$ rpki-client -vvf rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft File: B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft (raw, json) Hash identifier: AKoaAUAtfQsNzzpvPBc5qX3eoiQdV+KTnJSPskIyJjs= Subject key identifier: 3C:EB:6E:8A:CC:57:60:79:F6:3E:3F:03:39:AC:6A:20:1D:42:9D:3D Authority key identifier: B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30 Certificate issuer: /CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230 Certificate serial: 10F0CFCD6D67A0BF95A66A2C6F71090A7C2C5B21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft Manifest number: 02 Signing time: Sun 03 May 2026 02:56:54 +0000 Manifest this update: Sun 03 May 2026 02:51:54 +0000 Manifest next update: Mon 04 May 2026 04:00:54 +0000 Files and hashes: 1: B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl (hash: mZt5UBKvt6eGwPQJkvbWvp1wvH0GQoaIhcGVVa4c/1w=) 2: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Gy6gsEzVMHwZHSwsQeHdnkzzEfB+MjqsZcuu2XFRbNQ=) 3: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: BKnEE3t5/yyaN3HJnwE9Dy+SO+1ms0WO08R6OxZOm7o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 04:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f0:cf:cd:6d:67:a0:bf:95:a6:6a:2c:6f:71:09:0a:7c:2c:5b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230 Validity Not Before: May 3 02:51:54 2026 GMT Not After : May 4 04:00:54 2026 GMT Subject: CN=3CEB6E8ACC576079F63E3F0339AC6A201D429D3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:e4:73:ae:a5:9c:b8:13:25:15:61:33:ec: f6:f6:d1:8e:d8:04:18:54:3d:c5:83:10:2b:a9:20: 4b:28:0f:87:b3:7a:ac:99:0c:40:c9:7c:b8:cc:7b: bb:f0:81:1f:c8:1f:30:f7:b5:d1:ac:8f:f7:ff:4c: 61:91:5e:e7:d5:6f:50:b7:1e:fd:71:4e:ee:3a:b7: 6c:9b:fc:b4:1f:13:0a:1c:c5:2d:bf:74:8b:c3:ca: 7f:66:1e:02:eb:94:8a:54:fb:31:63:4c:1d:9f:ba: f4:ab:18:28:59:77:21:b1:01:ce:7d:57:74:fa:da: 7f:24:ee:32:15:46:d5:ab:bf:1e:5e:16:26:97:f0: 9a:25:cc:c6:20:30:5b:5e:70:2f:c4:bb:d7:41:cf: 51:b0:8e:ab:3e:12:9f:66:8b:9b:25:c9:d4:68:65: 17:a0:10:7a:50:7c:a4:d9:7d:cf:26:f3:13:d3:3d: 43:e7:68:80:09:7c:42:5c:40:6a:9e:ae:c5:35:27: 02:21:10:0f:bf:e1:26:88:23:c8:e6:4d:db:9d:a7: cd:27:e4:e8:25:08:53:5e:24:9a:e5:a7:b4:ed:b2: b2:b2:06:e2:13:7a:a2:73:c4:10:cc:94:6c:b1:a2: 9f:12:64:da:c5:8d:23:f1:f5:86:cd:ec:ab:bd:b5: 1b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EB:6E:8A:CC:57:60:79:F6:3E:3F:03:39:AC:6A:20:1D:42:9D:3D X509v3 Authority Key Identifier: keyid:B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:03:9f:11:dd:d2:70:8b:36:d3:7d:dc:40:88:71:57:60:94: 27:e7:f5:8b:66:7b:14:d2:79:3c:23:26:18:2e:2c:31:94:c6: 9b:a4:8b:06:3e:5f:df:cd:ad:ee:ad:26:d6:cc:83:13:99:36: e1:4a:6c:a1:9c:c2:a6:d0:b9:b8:2e:ab:4a:77:9d:0a:13:33: ff:d4:75:13:9f:d5:77:c9:11:91:b3:12:89:04:64:f8:af:3f: 30:d1:eb:99:8e:0d:3e:b0:07:e0:be:03:6c:45:73:94:d3:87: bc:ed:fb:58:4f:0d:06:94:2d:1f:1f:7c:30:c6:5c:71:95:98: 28:47:39:20:eb:cc:e5:a8:ac:90:40:59:a4:76:df:d8:ff:7e: 10:83:3e:9c:be:57:16:55:2b:61:7f:3e:ef:d1:ed:e1:e1:c6: 79:98:85:13:b0:19:fb:14:ad:bc:53:ae:82:16:37:0f:6d:c7: 64:7b:38:f0:9c:59:97:19:4a:76:6a:48:24:13:c7:22:84:df: d0:2d:34:97:6e:f1:3d:bc:dd:d9:0d:d6:58:6c:66:c4:af:78: 6a:7d:14:5b:23:38:bb:e6:83:bd:29:33:aa:2b:94:be:5e:51: 6b:33:0c:16:f7:dc:cd:52:72:fe:92:35:4a:08:d8:04:54:66: 96:56:ee:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPDPzW1noL+Vpmosb3EJCnwsWyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRDNkQwNjAzNzU4MkZEMEY3MjIzOUI3QUVEQ0JEMEYz MzQyRTIzMDAeFw0yNjA1MDMwMjUxNTRaFw0yNjA1MDQwNDAwNTRaMDMxMTAvBgNV BAMTKDNDRUI2RThBQ0M1NzYwNzlGNjNFM0YwMzM5QUM2QTIwMUQ0MjlEM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/ORzrqWcuBMlFWEz7Pb20Y7Y BBhUPcWDECupIEsoD4ezeqyZDEDJfLjMe7vwgR/IHzD3tdGsj/f/TGGRXufVb1C3 Hv1xTu46t2yb/LQfEwocxS2/dIvDyn9mHgLrlIpU+zFjTB2fuvSrGChZdyGxAc59 V3T62n8k7jIVRtWrvx5eFiaX8JolzMYgMFtecC/Eu9dBz1Gwjqs+Ep9mi5slydRo ZRegEHpQfKTZfc8m8xPTPUPnaIAJfEJcQGqersU1JwIhEA+/4SaII8jmTdudp80n 5OglCFNeJJrlp7TtsrKyBuITeqJzxBDMlGyxop8SZNrFjSPx9YbN7Ku9tRtfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPOtuisxXYHn2Pj8DOaxqIB1CnT0wHwYDVR0j BBgwFoAUtMbQYDdYL9D3Ijm3rty9DzNC4jAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzNjU1ZjEtMzhiNi00NDE1LThmYWYtMmI1YjkxNTNlNTJkLzAvQjRDNkQwNjAz NzU4MkZEMEY3MjIzOUI3QUVEQ0JEMEYzMzQyRTIzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNEM2RDA2MDM3NTgyRkQwRjcyMjM5QjdBRURDQkQwRjMzNDJF MjMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvQjRDNkQwNjAzNzU4MkZEMEY3MjIzOUI3QUVEQ0JE MEYzMzQyRTIzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0DnxHd0nCLNtN93ECIcVdglCfn9YtmexTS eTwjJhguLDGUxpukiwY+X9/Nre6tJtbMgxOZNuFKbKGcwqbQubguq0p3nQoTM//U dROf1XfJEZGzEokEZPivPzDR65mODT6wB+C+A2xFc5TTh7zt+1hPDQaULR8ffDDG XHGVmChHOSDrzOWorJBAWaR239j/fhCDPpy+VxZVK2F/Pu/R7eHhxnmYhROwGfsU rbxTroIWNw9tx2R7OPCcWZcZSnZqSCQTxyKE39AtNJdu8T283dkN1lhsZsSveGp9 FFsjOLvmg70pM6orlL5eUWszDBb33M1Scv6SNUoI2ARUZpZW7oA= -----END CERTIFICATE-----Generated at Sun May 3 11:41:15 2026 by rpki-client