$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft File: 4E0311031DBA1471A97F3183416162430EA78405.mft (raw, json) Hash identifier: VIS7y+YtGSeALjo5C373GMEjL8nOeajbdQrNtA1l2FQ= Subject key identifier: DA:93:0F:8B:98:5F:E7:62:FF:56:78:AD:C0:C2:3C:4C:F2:C7:C4:B7 Authority key identifier: 4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05 Certificate issuer: /CN=4E0311031DBA1471A97F3183416162430EA78405 Certificate serial: 7D8BA920380B36CE8CAD459FCB65727AE56D748A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 17:16:41 +0000 Manifest this update: Fri 19 Jun 2026 17:11:41 +0000 Manifest next update: Sat 20 Jun 2026 18:54:41 +0000 Files and hashes: 1: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: 45DsIwwkRRpg5bWvzaG3sx/NMYDeJXNq0PjvKzltS2I=) 2: 4E0311031DBA1471A97F3183416162430EA78405.crl (hash: SY1ZKN4rzeH1KPpANyM9JmLD7ii2qnEZSkgtLvnEkZI=) 3: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: EeoLX1eQr3kbHp2go87fzfWuIm2QGRQurIS8zg4rg8k=) 4: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: LCoG5MBtVr1gnp0Cb9QG4F/kZ9BcJIu/HLJgqKdyZtQ=) 5: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: kBF7Opi92U9hs5gCPj1VpLoXTbkOV0WaW1UNm3qxyr8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:8b:a9:20:38:0b:36:ce:8c:ad:45:9f:cb:65:72:7a:e5:6d:74:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E0311031DBA1471A97F3183416162430EA78405 Validity Not Before: Jun 19 17:11:41 2026 GMT Not After : Jun 20 18:54:41 2026 GMT Subject: CN=DA930F8B985FE762FF5678ADC0C23C4CF2C7C4B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:bc:12:d2:99:88:dd:d6:e3:d5:31:1c:5c: 9a:ad:0a:7b:06:b5:dd:67:0e:07:9c:d4:fc:80:15: fd:94:c1:01:31:13:3a:a6:ee:7f:c8:2f:b0:04:f6: 8f:a6:0f:f3:2c:9d:8e:48:ed:be:39:7a:1e:24:ee: ef:3c:71:2f:c4:2c:73:21:d7:79:09:d9:b8:09:4a: 0e:2f:8d:3d:30:7c:e8:62:53:60:63:8c:f2:1c:fc: 7e:20:e4:48:63:69:65:1f:ac:f3:7e:71:60:47:e3: 6f:c8:18:e4:e4:7f:40:9e:39:8b:a1:98:03:1b:76: 5f:8b:ee:b5:68:9e:ea:1e:0d:34:3c:75:cb:e9:ee: c5:7f:13:1c:48:71:0d:02:4d:a9:e1:cc:ee:c2:a1: 94:85:a0:c8:76:c9:93:f3:26:32:05:db:f8:03:6e: 85:25:fb:76:b1:02:82:d6:a8:5c:cd:a3:15:0b:57: 8e:d6:fc:ad:36:1e:88:71:1f:4a:a4:0b:fe:31:f8: be:36:70:48:e7:67:45:56:5f:b3:4a:fb:81:7d:1d: ff:1a:1e:54:5b:4b:4b:ab:90:c0:44:d6:04:58:36: e4:66:e5:9e:ad:ad:b8:27:6d:b6:13:51:ac:70:6d: ba:d7:4c:39:60:81:ff:ee:4d:a7:7c:e7:21:6e:c9: 06:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:93:0F:8B:98:5F:E7:62:FF:56:78:AD:C0:C2:3C:4C:F2:C7:C4:B7 X509v3 Authority Key Identifier: