$ rpki-client -vvf rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft File: 4758527FF3B22322A18B7C6E96C4B735849522DD.mft (raw, json) Hash identifier: 27um1jzFFyB2pCTsEXKLfNqofEzda+Jj72oFrgB0VnY= Subject key identifier: A3:D6:FC:D0:2B:B9:FC:A0:2D:C3:A5:0D:2D:8E:38:2C:9B:F2:F6:3C Authority key identifier: 47:58:52:7F:F3:B2:23:22:A1:8B:7C:6E:96:C4:B7:35:84:95:22:DD Certificate issuer: /CN=4758527FF3B22322A18B7C6E96C4B735849522DD Certificate serial: 3EAACCB7CD0912D1185B279550D02484DD0C66AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 05:31:31 +0000 Manifest this update: Sat 20 Jun 2026 05:26:31 +0000 Manifest next update: Sun 21 Jun 2026 07:23:31 +0000 Files and hashes: 1: 4758527FF3B22322A18B7C6E96C4B735849522DD.crl (hash: KaJ3P1D5T5awfu30hDVQgErmgiH450sgu5rTsNOAMnQ=) 2: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (hash: vc1a0hkgw07q2g/3N/OSu/ce4WygjulqelJe6kgXLWg=) 3: 3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (hash: ylJge9zfunu5v1K50c60A5sirSQ6LDBHCjbwOHfjZrQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.crl rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:23:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:aa:cc:b7:cd:09:12:d1:18:5b:27:95:50:d0:24:84:dd:0c:66:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4758527FF3B22322A18B7C6E96C4B735849522DD Validity Not Before: Jun 20 05:26:31 2026 GMT Not After : Jun 21 07:23:31 2026 GMT Subject: CN=A3D6FCD02BB9FCA02DC3A50D2D8E382C9BF2F63C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:82:2d:ee:62:3c:bd:db:a0:87:98:4a:9b:62: ea:7f:c5:7c:3e:15:bf:ae:6f:c9:a6:61:78:cf:13: e6:9d:ea:14:7c:6c:a7:9d:ed:33:b6:4a:4e:6f:9b: 00:eb:2a:82:bf:e7:f7:1e:ea:81:9f:90:25:a0:b4: ff:19:47:fd:ad:ea:43:6c:78:c1:3e:cd:6b:17:1a: 06:c0:c6:ea:ce:b2:70:67:31:5b:59:00:bb:7e:50: f1:2f:48:ae:7a:26:70:8a:a4:ae:45:1e:02:06:a8: b8:af:26:cd:99:50:15:5c:06:ad:76:67:00:d8:fd: b1:7f:22:1e:b9:96:65:52:b6:28:50:6b:e1:4c:2f: e0:e3:e7:88:5c:16:82:b9:50:41:1c:ec:41:27:4c: 8f:c5:94:db:a1:95:1f:88:17:bd:50:25:c8:3e:04: e2:14:0d:8c:8d:29:0a:ab:0e:28:c0:8f:d1:c5:e0: 5a:5a:ea:f7:fc:f2:a0:9a:07:a7:b9:90:de:c9:6e: bb:6e:8f:f5:f9:35:f3:db:f4:27:7a:72:2c:18:3f: 20:d3:53:a6:30:22:60:f3:6c:43:a8:54:e3:c1:b5: 85:af:88:55:2f:c5:cb:16:af:9f:d7:93:de:81:13: ff:ea:e6:e8:5f:54:1d:9a:e1:88:50:a4:d8:fb:e1: f4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D6:FC:D0:2B:B9:FC:A0:2D:C3:A5:0D:2D:8E:38:2C:9B:F2:F6:3C X509v3 Authority Key Identifier: keyid:47:58:52:7F:F3:B2:23:22:A1:8B:7C:6E:96:C4:B7:35:84:95:22:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:9a:67:10:e5:7a:77:47:b5:9e:38:55:86:ce:6d:4b:5b:b4: 