$ rpki-client -vvf rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft File: 4FE0444622A2C111B372D11A38DAFE7648673D36.mft (raw, json) Hash identifier: yDRo+dtnzpEWt6BSj90qNpPdq4VKgihDimzB7/J1Z0Q= Subject key identifier: 61:AD:C5:8D:48:A2:CF:C5:F2:75:55:2B:FC:D6:8A:5A:49:0C:B6:FF Authority key identifier: 4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36 Certificate issuer: /CN=4FE0444622A2C111B372D11A38DAFE7648673D36 Certificate serial: 3F4D20B4066625EB09843CAA506C55A74E734166 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 13:36:40 +0000 Manifest this update: Tue 02 Jun 2026 13:31:40 +0000 Manifest next update: Wed 03 Jun 2026 17:35:40 +0000 Files and hashes: 1: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: jwm0S2hFDX+dZX8vIrEhkY9/01RjPCQuv88vNZDWSb8=) 2: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: gRZjicumGEoblrElHZ58yAQf9cx0JwPN+oerGxN3DUY=) 3: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: EeoonxSdNuxOduC2I/c7vz+iodDJX+FOusUJ8W+8sks=) 4: 4FE0444622A2C111B372D11A38DAFE7648673D36.crl (hash: X0CcHor6DL2GBeAGYkN4KbpSw9a68YgBw7MJv67COWo=) 5: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: KpYQSU+oal444FTCzAQqpO+RSPbHAZ+ta2JoMh51nbo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.crl rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4d:20:b4:06:66:25:eb:09:84:3c:aa:50:6c:55:a7:4e:73:41:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FE0444622A2C111B372D11A38DAFE7648673D36 Validity Not Before: Jun 2 13:31:40 2026 GMT Not After : Jun 3 17:35:40 2026 GMT Subject: CN=61ADC58D48A2CFC5F275552BFCD68A5A490CB6FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:00:2f:c9:c2:3e:1f:53:34:34:5b:d8:04: cf:34:92:53:2f:27:c2:d1:3b:3d:c4:57:b0:1e:39: fc:b3:60:f2:ac:9e:31:57:16:6d:4e:81:25:a4:e5: 2d:39:1c:02:22:9b:88:70:ee:d4:6c:0c:0f:df:19: 92:61:aa:68:a5:ca:11:e9:30:5e:18:09:b0:17:2c: 65:7a:ae:e0:c4:ee:bf:59:72:5b:e1:f5:07:81:32: 87:c3:f0:43:2d:a1:db:66:57:3f:b7:14:4e:7a:31: d0:80:79:9c:0f:e8:49:cb:d8:04:7e:e6:91:07:fb: aa:03:4a:48:d2:57:87:20:77:72:bc:77:7d:0b:9a: d3:4c:37:c0:55:de:d5:04:05:e3:ca:a3:14:d4:18: 7d:8a:b0:e0:15:1c:1c:8e:3a:62:91:3b:0a:21:79: 14:eb:8f:78:7f:3d:76:18:8c:22:9b:9e:b7:91:d1: 5e:91:52:56:b4:3e:4d:5a:be:49:ca:7d:69:3b:7d: 16:ef:48:54:38:64:21:54:f0:14:19:21:3e:22:67: 1a:9b:ed:6b:12:96:3d:65:9c:98:df:48:8a:9a:91: d1:ad:18:7b:6d:a7:fc:2f:bb:97:b6:a7:2f:10:35: 97:a5:73:f8:08:65:48:32:94:77:b3:f1:c5:40:e4: 79:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AD:C5:8D:48:A2:CF:C5:F2:75:55:2B:FC:D6:8A:5A:49:0C:B6:FF