$ rpki-client -vvf rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft File: 4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft (raw, json) Hash identifier: g39FOKuBUzKrpwFL/i8hzenhNKgA8KzO27h0h8TwaZs= Subject key identifier: 01:4F:35:FC:55:B6:0A:99:7F:DA:3D:51:AB:57:4D:16:1F:E7:91:09 Authority key identifier: 4F:CC:5F:72:C8:4C:03:16:A4:33:3F:A5:DC:1D:8E:50:86:1D:CF:B4 Certificate issuer: /CN=4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4 Certificate serial: 013D28E6C158E81E0B6EAA6E1AB39A158CCC2657 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 14:02:51 +0000 Manifest this update: Fri 19 Jun 2026 13:57:51 +0000 Manifest next update: Sat 20 Jun 2026 15:41:51 +0000 Files and hashes: 1: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: 6RDMlBYKz+7bJ5EOXVwDOVFpA9NmUujfNeaVaTSvntE=) 2: 4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl (hash: o4M/x4QjU1k4+U1djIL/a54akexwiUdS5PFtX5Goc20=) 3: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: GvESsWLLWyGR/dTKAI2ZEQUDQyTILXzxCsEPsqKRlPc=) 4: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: k64Gbl+KVZNgSNBLh88ZvPWQiWwa2C0VFUdGvst00Zw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 15:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:3d:28:e6:c1:58:e8:1e:0b:6e:aa:6e:1a:b3:9a:15:8c:cc:26:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4 Validity Not Before: Jun 19 13:57:51 2026 GMT Not After : Jun 20 15:41:51 2026 GMT Subject: CN=014F35FC55B60A997FDA3D51AB574D161FE79109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:26:1e:6f:7f:52:8b:a1:dd:84:5a:42:01:5c: b3:30:52:28:d9:32:35:93:c5:60:39:24:4a:3e:d7: ac:b6:fd:52:ae:de:a8:2d:4d:d1:20:14:9d:f1:92: 2a:72:ca:ff:a0:dd:34:04:15:2a:b2:2d:8a:38:85: 7b:15:8d:aa:a3:b0:f4:17:e5:d3:fa:b5:ff:c2:b8: 99:7b:b3:2c:ac:30:33:fc:e5:da:04:bd:35:ed:7e: 7e:69:32:d1:3c:1c:d6:8d:71:6f:df:cf:87:05:14: 59:e7:8f:e4:1f:94:47:29:4e:4b:80:8b:c0:da:f3: 2b:5c:4f:d2:12:ae:ed:9c:2f:eb:a5:d3:bc:97:07: 83:7a:3f:8b:36:bf:d3:aa:7e:b2:93:66:de:7f:ab: d6:f5:0e:c2:c6:6c:65:be:e8:e3:17:0e:6c:20:03: 29:75:08:3d:ce:11:e4:b0:01:e8:ce:c5:9f:f0:15: e6:87:a2:07:9d:07:fb:a8:84:f8:6e:e2:f4:bc:b5: 19:e9:a7:1b:b6:1d:e8:61:72:df:2e:5e:6d:bb:80: 9a:a6:0c:ba:e5:17:2e:13:ce:de:c1:b0:dc:aa:5d: a0:1d:fe:7a:9a:a7:3a:57:26:77:67:5f:a2:e4:cd: 0d:75:d0:4c:47:b4:31:13:8b:10:16:d8:0a:b6:40: ef:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4F:35:FC:55:B6:0A:99:7F:DA:3D:51:AB:57:4D:16:1F:E7:91:09 X509v3 Authority Key Identifier: keyid:4F:CC:5F:72:C8:4C:03:16:A4:33:3F:A5:DC:1D:8E:50:86:1D:CF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:1a:79:9d:ba:7f:02:92:25:23:36:f5:ae:4e:5f:70:a0:4b: a4:94:6f:c5:2d:5b:a5:81:29:8c:a2:91:d5:a2:85:09:d4:d4: fd:40:73:82:83:f8:91:18:d0:2a:ce:9a:45:9c:af:0f:a4:13: 29:04:b4:51:fe:01:6b:8c:6a:a1:34:e4:22:8d:6f:c1:25:16: 6a:00:55:59:bb:87:bb:bd:5a:18:95:71:b9:c9:1f:e1:fb:6c: 6b:e8:7b:a2:0a:0e:27:7b:e7:02:67:ad:03:1d:24:41:e9:39: 51:a8:af:8f:3c:bb:15:8f:f6:7b:ee:de:26:0f:a7:ff:6f:46: 70:da:e3:ac:11:ea:5c:57:aa:9c:f5:03:85:48:24:17:3d:d4: de:cb:e7:95:7e:f5:c9:2c:df:fb:7a:19:90:58:c9:bd:ab:76: 75:72:13:41:41:81:14:52:6f:ba:8f:0c:32:9a:fc:0b:79:3a: 38:c8:14:e9:b5:e7:be:08:56:ab:0f:dd:5e:5b:9b:f9:7a:f2: 94:59:f6:f9:ba:8b:a8:a6:bb:bb:02:74:1e:bb:99:36:8b:d2: c5:94:5e:23:89:d8:2f:55:3a:01:dd:f9:e1:74:ae:6c:5a:95: 6f:f5:95:0c:60:2e:15:1b:83:8c:dd:6e:a9:01:e2:71:ab:5b: 25:f5:44:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAT0o5sFY6B4LbqpuGrOaFYzMJlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDQzVGNzJDODRDMDMxNkE0MzMzRkE1REMxRDhFNTA4 NjFEQ0ZCNDAeFw0yNjA2MTkxMzU3NTFaFw0yNjA2MjAxNTQxNTFaMDMxMTAvBgNV BAMTKDAxNEYzNUZDNTVCNjBBOTk3RkRBM0Q1MUFCNTc0RDE2MUZFNzkxMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMJh5vf1KLod2EWkIBXLMwUijZ MjWTxWA5JEo+16y2/VKu3qgtTdEgFJ3xkipyyv+g3TQEFSqyLYo4hXsVjaqjsPQX 5dP6tf/CuJl7syysMDP85doEvTXtfn5pMtE8HNaNcW/fz4cFFFnnj+QflEcpTkuA i8Da8ytcT9ISru2cL+ul07yXB4N6P4s2v9OqfrKTZt5/q9b1DsLGbGW+6OMXDmwg Ayl1CD3OEeSwAejOxZ/wFeaHogedB/uohPhu4vS8tRnppxu2Hehhct8uXm27gJqm DLrlFy4Tzt7BsNyqXaAd/nqapzpXJndnX6LkzQ110ExHtDETixAW2Aq2QO8bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAU81/FW2Cpl/2j1Rq1dNFh/nkQkwHwYDVR0j BBgwFoAUT8xfcshMAxakMz+l3B2OUIYdz7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk4YjM1NDktZTI1My00ZmQ5LWE3MDQtMjk2OTQ0ZTVhMDYzLzAvNEZDQzVGNzJD ODRDMDMxNkE0MzMzRkE1REMxRDhFNTA4NjFEQ0ZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkNDNUY3MkM4NEMwMzE2QTQzMzNGQTVEQzFEOEU1MDg2MURD RkI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvNEZDQzVGNzJDODRDMDMxNkE0MzMzRkE1REMxRDhF NTA4NjFEQ0ZCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8aeZ26fwKSJSM29a5OX3CgS6SUb8UtW6WB KYyikdWihQnU1P1Ac4KD+JEY0CrOmkWcrw+kEykEtFH+AWuMaqE05CKNb8ElFmoA VVm7h7u9WhiVcbnJH+H7bGvoe6IKDid75wJnrQMdJEHpOVGor488uxWP9nvu3iYP p/9vRnDa46wR6lxXqpz1A4VIJBc91N7L55V+9cks3/t6GZBYyb2rdnVyE0FBgRRS b7qPDDKa/At5OjjIFOm1574IVqsP3V5bm/l68pRZ9vm6i6imu7sCdB67mTaL0sWU XiOJ2C9VOgHd+eF0rmxalW/1lQxgLhUbg4zdbqkB4nGrWyX1RF0= -----END CERTIFICATE-----Generated at Sat Jun 20 09:16:53 2026 by rpki-client