91:4c:38:c8:da:62:50:ea:02:55:21:a4:2a:6e:11:40:86:93: f5:ab:2c:ae:72:99:ba:e2:26:0f:27:f9:bf:57:de:38:69:5d: d3:b8:d8:ae:0e:86:58:0a:b5:20:df:b3:ee:f8:80:d6:37:68: e2:3f:71:b5:4d:13:01:59:34:e9:b4:fb:2c:4f:e8:64:d7:e8: 82:b0:08:92:6b:5c:d5:70:83:bb:ec:6c:8b:f4:59:dc:86:37: 48:0c:0c:e2:bb:67:46:73:bd:0a:7f:f8:1e:a2:59:3f:dd:60: 0d:6d:96:cd:bb:63:05:f8:72:af:ab:3c:a4:cf:49:20:1a:aa: 64:bd:6b:ba:74:fe:dd:88:cd:cc:3a:0a:96:81:30:2a:4b:31: fb:2a:9f:cb:0d:00:80:b4:ca:74:68:44:6b:12:a0:5a:88:80: c7:eb:4f:f7:bf:40:3d:f7:57:e8:0c:ff:17:4f:91:f6:e2:31: 64:cf:b6:8b:de:5b:27:a3:cd:f7:28:1e:97:f4:28:75:5b:10: 63:ec:88:8f:f0:4d:fd:8b:25:6a:17:ab:3e:13:81:dc:30:d3: 4c:9f:df:e1:4d:0e:e6:5b:a9:de:40:69:ce:e3:2f:a9:f1:9e: f5:bf:53:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPqrMt80JEtEYWyeVUNAkhN0MZq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1ODUyN0ZGM0IyMjMyMkExOEI3QzZFOTZDNEI3MzU4 NDk1MjJERDAeFw0yNjA2MjAwNTI2MzFaFw0yNjA2MjEwNzIzMzFaMDMxMTAvBgNV BAMTKEEzRDZGQ0QwMkJCOUZDQTAyREMzQTUwRDJEOEUzODJDOUJGMkY2M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdgi3uYjy926CHmEqbYup/xXw+ Fb+ub8mmYXjPE+ad6hR8bKed7TO2Sk5vmwDrKoK/5/ce6oGfkCWgtP8ZR/2t6kNs eME+zWsXGgbAxurOsnBnMVtZALt+UPEvSK56JnCKpK5FHgIGqLivJs2ZUBVcBq12 ZwDY/bF/Ih65lmVStihQa+FML+Dj54hcFoK5UEEc7EEnTI/FlNuhlR+IF71QJcg+ BOIUDYyNKQqrDijAj9HF4Fpa6vf88qCaB6e5kN7Jbrtuj/X5NfPb9Cd6ciwYPyDT U6YwImDzbEOoVOPBtYWviFUvxcsWr5/Xk96BE//q5uhfVB2a4YhQpNj74fRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo9b80Cu5/KAtw6UNLY44LJvy9jwwHwYDVR0j BBgwFoAUR1hSf/OyIyKhi3xulsS3NYSVIt0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk1ZWU4ZmMtNmVmZS00MTVkLWI2YzEtMGYwY2NjZjI2MTQ0LzAvNDc1ODUyN0ZG M0IyMjMyMkExOEI3QzZFOTZDNEI3MzU4NDk1MjJERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzU4NTI3RkYzQjIyMzIyQTE4QjdDNkU5NkM0QjczNTg0OTUy MkRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk1ZWU4ZmMtNmVmZS00MTVkLWI2 YzEtMGYwY2NjZjI2MTQ0LzAvNDc1ODUyN0ZGM0IyMjMyMkExOEI3QzZFOTZDNEI3 MzU4NDk1MjJERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCaZxDlendHtZ44VYbObUtbtJFMOMjaYlDq AlUhpCpuEUCGk/WrLK5ymbriJg8n+b9X3jhpXdO42K4OhlgKtSDfs+74gNY3aOI/ cbVNEwFZNOm0+yxP6GTX6IKwCJJrXNVwg7vsbIv0WdyGN0gMDOK7Z0ZzvQp/+B6i WT/dYA1tls27YwX4cq+rPKTPSSAaqmS9a7p0/t2Izcw6CpaBMCpLMfsqn8sNAIC0 ynRoRGsSoFqIgMfrT/e/QD33V+gM/xdPkfbiMWTPtoveWyejzfcoHpf0KHVbEGPs iI/wTf2LJWoXqz4Tgdww00yf3+FNDuZbqd5Aac7jL6nxnvW/U+8= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:58 2026 by rpki-client