$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft File: 4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft (raw, json) Hash identifier: ElcxOHgYgcpEU+3Y0FIWJ9H9Jhgg+tgeFxtphL6ehWk= Subject key identifier: 7B:C3:FF:F3:A9:C3:68:2F:47:B6:A6:EA:3E:7D:5A:7C:E5:3C:45:E7 Authority key identifier: 4F:C4:8D:D4:A0:4D:6F:39:93:1A:F1:E8:DE:E3:5A:BD:F9:C7:76:FA Certificate issuer: /CN=4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA Certificate serial: 52AA009E91D6007795C249996A8BAC6A7D1D3382 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 10:07:38 +0000 Manifest this update: Tue 02 Jun 2026 10:02:38 +0000 Manifest next update: Wed 03 Jun 2026 12:34:38 +0000 Files and hashes: 1: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (hash: H/rwQ/f8aUBtc58OK4kWZL1DduHZ4X5rHCUaLkdQAjM=) 2: 4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl (hash: 79RwLThQQZRGI4RZXcG93bWsoHRajsmIVcDSL5MSTkM=) 3: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (hash: Y5XB9rqhcbsV9IQfUbYmWZisnqag3EEZWqXjsPcCSU4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:aa:00:9e:91:d6:00:77:95:c2:49:99:6a:8b:ac:6a:7d:1d:33:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA Validity Not Before: Jun 2 10:02:38 2026 GMT Not After : Jun 3 12:34:38 2026 GMT Subject: CN=7BC3FFF3A9C3682F47B6A6EA3E7D5A7CE53C45E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cf:0f:69:8e:d5:e9:af:73:90:97:24:33:b3: 62:d7:dc:04:16:1d:f5:18:cd:e5:51:12:3a:b3:27: ec:98:73:3a:d6:41:5c:fa:24:42:23:5e:a7:56:bf: d6:57:9b:46:d1:4d:5f:3b:cb:31:33:a4:c1:a6:08: 50:20:15:08:52:13:4e:2a:09:4b:a6:c7:99:02:86: c3:6b:51:f7:4a:1f:a4:ce:18:93:62:1b:12:cd:16: 86:4b:e3:38:30:cb:33:85:cd:a3:c0:60:29:53:d0: 42:a0:67:1a:66:b1:66:c5:d8:89:00:61:b5:ae:a9: 0b:6a:f1:fb:d6:70:0c:2d:62:2e:93:e6:ef:34:c5: b2:94:6b:a0:cc:7d:55:2e:33:f3:04:0f:7f:84:4b: b4:3f:a3:1f:d1:69:95:3c:ea:d9:e9:39:ce:73:97: 65:53:d4:a2:54:04:e3:a3:69:64:d0:88:a5:06:2b: 37:29:ee:25:05:5a:7d:9b:71:cb:df:10:2c:3a:a5: 65:e8:e1:67:58:f1:94:36:76:ac:f0:85:9b:c9:bb: cb:71:46:e1:b5:5e:50:c1:eb:92:be:a3:c4:e7:da: 38:07:8c:5e:fa:79:6c:30:6f:c0:4c:c2:69:94:8f: 71:bc:81:93:8f:74:1f:33:37:81:2e:fa:7b:a0:46: e5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C3:FF:F3:A9:C3:68:2F:47:B6:A6:EA:3E:7D:5A:7C:E5:3C:45:E7 X509v3 Authority Key Identifier: keyid:4F:C4:8D:D4:A0:4D:6F:39:93:1A:F1:E8:DE:E3:5A:BD:F9:C7:76:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:1c:45:d8:67:69:e9:97:d0:b5:a0:94:c0:ed:05:75:e9:c7: 