$ rpki-client -vvf rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft File: 411E8C45894267DCEFA20514C89165EE7C17C4C4.mft (raw, json) Hash identifier: Jj8lS4KHL6zYZ19uCjry7A6xg3qgxM+9irQ1nwKMZr0= Subject key identifier: 8F:7E:7F:25:19:B1:28:77:2F:AE:98:FB:52:6E:8A:2D:F3:F5:4E:F6 Authority key identifier: 41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4 Certificate issuer: /CN=411E8C45894267DCEFA20514C89165EE7C17C4C4 Certificate serial: 0D1555139B8736BFC105E4C142A2AF0BE647E009 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:52:15 +0000 Manifest this update: Tue 02 Jun 2026 21:47:15 +0000 Manifest next update: Thu 04 Jun 2026 00:47:15 +0000 Files and hashes: 1: 411E8C45894267DCEFA20514C89165EE7C17C4C4.crl (hash: E2K4selEGwfmdBGRwFHBPDCdBkdU5CuH4/FFawxlIUA=) 2: 3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa (hash: RWaRXWbQIpLKoTQziPLdF6KyPF26oe/DwncsbN1gjuY=) 3: 323030313a6466303a323363303a3a2f34382d3438203d3e20313437313235.roa (hash: Gd2IM01O7z8fqk7GpG61d/HhlCVHlpL3rkOIOFXsAII=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.crl rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:15:55:13:9b:87:36:bf:c1:05:e4:c1:42:a2:af:0b:e6:47:e0:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411E8C45894267DCEFA20514C89165EE7C17C4C4 Validity Not Before: Jun 2 21:47:15 2026 GMT Not After : Jun 4 00:47:15 2026 GMT Subject: CN=8F7E7F2519B128772FAE98FB526E8A2DF3F54EF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:08:1f:8a:9f:a7:dc:d3:70:e3:e4:4b:8a: df:d6:40:16:f3:18:b0:e4:ab:94:c8:20:69:70:47: 1a:9b:1c:2d:f3:ce:e0:ee:92:86:a6:b0:79:17:34: 79:05:97:9d:f0:03:d6:23:dc:fb:ef:fe:53:40:b7: 9f:d6:04:11:b4:6c:0f:30:34:af:4e:e3:34:e8:bb: 5c:25:0b:52:a1:b4:d9:fa:02:01:e1:93:ba:a7:12: 29:f4:af:b0:d0:5e:b9:e1:f0:86:4a:bb:71:f8:cd: fa:71:ae:5e:8c:eb:7b:cd:58:17:ad:cf:7e:87:96: 09:20:e6:35:30:61:51:72:ff:8c:a4:2e:de:3b:88: 0d:81:f7:6f:dd:87:50:3f:68:b1:cd:e1:a7:07:58: 18:54:3c:a5:5f:04:50:1e:f4:dd:b8:0b:37:cf:46: bd:90:6f:b2:af:08:a3:a0:20:f9:11:87:7d:c0:de: 02:46:78:f4:15:12:70:db:26:26:4b:9d:42:1f:0e: 8b:33:74:f5:39:04:9c:42:bb:77:4d:51:11:e0:39: 42:4f:5d:ec:78:68:98:b7:8d:44:be:b9:09:66:d6: 3d:26:95:31:40:d8:c0:2f:43:4e:53:cb:4a:ae:1a: 92:cb:81:df:d8:ab:2c:62:e9:3e:aa:00:8f:df:9b: 88:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7E:7F:25:19:B1:28:77:2F:AE:98:FB:52:6E:8A:2D:F3:F5:4E:F6 X509v3 Authority Key Identifier: keyid:41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3c:6a:b1:6f:6b:11:4b:49:f3:df:82:7c:07:2a:48:c5:0d: 