$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.mft File: 4C378F3C5E9E84D98D0229475208B1E382584588.mft (raw, json) Hash identifier: fV0mg56s5BQ0EEt1GS6VtyisH4UCo/1ClOdMvPwTMQ0= Subject key identifier: 9B:0C:B1:E2:7F:72:75:C3:38:1B:C3:A5:1D:A8:D7:13:BE:D6:82:6B Authority key identifier: 4C:37:8F:3C:5E:9E:84:D9:8D:02:29:47:52:08:B1:E3:82:58:45:88 Certificate issuer: /CN=4C378F3C5E9E84D98D0229475208B1E382584588 Certificate serial: 21F32A72966271300F96806503857BCC869A0554 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C378F3C5E9E84D98D0229475208B1E382584588.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 07:41:31 +0000 Manifest this update: Thu 18 Jun 2026 07:36:31 +0000 Manifest next update: Fri 19 Jun 2026 10:29:31 +0000 Files and hashes: 1: 4C378F3C5E9E84D98D0229475208B1E382584588.crl (hash: +BTJbvKM02mANiq8H+EjYrNonKADEDmAgaUm1ZomCv8=) 2: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: ABkgOJWd2fNKHCH6GAwk3bSoWGS8bHMY1ISOxz9j9j0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.crl rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C378F3C5E9E84D98D0229475208B1E382584588.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 10:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f3:2a:72:96:62:71:30:0f:96:80:65:03:85:7b:cc:86:9a:05:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C378F3C5E9E84D98D0229475208B1E382584588 Validity Not Before: Jun 18 07:36:31 2026 GMT Not After : Jun 19 10:29:31 2026 GMT Subject: CN=9B0CB1E27F7275C3381BC3A51DA8D713BED6826B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:63:a9:4a:80:87:6c:38:f2:f9:a3:f2:f0:2c: 31:b5:bc:ba:22:07:1c:19:e5:c7:f2:8f:55:c7:13: 8f:df:8f:80:cf:6d:d9:a7:5b:57:8b:35:63:bf:a9: fc:7f:fc:e8:ca:70:6f:c2:11:48:24:3b:00:56:42: 46:7e:3a:24:ff:fd:87:33:2b:b9:13:81:df:74:3c: a7:44:f2:b7:ae:7e:46:28:4d:e7:45:92:bf:81:f7: 2d:ee:ec:09:d9:57:d2:56:fc:a4:fc:f0:07:d7:11: 30:ba:82:d2:35:42:3f:2e:ef:70:e2:1b:76:87:eb: 94:72:20:20:95:cc:78:a8:45:db:a8:8d:79:ce:b9: fb:f7:6a:e4:04:38:0c:23:7e:06:e2:fb:3f:bf:db: 77:37:7b:6a:a7:49:d4:b3:aa:d2:c5:cf:94:b1:f7: 06:15:3d:b1:f4:6c:e7:ab:e6:d8:fd:39:4b:b7:9a: 32:9d:fd:d3:e7:da:65:9a:3e:de:72:de:f7:c8:c8: 49:f4:11:3b:c3:20:e3:49:23:1a:3b:30:5e:58:89: 8d:94:7d:bf:d9:c8:4f:7c:9f:c9:88:00:52:72:55: 45:33:4f:7f:6f:70:ba:b3:bd:85:fe:36:88:dc:9a: 2c:8d:45:83:32:a7:3a:fc:68:93:a6:d6:fc:cd:e9: e5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0C:B1:E2:7F:72:75:C3:38:1B:C3:A5:1D:A8:D7:13:BE:D6:82:6B X509v3 Authority Key Identifier: keyid:4C:37:8F:3C:5E:9E:84:D9:8D:02:29:47:52:08:B1:E3:82:58:45:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C378F3C5E9E84D98D0229475208B1E382584588.