$ rpki-client -vvf rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft File: 49F46115365EBDF5886E7F2CF139E606717666E0.mft (raw, json) Hash identifier: K6PW4EI6597Z4ISl3My4rB/2xzj5lMOSwG0dP8QQqUI= Subject key identifier: 17:9D:57:AA:3E:CC:BD:CE:2C:32:7D:6C:FE:57:7F:D5:B9:AC:1A:44 Authority key identifier: 49:F4:61:15:36:5E:BD:F5:88:6E:7F:2C:F1:39:E6:06:71:76:66:E0 Certificate issuer: /CN=49F46115365EBDF5886E7F2CF139E606717666E0 Certificate serial: 6C1868FA2C0163A1691EC102E0A94BB032B9082D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft Manifest number: 2C Signing time: Tue 02 Jun 2026 22:22:52 +0000 Manifest this update: Tue 02 Jun 2026 22:17:52 +0000 Manifest next update: Thu 04 Jun 2026 02:01:52 +0000 Files and hashes: 1: 3130332e3136322e312e302f32342d3234203d3e20313431363334.roa (hash: fP8potPrA/fz7UKmgPpWsbOpb4DAv/qcdg5GmnTFDgc=) 2: 3130332e3136322e302e302f32332d3233203d3e20313431363334.roa (hash: /WJInhgSCHask4I5VFsuoFBnkjbFAmOBsJyj+3cOySg=) 3: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (hash: OGTDZ4C85+sk0i3Bo0o5Tb8rraHPH4OeiZ0vyZPql84=) 4: 49F46115365EBDF5886E7F2CF139E606717666E0.crl (hash: 7/8QWBUiLRx7Pc4Ijm8oC/+HhHjeot+xyxSauHY5FZo=) 5: 3130332e3136322e302e302f32342d3234203d3e20313431363334.roa (hash: shIk0vp+51TO0gQD+rZf7i9F4/QvmPZ8BnhQXbq9Zj8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.crl rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:18:68:fa:2c:01:63:a1:69:1e:c1:02:e0:a9:4b:b0:32:b9:08:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49F46115365EBDF5886E7F2CF139E606717666E0 Validity Not Before: Jun 2 22:17:52 2026 GMT Not After : Jun 4 02:01:52 2026 GMT Subject: CN=179D57AA3ECCBDCE2C327D6CFE577FD5B9AC1A44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:93:ec:51:4f:ce:a8:d7:a8:7d:12:99:f9:20: 2e:f5:56:5b:93:93:41:a7:a2:51:7e:6a:e7:a2:30: a9:59:34:c7:97:c0:fe:6c:e0:12:4e:25:5c:1b:3f: 79:34:8a:84:1b:22:66:2d:ad:c6:23:06:40:c4:09: 77:1e:f5:f7:c5:15:45:cc:a1:00:20:eb:ae:c1:da: 09:58:bb:40:f7:a2:e2:96:91:9f:f3:41:1f:75:fb: fe:32:60:32:68:d4:db:95:39:e5:a5:1b:58:03:98: 53:d4:39:c3:56:a9:b0:d8:26:eb:a6:5d:fd:3b:00: 21:46:a0:30:e5:39:7a:9a:50:fe:83:64:94:63:c5: 27:34:35:fe:8f:73:42:b1:ed:a4:fd:5b:70:b7:e8: f0:88:3d:48:2c:a5:95:2f:28:43:fc:a4:1a:b8:70: 41:64:cc:05:84:97:7c:88:60:85:95:0e:2e:f2:12: 22:04:c7:62:c0:67:ba:e2:c6:17:25:15:af:09:e6: 22:e7:59:55:02:c9:6c:0d:21:ab:63:41:f5:5d:b2: 7b:87:72:5d:9c:13:49:2f:ee:e7:42:b4:dd:ec:7e: 6d:81:72:8b:a4:4b:08:41:96:58:54:e0:8e:e6:38: dd:37:4e:a6:c9:23:08:e1:6e:35:58:70:28:95:b2: 1c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9D:57:AA:3E:CC:BD:CE:2C:32:7D:6C:FE:57:7F:D5:B9:AC:1A:44 X509v3 