$ rpki-client -vvf rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft File: 4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft (raw, json) Hash identifier: rL5GKZ8GpsNPUrB47RKzi+klp7Fg+i4xMvj+VI3Y67M= Subject key identifier: EC:F2:7E:06:9E:57:39:F2:A8:4C:E1:C6:7E:01:ED:6D:62:2F:15:F4 Authority key identifier: 4B:E6:C1:BB:F0:E9:F5:30:97:19:55:68:AD:EA:22:26:4F:B4:E1:B0 Certificate issuer: /CN=4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0 Certificate serial: 4496DBB7EC69CBB5F91DACA2A415DB7E4FA727F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:49:06 +0000 Manifest this update: Tue 02 Jun 2026 19:44:06 +0000 Manifest next update: Wed 03 Jun 2026 22:46:06 +0000 Files and hashes: 1: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: fyKEzPeEJ4+E+32EaynXxqr/Ouql5hSrF2WTR5BFrF8=) 2: 4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl (hash: DYEQMVg07aBxUJhD+jnh6otlHr+4SGnUBQKKLZnTwX4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:96:db:b7:ec:69:cb:b5:f9:1d:ac:a2:a4:15:db:7e:4f:a7:27:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0 Validity Not Before: Jun 2 19:44:06 2026 GMT Not After : Jun 3 22:46:06 2026 GMT Subject: CN=ECF27E069E5739F2A84CE1C67E01ED6D622F15F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f2:e6:ac:d7:31:8a:d5:0f:de:1d:71:51:fc: 90:05:6a:02:d3:fb:36:6c:cd:b0:11:ff:39:eb:1b: 92:ac:17:f1:31:1f:7b:7f:9b:a1:48:18:fe:71:0c: af:bd:4d:50:e1:b4:02:ba:8e:8f:42:94:c1:be:e3: ea:cf:0d:12:0b:92:9e:b6:3b:3e:53:b7:de:cc:55: e4:96:9b:99:90:0e:d8:b6:b7:63:7a:66:3a:0c:4c: 7a:cb:f1:07:68:ad:7a:f4:6e:db:22:a2:53:d9:e6: 6f:2c:2b:7a:69:55:d7:d1:a5:01:81:a6:fb:dd:04: 6b:66:5c:fa:49:fc:33:66:4f:1f:ad:71:42:87:f3: e2:cd:06:6c:80:78:f7:85:34:1f:30:d1:c4:a0:4c: 4f:dd:eb:81:1f:c2:24:e7:ab:d4:86:28:1c:b1:b4: 77:01:f7:e2:ec:15:23:f2:1f:73:6a:77:46:ad:59: 9f:d3:1f:70:0f:58:02:41:76:45:a3:dc:89:43:57: c4:47:96:7f:66:02:52:e5:ab:81:05:02:75:03:54: 94:1a:eb:f7:70:96:c7:19:20:37:95:ac:99:97:4f: 9d:7c:a3:c4:c7:4d:c3:89:78:35:18:eb:08:1c:67: 59:6f:08:8e:1e:e2:8f:bc:28:3a:e2:4a:4f:c4:7e: 7e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F2:7E:06:9E:57:39:F2:A8:4C:E1:C6:7E:01:ED:6D:62:2F:15:F4 X509v3 Authority Key Identifier: keyid:4B:E6:C1:BB:F0:E9:F5:30:97:19:55:68:AD:EA:22:26:4F:B4:E1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d7:c8:35:b6:e4:b5:83:ec:64:5d:0f:9a:c5:7a:62:83:1b: 30:17:74:61:b8:16:79:5b:41:1c:f9:a9:28:fb:19:61:9e:7e: 