$ rpki-client -vvf rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft File: C4E9D4469828724936CAE63A417C0DE2014F205A.mft (raw, json) Hash identifier: W/V0WwanYsiRKFrWknrhl9mCc7Wk/Plo9WjM+7r22is= Subject key identifier: 84:27:47:48:27:5E:70:84:4F:62:C9:28:94:AF:64:71:E0:27:DB:FB Authority key identifier: C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A Certificate issuer: /CN=C4E9D4469828724936CAE63A417C0DE2014F205A Certificate serial: 65696F1656149A904D982B35688733B03E3FA758 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft Manifest number: 37 Signing time: Thu 11 Jun 2026 14:59:51 +0000 Manifest this update: Thu 11 Jun 2026 14:54:51 +0000 Manifest next update: Fri 12 Jun 2026 17:00:51 +0000 Files and hashes: 1: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: n2rjzJ/zLgB675Rxossmph/fEyHX/dgt2ieO+QslQMw=) 2: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: O5O73bIVgP3Ny3ggR2VTr1FgLepLoRHQrtRQ7caTd/s=) 3: C4E9D4469828724936CAE63A417C0DE2014F205A.crl (hash: Weirq/KtiZ8em63W1EUE6N6c/Jr9rw6b12AIkOq27+Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 05:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:69:6f:16:56:14:9a:90:4d:98:2b:35:68:87:33:b0:3e:3f:a7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4E9D4469828724936CAE63A417C0DE2014F205A Validity Not Before: Jun 11 14:54:51 2026 GMT Not After : Jun 12 17:00:51 2026 GMT Subject: CN=84274748275E70844F62C92894AF6471E027DBFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:66:50:23:89:41:53:ee:0f:bd:e4:a8:00:63: 4c:ac:04:67:9e:a1:a3:1b:69:af:b5:4a:6b:f5:8d: b8:7a:12:70:1c:7a:d5:01:47:8b:fb:c5:18:57:0e: 17:1a:cb:a8:90:80:c8:a2:75:97:b2:93:a4:34:68: 6c:a3:cf:ff:93:b3:04:a1:65:4a:4a:fa:d5:86:35: 4e:ea:3c:19:3f:ae:d0:d1:57:e6:ed:b3:0d:f7:ef: 86:36:15:a5:85:b7:d8:59:85:af:ef:29:64:e6:90: 20:13:d9:ec:cd:7f:b4:1f:3e:6c:aa:83:01:6f:41: fe:5d:d0:36:3a:1d:47:ed:7e:64:c0:bf:a6:cb:76: f0:40:a4:90:21:93:7e:45:38:70:2a:84:75:6f:7c: a2:32:5f:d2:a3:10:c9:95:0d:fc:00:6b:dd:5b:33: 6d:f5:ec:05:ef:6b:dd:04:ae:4d:a9:8c:81:90:45: 66:af:26:62:78:b1:83:a9:81:ae:42:b6:a5:c8:60: 5b:e4:e9:f9:f6:a0:6b:8d:4a:5e:ae:c0:19:11:76: 48:73:48:4e:e4:88:27:c9:8c:76:a0:de:e9:f7:66: 7f:1f:cb:e7:02:b7:02:3b:5a:b8:65:13:8d:05:7f: 01:fa:f4:49:4c:9a:96:23:b3:ac:7c:8a:d9:e9:ba: f6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:27:47:48:27:5E:70:84:4F:62:C9:28:94:AF:64:71:E0:27:DB:FB X509v3 Authority Key Identifier: keyid:C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:32:1f:39:0d:5b:59:40:c7:9d:92:b3:82:6b:26:81:f6:b5: 46:83:92:d6:e8:ce:7d:36:a9:ff:ad:6a:bb:65:52:f9:c9:f0: e4:9f:aa:b8:ad:37:73:fa:f6:8c:48:ab:ed:16:a2:ea:32:d1: 6f:da:dc:a5:89:15:0f:0f:7d:e8:a5:ec:1d:0b:2e:54:fe:ce: 3b:5f:0e:f8:a1:47:01:5d:af:d4:f5:f1:9a:ac:d6:9e:de:2d: ff:22:dd:22:e8:09:d8:79:b6:13:e9:85:af:31:11:8e:c9:73: e2:e4:db:f6:fd:a8:42:fa:09:04:27:60:0b:8a:92:c1:89:44: 4c:95:62:71:90:0d:8f:1a:d2:0a:f8:b3:61:bb:2e:3d:24:b4: 95:51:c5:89:09:ae:47:f7:53:96:da:33:f8:be:a1:28:03:c1: dc:9c:fa:57:6a:70:b3:15:04:44:29:87:cc:1f:fd:f3:dd:e9: c7:36:28:2a:ab:69:d2:bd:d2:cb:b9:2d:eb:a1:3f:16:76:57: 68:ff:0c:e8:14:a0:e5:a4:89:8c:28:90:64:64:5f:f9:4b:cf: 50:83:08:a5:38:b2:a6:ff:a6:19:86:03:a8:7c:62:82:c4:66: 23:fd:ff:c6:11:94:d4:c2:26:3f:af:90:37:dc:f9:06:c0:4c: 0c:19:d5:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZWlvFlYUmpBNmCs1aIczsD4/p1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRFOUQ0NDY5ODI4NzI0OTM2Q0FFNjNBNDE3QzBERTIw MTRGMjA1QTAeFw0yNjA2MTExNDU0NTFaFw0yNjA2MTIxNzAwNTFaMDMxMTAvBgNV BAMTKDg0Mjc0NzQ4Mjc1RTcwODQ0RjYyQzkyODk0QUY2NDcxRTAyN0RCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyZlAjiUFT7g+95KgAY0ysBGee oaMbaa+1Smv1jbh6EnAcetUBR4v7xRhXDhcay6iQgMiidZeyk6Q0aGyjz/+TswSh ZUpK+tWGNU7qPBk/rtDRV+btsw3374Y2FaWFt9hZha/vKWTmkCAT2ezNf7QfPmyq gwFvQf5d0DY6HUftfmTAv6bLdvBApJAhk35FOHAqhHVvfKIyX9KjEMmVDfwAa91b M2317AXva90Erk2pjIGQRWavJmJ4sYOpga5CtqXIYFvk6fn2oGuNSl6uwBkRdkhz SE7kiCfJjHag3un3Zn8fy+cCtwI7WrhlE40FfwH69ElMmpYjs6x8itnpuvb5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhCdHSCdecIRPYskolK9kceAn2/swHwYDVR0j BBgwFoAUxOnURpgockk2yuY6QXwN4gFPIFowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTU4MmZjYTktMzIyMi00NWI2LWI0MjItZmYyYzZhOWZkMjQ3LzAvQzRFOUQ0NDY5 ODI4NzI0OTM2Q0FFNjNBNDE3QzBERTIwMTRGMjA1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DNEU5RDQ0Njk4Mjg3MjQ5MzZDQUU2M0E0MTdDMERFMjAxNEYy MDVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvQzRFOUQ0NDY5ODI4NzI0OTM2Q0FFNjNBNDE3QzBE RTIwMTRGMjA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYyHzkNW1lAx52Ss4JrJoH2tUaDktbozn02 qf+tartlUvnJ8OSfqritN3P69oxIq+0Wouoy0W/a3KWJFQ8Pfeil7B0LLlT+zjtf DvihRwFdr9T18Zqs1p7eLf8i3SLoCdh5thPpha8xEY7Jc+Lk2/b9qEL6CQQnYAuK ksGJREyVYnGQDY8a0gr4s2G7Lj0ktJVRxYkJrkf3U5baM/i+oSgDwdyc+ldqcLMV BEQph8wf/fPd6cc2KCqradK90su5LeuhPxZ2V2j/DOgUoOWkiYwokGRkX/lLz1CD CKU4sqb/phmGA6h8YoLEZiP9/8YRlNTCJj+vkDfc+QbATAwZ1dY= -----END CERTIFICATE-----Generated at Thu Jun 11 20:42:20 2026 by rpki-client