$ rpki-client -vvf rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft File: 4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft (raw, json) Hash identifier: a5mCILHb8fHCK9QbXK3otxJZ/X7JhJyIeQqK82VKnUk= Subject key identifier: C4:06:93:19:E9:70:EE:2E:00:2B:07:86:5C:DD:F7:DA:2A:82:EC:34 Authority key identifier: 4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2 Certificate issuer: /CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2 Certificate serial: 5D4816CC8DD075405573C2F5EABC7E82EA8D600B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 16:35:48 +0000 Manifest this update: Fri 19 Jun 2026 16:30:48 +0000 Manifest next update: Sat 20 Jun 2026 17:24:48 +0000 Files and hashes: 1: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (hash: Ud8zXVkaxOANWSpFsC422ZV+3rT9KJeF9ej6YaNldzs=) 2: 3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa (hash: IVSxWqHfsbpgTjNP8RzLROF59WJoZKS7+db35QQ4pHo=) 3: 4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl (hash: TgqlMNSvxqf/dpxrkf5SgvTUQY/YpVkJAEzlsN8hG8Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 17:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:48:16:cc:8d:d0:75:40:55:73:c2:f5:ea:bc:7e:82:ea:8d:60:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2 Validity Not Before: Jun 19 16:30:48 2026 GMT Not After : Jun 20 17:24:48 2026 GMT Subject: CN=C4069319E970EE2E002B07865CDDF7DA2A82EC34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2c:0d:58:8a:36:10:45:79:80:08:d2:0e:dc: 82:fd:90:f0:7b:19:5b:c3:61:25:6a:5c:95:fa:23: 80:0e:cc:86:26:fb:1a:02:d2:34:f3:d8:ec:b5:f8: dc:08:70:8c:ee:e8:7a:c6:87:9b:5b:fe:72:6e:6c: 15:5f:93:20:9d:f3:66:04:af:57:7a:55:37:37:39: 9f:48:e3:89:48:9d:75:35:e8:34:ae:9a:b0:42:11: 96:4d:a1:2b:7d:e9:04:f2:3b:87:20:98:50:31:07: 75:0f:6b:a6:05:e0:0a:ba:a4:90:6f:84:03:19:77: 12:99:a4:cc:ce:09:06:f1:a4:54:db:76:e0:8e:f7: 19:e5:da:c0:91:1b:4d:11:d5:86:6d:87:a9:86:9d: 27:09:d5:b8:04:45:96:d0:04:ae:70:80:23:df:f3: 38:2d:f9:b9:b6:40:f9:ca:ff:eb:44:58:be:0f:b3: 35:14:9a:72:d8:38:ab:c7:75:4b:10:f9:72:3f:9e: 84:f0:d0:19:c9:75:db:34:36:b9:18:e7:6d:4e:2d: 41:89:43:c9:b3:a7:e5:8d:d4:1a:95:82:b6:a5:d3: 6d:1a:91:51:db:02:6e:04:32:f0:bd:4c:06:5e:6f: 56:05:b1:e9:ba:df:4d:8b:0e:08:b9:7e:52:ef:1d: 05:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:06:93:19:E9:70:EE:2E:00:2B:07:86:5C:DD:F7:DA:2A:82:EC:34 X509v3 Authority Key Identifier: keyid:4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6b:65:b3:78:35:a8:4d:83:25:c6:c3:4e:37:f5:dd:f8:48: d2:bb:b9:a7:e2:c4:f4:0b:34:38:a2:a4:43:5d:d7:cf:bd:a5: 82:5d:17:ba:41:a0:25:00:6a:a4:a1:68:06:cd:cc:10:c5:f3: 07:59:1e:67:42:b9:80:3c:6f:d4:4d:32:63:99:57:ca:c2:9a: 7e:a4:38:d3:b9:bf:0f:22:5d:4a:f8:22:2c:94:59:ec:c5:43: 25:14:08:dd:04:02:25:c4:17:1f:f3:c0:59:3f:40:f0:4a:ff: 37:58:b4:9c:a4:53:79:cc:49:fe:0a:98:6f:d5:18:80:17:a0: 01:61:ed:af:01:8c:71:d7:4f:0a:40:b7:b1:e4:df:09:86:a4: 26:91:1e:91:c5:5f:8d:aa:e2:72:40:5b:f1:f6:71:94:bc:a3: bf:25:2e:e1:c4:4a:69:36:28:f4:97:e9:a8:d1:35:75:83:7b: 5c:e4:51:44:23:e3:1e:b6:e2:4d:1a:88:d0:92:14:9f:c1:53: 6d:23:57:f5:5c:99:64:5f:d3:d0:19:9a:64:01:ed:da:9d:bf: 6f:95:c5:45:45:0c:40:a0:b2:ed:8e:c5:62:69:c0:87:e0:8e: 3b:52:af:e9:3f:be:25:b6:45:74:8b:5e:30:90:fa:c8:f1:9e: 10:9b:73:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXUgWzI3QdUBVc8L16rx+guqNYAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3MTVERTZFMjVCNzRCM0E2NzdCQUVEN0NFODFFMzEx OTAwNzFGMjAeFw0yNjA2MTkxNjMwNDhaFw0yNjA2MjAxNzI0NDhaMDMxMTAvBgNV BAMTKEM0MDY5MzE5RTk3MEVFMkUwMDJCMDc4NjVDRERGN0RBMkE4MkVDMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLA1YijYQRXmACNIO3IL9kPB7 GVvDYSVqXJX6I4AOzIYm+xoC0jTz2Oy1+NwIcIzu6HrGh5tb/nJubBVfkyCd82YE r1d6VTc3OZ9I44lInXU16DSumrBCEZZNoSt96QTyO4cgmFAxB3UPa6YF4Aq6pJBv hAMZdxKZpMzOCQbxpFTbduCO9xnl2sCRG00R1YZth6mGnScJ1bgERZbQBK5wgCPf 8zgt+bm2QPnK/+tEWL4PszUUmnLYOKvHdUsQ+XI/noTw0BnJdds0NrkY521OLUGJ Q8mzp+WN1BqVgral020akVHbAm4EMvC9TAZeb1YFsem6302LDgi5flLvHQVtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxAaTGelw7i4AKweGXN332iqC7DQwHwYDVR0j BBgwFoAUTXFd5uJbdLOmd7rtfOgeMRkAcfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzRhYWEyZjEtNjNhOS00MjgxLTg5NDItZmI1ZDgyNDExOWE0LzAvNEQ3MTVERTZF MjVCNzRCM0E2NzdCQUVEN0NFODFFMzExOTAwNzFGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDcxNURFNkUyNUI3NEIzQTY3N0JBRUQ3Q0U4MUUzMTE5MDA3 MUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzRhYWEyZjEtNjNhOS00MjgxLTg5 NDItZmI1ZDgyNDExOWE0LzAvNEQ3MTVERTZFMjVCNzRCM0E2NzdCQUVEN0NFODFF MzExOTAwNzFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9rZbN4NahNgyXGw0439d34SNK7uafixPQL NDiipENd18+9pYJdF7pBoCUAaqShaAbNzBDF8wdZHmdCuYA8b9RNMmOZV8rCmn6k ONO5vw8iXUr4IiyUWezFQyUUCN0EAiXEFx/zwFk/QPBK/zdYtJykU3nMSf4KmG/V GIAXoAFh7a8BjHHXTwpAt7Hk3wmGpCaRHpHFX42q4nJAW/H2cZS8o78lLuHESmk2 KPSX6ajRNXWDe1zkUUQj4x624k0aiNCSFJ/BU20jV/VcmWRf09AZmmQB7dqdv2+V xUVFDECgsu2OxWJpwIfgjjtSr+k/viW2RXSLXjCQ+sjxnhCbc3c= -----END CERTIFICATE-----Generated at Sat Jun 20 08:57:15 2026 by rpki-client