$ rpki-client -vvf rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft File: 4A690EC844644FC7C72921E7FA9D8B8827A68133.mft (raw, json) Hash identifier: 6JEQN2EKgj6tVLgbWS5+llpe2keIstnLUXfyotoieu4= Subject key identifier: 2E:C0:EA:D9:C9:52:89:92:2D:D4:B1:B1:99:57:F2:73:0B:C7:FE:1A Authority key identifier: 4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33 Certificate issuer: /CN=4A690EC844644FC7C72921E7FA9D8B8827A68133 Certificate serial: 354D5FDB19D354E4F5F276935A57084026DEB3A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:05:38 +0000 Manifest this update: Tue 02 Jun 2026 17:00:38 +0000 Manifest next update: Wed 03 Jun 2026 17:14:38 +0000 Files and hashes: 1: 3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa (hash: pESLqdHWwG9pCnMMcNgeB95CfcGiK8SY4ni1NsaDZJU=) 2: 323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (hash: UugzJo0XG4CnPFobTcgFSX6/vfuVvh/vQ7HS0KjLKPQ=) 3: 4A690EC844644FC7C72921E7FA9D8B8827A68133.crl (hash: Jn6gE4BQor8ZXpV2b25TUElPDCEHGUEImuoHtelXxl4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:4d:5f:db:19:d3:54:e4:f5:f2:76:93:5a:57:08:40:26:de:b3:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A690EC844644FC7C72921E7FA9D8B8827A68133 Validity Not Before: Jun 2 17:00:38 2026 GMT Not After : Jun 3 17:14:38 2026 GMT Subject: CN=2EC0EAD9C95289922DD4B1B19957F2730BC7FE1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:03:44:8d:d6:8a:25:b4:68:f8:b0:65:6a:28: fd:43:bb:e1:4c:53:35:05:51:08:4e:3d:51:c7:1a: d9:3f:f4:9d:55:90:e6:2d:a4:c4:c2:60:9b:f3:35: 04:01:9b:5f:74:7b:b0:80:af:f2:0b:80:52:89:44: 44:6c:a9:54:5b:bd:34:cc:77:7e:96:9b:34:69:b5: 93:f7:b7:ac:e9:1c:3f:c7:c6:59:d6:90:f0:3b:d9: 2a:66:c3:51:5d:98:ea:c0:87:a0:00:34:e8:0d:d7: 13:4e:79:fe:12:de:55:e8:6a:e1:68:7d:04:c4:fd: 35:6a:c6:bd:66:75:e4:68:ce:ed:0f:18:36:ea:53: d8:c2:41:84:48:4b:e3:be:fc:05:49:a1:aa:cd:a2: 2f:b8:a5:90:e1:56:bd:29:eb:b7:84:cf:04:2b:07: 45:76:3d:f3:ae:b0:8a:75:ee:ba:0d:2f:bf:71:2f: 3b:0a:d5:ce:a3:4b:37:b7:f2:bc:f9:43:60:78:27: 9e:9f:39:46:60:14:52:f2:c4:39:3a:86:0f:18:59: 6d:f2:b8:85:06:ca:36:07:89:51:9c:6e:50:9a:27: dc:b9:33:9e:81:e6:7e:58:99:d4:32:8f:bb:56:28: 40:05:6f:6b:ed:f9:da:f5:45:0e:8c:ec:7f:b8:b2: 92:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C0:EA:D9:C9:52:89:92:2D:D4:B1:B1:99:57:F2:73:0B:C7:FE:1A X509v3 Authority Key Identifier: keyid:4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:98:19:f9:17:ec:80:40:20:93:58:2f:d2:a4:d2:77:37:57: 