$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft File: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft (raw, json) Hash identifier: z0wNc0i0JHiniVvFaQSZrX1vm1sbQ96qHFEB4vyJgfA= Subject key identifier: BE:B7:88:07:E0:A8:A6:7E:AB:12:A1:B1:00:25:D2:11:B6:EE:A2:A1 Authority key identifier: 4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5 Certificate issuer: /CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5 Certificate serial: 3433340CE855E7DBD6AB3C2F27A94A086C8D04C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:53:31 +0000 Manifest this update: Tue 02 Jun 2026 10:48:31 +0000 Manifest next update: Wed 03 Jun 2026 12:55:31 +0000 Files and hashes: 1: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl (hash: ZdngrZDxRTfEoVVkxF10J6Y8jiS2E43CK4n7pAV0F8Q=) 2: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: wL6gjmzCFjkZlG1aqyBw0D/I6Abo7eZzV1pr7Z6kz7k=) 3: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: eAc+mnltXFWM2Zo7C5pCUJCKXwlG3JzkV70vxAzWX04=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:33:34:0c:e8:55:e7:db:d6:ab:3c:2f:27:a9:4a:08:6c:8d:04:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5 Validity Not Before: Jun 2 10:48:31 2026 GMT Not After : Jun 3 12:55:31 2026 GMT Subject: CN=BEB78807E0A8A67EAB12A1B10025D211B6EEA2A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:04:8f:2f:44:ec:df:43:ff:e1:fd:8a:f4:d0: 3e:e3:f8:4f:6a:d2:0d:09:35:ee:c5:81:16:8b:51: 1b:8e:ea:34:04:06:df:a6:f5:8d:cb:c3:43:04:5d: 35:88:06:89:0a:d7:ea:0f:9b:9e:0a:2e:80:70:a7: 22:1d:8e:75:14:ce:59:bc:73:f1:20:5b:53:f8:00: 03:b7:30:cf:3c:9c:7a:a1:b8:18:97:97:16:0c:80: da:62:49:fd:49:3c:97:f9:44:c2:f8:85:b2:35:24: 01:d1:a5:0e:dc:a2:58:ae:41:9d:58:62:7b:17:97: 01:16:37:8c:63:bb:8b:8d:bf:24:6f:97:bd:a0:e4: fd:a6:70:5e:55:fb:16:ab:db:44:fc:d2:45:08:62: a7:f5:70:e9:8d:b4:16:56:c7:a6:fc:0b:fe:60:b3: 7a:85:12:cc:c5:03:3a:c3:90:02:18:bf:06:a4:da: f6:77:dd:25:6e:f1:09:9a:11:d3:53:5f:f7:1c:7f: 0c:82:eb:b7:c5:a5:eb:4a:1d:b7:ad:39:4d:c0:d3: f3:be:0c:57:8d:4d:21:d0:54:a8:c0:58:09:8b:e2: b2:2f:db:c2:5a:bf:34:33:de:13:72:f5:fd:d6:5e: 25:8c:7c:d2:ff:89:ae:a1:9c:b3:81:4e:31:c4:ea: 13:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B7:88:07:E0:A8:A6:7E:AB:12:A1:B1:00:25:D2:11:B6:EE:A2:A1 X509v3 Authority Key Identifier: keyid:4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:82:de:81:6c:61:09:e8:ed:6c:5a:83:00:21:34:70:ae:bd: 