$ rpki-client -vvf rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft File: 4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft (raw, json) Hash identifier: vXNJ/ht+R9AbjajnPt19tX8EnqZ4/mntvj3C5Qgg5fI= Subject key identifier: 8F:DC:67:CB:C6:BD:A8:6A:17:57:30:B2:EB:3B:75:5E:57:02:DA:7B Authority key identifier: 4C:8D:B8:E3:4E:AF:27:84:6F:22:F0:E5:6C:A7:6B:56:1E:1F:BE:0B Certificate issuer: /CN=4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B Certificate serial: 28D6E01590CD8CA95E7DF19D48439960C150DEC7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:20:52 +0000 Manifest this update: Tue 02 Jun 2026 21:15:52 +0000 Manifest next update: Wed 03 Jun 2026 21:51:52 +0000 Files and hashes: 1: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: uOrrnMFrPoXL03YICCzOHjByECp/J3X4Q9+yuwlgUIA=) 2: 4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl (hash: ghzPZViVCWOc7vGfkXZYSTIcEjRImFEsfbZwQ3NDIe4=) 3: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: 3gsgdaMq9Jj1/PX8R0V/r0v44RenatE6Kq23gLzdu68=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 21:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d6:e0:15:90:cd:8c:a9:5e:7d:f1:9d:48:43:99:60:c1:50:de:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B Validity Not Before: Jun 2 21:15:52 2026 GMT Not After : Jun 3 21:51:52 2026 GMT Subject: CN=8FDC67CBC6BDA86A175730B2EB3B755E5702DA7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:08:22:84:19:99:f7:09:44:66:f2:8c:7e:62: 35:57:77:54:0d:07:d6:e6:68:97:e9:c5:29:42:4c: b0:26:2f:44:cd:0b:2b:fa:d9:36:5e:5a:b5:4f:05: cb:9f:20:2b:e1:69:cc:0a:e1:e4:ec:97:96:4f:27: 9b:ef:d8:40:2c:65:7b:68:0b:9e:c3:7d:c3:f8:31: 34:f5:cb:ce:bf:87:47:6c:54:53:cd:bc:01:0d:58: 27:ea:51:3b:5d:4f:88:f0:c4:28:77:64:ca:c1:ed: 75:f4:03:3f:94:b6:36:98:76:5b:f1:2c:b6:93:37: de:42:4a:4e:4d:fb:4b:9b:c5:f2:7c:ae:8f:79:ac: 42:53:8d:d0:ab:b2:70:cd:13:d5:bb:f7:00:3c:f2: 79:70:5f:de:8b:bd:35:22:14:f6:4e:47:f7:22:81: 46:07:74:28:d6:fd:b5:dd:8d:30:f0:56:1e:15:4a: f5:6f:41:88:7c:c9:4f:d4:40:66:55:d0:4a:0b:86: 96:59:7a:18:bc:f2:ca:ba:94:cb:9b:dd:84:80:8e: d9:a5:38:fc:88:af:ca:d8:79:a0:82:33:10:76:ba: fe:84:90:ac:59:fd:3d:ce:36:f9:07:bb:46:9c:10: 76:37:f9:48:16:e9:48:d7:ad:f8:70:d7:70:b0:b0: 92:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DC:67:CB:C6:BD:A8:6A:17:57:30:B2:EB:3B:75:5E:57:02:DA:7B X509v3 Authority Key Identifier: keyid:4C:8D:B8:E3:4E:AF:27:84:6F:22:F0:E5:6C:A7:6B:56:1E:1F:BE:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:42:9e:b8:25:5f:3d:f4:59:14:3d:c8:72:54:fc:7b:eb:33: 