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e7:5b:f7:1f:ed:ee:b1:04:5c:7f:47:60:79:18:c4:63:ae: 6a:b2:4a:e3:48:51:17:fd:87:3e:6c:52:67:30:81:42:b9:87: 70:4d:13:9f:64:5f:83:7d:ef:00:c0:49:14:56:23:c8:7f:55: e0:df:f2:32:9b:e4:d8:3f:ad:27:9a:15:bb:8a:81:89:89:d2: 59:27:2f:1f:ce:a2:00:a2:2f:52:39:43:f3:81:2d:0f:f2:27: 30:71:2a:c3:58:45:f9:71:5b:13:a7:c8:61:56:3a:2e:18:7c: 6e:03:3e:ef:8a:e6:ac:e1:88:ee:4b:31:e7:eb:b9:79:56:02: c4:b1:e3:ee:c1:a5:08:2c:9a:0a:ee:82:da:10:25:5c:b7:bf: 82:ff:51:56:42:2e:cf:dd:fc:bd:dc:d1:36:e0:4d:ee:4e:3a: b2:a1:c6:a1:94:79:54:37:53:01:34:af:2b:99:f9:82:6e:11: ef:70:55:0f:4c:23:af:e5:78:c1:fe:21:b3:93:57:53:9e:d0: e5:3a:51:1d:ed:c4:17:5d:e7:7b:2b:78:f9:1b:fd:58:96:c9: 89:ba:2e:d9:b0:e2:47:9b:14:0c:71:ad:af:48:e2:2e:81:27: ec:b3:07:92:7d:09:69:56:ad:35:0f:d2:6a:45:72:97:88:ed: 08:c4:60:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIfMqcpZicTAPloBlA4V7zIaaBVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNzhGM0M1RTlFODREOThEMDIyOTQ3NTIwOEIxRTM4 MjU4NDU4ODAeFw0yNjA2MTgwNzM2MzFaFw0yNjA2MTkxMDI5MzFaMDMxMTAvBgNV BAMTKDlCMENCMUUyN0Y3Mjc1QzMzODFCQzNBNTFEQThENzEzQkVENjgyNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOY6lKgIdsOPL5o/LwLDG1vLoi BxwZ5cfyj1XHE4/fj4DPbdmnW1eLNWO/qfx//OjKcG/CEUgkOwBWQkZ+OiT//Ycz K7kTgd90PKdE8reufkYoTedFkr+B9y3u7AnZV9JW/KT88AfXETC6gtI1Qj8u73Di G3aH65RyICCVzHioRduojXnOufv3auQEOAwjfgbi+z+/23c3e2qnSdSzqtLFz5Sx 9wYVPbH0bOer5tj9OUu3mjKd/dPn2mWaPt5y3vfIyEn0ETvDIONJIxo7MF5YiY2U fb/ZyE98n8mIAFJyVUUzT39vcLqzvYX+NojcmiyNRYMypzr8aJOm1vzN6eUtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmwyx4n9ydcM4G8OlHajXE77WgmswHwYDVR0j BBgwFoAUTDePPF6ehNmNAilHUgix44JYRYgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmU5YjBiYWQtNjZiOS00ZjI4LWE3YzUtZTlhOWZlMTIwYWQ3LzAvNEMzNzhGM0M1 RTlFODREOThEMDIyOTQ3NTIwOEIxRTM4MjU4NDU4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzM3OEYzQzVFOUU4NEQ5OEQwMjI5NDc1MjA4QjFFMzgyNTg0 NTg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvNEMzNzhGM0M1RTlFODREOThEMDIyOTQ3NTIwOEIx RTM4MjU4NDU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArnW/cf7e6xBFx/R2B5GMRjrmqySuNIURf9 hz5sUmcwgUK5h3BNE59kX4N97wDASRRWI8h/VeDf8jKb5Ng/rSeaFbuKgYmJ0lkn Lx/OogCiL1I5Q/OBLQ/yJzBxKsNYRflxWxOnyGFWOi4YfG4DPu+K5qzhiO5LMefr uXlWAsSx4+7BpQgsmgrugtoQJVy3v4L/UVZCLs/d/L3c0TbgTe5OOrKhxqGUeVQ3 UwE0ryuZ+YJuEe9wVQ9MI6/leMH+IbOTV1Oe0OU6UR3txBdd53srePkb/ViWyYm6 Ltmw4kebFAxxra9I4i6BJ+yzB5J9CWlWrTUP0mpFcpeI7QjEYOc= -----END CERTIFICATE-----Generated at Thu Jun 18 19:21:41 2026 by rpki-client