$ rpki-client -vvf rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft File: 4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft (raw, json) Hash identifier: IYD1Hl0NCTx2Y6tz0xiYFuR2xClL9/4hhv3YBuZ163U= Subject key identifier: 52:A5:09:9C:9B:46:BD:18:91:0B:42:14:DE:D8:67:C6:47:B3:FA:7C Authority key identifier: 4E:85:79:F4:6C:CA:51:CA:56:CD:9C:3E:A1:A3:A1:29:C1:98:70:4B Certificate issuer: /CN=4E8579F46CCA51CA56CD9C3EA1A3A129C198704B Certificate serial: 281E2579C4FB276F98437553F5DAF7F53273EFC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 04:35:21 +0000 Manifest this update: Sat 20 Jun 2026 04:30:21 +0000 Manifest next update: Sun 21 Jun 2026 08:28:21 +0000 Files and hashes: 1: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: cvnmUk/nxIx4kivdjBl5pAuWya0Ssizm0yja+4mpq3g=) 2: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: l0tvorHSkUZlt4zaL3Dl67F8jKKatHb3Uo7qW6XsBFY=) 3: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: S+rOrm27Es7W6Om8mBBRTFySKu0A8+vu3LzCH/NnAfQ=) 4: 4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl (hash: kX0tOgRgkmhnkDQE91GA+XDsLYraSwoeQ24+QbFuw04=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 08:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1e:25:79:c4:fb:27:6f:98:43:75:53:f5:da:f7:f5:32:73:ef:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E8579F46CCA51CA56CD9C3EA1A3A129C198704B Validity Not Before: Jun 20 04:30:21 2026 GMT Not After : Jun 21 08:28:21 2026 GMT Subject: CN=52A5099C9B46BD18910B4214DED867C647B3FA7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d8:d8:87:27:fe:f3:92:47:a6:92:1d:30:77: 21:71:f1:b8:ff:6b:dd:7e:95:9a:e8:13:1e:07:07: f1:12:f8:17:60:5c:36:7b:97:a7:01:89:b9:59:a0: 45:7b:eb:79:0c:f2:1b:63:a5:3d:37:d7:50:5c:24: 16:2d:e3:c0:64:03:6c:ea:7d:be:d4:35:6c:ff:00: 5b:91:97:8f:a1:11:c1:98:39:91:9f:8e:b0:20:6d: 01:87:51:7b:15:7f:1c:7e:b4:66:aa:e7:6e:69:57: 40:27:87:7b:74:fe:00:63:e3:53:b8:ac:af:09:f3: a8:bf:bd:53:e2:d1:40:b9:e3:d2:b6:f6:0f:63:6d: 3a:93:6c:5b:f5:ca:3b:83:eb:35:e3:26:ea:c8:7e: a2:44:65:91:13:5e:44:45:ad:ad:d9:bd:51:7b:7d: 2f:e0:76:39:73:7f:cd:6f:de:51:db:1b:2c:93:78: 37:ec:0f:48:b9:bc:a0:56:5f:9b:26:ca:23:6b:61: de:27:da:b1:7c:71:09:4c:7a:f7:ad:6e:32:4c:9f: 8d:6a:17:c4:98:ad:0c:59:be:43:35:72:f7:20:ed: 8b:fc:a0:ad:48:ce:c6:55:bc:19:f4:89:69:80:b5: 7a:4d:c1:b5:de:b7:65:ea:61:14:ce:01:80:6f:03: 1a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A5:09:9C:9B:46:BD:18:91:0B:42:14:DE:D8:67:C6:47:B3:FA:7C X509v3 Authority Key Identifier: