$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft File: 4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft (raw, json) Hash identifier: 5dUJKo7vgcv+24aoIW/zgeeqySXJ+VkrcMv7pBZVgv8= Subject key identifier: 46:0A:45:CB:7B:3E:7A:32:60:AD:17:F5:F0:C3:CB:79:32:52:F8:E3 Authority key identifier: 4C:83:95:0E:B9:8A:8B:1F:12:41:09:BD:E0:91:02:A2:EB:C2:8A:CC Certificate issuer: /CN=4C83950EB98A8B1F124109BDE09102A2EBC28ACC Certificate serial: 4628BF46A4CADCF3D073DBC32BA5EA1A31D09ABB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 02:22:37 +0000 Manifest this update: Wed 03 Jun 2026 02:17:37 +0000 Manifest next update: Thu 04 Jun 2026 03:09:37 +0000 Files and hashes: 1: 3130332e38372e3138342e302f32322d3234203d3e20313336313036.roa (hash: cUNZmidOsIWQTz94E3YG+Xk0D06jdYQy+G4cYD1Jgrg=) 2: 323430303a643734303a3a2f33322d3438203d3e20313336313036.roa (hash: RIa7J3LAvz/WgKYY384LNu37wMI9xVMGk5ERckCbrdg=) 3: 3132332e3137362e3132342e302f32322d3234203d3e20313336313036.roa (hash: L0MFIY3SqIZyxWL0GLOuM9CG7lSHx8DFxNDzapVGoYg=) 4: 3132332e3137362e3132322e302f32332d3234203d3e20313336313036.roa (hash: Fm5DIjTwEczH/woDzsRLyNQNU1aSAK7oH6OWe3cCsR0=) 5: 3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa (hash: 3oTd3qA7oalGsSJ103eTjg8luLc4IR3P9iD0vCHZrto=) 6: 3130332e3230362e3138362e302f32342d3234203d3e20313336313036.roa (hash: pLkBoj+4v20DRaLcdp6cqFNpj/dZk322J8DmIWECxxQ=) 7: 4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl (hash: +cKsu44yPDUpXCRKcwdeF1J7uxf3h2JqDhEY3M+dPqA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 03:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:28:bf:46:a4:ca:dc:f3:d0:73:db:c3:2b:a5:ea:1a:31:d0:9a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C83950EB98A8B1F124109BDE09102A2EBC28ACC Validity Not Before: Jun 3 02:17:37 2026 GMT Not After : Jun 4 03:09:37 2026 GMT Subject: CN=460A45CB7B3E7A3260AD17F5F0C3CB793252F8E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:28:61:60:4d:49:bf:8f:9b:c1:de:17:ff:97: b2:d8:19:9f:cc:90:a7:ad:e8:c6:ee:8e:b2:11:f5: df:bd:2a:c6:87:4e:fe:6f:a7:fd:00:36:0b:e1:24: 19:a7:9b:61:e7:b3:a2:11:93:30:45:d8:57:57:4d: 97:2c:17:4e:59:8e:de:0b:74:b1:b0:48:6c:2d:f1: 77:f1:5f:e3:20:6d:06:66:7c:05:23:b3:da:87:09: 45:b2:89:db:4c:41:03:8e:b9:78:3d:6e:90:d1:f5: 4d:60:1b:23:52:8c:1d:c5:ae:0b:13:96:a2:74:c1: 12:77:57:8c:92:47:c2:52:22:c3:a7:75:1e:82:f0: 04:69:02:e5:c6:8b:2b:90:6a:17:1e:01:6a:cb:d7: 5a:15:86:78:06:17:d4:3a:9a:fa:b5:44:c4:3f:25: 3d:0b:66:40:66:6f:1d:3d:cd:0e:ad:13:57:ae:3a: 8f:23:d7:26:e4:fa:92:5d:5f:3f:4d:31:2e:4c:2a: 59:3c:1d:ee:92:f3:42:a4:d5:dc:46:76:8c:8f:6f: 36:7e:74:8a:99:1b:75:60:9d:c6:9a:da:04:df:8d: 37:a6:fb:f8:89:5f:04:df:7a:ec:26:d1:e7:a4:23: 30:9a:55:03:e4:02:d9:2b:60:3d:37:30:b0:8d:bf: 64:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0A:45:CB:7B:3E:7A:32:60:AD:17:F5:F0:C3:CB:79:32:52:F8:E3 X509v3 Authority Key Identifier: keyid:4C:83:95:0E:B9:8A:8B:1F:12:41:09:BD:E0:91:02:A2:EB:C2:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:6e:f0:d2:ca:d3:60:2f:a9:ec:7e:8c:8c:d9:17:3c:d6:d6: 09:ac:a1:a6:c4:a9:d1:fa:85:73:16:d0:ae:fd:64:97:a2:86: 52:42:1c:16:88:a2:89:27:6e:2f:5f:54:c3:9b:29:46:7c:72: 11:77:c7:8f:7a:de:bf:da:2e:62:40:f8:f5:22:cb:a2:5a:a3: 84:10:0d:a4:c2:9a:ae:de:f7:a2:f5:d1:84:d1:19:f7:f9:77: ee:18:f9:2e:27:b2:33:bc:17:ca:3e:da:d8:99:3e:27:c0:d3: 8d:a6:53:bf:92:c4:b2:bf:21:c7:c2:ce:4d:69:76:63:a9:dc: 92:71:37:19:b4:04:46:78:7f:03:1b:23:8c:e0:19:01:62:a8: e8:45:44:2a:e0:78:f6:d4:53:3b:8b:38:60:24:9d:b4:a9:a9: 87:51:c1:7d:b0:d9:22:a2:85:d0:f5:88:94:f5:f4:30:41:df: af:6a:03:d9:2b:a7:d6:0d:70:73:e7:94:a8:0b:96:ae:f0:22: fb:22:ed:8c:7a:4c:5d:4d:18:a6:7d:1f:ce:09:5f:3f:03:b4: d4:ae:bc:c9:9c:34:ff:77:6b:16:33:6a:f2:cd:ba:ba:b2:48: ba:e7:fd:dc:26:7d:8c:c8:64:df:9e:54:d6:57:b6:ff:92:bc: a1:42:52:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURii/RqTK3PPQc9vDK6XqGjHQmrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4Mzk1MEVCOThBOEIxRjEyNDEwOUJERTA5MTAyQTJF QkMyOEFDQzAeFw0yNjA2MDMwMjE3MzdaFw0yNjA2MDQwMzA5MzdaMDMxMTAvBgNV BAMTKDQ2MEE0NUNCN0IzRTdBMzI2MEFEMTdGNUYwQzNDQjc5MzI1MkY4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhKGFgTUm/j5vB3hf/l7LYGZ/M kKet6MbujrIR9d+9KsaHTv5vp/0ANgvhJBmnm2Hns6IRkzBF2FdXTZcsF05Zjt4L dLGwSGwt8XfxX+MgbQZmfAUjs9qHCUWyidtMQQOOuXg9bpDR9U1gGyNSjB3FrgsT lqJ0wRJ3V4ySR8JSIsOndR6C8ARpAuXGiyuQahceAWrL11oVhngGF9Q6mvq1RMQ/ JT0LZkBmbx09zQ6tE1euOo8j1ybk+pJdXz9NMS5MKlk8He6S80Kk1dxGdoyPbzZ+ dIqZG3Vgncaa2gTfjTem+/iJXwTfeuwm0eekIzCaVQPkAtkrYD03MLCNv2R7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURgpFy3s+ejJgrRf18MPLeTJS+OMwHwYDVR0j BBgwFoAUTIOVDrmKix8SQQm94JECouvCiswwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2M5NzZlYzUtYjA1YS00ODBmLTg2ZGEtZDU1N2Y4NGEyMzY0LzAvNEM4Mzk1MEVC OThBOEIxRjEyNDEwOUJERTA5MTAyQTJFQkMyOEFDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzgzOTUwRUI5OEE4QjFGMTI0MTA5QkRFMDkxMDJBMkVCQzI4 QUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2M5NzZlYzUtYjA1YS00ODBmLTg2 ZGEtZDU1N2Y4NGEyMzY0LzAvNEM4Mzk1MEVCOThBOEIxRjEyNDEwOUJERTA5MTAy QTJFQkMyOEFDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxu8NLK02Avqex+jIzZFzzW1gmsoabEqdH6 hXMW0K79ZJeihlJCHBaIooknbi9fVMObKUZ8chF3x4963r/aLmJA+PUiy6Jao4QQ DaTCmq7e96L10YTRGff5d+4Y+S4nsjO8F8o+2tiZPifA042mU7+SxLK/IcfCzk1p dmOp3JJxNxm0BEZ4fwMbI4zgGQFiqOhFRCrgePbUUzuLOGAknbSpqYdRwX2w2SKi hdD1iJT19DBB369qA9krp9YNcHPnlKgLlq7wIvsi7Yx6TF1NGKZ9H84JXz8DtNSu vMmcNP93axYzavLNurqySLrn/dwmfYzIZN+eVNZXtv+SvKFCUo4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:57 2026 by rpki-client