$ rpki-client -vvf rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft File: 4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft (raw, json) Hash identifier: Psg8BnGp5Pn1gm5sxI8iwLIeLvte7prh/cECaXy3JgA= Subject key identifier: C8:BC:1C:5C:1D:39:AF:68:11:71:39:90:95:C5:33:EF:06:B9:97:F6 Authority key identifier: 4C:3B:BD:86:83:DD:42:C4:70:F4:E3:F8:30:B1:FA:BF:89:F4:B5:F2 Certificate issuer: /CN=4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2 Certificate serial: 14BEE9CD3C48B7D2CE6C9066942CF1207CF2CCE1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 20:25:38 +0000 Manifest this update: Fri 19 Jun 2026 20:20:38 +0000 Manifest next update: Sat 20 Jun 2026 22:38:38 +0000 Files and hashes: 1: 4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl (hash: QeJLOFslzGsIJlS4CVhavf4NgbqRtWvoIRpbhc1tqMA=) 2: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: ic2hBdRaZAyBk1MlONf57Uzem8Aq/501RDCs5wnZzAc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:be:e9:cd:3c:48:b7:d2:ce:6c:90:66:94:2c:f1:20:7c:f2:cc:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2 Validity Not Before: Jun 19 20:20:38 2026 GMT Not After : Jun 20 22:38:38 2026 GMT Subject: CN=C8BC1C5C1D39AF681171399095C533EF06B997F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a7:fb:7c:a9:75:cb:4e:a5:83:80:b9:5f:37: 29:9b:83:89:16:31:37:c4:c1:e3:f1:f9:58:54:78: 98:32:6b:3c:84:a0:ef:87:1f:6f:f8:2f:69:0d:4f: 92:74:b4:dd:00:28:f8:ac:18:74:e5:9e:65:b1:5a: 47:39:e0:e9:d4:7d:e4:be:06:ae:19:f0:e7:05:5f: 9d:c8:12:10:d3:ad:97:b3:4c:bd:38:a4:14:af:b3: 96:04:48:02:72:21:1a:88:cb:f3:cd:8a:58:fb:1c: 19:06:d9:b5:4d:90:de:81:52:7f:e3:e5:99:98:2c: 1d:d9:72:4f:fb:a6:1f:f2:2b:4c:24:05:3e:8a:d0: 5f:ab:20:52:66:e4:03:0c:12:cc:e9:2d:44:87:ee: 58:83:2e:12:76:03:5f:25:8c:ed:da:13:07:6a:c1: ee:61:4f:56:ec:83:a9:fc:f5:18:5e:b9:4d:df:fb: 1c:69:a7:de:bf:51:01:2d:86:2b:17:31:7d:0c:7f: d0:bd:85:09:08:0c:f0:eb:92:37:c1:1c:a8:42:97: d8:39:6c:eb:17:3c:57:e8:ae:e3:a2:8f:b4:d5:37: c5:ba:57:21:3f:4d:40:a6:c7:27:e6:f8:a0:ba:c3: 53:13:de:c0:54:df:ca:83:64:e3:f4:c8:c7:51:eb: 31:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BC:1C:5C:1D:39:AF:68:11:71:39:90:95:C5:33:EF:06:B9:97:F6 X509v3 Authority Key Identifier: keyid:4C:3B:BD:86:83:DD:42:C4:70:F4:E3:F8:30:B1:FA:BF:89:F4:B5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c2:18:1b:6c:04:9b:75:58:d0:dc:33:d9:ee:10:a3:f8:d0: bf:79:5a:f3:cb:7e:66:e9:22:ee:5f:2b:29:ba:ad:82:09:09: 05:45:3e:2c:86:5e:ac:44:11:db:9b:13:68:ac:e1:a8:8c:b7: 49:a2:cc:7e:aa:58:6e:43:f7:4a:0c:b5:af:06:15:9f:f0:0c: 69:04:b6:9d:84:c1:f7:67:22:11:77:f5:b5:fc:24:09:b6:bc: 43:ea:e3:8e:a7:47:80:8b:3d:36:e0:48:93:70:56:c5:30:a8: 9f:f8:a4:ba:b8:5e:f6:1c:99:fe:28:2d:9f:48:7f:52:e2:df: 5d:25:cf:4c:18:77:38:8b:ba:46:2c:6c:c4:3e:57:67:12:2a: 07:a0:03:6d:2b:4a:3c:f9:27:12:92:93:17:98:52:2b:34:76: 0b:39:f3:26:c4:03:ac:6f:b4:b5:fa:d5:11:d4:9d:66:ab:60: f0:f4:a5:cf:fc:88:e3:7c:4f:b9:47:c7:d6:56:e1:cf:ec:68: 5d:0f:91:33:43:b9:7a:dc:ac:b7:b0:91:8a:b1:57:0a:e2:54: bd:c1:1d:15:db:63:00:d6:5b:c5:1c:56:71:7b:da:db:e8:c2: 9b:47:ce:05:85:1c:31:1e:d1:ba:ca:a2:8a:82:bf:6d:50:52: 0f:dd:ac:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFL7pzTxIt9LObJBmlCzxIHzyzOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzQkJEODY4M0RENDJDNDcwRjRFM0Y4MzBCMUZBQkY4 OUY0QjVGMjAeFw0yNjA2MTkyMDIwMzhaFw0yNjA2MjAyMjM4MzhaMDMxMTAvBgNV BAMTKEM4QkMxQzVDMUQzOUFGNjgxMTcxMzk5MDk1QzUzM0VGMDZCOTk3RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCop/t8qXXLTqWDgLlfNymbg4kW MTfEwePx+VhUeJgyazyEoO+HH2/4L2kNT5J0tN0AKPisGHTlnmWxWkc54OnUfeS+ Bq4Z8OcFX53IEhDTrZezTL04pBSvs5YESAJyIRqIy/PNilj7HBkG2bVNkN6BUn/j 5ZmYLB3Zck/7ph/yK0wkBT6K0F+rIFJm5AMMEszpLUSH7liDLhJ2A18ljO3aEwdq we5hT1bsg6n89RheuU3f+xxpp96/UQEthisXMX0Mf9C9hQkIDPDrkjfBHKhCl9g5 bOsXPFforuOij7TVN8W6VyE/TUCmxyfm+KC6w1MT3sBU38qDZOP0yMdR6zHHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyLwcXB05r2gRcTmQlcUz7wa5l/YwHwYDVR0j BBgwFoAUTDu9hoPdQsRw9OP4MLH6v4n0tfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA2NDljNDctZGZjMy00YTIwLWI1YjQtODc5Njc1ZTVkYjkyLzAvNEMzQkJEODY4 M0RENDJDNDcwRjRFM0Y4MzBCMUZBQkY4OUY0QjVGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzNCQkQ4NjgzREQ0MkM0NzBGNEUzRjgzMEIxRkFCRjg5RjRC NUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvNEMzQkJEODY4M0RENDJDNDcwRjRFM0Y4MzBCMUZB QkY4OUY0QjVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTCGBtsBJt1WNDcM9nuEKP40L95WvPLfmbp Iu5fKym6rYIJCQVFPiyGXqxEEdubE2is4aiMt0mizH6qWG5D90oMta8GFZ/wDGkE tp2EwfdnIhF39bX8JAm2vEPq446nR4CLPTbgSJNwVsUwqJ/4pLq4XvYcmf4oLZ9I f1Li310lz0wYdziLukYsbMQ+V2cSKgegA20rSjz5JxKSkxeYUis0dgs58ybEA6xv tLX61RHUnWarYPD0pc/8iON8T7lHx9ZW4c/saF0PkTNDuXrcrLewkYqxVwriVL3B HRXbYwDWW8UcVnF72tvowptHzgWFHDEe0brKooqCv21QUg/drEc= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:20 2026 by rpki-client