$ rpki-client -vvf rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft File: 4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft (raw, json) Hash identifier: YmEkbcNmEQJUEbwdbcdNo0Knc5mOpBtR4gSPlAxFnbA= Subject key identifier: BD:DC:AA:07:8A:3F:E1:47:86:B7:DF:30:AA:B7:B3:77:37:01:C5:0E Authority key identifier: 4E:B1:60:AE:98:58:8B:60:D5:AE:42:91:EF:D8:D1:D4:E4:1D:EA:0C Certificate issuer: /CN=4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C Certificate serial: 1991F4BE33938302A708A2A321852C8CD40EFA50 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 08:10:04 +0000 Manifest this update: Tue 02 Jun 2026 08:05:04 +0000 Manifest next update: Wed 03 Jun 2026 10:48:04 +0000 Files and hashes: 1: 4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.crl (hash: ti3tJt7JabzW/iNbeJEatVGRYCroE2e4p/HDuc3rD0g=) 2: 3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (hash: UTTE4RHMUx5iXqdVFLmPyr84/+QQI3n2et5AtGkuCdU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.crl rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:91:f4:be:33:93:83:02:a7:08:a2:a3:21:85:2c:8c:d4:0e:fa:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C Validity Not Before: Jun 2 08:05:04 2026 GMT Not After : Jun 3 10:48:04 2026 GMT Subject: CN=BDDCAA078A3FE14786B7DF30AAB7B3773701C50E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:86:d7:4d:cd:60:54:43:8c:db:4c:ba:26:43: 3d:92:ad:f6:c6:1c:21:4c:2d:e0:b5:25:ff:30:b4: d9:42:70:05:ef:0e:1a:f8:7e:f3:27:8b:2a:14:d6: 49:20:9b:de:0c:d6:95:2f:af:28:8a:7c:03:ec:d0: 07:fd:5d:d0:ba:57:bf:10:9d:45:6d:06:85:f3:3e: 13:86:e2:7c:51:06:7a:65:aa:b7:e2:08:2a:f1:86: d9:df:aa:f1:3a:99:a5:85:57:02:d2:79:3d:b6:91: 7b:89:df:5e:f5:60:ad:8d:24:41:92:9f:34:e5:14: dd:a5:3c:22:e0:83:8b:dc:4d:c8:98:b0:11:11:cc: 90:77:3e:39:af:f5:c5:14:64:b6:83:41:63:eb:4e: 25:e4:70:c6:e7:02:2f:03:25:c9:4b:ca:3e:4b:8c: 8f:1e:d0:5f:85:63:d8:d6:45:f8:7a:f4:3d:e1:34: 63:3a:4b:a7:23:70:79:f6:d7:3a:99:ae:39:cd:8d: 46:20:ec:3a:6d:2d:c8:0e:3d:04:d7:21:df:fc:78: 3e:d0:9f:43:36:6c:82:9e:f9:39:07:4c:85:2d:8c: b3:de:1f:d4:ae:75:74:56:98:59:0f:2a:2b:06:d0: 42:d4:2c:53:68:6e:b6:93:1a:ac:67:27:fe:09:f2: 4f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DC:AA:07:8A:3F:E1:47:86:B7:DF:30:AA:B7:B3:77:37:01:C5:0E X509v3 Authority Key Identifier: keyid:4E:B1:60:AE:98:58:8B:60:D5:AE:42:91:EF:D8:D1:D4:E4:1D:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:85:c9:db:1a:b9:63:f5:42:43:15:d7:23:a6:cf:1a:98:aa: 