$ rpki-client -vvf rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft File: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft (raw, json) Hash identifier: lRhuBvF03tlI0XAuG2HV7+nomEql/Q/I3rFRuIsAoDk= Subject key identifier: 32:81:C0:DF:00:94:5A:EA:C8:8A:8A:4F:5C:B7:70:EA:3E:7B:87:C4 Authority key identifier: 48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 Certificate issuer: /CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Certificate serial: 608F7578CE0B99A64660FBDC761E4762AE499562 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 11:10:39 +0000 Manifest this update: Thu 18 Jun 2026 11:05:39 +0000 Manifest next update: Fri 19 Jun 2026 13:35:39 +0000 Files and hashes: 1: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl (hash: onUB1Sa3DlBHQG8jaoATQl0u9DTDmDEkCNC44j9FBqs=) 2: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: 5QHnLxUj5ToZbDP+kG+27eOW/Apgnrnl+qyMt1ibRXw=) 3: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: gNsJ7E8Wxy2p/7sU5QpT/62BpjOz3T6D3tTX9O4/j10=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:8f:75:78:ce:0b:99:a6:46:60:fb:dc:76:1e:47:62:ae:49:95:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Validity Not Before: Jun 18 11:05:39 2026 GMT Not After : Jun 19 13:35:39 2026 GMT Subject: CN=3281C0DF00945AEAC88A8A4F5CB770EA3E7B87C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f7:7d:e7:b7:f2:55:6f:96:e0:07:7d:fe:be: 69:a3:be:64:36:01:44:c8:b3:a6:1d:3e:c4:14:b9: 94:86:bf:ca:ab:54:22:65:f3:40:9b:de:68:93:3f: f9:bb:53:2f:a4:2f:e3:00:c6:e2:48:08:8d:17:a2: a4:f6:d4:93:ff:20:f0:01:41:02:fc:57:83:21:d6: ec:66:8c:07:92:53:d7:0e:de:64:2e:5b:3c:b1:95: 10:8d:db:a4:f5:17:40:30:d9:7d:a4:0b:bd:d5:27: aa:c5:5f:2a:a8:f3:fc:3f:14:97:c6:ff:27:7b:17: 89:3d:01:b4:67:af:bb:49:df:37:62:56:f3:4c:ff: c8:6b:fe:ef:c0:7f:1a:20:88:75:df:19:b3:3c:f9: 17:de:24:fc:29:8b:ba:5a:71:18:45:9d:fe:95:95: 57:0c:2b:5d:62:1f:a7:3c:c9:3c:c2:a9:f5:1b:3b: 4d:be:fb:47:57:dc:d1:d2:8b:b8:d6:92:e4:b2:c0: 68:e5:f5:bf:03:5a:5f:bd:86:9a:85:b2:ef:94:63: 7a:67:d8:c3:6f:00:be:a0:6d:7b:15:95:9e:4f:21: d5:10:51:c0:b4:f1:0d:53:7f:f9:0a:36:0f:99:d4: 39:87:c0:d1:6f:d7:4d:76:52:b1:2a:4a:6e:05:64: bb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:81:C0:DF:00:94:5A:EA:C8:8A:8A:4F:5C:B7:70:EA:3E:7B:87:C4 X509v3 Authority Key Identifier: keyid:48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:a7:e1:d9:5c:33:62:75:41:8f:2e:d7:e8:b3:4f:27:03:00: 25:fe:5d:53:91:17:30:db:74:55:99:9a:8e:ab:23:86:47:12: 1c:36:24:fb:d8:6b:81:21:73:a0:05:fe:db:46:17:30:fc:eb: c2:c1:e0:53:66:08:fa:d3:99:ed:a5:bb:d0:3a:9f:8b:37:2e: fb:d5:d5:a5:f2:79:cf:bd:16:1c:82:cc:45:b3:99:a7:59:bb: 52:2d:c5:5f:22:1c:e3:ce:46:75:0d:d9:be:38:ac:9a:da:3d: b0:d9:8d:8e:c6:98:74:58:a4:d2:25:07:70:66:e7:79:1d:1b: 85:16:3a:a2:e3:7f:b3:c9:53:e2:81:4c:7a:15:17:74:2e:82: 57:b6:9a:12:63:c7:f8:67:fe:b1:50:10:bf:46:ce:05:d3:e1: c0:28:22:8a:6c:f3:e8:24:04:b5:ea:74:db:b8:87:e6:69:73: 71:84:8e:6b:6c:2d:e2:cf:c6:bb:9d:df:ac:a5:3a:36:91:38: 3f:c1:f7:1b:35:8b:ef:82:48:25:32:9d:bd:2c:82:82:85:7b: 49:9c:40:d3:55:d9:8b:ef:f6:37:a7:fc:15:d3:ec:21:7a:03: ca:52:b2:a3:8d:c0:c3:00:f8:5b:c7:e5:8b:cc:48:8b:8b:09: f3:14:24:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYI91eM4LmaZGYPvcdh5HYq5JlWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4 QUY2ODdEMzAeFw0yNjA2MTgxMTA1MzlaFw0yNjA2MTkxMzM1MzlaMDMxMTAvBgNV BAMTKDMyODFDMERGMDA5NDVBRUFDODhBOEE0RjVDQjc3MEVBM0U3Qjg3QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx933nt/JVb5bgB33+vmmjvmQ2 AUTIs6YdPsQUuZSGv8qrVCJl80Cb3miTP/m7Uy+kL+MAxuJICI0XoqT21JP/IPAB QQL8V4Mh1uxmjAeSU9cO3mQuWzyxlRCN26T1F0Aw2X2kC73VJ6rFXyqo8/w/FJfG /yd7F4k9AbRnr7tJ3zdiVvNM/8hr/u/AfxogiHXfGbM8+RfeJPwpi7pacRhFnf6V lVcMK11iH6c8yTzCqfUbO02++0dX3NHSi7jWkuSywGjl9b8DWl+9hpqFsu+UY3pn 2MNvAL6gbXsVlZ5PIdUQUcC08Q1Tf/kKNg+Z1DmHwNFv1012UrEqSm4FZLvfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMoHA3wCUWurIiopPXLdw6j57h8QwHwYDVR0j BBgwFoAUSIXnXWsKk49f7jX6uibeoIr2h9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZmN2VmMzQtNDk5MS00YmIxLTk2YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2 QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4QUY2ODdEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg1RTc1RDZCMEE5MzhGNUZFRTM1RkFCQTI2REVBMDhBRjY4 N0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZmN2VmMzQtNDk5MS00YmIxLTk2 YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRF QTA4QUY2ODdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKn4dlcM2J1QY8u1+izTycDACX+XVORFzDb dFWZmo6rI4ZHEhw2JPvYa4Ehc6AF/ttGFzD868LB4FNmCPrTme2lu9A6n4s3LvvV 1aXyec+9FhyCzEWzmadZu1ItxV8iHOPORnUN2b44rJraPbDZjY7GmHRYpNIlB3Bm 53kdG4UWOqLjf7PJU+KBTHoVF3Qugle2mhJjx/hn/rFQEL9GzgXT4cAoIops8+gk BLXqdNu4h+Zpc3GEjmtsLeLPxrud36ylOjaROD/B9xs1i++CSCUynb0sgoKFe0mc QNNV2Yvv9jen/BXT7CF6A8pSsqONwMMA+FvH5YvMSIuLCfMUJL0= -----END CERTIFICATE-----Generated at Thu Jun 18 19:09:17 2026 by rpki-client