$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft File: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft (raw, json) Hash identifier: sIt36ZEj4IeKOibsg9bLWywrk8bOocC7ZPerWdN67dg= Subject key identifier: E6:5D:68:6B:19:72:54:45:9A:B6:76:B3:1F:E6:2C:1F:BD:33:FD:5A Authority key identifier: 4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 Certificate issuer: /CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Certificate serial: 18AC822AC6587D57218641FACA947E548C11299D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 05:00:55 +0000 Manifest this update: Sat 20 Jun 2026 04:55:55 +0000 Manifest next update: Sun 21 Jun 2026 07:35:55 +0000 Files and hashes: 1: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: fT4vbblEyZhxJwWJVYRrx1888tV3IqafJdFzwCoLzIU=) 2: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl (hash: bwUjdkhjuPzSFwi2OO8p0ruDMa7i4Pe2D9nbQkV+1SM=) 3: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: 6pyTfAlzYTBLrXJyXEzbPma6QqEhBhRMnugG93bjYxI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ac:82:2a:c6:58:7d:57:21:86:41:fa:ca:94:7e:54:8c:11:29:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Validity Not Before: Jun 20 04:55:55 2026 GMT Not After : Jun 21 07:35:55 2026 GMT Subject: CN=E65D686B197254459AB676B31FE62C1FBD33FD5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fc:e6:8f:c7:35:67:a8:08:ad:d9:b3:33:b8: 14:80:72:06:5b:21:99:92:03:ac:d2:b5:a3:06:db: 6a:6e:e3:a2:4c:ed:44:65:7d:50:c0:4d:00:ab:35: 3e:3c:7f:12:ed:0c:22:e0:37:e9:e7:82:3e:ac:44: c2:bf:df:57:6c:cb:95:95:d4:7e:c7:17:ff:50:fc: 92:74:e2:b3:f3:76:cd:a3:65:15:f3:9b:eb:db:d9: e5:fa:e7:be:5e:d9:0a:63:bf:f9:6e:a0:02:87:35: 09:cf:0d:ee:f2:a6:a7:d3:80:06:65:d5:7b:27:29: f0:af:ca:da:07:85:de:9b:79:e2:5b:1a:02:a4:23: 9e:2e:4a:0c:9a:13:27:a6:fe:fb:e7:d2:f3:c7:7d: 24:b1:b9:79:3f:34:2d:de:ff:16:6b:9b:c8:a5:a6: 2b:6d:c4:d7:8a:f4:f1:e1:5b:4c:06:60:e9:d0:56: 45:eb:86:25:0b:bc:67:5e:92:de:8a:19:27:94:ed: cd:2c:f1:bc:56:46:56:63:1f:6f:8a:d4:74:3c:2a: f8:d3:e0:4e:48:ed:cd:93:e8:51:c8:dc:15:a7:42: 46:01:47:81:ea:42:b8:55:49:e4:5c:21:ff:54:32: d3:4f:56:a4:c7:b7:ed:25:13:c8:df:bc:46:04:57: 48:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5D:68:6B:19:72:54:45:9A:B6:76:B3:1F:E6:2C:1F:BD:33:FD:5A X509v3 Authority Key Identifier: keyid:4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:6e:83:b1:c4:73:d9:a8:87:ca:2c:0a:de:55:81:28:ff:7f: d3:27:95:58:49:3b:b9:88:0d:3f:1e:e2:31:1f:5e:1e:f0:b4: 00:81:4b:1a:a8:09:30:ff:59:f4:b3:27:27:31:e6:09:f7:ad: bd:f3:90:2f:e2:9c:ed:fd:9a:ed:d4:90:2b:aa:a1:b1:18:86: 30:8d:80:8c:5d:98:8d:48:47:8a:c7:e5:cd:01:3c:17:1b:cc: 43:80:8d:12:71:54:58:50:c2:52:44:6e:63:b3:4d:4f:1d:e3: ca:85:13:10:d8:24:40:75:95:4e:79:df:04:74:8e:82:31:5a: f3:4f:5e:c9:ba:2c:b0:ef:fa:97:d8:3f:61:25:75:27:8c:96: 65:57:57:fa:bf:82:7d:1e:54:27:22:4a:28:96:87:28:33:db: 60:a9:03:30:0a:c8:28:90:d7:b0:e1:20:bc:64:c5:7d:1c:81: 21:59:ce:b5:aa:4a:3a:0d:0e:cc:37:67:08:8e:02:de:fb:21: 03:ba:9f:83:cc:79:b5:e7:5d:7c:b5:a3:6f:e3:f7:28:87:cf: ad:44:9f:bc:1b:fa:b1:b2:19:69:74:14:d2:06:08:29:17:65: 42:64:c0:8a:85:15:d7:b1:48:cb:62:6a:cf:b8:1f:aa:d1:72: fc:02:ff:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGKyCKsZYfVchhkH6ypR+VIwRKZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JCRTJE MEUwRDM5MTAeFw0yNjA2MjAwNDU1NTVaFw0yNjA2MjEwNzM1NTVaMDMxMTAvBgNV BAMTKEU2NUQ2ODZCMTk3MjU0NDU5QUI2NzZCMzFGRTYyQzFGQkQzM0ZENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/OaPxzVnqAit2bMzuBSAcgZb IZmSA6zStaMG22pu46JM7URlfVDATQCrNT48fxLtDCLgN+nngj6sRMK/31dsy5WV 1H7HF/9Q/JJ04rPzds2jZRXzm+vb2eX6575e2Qpjv/luoAKHNQnPDe7ypqfTgAZl 1XsnKfCvytoHhd6beeJbGgKkI54uSgyaEyem/vvn0vPHfSSxuXk/NC3e/xZrm8il pittxNeK9PHhW0wGYOnQVkXrhiULvGdekt6KGSeU7c0s8bxWRlZjH2+K1HQ8KvjT 4E5I7c2T6FHI3BWnQkYBR4HqQrhVSeRcIf9UMtNPVqTHt+0lE8jfvEYEV0jtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5l1oaxlyVEWatnazH+YsH70z/VowHwYDVR0j BBgwFoAUTUy+ZRqiIPkIjk27vJe74tDg05EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwN2UzZDgtOWJmYy00NDgzLWEyZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUx QUEyMjBGOTA4OEU0REJCQkM5N0JCRTJEMEUwRDM5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRDQkU2NTFBQTIyMEY5MDg4RTREQkJCQzk3QkJFMkQwRTBE MzkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy ZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JC RTJEMEUwRDM5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJug7HEc9moh8osCt5VgSj/f9MnlVhJO7mI DT8e4jEfXh7wtACBSxqoCTD/WfSzJycx5gn3rb3zkC/inO39mu3UkCuqobEYhjCN gIxdmI1IR4rH5c0BPBcbzEOAjRJxVFhQwlJEbmOzTU8d48qFExDYJEB1lU553wR0 joIxWvNPXsm6LLDv+pfYP2EldSeMlmVXV/q/gn0eVCciSiiWhygz22CpAzAKyCiQ 17DhILxkxX0cgSFZzrWqSjoNDsw3ZwiOAt77IQO6n4PMebXnXXy1o2/j9yiHz61E n7wb+rGyGWl0FNIGCCkXZUJkwIqFFdexSMtias+4H6rRcvwC/0g= -----END CERTIFICATE-----Generated at Sat Jun 20 15:44:43 2026 by rpki-client