$ rpki-client -vvf rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft File: 4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft (raw, json) Hash identifier: t3oVfhOjQPBDDxoMVFkE+HI/7PQr8npR6eL1lqy2qts= Subject key identifier: 1D:15:13:F7:73:11:E7:52:F4:89:E3:2A:87:1E:87:62:9B:F5:D4:EA Authority key identifier: 4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A Certificate issuer: /CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A Certificate serial: 2FAAE98BDB26C5C945C261972978BF65151136BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 03:20:54 +0000 Manifest this update: Thu 18 Jun 2026 03:15:54 +0000 Manifest next update: Fri 19 Jun 2026 06:41:54 +0000 Files and hashes: 1: 4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl (hash: ksbTCzA8llLYRxeNVCLGpNp91idwRjPcnuAepDtQzDY=) 2: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: NbzRk+anslHWDpTfVCq58hG430siKypJAEmOtHHoBDU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 06:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:aa:e9:8b:db:26:c5:c9:45:c2:61:97:29:78:bf:65:15:11:36:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A Validity Not Before: Jun 18 03:15:54 2026 GMT Not After : Jun 19 06:41:54 2026 GMT Subject: CN=1D1513F77311E752F489E32A871E87629BF5D4EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:3a:3d:8d:a9:62:80:ec:33:ed:31:2c:a3: a9:4c:e0:af:d0:58:b4:0b:8b:46:75:d2:3d:9e:5c: 2a:e8:44:81:98:b2:3b:5b:1c:ba:1d:a9:14:df:17: 9d:cd:16:d0:9b:56:3d:40:74:b2:66:53:98:6b:f4: ad:7a:ea:ee:ce:8c:7e:57:9c:7c:a2:f0:53:1d:32: c5:a9:22:09:63:63:4e:e7:09:7b:a8:3d:dc:bb:a4: 49:dc:a0:98:70:b5:28:d9:8d:7d:2a:94:56:b8:ec: 14:bc:f5:d4:5a:5a:40:d1:74:b0:04:7e:a6:5f:de: 2d:51:3a:9f:b6:1b:5d:b3:91:cb:34:db:e7:87:5b: 28:23:61:9c:7f:b5:88:76:69:61:a6:e0:6e:cf:f6: d5:b3:b2:ba:72:5a:63:25:9b:44:95:46:b2:19:4a: fd:59:e9:91:43:07:72:1a:69:37:a9:1c:52:1b:67: 09:af:5c:1b:00:d9:77:fd:d0:e5:0c:27:6c:49:2b: 37:50:0c:79:9d:70:ef:b2:7a:27:91:4f:52:ff:ed: 22:c0:53:81:a8:e3:3f:80:6c:72:72:fd:15:8c:c0: 61:2d:ec:e6:07:3a:73:c5:2f:4d:36:bd:6c:cb:9c: 02:fb:02:8f:04:ce:30:11:d0:27:e7:ee:62:b7:60: 2a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:15:13:F7:73:11:E7:52:F4:89:E3:2A:87:1E:87:62:9B:F5:D4:EA X509v3 Authority Key Identifier: keyid:4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:06:03:ce:29:20:72:5a:66:94:2b:24:a6:aa:74:3a:68:9a: d8:70:5c:19:18:1d:e1:07:18:48:45:63:99:97:6d:9a:3f:14: 28:8a:4f:76:ec:75:86:a8:65:5e:ce:0a:56:3f:3b:cb:47:04: 83:ac:1a:54:f7:27:ac:f1:74:1d:2f:43:1e:80:3c:ea:1f:b3: 1f:df:15:4e:6c:56:ed:72:72:73:dd:78:bf:18:39:82:0e:76: ab:12:6e:9d:29:43:23:35:33:cb:5b:3f:b5:fe:a6:a0:4a:dc: 04:0c:ed:7a:76:b0:30:75:eb:8d:82:4d:2c:08:4d:f9:85:ab: 41:8a:d3:d9:c2:f5:bc:80:a3:81:da:cd:11:58:f3:14:7e:7c: 50:4d:d9:13:aa:37:c3:e3:8c:7a:07:34:a5:e4:c9:91:28:56: 2e:10:1f:19:54:a5:e4:b0:a2:e0:b1:41:bc:b7:23:94:3e:7a: 86:81:fa:13:c9:97:d8:c3:b7:5b:f1:03:bd:95:99:03:cd:ff: 96:13:47:32:6f:b3:67:d7:1f:d0:ef:36:b0:2e:38:c1:ef:d0: d9:31:cc:29:4a:55:f4:51:0c:6b:28:c1:7e:75:63:a9:ae:61: 0c:37:de:6a:05:a3:0d:14:10:2b:76:94:7a:cb:fd:ef:b9:9b: 6d:97:66:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL6rpi9smxclFwmGXKXi/ZRURNrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDRUI1NjBCQzQyOERCRUM0RUMyRUYyRUY3NDJDOUJE QURDRTMwQTAeFw0yNjA2MTgwMzE1NTRaFw0yNjA2MTkwNjQxNTRaMDMxMTAvBgNV BAMTKDFEMTUxM0Y3NzMxMUU3NTJGNDg5RTMyQTg3MUU4NzYyOUJGNUQ0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZTo9jaligOwz7TEso6lM4K/Q WLQLi0Z10j2eXCroRIGYsjtbHLodqRTfF53NFtCbVj1AdLJmU5hr9K166u7OjH5X nHyi8FMdMsWpIgljY07nCXuoPdy7pEncoJhwtSjZjX0qlFa47BS89dRaWkDRdLAE fqZf3i1ROp+2G12zkcs02+eHWygjYZx/tYh2aWGm4G7P9tWzsrpyWmMlm0SVRrIZ Sv1Z6ZFDB3IaaTepHFIbZwmvXBsA2Xf90OUMJ2xJKzdQDHmdcO+yeieRT1L/7SLA U4Go4z+AbHJy/RWMwGEt7OYHOnPFL002vWzLnAL7Ao8EzjAR0Cfn7mK3YCoXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHRUT93MR51L0ieMqhx6HYpv11OowHwYDVR0j BBgwFoAUTc61YLxCjb7E7C7y73Qsm9rc4wowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGViYTg2N2EtOGY4NC00NjYzLWIzMjAtZjQzNTI4MmI5ZmZlLzAvNERDRUI1NjBC QzQyOERCRUM0RUMyRUYyRUY3NDJDOUJEQURDRTMwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RENFQjU2MEJDNDI4REJFQzRFQzJFRjJFRjc0MkM5QkRBRENF MzBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvNERDRUI1NjBCQzQyOERCRUM0RUMyRUYyRUY3NDJD OUJEQURDRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUGA84pIHJaZpQrJKaqdDpomthwXBkYHeEH GEhFY5mXbZo/FCiKT3bsdYaoZV7OClY/O8tHBIOsGlT3J6zxdB0vQx6APOofsx/f FU5sVu1ycnPdeL8YOYIOdqsSbp0pQyM1M8tbP7X+pqBK3AQM7Xp2sDB1642CTSwI TfmFq0GK09nC9byAo4HazRFY8xR+fFBN2ROqN8PjjHoHNKXkyZEoVi4QHxlUpeSw ouCxQby3I5Q+eoaB+hPJl9jDt1vxA72VmQPN/5YTRzJvs2fXH9DvNrAuOMHv0Nkx zClKVfRRDGsowX51Y6muYQw33moFow0UECt2lHrL/e+5m22XZiE= -----END CERTIFICATE-----Generated at Thu Jun 18 19:21:25 2026 by rpki-client