5e:3f:7e:b7:17:88:0a:34:e6:24:80:51:c1:2f:25:ee:5e:02: 30:25:93:95:73:6c:33:55:5f:5b:a9:5a:bb:a4:f9:ed:07:2b: e3:bc:02:05:b0:7b:34:c1:df:0e:92:d3:1f:98:75:e2:7a:75: ca:d9:08:34:7e:15:62:f0:02:1d:ff:b7:33:bb:46:79:0e:00: 27:6e:e0:7c:8e:9b:9e:a1:7f:3c:7f:1a:30:b4:0a:07:7b:6d: 18:ec:3f:57:f2:6b:01:34:d5:12:3c:26:f9:cc:df:79:78:69: 96:31:53:b6:f1:e2:cd:ca:f0:b3:ad:7b:b0:a2:6d:88:72:54: 74:d4:d7:12:18:c9:b7:ed:8d:9b:32:f0:f7:7e:63:d2:dc:8f: df:e3:d4:42:4b:8f:a1:73:6e:2a:48:72:6f:43:ae:ef:11:2c: 3f:00:99:ac:aa:f4:7f:63:88:34:c4:22:43:06:e5:d4:8e:d4: ec:89:5c:ac:46:de:9e:41:0f:37:14:72:3c:13:98:42:18:f5: 0a:91:e5:cd:82:23:ff:99:0c:fb:81:c7:04:71:74:07:c4:ea: 7e:79:74:d9:3f:8d:d4:57:32:d3:50:0b:ce:44:b6:fa:cd:4e: 7d:d8:c5:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGZH0vjOTgwKnCKKjIYUsjNQO+lAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVCMTYwQUU5ODU4OEI2MEQ1QUU0MjkxRUZEOEQxRDRF NDFERUEwQzAeFw0yNjA2MDIwODA1MDRaFw0yNjA2MDMxMDQ4MDRaMDMxMTAvBgNV BAMTKEJERENBQTA3OEEzRkUxNDc4NkI3REYzMEFBQjdCMzc3MzcwMUM1MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfhtdNzWBUQ4zbTLomQz2SrfbG HCFMLeC1Jf8wtNlCcAXvDhr4fvMniyoU1kkgm94M1pUvryiKfAPs0Af9XdC6V78Q nUVtBoXzPhOG4nxRBnplqrfiCCrxhtnfqvE6maWFVwLSeT22kXuJ3171YK2NJEGS nzTlFN2lPCLgg4vcTciYsBERzJB3Pjmv9cUUZLaDQWPrTiXkcMbnAi8DJclLyj5L jI8e0F+FY9jWRfh69D3hNGM6S6cjcHn21zqZrjnNjUYg7DptLcgOPQTXId/8eD7Q n0M2bIKe+TkHTIUtjLPeH9SudXRWmFkPKisG0ELULFNobraTGqxnJ/4J8k8pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvdyqB4o/4UeGt98wqrezdzcBxQ4wHwYDVR0j BBgwFoAUTrFgrphYi2DVrkKR79jR1OQd6gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM1MGYwNzgtYzUzNS00ZjhlLTk2MGYtMzJjMTYyM2FhNGIxLzAvNEVCMTYwQUU5 ODU4OEI2MEQ1QUU0MjkxRUZEOEQxRDRFNDFERUEwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RUIxNjBBRTk4NTg4QjYwRDVBRTQyOTFFRkQ4RDFENEU0MURF QTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM1MGYwNzgtYzUzNS00ZjhlLTk2 MGYtMzJjMTYyM2FhNGIxLzAvNEVCMTYwQUU5ODU4OEI2MEQ1QUU0MjkxRUZEOEQx RDRFNDFERUEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6FydsauWP1QkMV1yOmzxqYql4/frcXiAo0 5iSAUcEvJe5eAjAlk5VzbDNVX1upWruk+e0HK+O8AgWwezTB3w6S0x+YdeJ6dcrZ CDR+FWLwAh3/tzO7RnkOACdu4HyOm56hfzx/GjC0Cgd7bRjsP1fyawE01RI8JvnM 33l4aZYxU7bx4s3K8LOte7CibYhyVHTU1xIYybftjZsy8Pd+Y9Lcj9/j1EJLj6Fz bipIcm9Dru8RLD8Amayq9H9jiDTEIkMG5dSO1OyJXKxG3p5BDzcUcjwTmEIY9QqR 5c2CI/+ZDPuBxwRxdAfE6n55dNk/jdRXMtNQC85EtvrNTn3YxTw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:24:30 2026 by rpki-client