87:2a:ae:54:77:98:10:c6:31:aa:e7:8d:89:a3:ad:dc:4e:77: 13:37:22:48:c8:69:96:35:78:c7:e0:c0:51:ff:51:80:90:67: 91:d0:b8:a0:8e:32:7c:51:b4:14:3d:a9:f9:ab:f2:24:b4:3d: 55:92:bf:9f:b0:bc:42:e3:ef:9e:24:4d:98:de:51:2d:db:7f: 97:a5:25:04:d9:4d:b1:10:70:53:32:56:1f:d9:1f:90:62:57: e1:27:e1:62:63:de:38:e5:69:17:d0:4f:da:4f:b1:67:c8:7b: c7:38:d4:5c:69:ea:4d:a3:3b:fb:ec:32:7a:87:66:e6:f1:38: 61:47:f6:46:40:1a:23:5b:ab:24:26:26:9d:47:7a:12:7c:fe: 00:44:c2:e2:41:75:a5:4c:be:06:d0:2d:54:10:5b:cb:8e:1f: 12:78:0a:bf:b0:0b:40:96:8d:40:fb:3f:44:d4:25:af:48:b2: 5f:18:a0:ca:ba:d3:f1:83:1d:bd:bd:0f:a3:a8:e1:a9:c0:b6: 96:29:3b:7c:37:57:e0:b7:f5:9c:b5:51:b4:77:d7:75:75:4c: 35:c1:95:eb:c6:16:42:ac:55:e5:fe:a8:da:8f:90:97:67:82: 07:bc:ca:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRVVE5uHNr/BBeTBQqKvC+ZH4AkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExRThDNDU4OTQyNjdEQ0VGQTIwNTE0Qzg5MTY1RUU3 QzE3QzRDNDAeFw0yNjA2MDIyMTQ3MTVaFw0yNjA2MDQwMDQ3MTVaMDMxMTAvBgNV BAMTKDhGN0U3RjI1MTlCMTI4NzcyRkFFOThGQjUyNkU4QTJERjNGNTRFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCihwgfip+n3NNw4+RLit/WQBbz GLDkq5TIIGlwRxqbHC3zzuDukoamsHkXNHkFl53wA9Yj3Pvv/lNAt5/WBBG0bA8w NK9O4zTou1wlC1KhtNn6AgHhk7qnEin0r7DQXrnh8IZKu3H4zfpxrl6M63vNWBet z36Hlgkg5jUwYVFy/4ykLt47iA2B92/dh1A/aLHN4acHWBhUPKVfBFAe9N24CzfP Rr2Qb7KvCKOgIPkRh33A3gJGePQVEnDbJiZLnUIfDoszdPU5BJxCu3dNURHgOUJP Xex4aJi3jUS+uQlm1j0mlTFA2MAvQ05Ty0quGpLLgd/Yqyxi6T6qAI/fm4hNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj35/JRmxKHcvrpj7Um6KLfP1TvYwHwYDVR0j BBgwFoAUQR6MRYlCZ9zvogUUyJFl7nwXxMQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGMwMjAxZTMtODc1ZC00OWM0LThlMTQtOTk5OTQ5MzZkNDkxLzAvNDExRThDNDU4 OTQyNjdEQ0VGQTIwNTE0Qzg5MTY1RUU3QzE3QzRDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTFFOEM0NTg5NDI2N0RDRUZBMjA1MTRDODkxNjVFRTdDMTdD NEM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGMwMjAxZTMtODc1ZC00OWM0LThl MTQtOTk5OTQ5MzZkNDkxLzAvNDExRThDNDU4OTQyNjdEQ0VGQTIwNTE0Qzg5MTY1 RUU3QzE3QzRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC08arFvaxFLSfPfgnwHKkjFDYcqrlR3mBDG MarnjYmjrdxOdxM3IkjIaZY1eMfgwFH/UYCQZ5HQuKCOMnxRtBQ9qfmr8iS0PVWS v5+wvELj754kTZjeUS3bf5elJQTZTbEQcFMyVh/ZH5BiV+En4WJj3jjlaRfQT9pP sWfIe8c41Fxp6k2jO/vsMnqHZubxOGFH9kZAGiNbqyQmJp1HehJ8/gBEwuJBdaVM vgbQLVQQW8uOHxJ4Cr+wC0CWjUD7P0TUJa9Isl8YoMq60/GDHb29D6Oo4anAtpYp O3w3V+C39Zy1UbR313V1TDXBlevGFkKsVeX+qNqPkJdngge8yoc= -----END CERTIFICATE-----Generated at Wed Jun 3 04:12:08 2026 by rpki-client