56:b7:49:a6:46:5c:45:2c:14:ef:db:a3:1d:68:35:04:5b:41: 34:42:be:55:3e:89:64:0d:b6:3f:d0:af:04:93:af:10:7a:62: 9d:c6:66:69:df:3f:f6:64:4e:6a:59:47:2f:73:ad:00:68:4f: 01:2b:ab:1f:d8:2f:ba:7a:d7:db:2d:d6:ea:19:3a:f9:42:5d: 0e:18:09:86:af:c1:0f:31:72:03:c2:9d:c5:35:1b:74:39:7c: fc:fd:98:ac:a7:94:c1:68:2a:47:d7:b3:72:74:b8:6b:f4:12: fb:15:2c:3d:5d:dd:d9:88:3f:78:d3:b1:7d:c6:eb:c9:44:b3: 26:87:ed:a0:2a:23:34:e2:54:b4:26:bc:56:5a:bf:c8:b3:17: 84:df:ef:62:ab:83:e1:87:c5:c6:d2:26:7b:66:64:a9:ba:1b: 45:93:6d:1a:f9:ab:54:df:9c:88:e7:63:3d:08:cb:29:a0:b3: ff:6f:1a:7a:7a:f8:58:69:ed:c4:ab:a9:f7:ac:f7:3b:b1:a6: 43:a7:c1:07:32:ca:01:46:8b:c3:99:d2:04:bb:95:c2:58:6a: 0e:d4:18:65:8e:43:a5:b7:30:cc:a4:df:22:f2:cf:58:e9:f7: ff:ad:3a:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqoAnpHWAHeVwkmZaousan0dM4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDNDhERDRBMDRENkYzOTkzMUFGMUU4REVFMzVBQkRG OUM3NzZGQTAeFw0yNjA2MDIxMDAyMzhaFw0yNjA2MDMxMjM0MzhaMDMxMTAvBgNV BAMTKDdCQzNGRkYzQTlDMzY4MkY0N0I2QTZFQTNFN0Q1QTdDRTUzQzQ1RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMzw9pjtXpr3OQlyQzs2LX3AQW HfUYzeVREjqzJ+yYczrWQVz6JEIjXqdWv9ZXm0bRTV87yzEzpMGmCFAgFQhSE04q CUumx5kChsNrUfdKH6TOGJNiGxLNFoZL4zgwyzOFzaPAYClT0EKgZxpmsWbF2IkA YbWuqQtq8fvWcAwtYi6T5u80xbKUa6DMfVUuM/MED3+ES7Q/ox/RaZU86tnpOc5z l2VT1KJUBOOjaWTQiKUGKzcp7iUFWn2bccvfECw6pWXo4WdY8ZQ2dqzwhZvJu8tx RuG1XlDB65K+o8Tn2jgHjF76eWwwb8BMwmmUj3G8gZOPdB8zN4Eu+nugRuWlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe8P/86nDaC9HtqbqPn1afOU8RecwHwYDVR0j BBgwFoAUT8SN1KBNbzmTGvHo3uNavfnHdvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2IwMWM5NjctOTlkMC00YzIxLTk2NDItODdhZGE2NzE1NWM4LzAvNEZDNDhERDRB MDRENkYzOTkzMUFGMUU4REVFMzVBQkRGOUM3NzZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkM0OERENEEwNEQ2RjM5OTMxQUYxRThERUUzNUFCREY5Qzc3 NkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2IwMWM5NjctOTlkMC00YzIxLTk2 NDItODdhZGE2NzE1NWM4LzAvNEZDNDhERDRBMDRENkYzOTkzMUFGMUU4REVFMzVB QkRGOUM3NzZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL0cRdhnaemX0LWglMDtBXXpx1a3SaZGXEUs FO/box1oNQRbQTRCvlU+iWQNtj/QrwSTrxB6Yp3GZmnfP/ZkTmpZRy9zrQBoTwEr qx/YL7p619st1uoZOvlCXQ4YCYavwQ8xcgPCncU1G3Q5fPz9mKynlMFoKkfXs3J0 uGv0EvsVLD1d3dmIP3jTsX3G68lEsyaH7aAqIzTiVLQmvFZav8izF4Tf72Krg+GH xcbSJntmZKm6G0WTbRr5q1TfnIjnYz0Iyymgs/9vGnp6+Fhp7cSrqfes9zuxpkOn wQcyygFGi8OZ0gS7lcJYag7UGGWOQ6W3MMyk3yLyz1jp9/+tOts= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:20 2026 by rpki-client