Authority Key Identifier: keyid:49:F4:61:15:36:5E:BD:F5:88:6E:7F:2C:F1:39:E6:06:71:76:66:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:b6:0a:22:71:1b:49:42:2d:58:06:b2:85:c4:74:7b:d6:00: ab:49:18:d7:10:51:06:41:2a:0c:47:8a:fe:7a:4a:f0:5d:c3: 53:8a:41:c5:36:69:4a:9d:44:f4:c9:64:4f:db:28:2d:3d:22: 48:6a:46:ab:5b:38:92:11:b4:f5:99:e0:30:e6:86:e1:ab:d4: ea:9c:be:ad:f6:b0:44:40:03:26:6d:68:00:38:f3:8c:b2:4e: 5f:05:90:3f:d0:5f:33:9c:a7:a2:73:7b:38:0b:62:d1:68:7d: 24:c0:82:60:fe:fd:d0:3d:2d:51:1b:25:1d:22:27:61:b6:8b: 5b:bf:0e:df:a1:1b:4e:e6:6d:dc:57:d5:a7:8d:18:f2:c7:c7: b6:a4:8b:79:29:5c:4d:7a:56:f4:eb:6c:b5:31:25:24:76:31: f3:1a:6d:ce:06:01:55:1f:64:4c:66:8a:50:c2:d9:da:25:7e: 18:a7:49:cb:05:b9:3d:e7:02:8c:23:4a:9a:76:ea:90:a4:48: 88:b0:15:93:d0:3d:23:33:8a:e2:79:21:e4:e1:c3:36:b4:f8: ac:79:9c:75:f9:17:bb:55:80:53:e4:8c:41:25:48:1d:f5:04: 26:ca:42:8e:36:68:dd:da:19:0a:09:ae:6b:ce:76:09:5d:a9: 47:4a:77:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbBho+iwBY6FpHsEC4KlLsDK5CC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlGNDYxMTUzNjVFQkRGNTg4NkU3RjJDRjEzOUU2MDY3 MTc2NjZFMDAeFw0yNjA2MDIyMjE3NTJaFw0yNjA2MDQwMjAxNTJaMDMxMTAvBgNV BAMTKDE3OUQ1N0FBM0VDQ0JEQ0UyQzMyN0Q2Q0ZFNTc3RkQ1QjlBQzFBNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbk+xRT86o16h9Epn5IC71VluT k0GnolF+aueiMKlZNMeXwP5s4BJOJVwbP3k0ioQbImYtrcYjBkDECXce9ffFFUXM oQAg667B2glYu0D3ouKWkZ/zQR91+/4yYDJo1NuVOeWlG1gDmFPUOcNWqbDYJuum Xf07ACFGoDDlOXqaUP6DZJRjxSc0Nf6Pc0Kx7aT9W3C36PCIPUgspZUvKEP8pBq4 cEFkzAWEl3yIYIWVDi7yEiIEx2LAZ7rixhclFa8J5iLnWVUCyWwNIatjQfVdsnuH cl2cE0kv7udCtN3sfm2BcoukSwhBllhU4I7mON03TqbJIwjhbjVYcCiVshy1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF51Xqj7Mvc4sMn1s/ld/1bmsGkQwHwYDVR0j BBgwFoAUSfRhFTZevfWIbn8s8TnmBnF2ZuAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE0MTkzYzQtNGFiZC00ZTJjLWExZDAtMWI1Y2UzMmU0MjBiLzAvNDlGNDYxMTUz NjVFQkRGNTg4NkU3RjJDRjEzOUU2MDY3MTc2NjZFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OUY0NjExNTM2NUVCREY1ODg2RTdGMkNGMTM5RTYwNjcxNzY2 NkUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE0MTkzYzQtNGFiZC00ZTJjLWEx ZDAtMWI1Y2UzMmU0MjBiLzAvNDlGNDYxMTUzNjVFQkRGNTg4NkU3RjJDRjEzOUU2 MDY3MTc2NjZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAES2CiJxG0lCLVgGsoXEdHvWAKtJGNcQUQZB KgxHiv56SvBdw1OKQcU2aUqdRPTJZE/bKC09IkhqRqtbOJIRtPWZ4DDmhuGr1Oqc vq32sERAAyZtaAA484yyTl8FkD/QXzOcp6JzezgLYtFofSTAgmD+/dA9LVEbJR0i J2G2i1u/Dt+hG07mbdxX1aeNGPLHx7aki3kpXE16VvTrbLUxJSR2MfMabc4GAVUf ZExmilDC2dolfhinScsFuT3nAowjSpp26pCkSIiwFZPQPSMziuJ5IeThwza0+Kx5 nHX5F7tVgFPkjEElSB31BCbKQo42aN3aGQoJrmvOdgldqUdKdxo= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:00 2026 by rpki-client