$ rpki-client -vvf rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft File: 4D687A8309B055D62F3035664A59E96297B81009.mft (raw, json) Hash identifier: /6km4ZUNh92ILhLJSB0Ixbnj7c1Ozo8QeVNxvurTBC0= Subject key identifier: 6A:3E:10:70:A7:4E:1D:D4:6A:54:A6:1B:1F:FA:8D:E4:A9:96:3C:26 Authority key identifier: 4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 Certificate issuer: /CN=4D687A8309B055D62F3035664A59E96297B81009 Certificate serial: 4939D0E1FBE686E1D1D1F38D16C64A069A8EAACF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 11:00:28 +0000 Manifest this update: Thu 18 Jun 2026 10:55:28 +0000 Manifest next update: Fri 19 Jun 2026 13:52:28 +0000 Files and hashes: 1: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: tjAZ37II5WIJfFalAyrLUGpbSIz9sgJWYsOEq442hNI=) 2: 4D687A8309B055D62F3035664A59E96297B81009.crl (hash: CAoNlOWPVtYBLY9O5GKMteaVgxT106Fw7/br2jQdBKE=) 3: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: qwKrohM8yd0iJN/MCZ42zzEDzwWYAIoaAZk2ayeImcw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:39:d0:e1:fb:e6:86:e1:d1:d1:f3:8d:16:c6:4a:06:9a:8e:aa:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D687A8309B055D62F3035664A59E96297B81009 Validity Not Before: Jun 18 10:55:28 2026 GMT Not After : Jun 19 13:52:28 2026 GMT Subject: CN=6A3E1070A74E1DD46A54A61B1FFA8DE4A9963C26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3f:a3:ab:bd:4a:c0:f6:9b:e1:69:8d:9d:af: 86:1c:df:e5:2b:b8:11:e3:d1:ac:0e:69:2f:c3:2e: 74:a9:46:be:a2:51:59:08:08:91:00:57:6f:9f:95: dc:de:27:0b:51:ba:69:13:c7:46:7c:73:22:96:5f: 49:55:ef:d0:18:7b:00:c4:22:e9:34:c9:66:a8:f7: c6:5a:53:00:7c:d1:fc:8c:f2:27:e3:c4:a9:bb:24: 38:7b:7b:55:63:7d:73:11:82:c6:3a:fe:c1:c1:07: a5:36:3e:6c:76:87:af:d4:27:de:e6:44:2a:ec:c5: 89:47:a4:65:ed:f9:03:9e:26:99:f2:a3:0f:a6:83: 3d:ba:df:1b:12:a3:b5:db:76:33:df:e8:74:87:21: fd:d1:23:3a:15:dc:d5:e7:f4:27:e5:6f:64:e9:2b: 1f:62:4a:29:b3:78:94:45:66:e6:4b:d1:2d:e8:30: 3d:a0:cd:d4:94:3c:3a:64:c5:2b:ad:f2:c8:3a:ff: 46:f7:4f:f1:41:e1:68:ed:0e:27:b3:74:f4:b4:a8: cb:23:de:de:1e:a8:57:e8:c0:88:57:ad:68:c5:28: 85:f5:d5:cc:81:a5:18:1e:18:18:e1:61:41:83:cd: 91:5b:90:b3:d7:0a:26:e7:7a:29:66:fd:f6:8e:e5: e5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3E:10:70:A7:4E:1D:D4:6A:54:A6:1B:1F:FA:8D:E4:A9:96:3C:26 X509v3 Authority Key Identifier: keyid:4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:09:72:15:d9:3f:22:16:bb:bb:2b:83:0b:5d:cc:54:29:fa: c8:75:8b:15:25:a6:89:2f:1d:f3:16:0b:1f:eb:47:d3:d3:cc: 14:62:8b:6b:e9:e4:dc:e9:60:e7:42:b8:80:48:4c:55:3e:3c: e4:a9:46:84:ed:81:42:fb:bc:62:8e:c9:08:35:7b:1e:cc:b7: b6:46:58:81:e6:39:b6:a0:3d:cb:2a:06:ba:e8:ca:9f:23:f6: e8:e9:ef:bd:74:47:d1:43:a4:d5:11:9a:a2:05:17:15:aa:b0: 51:07:f8:84:2f:2e:6a:c1:2e:3e:ff:10:86:0b:da:c9:a9:63: c5:1f:d5:43:80:75:b8:ca:76:6d:fe:b3:d7:08:5a:7c:1c:99: 7b:72:b1:d2:65:60:a3:2d:5c:5a:63:8e:70:f7:8c:7a:4d:47: 34:9a:ae:55:bd:5c:ad:03:d7:f8:17:26:ef:3d:fa:ac:99:5f: 04:b0:b3:e4:f5:b8:85:d0:75:4d:34:a8:be:f6:4d:b8:3c:fb: e7:8e:03:d2:5c:a5:d2:95:a8:45:15:0f:41:64:f8:23:26:73: 36:79:b4:99:82:b0:03:f5:ea:79:6e:89:4b:ef:13:a7:1c:df: b9:1e:9c:b4:ae:bb:c5:73:4e:84:0a:65:22:cd:b8:76:a5:cb: f2:12:b5:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSTnQ4fvmhuHR0fONFsZKBpqOqs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5 N0I4MTAwOTAeFw0yNjA2MTgxMDU1MjhaFw0yNjA2MTkxMzUyMjhaMDMxMTAvBgNV BAMTKDZBM0UxMDcwQTc0RTFERDQ2QTU0QTYxQjFGRkE4REU0QTk5NjNDMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFP6OrvUrA9pvhaY2dr4Yc3+Ur uBHj0awOaS/DLnSpRr6iUVkICJEAV2+fldzeJwtRumkTx0Z8cyKWX0lV79AYewDE Iuk0yWao98ZaUwB80fyM8ifjxKm7JDh7e1VjfXMRgsY6/sHBB6U2Pmx2h6/UJ97m RCrsxYlHpGXt+QOeJpnyow+mgz263xsSo7XbdjPf6HSHIf3RIzoV3NXn9Cflb2Tp Kx9iSimzeJRFZuZL0S3oMD2gzdSUPDpkxSut8sg6/0b3T/FB4WjtDiezdPS0qMsj 3t4eqFfowIhXrWjFKIX11cyBpRgeGBjhYUGDzZFbkLPXCibneilm/faO5eXpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaj4QcKdOHdRqVKYbH/qN5KmWPCYwHwYDVR0j BBgwFoAUTWh6gwmwVdYvMDVmSlnpYpe4EAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg5MTM4OTMtNWY2NC00YTVlLWE4ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMw OUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5N0I4MTAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80RDY4N0E4MzA5QjA1NUQ2MkYzMDM1NjY0QTU5RTk2Mjk3Qjgx MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5 NjI5N0I4MTAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAJchXZPyIWu7srgwtdzFQp+sh1ixUlpokv HfMWCx/rR9PTzBRii2vp5NzpYOdCuIBITFU+POSpRoTtgUL7vGKOyQg1ex7Mt7ZG WIHmObagPcsqBrroyp8j9ujp7710R9FDpNURmqIFFxWqsFEH+IQvLmrBLj7/EIYL 2smpY8Uf1UOAdbjKdm3+s9cIWnwcmXtysdJlYKMtXFpjjnD3jHpNRzSarlW9XK0D 1/gXJu89+qyZXwSws+T1uIXQdU00qL72Tbg8++eOA9JcpdKVqEUVD0Fk+CMmczZ5 tJmCsAP16nluiUvvE6cc37kenLSuu8VzToQKZSLNuHaly/IStaA= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:59 2026 by rpki-client