48:10:10:4f:af:e2:40:58:4e:34:f3:44:e1:77:47:fa:97:32: 59:20:1a:09:11:95:d5:04:01:97:72:09:23:37:13:ee:8e:06: ce:50:7c:48:81:0b:e5:30:19:0e:52:9f:d5:f7:fc:40:27:0d: 8f:d4:61:5d:c0:60:14:ce:be:d0:e1:3a:d9:b2:9f:d0:2f:f9: 93:92:b0:35:9e:3b:e7:27:36:b4:4b:65:bc:27:82:17:5b:3c: 07:1c:db:ab:7f:78:39:e6:e0:e1:b5:76:08:07:47:5e:89:bb: 40:3e:8a:2b:52:cf:75:23:b6:b2:51:b1:6e:a0:53:76:10:c7: cd:be:42:8f:c1:40:94:76:f9:37:38:18:c0:3f:25:75:c4:ba: 08:5d:01:3e:b7:ef:79:21:fb:80:8b:ac:9f:de:f2:e8:bd:d0: 7c:54:91:9e:82:4f:0a:b6:db:8b:0a:4c:bb:13:15:2b:9e:02: 36:38:ba:34:3c:f9:fb:67:1c:16:b3:d6:04:6a:5a:0e:b1:9e: 9f:c2:2e:1f:d4:80:b4:ca:cc:ed:30:a3:84:42:ec:af:52:e2: 93:18:9b:1e:8f:3e:de:4d:9c:ea:a3:a5:ee:a4:43:88:8d:ca: 8a:13:ae:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNDM0DOhV59vWqzwvJ6lKCGyNBMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzQTYwNjg4M0IxMjI3MTYxOUM3Q0I0OURGQ0QzNTlG MEYzRTZGNTAeFw0yNjA2MDIxMDQ4MzFaFw0yNjA2MDMxMjU1MzFaMDMxMTAvBgNV BAMTKEJFQjc4ODA3RTBBOEE2N0VBQjEyQTFCMTAwMjVEMjExQjZFRUEyQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4BI8vROzfQ//h/Yr00D7j+E9q 0g0JNe7FgRaLURuO6jQEBt+m9Y3Lw0MEXTWIBokK1+oPm54KLoBwpyIdjnUUzlm8 c/EgW1P4AAO3MM88nHqhuBiXlxYMgNpiSf1JPJf5RML4hbI1JAHRpQ7coliuQZ1Y YnsXlwEWN4xju4uNvyRvl72g5P2mcF5V+xar20T80kUIYqf1cOmNtBZWx6b8C/5g s3qFEszFAzrDkAIYvwak2vZ33SVu8QmaEdNTX/ccfwyC67fFpetKHbetOU3A0/O+ DFeNTSHQVKjAWAmL4rIv28JavzQz3hNy9f3WXiWMfNL/ia6hnLOBTjHE6hMTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvreIB+Copn6rEqGxACXSEbbuoqEwHwYDVR0j BBgwFoAUSjpgaIOxInFhnHy0nfzTWfDz5vUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY5Mjk5MDEtYTEzNy00YTM1LTgxMzQtMTgwNGY5NDc5MmRmLzAvNEEzQTYwNjg4 M0IxMjI3MTYxOUM3Q0I0OURGQ0QzNTlGMEYzRTZGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTNBNjA2ODgzQjEyMjcxNjE5QzdDQjQ5REZDRDM1OUYwRjNF NkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvNEEzQTYwNjg4M0IxMjI3MTYxOUM3Q0I0OURGQ0Qz NTlGMEYzRTZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyC3oFsYQno7WxagwAhNHCuvUgQEE+v4kBY TjTzROF3R/qXMlkgGgkRldUEAZdyCSM3E+6OBs5QfEiBC+UwGQ5Sn9X3/EAnDY/U YV3AYBTOvtDhOtmyn9Av+ZOSsDWeO+cnNrRLZbwnghdbPAcc26t/eDnm4OG1dggH R16Ju0A+iitSz3UjtrJRsW6gU3YQx82+Qo/BQJR2+Tc4GMA/JXXEughdAT6373kh +4CLrJ/e8ui90HxUkZ6CTwq224sKTLsTFSueAjY4ujQ8+ftnHBaz1gRqWg6xnp/C Lh/UgLTKzO0wo4RC7K9S4pMYmx6PPt5NnOqjpe6kQ4iNyooTrhI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:11:50 2026 by rpki-client