keyid:4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e3:82:de:a3:02:1f:88:d2:b5:d2:9c:0f:6d:e0:b9:f0:af: 68:10:1a:77:4f:4a:c0:32:92:83:6d:90:c6:ac:7e:82:48:8d: aa:e9:17:72:b2:af:22:da:5f:c7:a8:8a:a2:2f:44:ab:62:19: 94:82:d3:f3:96:c7:0f:f6:3d:e8:7e:9c:66:05:f4:ee:90:d2: 5d:57:8a:fd:0c:bb:25:0f:1a:51:48:cd:8a:e6:50:1d:7a:c4: 82:5e:d9:7f:8e:79:f6:a8:3d:e3:bd:f7:70:df:2b:06:54:6f: 77:c6:58:2a:72:34:86:8c:75:c9:a2:dc:e8:f4:6d:72:24:67: 14:06:9d:67:4e:d4:a9:d1:4e:4f:96:60:77:7f:38:e9:12:77: cc:e6:f9:65:44:e0:53:4c:2c:48:c9:d0:ba:6a:d1:76:f3:32: c0:ae:f7:b0:80:7a:30:34:9d:46:8d:2b:12:b5:34:ae:31:56: 3a:2a:d0:38:ba:8a:61:22:c3:1a:4c:b7:49:01:fb:bf:77:0a: 9c:eb:a8:82:21:a9:60:7b:c3:be:40:a1:0b:28:5b:de:f2:2f: fa:22:82:5f:1c:32:20:aa:0c:ae:80:b0:92:ed:72:1a:50:60: 9f:0a:08:78:62:58:03:8e:ad:8d:b2:68:d9:ca:8a:86:85:de: dd:3e:c4:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfYupIDgLNs6MrUWfy2VyeuVtdIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMzExMDMxREJBMTQ3MUE5N0YzMTgzNDE2MTYyNDMw RUE3ODQwNTAeFw0yNjA2MTkxNzExNDFaFw0yNjA2MjAxODU0NDFaMDMxMTAvBgNV BAMTKERBOTMwRjhCOTg1RkU3NjJGRjU2NzhBREMwQzIzQzRDRjJDN0M0QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClurwS0pmI3dbj1TEcXJqtCnsG td1nDgec1PyAFf2UwQExEzqm7n/IL7AE9o+mD/MsnY5I7b45eh4k7u88cS/ELHMh 13kJ2bgJSg4vjT0wfOhiU2BjjPIc/H4g5EhjaWUfrPN+cWBH42/IGOTkf0CeOYuh mAMbdl+L7rVonuoeDTQ8dcvp7sV/ExxIcQ0CTanhzO7CoZSFoMh2yZPzJjIF2/gD boUl+3axAoLWqFzNoxULV47W/K02HohxH0qkC/4x+L42cEjnZ0VWX7NK+4F9Hf8a HlRbS0urkMBE1gRYNuRm5Z6trbgnbbYTUaxwbbrXTDlggf/uTad85yFuyQYhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2pMPi5hf52L/VnitwMI8TPLHxLcwHwYDVR0j BBgwFoAUTgMRAx26FHGpfzGDQWFiQw6nhAUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E4YjU0ZTYtMTAxNS00OGViLTliYmQtNTFjMTZjZDQ1NDQ1LzAvNEUwMzExMDMx REJBMTQ3MUE5N0YzMTgzNDE2MTYyNDMwRUE3ODQwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTAzMTEwMzFEQkExNDcxQTk3RjMxODM0MTYxNjI0MzBFQTc4 NDA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvNEUwMzExMDMxREJBMTQ3MUE5N0YzMTgzNDE2MTYy NDMwRUE3ODQwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzjgt6jAh+I0rXSnA9t4Lnwr2gQGndPSsAy koNtkMasfoJIjarpF3KyryLaX8eoiqIvRKtiGZSC0/OWxw/2Peh+nGYF9O6Q0l1X iv0MuyUPGlFIzYrmUB16xIJe2X+OefaoPeO993DfKwZUb3fGWCpyNIaMdcmi3Oj0 bXIkZxQGnWdO1KnRTk+WYHd/OOkSd8zm+WVE4FNMLEjJ0Lpq0XbzMsCu97CAejA0 nUaNKxK1NK4xVjoq0Di6imEiwxpMt0kB+793CpzrqIIhqWB7w75AoQsoW97yL/oi gl8cMiCqDK6AsJLtchpQYJ8KCHhiWAOOrY2yaNnKioaF3t0+xNQ= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:13 2026 by rpki-client