X509v3 Authority Key Identifier: keyid:4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:51:07:db:8a:fb:1c:bc:f5:78:92:14:c8:22:d5:80:8f:ba: 6a:1f:a1:a5:67:0d:31:68:0b:47:da:1f:60:7a:08:eb:3c:60: 61:56:50:73:b2:37:d4:dd:b6:9b:b4:e6:4b:d6:84:bb:62:3d: 6f:d9:ce:7a:04:a5:76:ac:5b:e9:61:09:e3:44:80:80:94:62: 90:82:76:c8:5b:4c:0e:e1:6f:70:61:d5:c2:94:13:56:b2:ce: 1e:89:cb:2a:9c:2b:b8:bb:00:78:03:59:71:ca:fd:00:36:64: f8:36:b7:fd:bb:6b:d4:f5:d6:1b:23:e9:90:d2:52:c7:58:5d: 7f:26:3d:c2:63:e3:af:0b:10:4e:28:a2:f6:52:66:2b:f4:04: 45:8f:01:83:9c:07:1c:02:c0:5a:1b:68:ff:cf:29:23:f2:98: a2:a7:3e:a0:a0:e5:bb:d0:bc:cd:a0:6f:cd:a3:cc:31:00:6a: 22:e5:46:27:64:bb:79:ea:f3:4f:ad:26:6a:3c:2b:b9:28:19: 0d:63:1f:26:36:cd:2f:7b:3e:59:73:5b:70:35:30:66:e3:c0: 40:27:40:08:ab:b8:20:72:59:c8:39:9d:4a:f2:fd:7d:3d:37: 3c:58:34:25:de:41:20:e2:10:e9:ac:f3:b2:1a:d7:ea:5a:ba: d2:02:2c:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP00gtAZmJesJhDyqUGxVp05zQWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZFMDQ0NDYyMkEyQzExMUIzNzJEMTFBMzhEQUZFNzY0 ODY3M0QzNjAeFw0yNjA2MDIxMzMxNDBaFw0yNjA2MDMxNzM1NDBaMDMxMTAvBgNV BAMTKDYxQURDNThENDhBMkNGQzVGMjc1NTUyQkZDRDY4QTVBNDkwQ0I2RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMKAAvycI+H1M0NFvYBM80klMv J8LROz3EV7AeOfyzYPKsnjFXFm1OgSWk5S05HAIim4hw7tRsDA/fGZJhqmilyhHp MF4YCbAXLGV6ruDE7r9Zclvh9QeBMofD8EMtodtmVz+3FE56MdCAeZwP6EnL2AR+ 5pEH+6oDSkjSV4cgd3K8d30LmtNMN8BV3tUEBePKoxTUGH2KsOAVHByOOmKROwoh eRTrj3h/PXYYjCKbnreR0V6RUla0Pk1avknKfWk7fRbvSFQ4ZCFU8BQZIT4iZxqb 7WsSlj1lnJjfSIqakdGtGHttp/wvu5e2py8QNZelc/gIZUgylHez8cVA5HnRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYa3FjUiiz8XydVUr/NaKWkkMtv8wHwYDVR0j BBgwFoAUT+BERiKiwRGzctEaONr+dkhnPTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTFmZDM1MWUtMmJkNy00MTkxLTkxMDYtNTNmODc1MDE2ZjBlLzAvNEZFMDQ0NDYy MkEyQzExMUIzNzJEMTFBMzhEQUZFNzY0ODY3M0QzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkUwNDQ0NjIyQTJDMTExQjM3MkQxMUEzOERBRkU3NjQ4Njcz RDM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvNEZFMDQ0NDYyMkEyQzExMUIzNzJEMTFBMzhEQUZF NzY0ODY3M0QzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJRB9uK+xy89XiSFMgi1YCPumofoaVnDTFo C0faH2B6COs8YGFWUHOyN9Tdtpu05kvWhLtiPW/ZznoEpXasW+lhCeNEgICUYpCC dshbTA7hb3Bh1cKUE1ayzh6JyyqcK7i7AHgDWXHK/QA2ZPg2t/27a9T11hsj6ZDS UsdYXX8mPcJj468LEE4oovZSZiv0BEWPAYOcBxwCwFobaP/PKSPymKKnPqCg5bvQ vM2gb82jzDEAaiLlRidku3nq80+tJmo8K7koGQ1jHyY2zS97PllzW3A1MGbjwEAn QAiruCByWcg5nUry/X09NzxYNCXeQSDiEOms87Ia1+pautICLL8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:26 2026 by rpki-client