keyid:4E:85:79:F4:6C:CA:51:CA:56:CD:9C:3E:A1:A3:A1:29:C1:98:70:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:18:4f:a5:ac:81:d9:b7:8b:84:6e:66:c4:f4:4a:dd:4d:c2: bf:b6:31:48:39:46:53:98:52:54:16:9e:43:73:1f:ea:d8:e0: 5e:70:32:92:29:3c:50:34:75:81:bd:63:7d:93:5e:52:a5:eb: 76:de:38:31:bd:16:d6:1f:2f:11:51:e7:ef:44:3d:6c:66:3e: d3:ac:af:3e:8a:9b:9e:ba:62:75:80:cd:d4:98:55:37:3a:a3: 6b:6b:ff:f3:ae:5f:27:fb:4e:1f:de:5d:30:65:9b:0c:69:c9: 84:e9:c2:e6:27:3f:a2:55:79:01:64:b1:c8:b1:2e:17:a2:92: 7d:e9:6f:74:b3:7f:99:49:c6:93:f9:7f:92:01:67:4c:ad:45: d9:42:32:31:8f:5a:d8:19:fa:2d:45:b7:ed:02:0a:af:3e:09: e2:eb:b5:36:28:2d:60:22:e9:a3:98:c2:cd:fe:64:ac:9d:4b: 74:b8:2c:f4:4a:61:21:6a:37:2a:56:a1:e8:55:ad:61:f5:7a: a5:ae:1e:f0:2c:6d:0d:84:3f:5d:65:b4:16:32:12:c4:1b:5c: cc:3d:29:e6:f2:e6:f6:b0:19:b3:ed:c9:5c:0e:2c:c8:a4:9a: 10:c8:2a:85:7a:72:93:58:81:05:17:60:21:ef:7c:cd:93:51: 9b:9d:ee:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKB4lecT7J2+YQ3VT9dr39TJz78MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU4NTc5RjQ2Q0NBNTFDQTU2Q0Q5QzNFQTFBM0ExMjlD MTk4NzA0QjAeFw0yNjA2MjAwNDMwMjFaFw0yNjA2MjEwODI4MjFaMDMxMTAvBgNV BAMTKDUyQTUwOTlDOUI0NkJEMTg5MTBCNDIxNERFRDg2N0M2NDdCM0ZBN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI2NiHJ/7zkkemkh0wdyFx8bj/ a91+lZroEx4HB/ES+BdgXDZ7l6cBiblZoEV763kM8htjpT0311BcJBYt48BkA2zq fb7UNWz/AFuRl4+hEcGYOZGfjrAgbQGHUXsVfxx+tGaq525pV0Anh3t0/gBj41O4 rK8J86i/vVPi0UC549K29g9jbTqTbFv1yjuD6zXjJurIfqJEZZETXkRFra3ZvVF7 fS/gdjlzf81v3lHbGyyTeDfsD0i5vKBWX5smyiNrYd4n2rF8cQlMevetbjJMn41q F8SYrQxZvkM1cvcg7Yv8oK1IzsZVvBn0iWmAtXpNwbXet2XqYRTOAYBvAxrjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUqUJnJtGvRiRC0IU3thnxkez+nwwHwYDVR0j BBgwFoAUToV59GzKUcpWzZw+oaOhKcGYcEswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM1MjI0YzYtMzM0ZC00ZjNkLTk4MzctMWJhY2NhNWEwMjJiLzAvNEU4NTc5RjQ2 Q0NBNTFDQTU2Q0Q5QzNFQTFBM0ExMjlDMTk4NzA0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTg1NzlGNDZDQ0E1MUNBNTZDRDlDM0VBMUEzQTEyOUMxOTg3 MDRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvNEU4NTc5RjQ2Q0NBNTFDQTU2Q0Q5QzNFQTFBM0Ex MjlDMTk4NzA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0YT6Wsgdm3i4RuZsT0St1Nwr+2MUg5RlOY UlQWnkNzH+rY4F5wMpIpPFA0dYG9Y32TXlKl63beODG9FtYfLxFR5+9EPWxmPtOs rz6Km566YnWAzdSYVTc6o2tr//OuXyf7Th/eXTBlmwxpyYTpwuYnP6JVeQFkscix Lheikn3pb3Szf5lJxpP5f5IBZ0ytRdlCMjGPWtgZ+i1Ft+0CCq8+CeLrtTYoLWAi 6aOYws3+ZKydS3S4LPRKYSFqNypWoehVrWH1eqWuHvAsbQ2EP11ltBYyEsQbXMw9 Keby5vawGbPtyVwOLMikmhDIKoV6cpNYgQUXYCHvfM2TUZud7gw= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:13 2026 by rpki-client