$ rpki-client -vvf rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft File: 4BEF373BC53710D136B40D9F928C485C94C670AC.mft (raw, json) Hash identifier: TTpgaPoVZzARyXPw3ALiZQR/tvTVjX8tXGiv7WJ8qf4= Subject key identifier: 21:CD:5C:3F:36:D6:6C:EF:AE:F0:7F:82:D9:7D:E0:A6:29:2C:F0:14 Authority key identifier: 4B:EF:37:3B:C5:37:10:D1:36:B4:0D:9F:92:8C:48:5C:94:C6:70:AC Certificate issuer: /CN=4BEF373BC53710D136B40D9F928C485C94C670AC Certificate serial: 17C321118E4941598DB2CE43E6A23A1889420EA1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft Manifest number: 37 Signing time: Thu 11 Jun 2026 20:15:49 +0000 Manifest this update: Thu 11 Jun 2026 20:10:49 +0000 Manifest next update: Fri 12 Jun 2026 20:55:49 +0000 Files and hashes: 1: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: u0AoFky6YChlG8p9ccsv4zHYDeuKyJl51gZR3MByaxM=) 2: 4BEF373BC53710D136B40D9F928C485C94C670AC.crl (hash: i3pobKD2uiDmUrdR98tTvycFcx3PhYCxZbwk1Ev/CDA=) 3: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: BeyFn4HdqSwVXnWm2K4O6j5GAQt7VRMXeOWfjpsb09s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.crl rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 20:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c3:21:11:8e:49:41:59:8d:b2:ce:43:e6:a2:3a:18:89:42:0e:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BEF373BC53710D136B40D9F928C485C94C670AC Validity Not Before: Jun 11 20:10:49 2026 GMT Not After : Jun 12 20:55:49 2026 GMT Subject: CN=21CD5C3F36D66CEFAEF07F82D97DE0A6292CF014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6c:88:f4:98:32:c6:8f:aa:86:38:23:e2:0f: 66:8c:83:18:02:2e:c4:d9:49:7a:b7:69:7a:af:36: 68:8e:d6:14:4e:44:48:9d:ca:85:31:07:b2:0a:4b: 8a:16:46:be:92:75:a4:2d:d0:f6:3c:b8:b5:59:b7: ae:a2:db:d4:9b:b0:c6:56:4e:22:a7:92:63:86:1a: 93:8a:cd:a3:8a:0e:a9:2d:85:5a:2c:d8:92:22:24: 19:bb:3a:92:da:9a:4d:d6:d5:ee:8e:a0:39:30:04: fa:70:25:54:7a:8b:ad:0a:2b:bc:51:36:fc:54:85: 2c:bc:ee:d2:88:6f:47:b4:96:0d:f6:55:e0:ff:92: ba:8a:96:28:57:58:19:5b:07:a8:4e:d7:08:37:9a: 32:6b:e9:6d:ef:2c:61:c9:b6:5e:3d:d7:00:55:fd: 9c:cd:a1:ab:a5:4f:33:ab:a8:8a:73:98:86:fd:42: f3:b7:46:38:39:66:31:cd:93:e0:1e:5f:1f:e3:09: e6:cb:1d:f0:cd:70:a4:bf:f6:10:de:2e:18:88:7b: 94:13:2f:e4:4c:3f:7f:aa:c2:00:9d:39:26:93:66: 8e:7c:1d:22:89:ef:47:e9:3a:8b:bc:14:89:5b:10: 97:e5:cf:1e:94:f5:a8:38:ac:58:70:1f:92:82:bc: ff:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CD:5C:3F:36:D6:6C:EF:AE:F0:7F:82:D9:7D:E0:A6:29:2C:F0:14 X509v3 Authority Key Identifier: keyid:4B:EF:37:3B:C5:37:10:D1:36:B4:0D:9F:92:8C:48:5C:94:C6:70:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:22:54:c5:b9:db:10:43:58:8f:ed:81:82:9f:91:52:5a:1f: e7:3f:44:10:7a:72:3b:45:d4:7e:dd:a0:0e:95:1e:b1:83:c3: 53:63:32:a8:cc:38:1e:3f:b1:96:9e:39:53:0a:d4:e2:4a:a2: 65:61:45:26:0b:5d:f3:5b:f9:ac:76:88:92:67:7d:6c:ba:3a: a3:61:75:49:37:36:09:63:ed:87:35:b8:e3:ac:36:ba:80:0d: f4:d9:fc:86:f4:00:f5:b1:f5:9e:f0:40:8a:e3:f1:42:7a:37: 9a:15:26:ce:fb:fd:28:77:84:e9:7a:64:c8:8b:cf:d6:6e:77: 59:33:17:a3:56:9a:0c:4d:e0:d8:38:a8:57:ab:e2:cc:1d:b1: 0a:7b:13:dd:cb:25:d2:8e:e5:07:94:fa:08:1b:3a:72:59:ca: c3:d8:7d:e1:0a:24:9d:32:c9:5f:c1:e4:dc:f6:ec:ac:cb:af: 12:79:9e:30:c7:86:47:cd:f6:ca:d1:9c:19:15:d1:10:86:a7: b4:77:d5:33:b8:5a:6a:9f:05:b5:3d:2a:ba:ff:e1:d8:2b:9a: db:2f:6f:9e:e3:ac:e4:27:d0:e6:b4:a3:3c:38:94:2f:f0:50: 0d:8f:03:48:c2:26:57:f4:08:87:a1:a7:51:49:4a:01:52:2b: c4:62:12:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF8MhEY5JQVmNss5D5qI6GIlCDqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFRjM3M0JDNTM3MTBEMTM2QjQwRDlGOTI4QzQ4NUM5 NEM2NzBBQzAeFw0yNjA2MTEyMDEwNDlaFw0yNjA2MTIyMDU1NDlaMDMxMTAvBgNV BAMTKDIxQ0Q1QzNGMzZENjZDRUZBRUYwN0Y4MkQ5N0RFMEE2MjkyQ0YwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbIj0mDLGj6qGOCPiD2aMgxgC LsTZSXq3aXqvNmiO1hROREidyoUxB7IKS4oWRr6SdaQt0PY8uLVZt66i29SbsMZW TiKnkmOGGpOKzaOKDqkthVos2JIiJBm7OpLamk3W1e6OoDkwBPpwJVR6i60KK7xR NvxUhSy87tKIb0e0lg32VeD/krqKlihXWBlbB6hO1wg3mjJr6W3vLGHJtl491wBV /ZzNoaulTzOrqIpzmIb9QvO3Rjg5ZjHNk+AeXx/jCebLHfDNcKS/9hDeLhiIe5QT L+RMP3+qwgCdOSaTZo58HSKJ70fpOou8FIlbEJflzx6U9ag4rFhwH5KCvP8vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIc1cPzbWbO+u8H+C2X3gpiks8BQwHwYDVR0j BBgwFoAUS+83O8U3ENE2tA2fkoxIXJTGcKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDNhZGU5YzAtY2RlMS00N2YwLTljZDItNGE1N2JkZGUxNGU4LzAvNEJFRjM3M0JD NTM3MTBEMTM2QjQwRDlGOTI4QzQ4NUM5NEM2NzBBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkVGMzczQkM1MzcxMEQxMzZCNDBEOUY5MjhDNDg1Qzk0QzY3 MEFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvNEJFRjM3M0JDNTM3MTBEMTM2QjQwRDlGOTI4QzQ4 NUM5NEM2NzBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkiVMW52xBDWI/tgYKfkVJaH+c/RBB6cjtF 1H7doA6VHrGDw1NjMqjMOB4/sZaeOVMK1OJKomVhRSYLXfNb+ax2iJJnfWy6OqNh dUk3Nglj7Yc1uOOsNrqADfTZ/Ib0APWx9Z7wQIrj8UJ6N5oVJs77/Sh3hOl6ZMiL z9Zud1kzF6NWmgxN4Ng4qFer4swdsQp7E93LJdKO5QeU+ggbOnJZysPYfeEKJJ0y yV/B5Nz27KzLrxJ5njDHhkfN9srRnBkV0RCGp7R31TO4WmqfBbU9Krr/4dgrmtsv b57jrOQn0Oa0ozw4lC/wUA2PA0jCJlf0CIehp1FJSgFSK8RiEns= -----END CERTIFICATE-----Generated at Fri Jun 12 06:03:38 2026 by rpki-client