86:08:c5:45:e3:31:a9:4c:45:00:b0:50:76:dc:cc:0e:ef:3b: 71:60:41:4f:28:3b:b1:ea:7f:fc:84:40:76:36:e7:1f:02:0e: d2:f2:bc:d2:19:fb:d3:51:58:30:1d:ae:0c:b0:42:86:42:f5: ed:2c:cc:a0:e5:bc:89:a7:13:78:4f:2f:53:3c:90:a3:c5:0f: 39:d5:da:ea:95:5a:6d:54:93:2c:ac:e9:44:53:d3:45:9d:0a: 5b:3b:d6:09:9c:4a:16:42:c7:57:1c:a8:b0:56:34:46:1f:18: 35:66:00:bd:7f:27:95:38:2a:9d:23:0b:1a:ec:1d:0e:6f:55: 3b:13:8d:da:57:93:68:f3:76:a5:17:f6:a8:89:c1:01:5d:b4: 8b:07:65:7f:dc:88:60:53:4a:6a:6b:06:55:67:7e:04:09:b3: de:5b:15:b9:3d:73:7c:76:23:17:d8:92:21:13:71:36:7c:a2: 7c:c1:9a:0d:6b:3b:6c:7a:4e:bc:cb:3a:85:1f:4a:6d:4e:7d: ba:5e:70:d0:09:92:c8:52:b4:9a:72:94:d0:2e:b0:ca:1c:92: f5:3a:1f:be:a0:cf:3d:d5:f4:cd:82:05:eb:c1:86:13:8b:17: b3:1c:91:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNU1f2xnTVOT18naTWlcIQCbes6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2OTBFQzg0NDY0NEZDN0M3MjkyMUU3RkE5RDhCODgy N0E2ODEzMzAeFw0yNjA2MDIxNzAwMzhaFw0yNjA2MDMxNzE0MzhaMDMxMTAvBgNV BAMTKDJFQzBFQUQ5Qzk1Mjg5OTIyREQ0QjFCMTk5NTdGMjczMEJDN0ZFMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtA0SN1ooltGj4sGVqKP1Du+FM UzUFUQhOPVHHGtk/9J1VkOYtpMTCYJvzNQQBm190e7CAr/ILgFKJRERsqVRbvTTM d36WmzRptZP3t6zpHD/HxlnWkPA72Spmw1FdmOrAh6AANOgN1xNOef4S3lXoauFo fQTE/TVqxr1mdeRozu0PGDbqU9jCQYRIS+O+/AVJoarNoi+4pZDhVr0p67eEzwQr B0V2PfOusIp17roNL79xLzsK1c6jSze38rz5Q2B4J56fOUZgFFLyxDk6hg8YWW3y uIUGyjYHiVGcblCaJ9y5M56B5n5YmdQyj7tWKEAFb2vt+dr1RQ6M7H+4spLVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULsDq2clSiZIt1LGxmVfycwvH/howHwYDVR0j BBgwFoAUSmkOyERkT8fHKSHn+p2LiCemgTMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTBmZjAyMmEtOWIxNi00YjRjLTk4YTItNTM0OTk0ZjU4OWQwLzAvNEE2OTBFQzg0 NDY0NEZDN0M3MjkyMUU3RkE5RDhCODgyN0E2ODEzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTY5MEVDODQ0NjQ0RkM3QzcyOTIxRTdGQTlEOEI4ODI3QTY4 MTMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTBmZjAyMmEtOWIxNi00YjRjLTk4 YTItNTM0OTk0ZjU4OWQwLzAvNEE2OTBFQzg0NDY0NEZDN0M3MjkyMUU3RkE5RDhC ODgyN0E2ODEzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKYGfkX7IBAIJNYL9Kk0nc3V4YIxUXjMalM RQCwUHbczA7vO3FgQU8oO7Hqf/yEQHY25x8CDtLyvNIZ+9NRWDAdrgywQoZC9e0s zKDlvImnE3hPL1M8kKPFDznV2uqVWm1Ukyys6URT00WdCls71gmcShZCx1ccqLBW NEYfGDVmAL1/J5U4Kp0jCxrsHQ5vVTsTjdpXk2jzdqUX9qiJwQFdtIsHZX/ciGBT SmprBlVnfgQJs95bFbk9c3x2IxfYkiETcTZ8onzBmg1rO2x6TrzLOoUfSm1Ofbpe cNAJkshStJpylNAusMockvU6H76gzz3V9M2CBevBhhOLF7MckVs= -----END CERTIFICATE-----Generated at Tue Jun 2 21:36:05 2026 by rpki-client