6e:91:ab:41:3c:3c:98:46:b0:ff:3e:c3:18:eb:c6:22:2d:a0: b5:e7:52:a0:57:fe:c7:a2:79:de:1a:0c:42:8b:4c:6d:28:14: 87:13:a3:58:54:80:b4:45:07:f5:bd:95:f7:fe:f0:e5:af:98: d5:46:5d:ee:26:7a:fe:eb:19:b0:69:66:6a:64:fa:b0:20:6d: c8:06:5e:28:62:ef:87:0e:56:9e:51:9e:1f:84:a3:1b:b2:b7: c7:82:fa:24:12:bb:95:13:7e:b0:71:ef:77:0c:5c:85:13:d8: 93:2c:97:7c:41:84:20:d9:c3:ad:c7:ef:5d:94:2a:f4:7b:e5: 51:9c:87:58:af:6e:a7:c4:92:9d:ad:8b:25:5d:7e:54:0d:4c: 67:5f:32:e2:25:d3:51:78:07:fe:be:65:f6:ae:dc:ec:4b:da: 49:c3:11:d3:ac:ca:65:d9:f9:7f:5b:51:3c:f5:42:8e:f0:dc: 37:3d:53:66:eb:b5:8c:55:41:aa:5b:ef:48:3c:9c:b4:92:40: 94:d5:82:c5:d0:d8:4b:08:0c:c5:de:23:0a:85:78:e2:61:33: 84:65:fb:c7:97:36:bb:6b:4e:d7:fb:18:ea:95:b2:1c:f9:56: 46:80:30:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKNbgFZDNjKleffGdSEOZYMFQ3scwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4REI4RTM0RUFGMjc4NDZGMjJGMEU1NkNBNzZCNTYx RTFGQkUwQjAeFw0yNjA2MDIyMTE1NTJaFw0yNjA2MDMyMTUxNTJaMDMxMTAvBgNV BAMTKDhGREM2N0NCQzZCREE4NkExNzU3MzBCMkVCM0I3NTVFNTcwMkRBN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCCKEGZn3CURm8ox+YjVXd1QN B9bmaJfpxSlCTLAmL0TNCyv62TZeWrVPBcufICvhacwK4eTsl5ZPJ5vv2EAsZXto C57DfcP4MTT1y86/h0dsVFPNvAENWCfqUTtdT4jwxCh3ZMrB7XX0Az+UtjaYdlvx LLaTN95CSk5N+0ubxfJ8ro95rEJTjdCrsnDNE9W79wA88nlwX96LvTUiFPZOR/ci gUYHdCjW/bXdjTDwVh4VSvVvQYh8yU/UQGZV0EoLhpZZehi88sq6lMub3YSAjtml OPyIr8rYeaCCMxB2uv6EkKxZ/T3ONvkHu0acEHY3+UgW6UjXrfhw13CwsJKhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj9xny8a9qGoXVzCy6zt1XlcC2nswHwYDVR0j BBgwFoAUTI24406vJ4RvIvDlbKdrVh4fvgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM3M2JjNjEtYzVmOS00MTU5LTk4YmMtYTA1MzBiNGRkOGI0LzAvNEM4REI4RTM0 RUFGMjc4NDZGMjJGMEU1NkNBNzZCNTYxRTFGQkUwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzhEQjhFMzRFQUYyNzg0NkYyMkYwRTU2Q0E3NkI1NjFFMUZC RTBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvNEM4REI4RTM0RUFGMjc4NDZGMjJGMEU1NkNBNzZC NTYxRTFGQkUwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJCnrglXz30WRQ9yHJU/HvrM26Rq0E8PJhG sP8+wxjrxiItoLXnUqBX/seied4aDEKLTG0oFIcTo1hUgLRFB/W9lff+8OWvmNVG Xe4mev7rGbBpZmpk+rAgbcgGXihi74cOVp5Rnh+Eoxuyt8eC+iQSu5UTfrBx73cM XIUT2JMsl3xBhCDZw63H712UKvR75VGch1ivbqfEkp2tiyVdflQNTGdfMuIl01F4 B/6+Zfau3OxL2knDEdOsymXZ+X9bUTz1Qo7w3Dc9U2brtYxVQapb70g8nLSSQJTV gsXQ2EsIDMXeIwqFeOJhM4Rl+8eXNrtrTtf7GOqVshz5VkaAMIY= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:38 2026 by rpki-client