$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft File: 4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft (raw, json) Hash identifier: Tj+iSa25pEHt1Ox7Dsy6mwvPbkG7OM+IzFao0ntzks8= Subject key identifier: 64:CD:25:BD:53:83:1D:74:97:7C:D8:D5:22:94:3E:D6:7F:33:E3:C8 Authority key identifier: 44:22:B4:2B:1C:CA:5B:61:18:2A:D4:1D:35:B4:F2:AA:D9:EA:BE:04 Certificate issuer: /CN=4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04 Certificate serial: 6E89C5D53922CDD89F1A0B53596F9096E0088F8D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:29:51 +0000 Manifest this update: Tue 02 Jun 2026 16:24:51 +0000 Manifest next update: Wed 03 Jun 2026 20:03:51 +0000 Files and hashes: 1: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: 1X91pKyabNo0X6kIX61xx6GkFtEHh7C2Pc++/TjZ3oA=) 2: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: Uy+ajDGX9/cC+n7NYziQ7Kjk71Ct0cfoPErhDEsQa8k=) 3: 4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl (hash: Pzylvxd5B4F/liql2FjifcN+yEEB2mHl2Xz7EIakP2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:89:c5:d5:39:22:cd:d8:9f:1a:0b:53:59:6f:90:96:e0:08:8f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04 Validity Not Before: Jun 2 16:24:51 2026 GMT Not After : Jun 3 20:03:51 2026 GMT Subject: CN=64CD25BD53831D74977CD8D522943ED67F33E3C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:a8:3d:7b:32:dc:32:ca:6b:36:31:ae:6a: 09:33:db:7c:1c:0f:61:8d:73:df:a1:f4:9b:d9:7a: 53:08:c5:80:4b:38:62:c4:aa:dd:be:d5:b7:eb:58: 3d:1d:79:45:d4:a3:bf:6c:08:63:9c:95:29:56:cb: ce:13:d6:d8:bc:44:bc:c5:31:22:02:5c:4d:49:13: 1b:56:18:21:ac:10:df:4f:0f:a6:38:8d:b7:42:e9: 62:b4:83:b1:37:37:1f:43:f5:1f:3a:6a:79:65:ca: 5e:14:42:84:ef:e8:ac:f9:7f:b0:2b:d6:30:37:4c: 80:7f:48:7b:aa:3e:52:0e:b9:c3:ac:65:51:b5:bc: 04:67:9f:34:01:14:f3:f9:84:3a:9a:6b:7d:74:ec: 92:66:0c:dc:c8:77:a4:a3:3e:3f:c2:29:93:4b:ca: 2d:b3:83:7f:c8:7f:a2:0d:e2:3e:da:84:1d:fe:68: 5c:46:34:50:33:01:75:6c:d7:09:2e:4b:25:36:d7: 37:78:95:96:ca:e2:5c:43:78:b8:e1:77:93:34:97: a4:5a:63:18:84:63:85:1a:ec:22:03:aa:12:4b:9b: 37:fa:66:54:97:40:27:d2:4b:e5:c4:fc:db:69:f3: df:21:9f:b0:b4:70:f2:4a:84:8a:5d:1b:60:d3:e0: 04:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CD:25:BD:53:83:1D:74:97:7C:D8:D5:22:94:3E:D6:7F:33:E3:C8 X509v3 Authority Key Identifier: keyid:44:22:B4:2B:1C:CA:5B:61:18:2A:D4:1D:35:B4:F2:AA:D9:EA:BE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:e3:e6:fa:64:98:96:14:49:ba:af:8f:4b:7d:8b:cf:2f:f4: 