$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft File: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft (raw, json) Hash identifier: ReEodv++wtGn1W7L3NZBFI8Wc3zw9pCCynjO44Fz4A0= Subject key identifier: C0:BF:56:33:39:E0:90:00:72:C4:4F:21:04:7E:B8:D5:D8:13:CF:B3 Authority key identifier: 64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 Certificate issuer: /CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Certificate serial: 38D6A2A30679CAEAADFE3B67808C46645B5FFB16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft Manifest number: 48 Signing time: Tue 23 Jun 2026 23:45:18 +0000 Manifest this update: Tue 23 Jun 2026 23:40:18 +0000 Manifest next update: Thu 25 Jun 2026 03:23:18 +0000 Files and hashes: 1: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl (hash: HiA7LVPM8tQKigeMFO33ZIO79zqPxnfl9NK5UaZ/soY=) 2: 3130332e3136362e33362e302f32332d3234203d3e203137393935.roa (hash: lTZ01/fJUOFqaJRWKnNIALG7LB1k+HJpJA/DEXbiNSg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 03:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d6:a2:a3:06:79:ca:ea:ad:fe:3b:67:80:8c:46:64:5b:5f:fb:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Validity Not Before: Jun 23 23:40:18 2026 GMT Not After : Jun 25 03:23:18 2026 GMT Subject: CN=C0BF563339E0900072C44F21047EB8D5D813CFB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2a:0d:ad:a1:34:a1:d1:49:11:fd:41:0b:ef: 96:d0:a1:84:2c:81:38:c9:5c:cb:28:0e:fa:e0:60: 99:d7:fe:db:d8:c4:f6:d9:9b:36:2a:d7:62:eb:1a: 3a:4c:5e:50:aa:a3:48:65:fb:4f:ad:a2:c5:71:9e: 17:5b:02:41:ea:79:0b:5c:56:de:eb:9c:2b:65:26: fe:f0:61:3e:80:2c:b6:d0:e7:a8:0c:cd:91:d7:2b: 1d:ae:bd:b2:b9:2c:b9:06:0c:00:4d:0e:64:f4:59: 5e:4f:ec:90:ec:1e:81:cc:89:56:2a:2e:66:9a:ae: 53:2f:bc:9b:63:af:c1:08:44:86:46:03:6f:eb:20: 79:04:a5:cd:a7:c9:08:87:e8:05:6d:41:a1:1a:b2: 87:92:9d:7f:f0:53:3f:7d:87:ee:fd:cb:e9:a0:d8: d1:37:61:ee:02:17:f7:d0:b6:d7:88:b1:0e:8d:16: 05:0c:c0:a5:0e:29:a4:a9:e0:3a:32:19:33:a8:ad: 6d:c7:cc:da:62:87:42:27:1d:d7:0a:3b:99:31:8f: 30:65:01:c2:53:22:70:f1:bc:19:72:47:ef:f7:fe: 7f:62:6d:e5:ff:d0:49:32:89:46:40:6c:28:e2:fa: 16:c6:83:b6:22:a3:aa:c4:41:a0:7c:f1:2f:6a:26: fc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BF:56:33:39:E0:90:00:72:C4:4F:21:04:7E:B8:D5:D8:13:CF:B3 X509v3 Authority Key Identifier: keyid:64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3a:fc:37:ab:99:c3:5b:ea:0b:33:7a:f6:d0:4d:98:c7:c3: 