12:81:03:32:fa:c4:b0:c2:4b:18:2b:0e:bc:e1:d0:78:9a:ec: 3d:9f:36:a6:85:83:ae:d8:43:fb:bf:0a:9a:b3:e4:e1:99:b6: a9:52:6e:d8:34:0d:ce:de:5b:32:ba:2f:60:30:68:a4:0c:12: 49:58:53:10:e4:d4:80:3b:85:06:4b:6b:04:f7:e0:08:02:86: f5:cd:f6:af:94:ca:54:73:0a:b8:6e:a1:d3:bf:b3:10:4a:8c: c0:45:07:45:64:f9:df:f2:4a:62:97:d9:96:59:a9:8f:38:82: 3b:e9:20:aa:c7:19:4a:fa:94:04:a6:f2:b3:86:92:51:d2:0f: 7d:f2:03:a1:a7:4e:2b:9f:f7:82:75:a2:3f:a4:35:3d:a2:6b: 31:17:61:f0:0b:c4:d9:9d:62:af:14:46:04:d1:50:1d:8d:33: 18:4d:51:af:6a:c2:13:70:bb:cf:15:8c:46:b3:4c:0d:ed:d3: ea:d0:07:d9:61:ec:f1:ed:27:4c:9f:ee:0f:a5:2f:19:30:7b: c5:be:b2:57:70:b9:80:d4:49:71:0d:c0:b9:eb:2b:f1:ef:6d: 1c:fa:f7:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURJbbt+xpy7X5HayipBXbfk+nJ/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFNkMxQkJGMEU5RjUzMDk3MTk1NTY4QURFQTIyMjY0 RkI0RTFCMDAeFw0yNjA2MDIxOTQ0MDZaFw0yNjA2MDMyMjQ2MDZaMDMxMTAvBgNV BAMTKEVDRjI3RTA2OUU1NzM5RjJBODRDRTFDNjdFMDFFRDZENjIyRjE1RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh8uas1zGK1Q/eHXFR/JAFagLT +zZszbAR/znrG5KsF/ExH3t/m6FIGP5xDK+9TVDhtAK6jo9ClMG+4+rPDRILkp62 Oz5Tt97MVeSWm5mQDti2t2N6ZjoMTHrL8QdorXr0btsiolPZ5m8sK3ppVdfRpQGB pvvdBGtmXPpJ/DNmTx+tcUKH8+LNBmyAePeFNB8w0cSgTE/d64EfwiTnq9SGKByx tHcB9+LsFSPyH3Nqd0atWZ/TH3APWAJBdkWj3IlDV8RHln9mAlLlq4EFAnUDVJQa 6/dwlscZIDeVrJmXT518o8THTcOJeDUY6wgcZ1lvCI4e4o+8KDriSk/Efn6PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7PJ+Bp5XOfKoTOHGfgHtbWIvFfQwHwYDVR0j BBgwFoAUS+bBu/Dp9TCXGVVoreoiJk+04bAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQzOGMxOTUtNDk0YS00NmEyLWI5M2MtOGUxNTY2OGYwNWIyLzAvNEJFNkMxQkJG MEU5RjUzMDk3MTk1NTY4QURFQTIyMjY0RkI0RTFCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkU2QzFCQkYwRTlGNTMwOTcxOTU1NjhBREVBMjIyNjRGQjRF MUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQzOGMxOTUtNDk0YS00NmEyLWI5 M2MtOGUxNTY2OGYwNWIyLzAvNEJFNkMxQkJGMEU5RjUzMDk3MTk1NTY4QURFQTIy MjY0RkI0RTFCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjXyDW25LWD7GRdD5rFemKDGzAXdGG4Fnlb QRz5qSj7GWGefhKBAzL6xLDCSxgrDrzh0Hia7D2fNqaFg67YQ/u/Cpqz5OGZtqlS btg0Dc7eWzK6L2AwaKQMEklYUxDk1IA7hQZLawT34AgChvXN9q+UylRzCrhuodO/ sxBKjMBFB0Vk+d/ySmKX2ZZZqY84gjvpIKrHGUr6lASm8rOGklHSD33yA6GnTiuf 94J1oj+kNT2iazEXYfALxNmdYq8URgTRUB2NMxhNUa9qwhNwu88VjEazTA3t0+rQ B9lh7PHtJ0yf7g+lLxkwe8W+sldwuYDUSXENwLnrK/HvbRz69x0= -----END CERTIFICATE-----Generated at Wed Jun 3 03:20:56 2026 by rpki-client