3b:5c:ec:7a:a2:0a:d5:90:53:12:d5:3c:23:25:65:98:c9:51: f0:f1:a1:12:76:5a:ba:d4:5b:47:3e:61:1a:ba:c0:97:aa:55: 3f:9d:6f:5c:d4:fe:fa:31:ed:27:d1:98:a6:b8:db:f0:5c:88: ae:96:6b:c3:4b:72:02:05:0d:70:6d:fe:be:11:20:2a:d8:0f: fd:db:32:ea:55:ca:73:72:68:e1:2c:ec:24:41:95:4d:70:83: 0a:03:16:64:72:cf:ec:15:db:6f:30:77:9d:69:5c:95:e7:08: 80:b3:b4:a9:fd:6d:b6:5a:a3:d3:6b:4b:48:71:40:f0:6a:5b: 7b:57:a5:11:ee:34:dd:d7:08:62:d1:1b:7c:c2:04:21:bb:ea: 95:60:08:2b:ef:70:34:f4:29:76:1a:e0:3c:0a:67:27:8e:3c: c8:96:8a:c6:25:89:81:f7:0b:c5:6f:6f:8c:1d:7c:84:09:1c: ab:48:b7:01:38:3f:f5:bd:cb:75:71:dd:e3:ba:f1:c6:ee:c0: 6e:7f:20:e7:06:67:eb:52:a4:ca:33:ae:f9:ff:6c:46:a1:df: 35:5f:5f:e2:75:84:76:6a:5a:c4:fa:64:4f:ff:56:56:ba:7e: ee:2d:9b:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbonF1TkizdifGgtTWW+QluAIj40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMkI0MkIxQ0NBNUI2MTE4MkFENDFEMzVCNEYyQUFE OUVBQkUwNDAeFw0yNjA2MDIxNjI0NTFaFw0yNjA2MDMyMDAzNTFaMDMxMTAvBgNV BAMTKDY0Q0QyNUJENTM4MzFENzQ5NzdDRDhENTIyOTQzRUQ2N0YzM0UzQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYag9ezLcMsprNjGuagkz23wc D2GNc9+h9JvZelMIxYBLOGLEqt2+1bfrWD0deUXUo79sCGOclSlWy84T1ti8RLzF MSICXE1JExtWGCGsEN9PD6Y4jbdC6WK0g7E3Nx9D9R86anllyl4UQoTv6Kz5f7Ar 1jA3TIB/SHuqPlIOucOsZVG1vARnnzQBFPP5hDqaa3107JJmDNzId6SjPj/CKZNL yi2zg3/If6IN4j7ahB3+aFxGNFAzAXVs1wkuSyU21zd4lZbK4lxDeLjhd5M0l6Ra YxiEY4Ua7CIDqhJLmzf6ZlSXQCfSS+XE/Ntp898hn7C0cPJKhIpdG2DT4ARlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZM0lvVODHXSXfNjVIpQ+1n8z48gwHwYDVR0j BBgwFoAURCK0KxzKW2EYKtQdNbTyqtnqvgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM3NTQ3ZmMtNDhkNC00MTY5LWFlMzMtY2I0NTRkNmQ4YjkyLzAvNDQyMkI0MkIx Q0NBNUI2MTE4MkFENDFEMzVCNEYyQUFEOUVBQkUwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NDIyQjQyQjFDQ0E1QjYxMTgyQUQ0MUQzNUI0RjJBQUQ5RUFC RTA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvNDQyMkI0MkIxQ0NBNUI2MTE4MkFENDFEMzVCNEYy QUFEOUVBQkUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/j5vpkmJYUSbqvj0t9i88v9Dtc7HqiCtWQ UxLVPCMlZZjJUfDxoRJ2WrrUW0c+YRq6wJeqVT+db1zU/vox7SfRmKa42/BciK6W a8NLcgIFDXBt/r4RICrYD/3bMupVynNyaOEs7CRBlU1wgwoDFmRyz+wV228wd51p XJXnCICztKn9bbZao9NrS0hxQPBqW3tXpRHuNN3XCGLRG3zCBCG76pVgCCvvcDT0 KXYa4DwKZyeOPMiWisYliYH3C8Vvb4wdfIQJHKtItwE4P/W9y3Vx3eO68cbuwG5/ IOcGZ+tSpMozrvn/bEah3zVfX+J1hHZqWsT6ZE//Vla6fu4tm0Q= -----END CERTIFICATE-----Generated at Wed Jun 3 03:46:37 2026 by rpki-client