40:60:48:1C:CD:5B:9A:59:7D:59:48:C7:99:FB:F1:0D:4D:EF Authority key identifier: 4F:57:E7:C6:47:ED:C2:A7:F8:8D:A2:E0:ED:27:18:37:05:D1:BE:A8 Certificate issuer: /CN=4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8 Certificate serial: 36CDA6DB30CB66502105A918F5CB81C68B0335E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 13:41:47 +0000 Manifest this update: Tue 02 Jun 2026 13:36:47 +0000 Manifest next update: Wed 03 Jun 2026 15:01:47 +0000 Files and hashes: 1: 3130332e3137382e39302e302f32332d3233203d3e20313430343034.roa (hash: ZkcJ9wfmIKEugmJByxtJwR7ao5xiPesfYT/0HhMfeP0=) 2: 3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa (hash: RvtUSv5wWi3n8E8bv7TL5og1sIQ+mOz0JnsESGUYn90=) 3: 3130332e3137382e39312e302f32342d3234203d3e20313430343034.roa (hash: 6Uutpwq/rWWifiMD0z9UYdw7tMZltuDb9h43wNM8zNc=) 4: 4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.crl (hash: M3l8Z8TEra7IYzgexkRaRXa/XRURrjq7sP2cclplPHg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.crl rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:cd:a6:db:30:cb:66:50:21:05:a9:18:f5:cb:81:c6:8b:03:35:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8 Validity Not Before: Jun 2 13:36:47 2026 GMT Not After : Jun 3 15:01:47 2026 GMT Subject: CN=0F264060481CCD5B9A597D5948C799FBF10D4DEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f9:56:0d:b2:ca:6e:86:d8:25:5d:a4:ef:f6: 82:7b:fc:26:66:1e:0f:95:ad:8b:44:48:b7:60:e4: 27:41:e1:29:ef:bf:d6:3a:37:20:54:cc:5d:1e:bf: 49:5a:65:20:33:db:17:fd:7b:10:5f:d6:de:23:e7: 62:e0:da:18:14:53:d7:e0:b7:bb:7f:d2:ad:1f:0c: fb:2a:d6:9f:8e:06:12:ac:3b:2d:43:db:1d:98:78: 68:ce:50:52:65:8f:b6:bc:59:73:95:b4:be:3e:de: 7d:21:a4:96:43:d0:2f:72:bd:27:cf:20:83:e0:3a: b8:5a:39:50:81:44:a7:28:63:db:eb:4c:da:13:eb: b2:4a:b9:2f:86:f1:81:4c:49:9c:0c:96:16:6f:a3: bb:47:0f:93:4d:9e:1b:7b:81:f1:7a:0a:ec:38:8c: a5:7e:d3:48:0d:9c:aa:42:87:8c:bf:45:d0:09:4f: 78:66:4a:4c:25:16:65:44:ab:b4:97:a0:8b:d1:a2: dc:e7:38:ec:b3:f0:1a:9d:de:2e:f6:ce:91:2e:0e: 2c:92:83:50:77:8b:a9:4d:f8:22:7b:f9:3e:f4:60: d0:50:c7:db:01:a1:e2:de:ce:45:aa:4e:3b:f2:88: 39:63:d2:52:07:ea:20:a6:b6:5c:01:f6:c4:f9:33: ac:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:26:40:60:48:1C:CD:5B:9A:59:7D:59:48:C7:99:FB:F1:0D:4D:EF X509v3 Authority Key Identifier: keyid:4F:57:E7:C6:47:ED:C2:A7:F8:8D:A2:E0:ED:27:18:37:05:D1:BE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:88:a1:fd:80:88:b6:80:83:7a:31:fb:1d:35:29:46:2b:75: c3:a1:d7:53:09:50:54:a1:fa:3c:ac:a1:be:f2:72:ed:eb:da: b4:67:d3:1c:15:b7:1c:20:73:fe:f9:9c:d6:3d:3d:68:ce:6f: 36:64:c2:20:20:c3:04:76:09:44:f6:69:53:3d:a3:0c:d8:3b: 97:bb:6b:67:46:c5:83:ee:f5:5c:4a:02:6d:51:d6:5b:9b:50: b6:f5:20:cd:16:80:ed:1d:89:a9:83:26:10:a8:da:1e:5a:3e: ec:47:d3:ad:ec:8b:0d:71:aa:2c:e4:86:fe:4d:52:89:5f:d6: 7a:bc:54:27:0d:02:8e:c4:36:9d:14:b5:64:37:66:71:0f:de: 33:d3:24:2d:8f:75:90:68:83:54:7d:d9:c4:86:ce:24:a7:48: c8:0d:61:55:be:92:5b:3b:61:98:d0:da:d6:3b:09:fc:77:b6: 21:51:cb:28:cc:23:45:ad:3f:b1:58:c4:0c:2c:04:5f:8e:72: 91:39:ac:8b:51:0c:69:a8:ad:eb:a5:5f:9b:7c:b2:c8:5e:0f: 03:94:f9:54:1e:07:b4:77:2d:23:02:24:8d:a6:87:39:9d:76: a3:de:cc:da:57:7f:ca:f2:7b:13:2f:d3:16:87:32:0c:3b:cb: 25:fc:e0:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNs2m2zDLZlAhBakY9cuBxosDNeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY1N0U3QzY0N0VEQzJBN0Y4OERBMkUwRUQyNzE4Mzcw NUQxQkVBODAeFw0yNjA2MDIxMzM2NDdaFw0yNjA2MDMxNTAxNDdaMDMxMTAvBgNV BAMTKDBGMjY0MDYwNDgxQ0NENUI5QTU5N0Q1OTQ4Qzc5OUZCRjEwRDRERUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8+VYNsspuhtglXaTv9oJ7/CZm Hg+VrYtESLdg5CdB4Snvv9Y6NyBUzF0ev0laZSAz2xf9exBf1t4j52Lg2hgUU9fg t7t/0q0fDPsq1p+OBhKsOy1D2x2YeGjOUFJlj7a8WXOVtL4+3n0hpJZD0C9yvSfP IIPgOrhaOVCBRKcoY9vrTNoT67JKuS+G8YFMSZwMlhZvo7tHD5NNnht7gfF6Cuw4 jKV+00gNnKpCh4y/RdAJT3hmSkwlFmVEq7SXoIvRotznOOyz8Bqd3i72zpEuDiyS g1B3i6lN+CJ7+T70YNBQx9sBoeLezkWqTjvyiDlj0lIH6iCmtlwB9sT5M6wnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDyZAYEgczVuaWX1ZSMeZ+/ENTe8wHwYDVR0j BBgwFoAUT1fnxkftwqf4jaLg7ScYNwXRvqgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzEzNzM5ZTEtYjVkYi00NzM0LTgzOGEtYjBiNTgwYmViOWYzLzAvNEY1N0U3QzY0 N0VEQzJBN0Y4OERBMkUwRUQyNzE4MzcwNUQxQkVBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RjU3RTdDNjQ3RURDMkE3Rjg4REEyRTBFRDI3MTgzNzA1RDFC RUE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzEzNzM5ZTEtYjVkYi00NzM0LTgz OGEtYjBiNTgwYmViOWYzLzAvNEY1N0U3QzY0N0VEQzJBN0Y4OERBMkUwRUQyNzE4 MzcwNUQxQkVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuIof2AiLaAg3ox+x01KUYrdcOh11MJUFSh +jysob7ycu3r2rRn0xwVtxwgc/75nNY9PWjObzZkwiAgwwR2CUT2aVM9owzYO5e7 a2dGxYPu9VxKAm1R1lubULb1IM0WgO0diamDJhCo2h5aPuxH063siw1xqizkhv5N Uolf1nq8VCcNAo7ENp0UtWQ3ZnEP3jPTJC2PdZBog1R92cSGziSnSMgNYVW+kls7 YZjQ2tY7Cfx3tiFRyyjMI0WtP7FYxAwsBF+OcpE5rItRDGmoreulX5t8ssheDwOU +VQeB7R3LSMCJI2mhzmddqPezNpXf8ryexMv0xaHMgw7yyX84OA= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:05 2026 by rpki-client