7b:e6:6c:1f:72:7b:8e:45:af:78:97:dc:91:1d:0e:83:5f:58: 40:fd:b5:f4:af:25:1a:d2:a6:47:f5:b7:59:a9:e4:d1:c5:5e: 81:8d:ec:8d:84:94:f1:34:ea:81:7b:41:4e:fe:13:69:97:fe: 55:97:f2:4d:ce:5a:20:19:ed:32:f5:bf:29:42:3a:2a:66:21: 65:fb:44:e6:df:ba:54:5f:38:11:9a:06:40:78:4c:88:ef:57: 14:a6:08:0f:13:ca:77:98:fb:a8:c0:72:8d:ea:83:e0:36:f8: f1:ff:08:ae:17:1a:a2:89:e5:fd:56:f7:70:e9:db:b0:d6:64: 12:89:45:6a:8c:91:3b:74:45:88:c8:ab:c7:0c:2e:91:ee:dd: 68:07:7e:27:f7:38:ee:82:b4:6b:9e:2d:44:1e:87:64:c7:73: 65:8b:f3:e6:ed:15:e6:d2:73:4c:e9:0c:98:08:ea:38:18:41: 0f:d6:49:21:0c:7f:9f:9e:c2:9e:86:c5:11:a6:c2:62:ce:80: d9:b7:64:c7:1b:3e:14:82:0c:94:67:dc:33:bb:27:12:58:80: ec:e3:ef:fb:9d:3f:68:58:90:7d:85:2c:11:68:6f:e7:d2:ca: 2b:f7:53:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUONaiowZ5yuqt/jtngIxGZFtf+xYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0RUFCRERGNzdBQUJBN0U5RjhCMkZBMzgyQUM1NUU1 RUU3NUY0NjAeFw0yNjA2MjMyMzQwMThaFw0yNjA2MjUwMzIzMThaMDMxMTAvBgNV BAMTKEMwQkY1NjMzMzlFMDkwMDA3MkM0NEYyMTA0N0VCOEQ1RDgxM0NGQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzKg2toTSh0UkR/UEL75bQoYQs gTjJXMsoDvrgYJnX/tvYxPbZmzYq12LrGjpMXlCqo0hl+0+tosVxnhdbAkHqeQtc Vt7rnCtlJv7wYT6ALLbQ56gMzZHXKx2uvbK5LLkGDABNDmT0WV5P7JDsHoHMiVYq LmaarlMvvJtjr8EIRIZGA2/rIHkEpc2nyQiH6AVtQaEasoeSnX/wUz99h+79y+mg 2NE3Ye4CF/fQtteIsQ6NFgUMwKUOKaSp4DoyGTOorW3HzNpih0InHdcKO5kxjzBl AcJTInDxvBlyR+/3/n9ibeX/0EkyiUZAbCji+hbGg7Yio6rEQaB88S9qJvyHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwL9WMzngkAByxE8hBH641dgTz7MwHwYDVR0j BBgwFoAUZE6r3fd6q6fp+LL6OCrFXl7nX0YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY3OWE0MDItZGU1Yi00OWU1LWE2ZjUtZWVhYmFjMDg0ZjQxLzAvNjQ0RUFCRERG NzdBQUJBN0U5RjhCMkZBMzgyQUM1NUU1RUU3NUY0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDRFQUJEREY3N0FBQkE3RTlGOEIyRkEzODJBQzU1RTVFRTc1 RjQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY3OWE0MDItZGU1Yi00OWU1LWE2 ZjUtZWVhYmFjMDg0ZjQxLzAvNjQ0RUFCRERGNzdBQUJBN0U5RjhCMkZBMzgyQUM1 NUU1RUU3NUY0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF46/DermcNb6gszevbQTZjHw3vmbB9ye45F r3iX3JEdDoNfWED9tfSvJRrSpkf1t1mp5NHFXoGN7I2ElPE06oF7QU7+E2mX/lWX 8k3OWiAZ7TL1vylCOipmIWX7RObfulRfOBGaBkB4TIjvVxSmCA8TyneY+6jAco3q g+A2+PH/CK4XGqKJ5f1W93Dp27DWZBKJRWqMkTt0RYjIq8cMLpHu3WgHfif3OO6C tGueLUQeh2THc2WL8+btFebSc0zpDJgI6jgYQQ/WSSEMf5+ewp6GxRGmwmLOgNm3 ZMcbPhSCDJRn3DO7JxJYgOzj7/udP2hYkH2FLBFob+fSyiv3U1A= -----END CERTIFICATE-----Generated at Wed Jun 24 15:28:43 2026 by rpki-client