$ rpki-client -vvf rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft File: 4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft (raw, json) Hash identifier: 7/zBWudUKc1j5GxDvp28nxiiNTuRe/EwHUTeRB2D9Kc= Subject key identifier: 47:2D:A9:04:DC:54:7B:4D:89:52:AE:3E:FA:F6:FD:36:48:E1:F7:36 Authority key identifier: 4B:1E:AB:A7:64:60:DB:E6:04:6B:85:7B:57:FD:FB:52:8C:2D:A0:9F Certificate issuer: /CN=4B1EABA76460DBE6046B857B57FDFB528C2DA09F Certificate serial: 041AA9412B921A6F44B8E2F843B654EA867AC860 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 23:05:31 +0000 Manifest this update: Wed 17 Jun 2026 23:00:31 +0000 Manifest next update: Fri 19 Jun 2026 01:17:31 +0000 Files and hashes: 1: 4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl (hash: HH3Jrshrtd6rFW/ND/k4r/ps20vcdd49g70bzzhg7xo=) 2: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: ySMFpx3jAtHRk6Y0gp/23WMKdK2+n4m1Qj3cdUQcw48=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 01:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1a:a9:41:2b:92:1a:6f:44:b8:e2:f8:43:b6:54:ea:86:7a:c8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B1EABA76460DBE6046B857B57FDFB528C2DA09F Validity Not Before: Jun 17 23:00:31 2026 GMT Not After : Jun 19 01:17:31 2026 GMT Subject: CN=472DA904DC547B4D8952AE3EFAF6FD3648E1F736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7b:b0:43:4c:b6:33:37:6a:a8:f9:f5:50:df: b0:8f:a0:53:47:20:03:d7:05:07:c9:90:fb:a6:1b: 25:34:e5:06:51:dd:e0:54:ec:9d:15:46:f9:c4:2b: 02:d9:ce:b1:e3:89:d1:0c:a6:65:16:e3:a9:bc:4e: 0c:1a:10:d7:ef:08:4c:4b:44:e8:81:ea:ff:20:b8: 13:39:e8:92:d5:0c:26:53:cf:2f:44:80:40:b5:96: 13:d9:fd:e0:2d:5d:99:81:d9:67:7c:4a:48:b7:03: 4e:b7:e6:d7:4e:e0:dc:58:e7:82:11:d7:1a:dd:f4: 8b:41:69:6b:51:4b:e1:87:38:44:1f:32:ba:7a:76: b9:31:fe:13:28:29:d4:35:60:33:fc:8a:ca:f3:e8: bf:99:22:07:dd:d1:64:8f:8b:ef:65:4a:b8:74:52: fc:8b:2a:c3:21:20:3d:69:05:b2:42:db:4b:15:30: a5:75:69:ab:4b:f7:fa:d3:73:3a:1b:d4:16:d1:35: 13:30:78:df:62:21:e2:5a:2e:fb:c9:aa:ad:95:5d: df:18:b3:cd:63:6d:24:39:fb:e1:4e:ef:b0:1e:2a: 2d:8b:77:d2:9c:2c:fb:c7:ac:c0:29:85:25:6e:a6: 8d:96:71:ca:49:7b:7f:09:28:95:bb:53:3a:05:d7: 01:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2D:A9:04:DC:54:7B:4D:89:52:AE:3E:FA:F6:FD:36:48:E1:F7:36 X509v3 Authority Key Identifier: keyid:4B:1E:AB:A7:64:60:DB:E6:04:6B:85:7B:57:FD:FB:52:8C:2D:A0:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:20:b1:6b:56:65:ef:ac:0d:60:d6:55:d9:9d:61:84:64:ba: d9:4c:1e:a2:49:6b:38:9c:78:b8:57:24:4d:4c:87:95:0b:d8: 4b:fb:63:2d:16:19:f9:30:9f:99:28:11:24:f9:9f:f3:0f:1a: 64:9a:41:7b:ec:44:0b:bd:2c:e0:3e:12:43:ab:c5:52:86:ab: da:3a:bd:6e:3e:75:d2:42:8f:ab:87:4e:41:5a:0f:66:27:6d: 41:70:b3:cd:ca:84:e6:02:e3:04:d2:7a:43:46:ea:c1:20:61: ff:86:49:a3:5f:6b:e7:de:45:b9:74:0e:4d:05:9e:4c:16:d0: b7:3f:95:19:e2:81:d8:25:82:2b:6f:8d:56:1f:6b:bd:c6:bd: 36:39:21:e5:69:f8:8b:06:9a:03:9d:1b:92:67:f7:c7:11:54: 74:34:cf:e3:0a:59:59:7e:53:fb:e7:54:82:00:4c:9d:74:e1: c7:78:aa:2a:6c:d3:ee:81:b9:68:a5:cf:87:f0:5b:36:92:86: 66:60:c5:65:3b:68:b8:ba:cd:bf:37:e4:2a:40:0a:03:3f:d1: 60:87:b5:7c:c9:07:b1:d4:d4:5f:32:ef:e6:1b:ad:4b:2c:0f: 4f:9d:ab:08:9b:fe:1c:55:4d:94:aa:f3:13:3a:56:89:b5:67: 96:15:ae:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBBqpQSuSGm9EuOL4Q7ZU6oZ6yGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIxRUFCQTc2NDYwREJFNjA0NkI4NTdCNTdGREZCNTI4 QzJEQTA5RjAeFw0yNjA2MTcyMzAwMzFaFw0yNjA2MTkwMTE3MzFaMDMxMTAvBgNV BAMTKDQ3MkRBOTA0REM1NDdCNEQ4OTUyQUUzRUZBRjZGRDM2NDhFMUY3MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCve7BDTLYzN2qo+fVQ37CPoFNH IAPXBQfJkPumGyU05QZR3eBU7J0VRvnEKwLZzrHjidEMpmUW46m8TgwaENfvCExL ROiB6v8guBM56JLVDCZTzy9EgEC1lhPZ/eAtXZmB2Wd8Ski3A0635tdO4NxY54IR 1xrd9ItBaWtRS+GHOEQfMrp6drkx/hMoKdQ1YDP8isrz6L+ZIgfd0WSPi+9lSrh0 UvyLKsMhID1pBbJC20sVMKV1aatL9/rTczob1BbRNRMweN9iIeJaLvvJqq2VXd8Y s81jbSQ5++FO77AeKi2Ld9KcLPvHrMAphSVupo2WccpJe38JKJW7UzoF1wF3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURy2pBNxUe02JUq4++vb9Nkjh9zYwHwYDVR0j BBgwFoAUSx6rp2Rg2+YEa4V7V/37UowtoJ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDg4NTc1YzgtNTRmZS00ODAxLWE3YjEtNTE3ZDBlNmI4YjczLzAvNEIxRUFCQTc2 NDYwREJFNjA0NkI4NTdCNTdGREZCNTI4QzJEQTA5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QjFFQUJBNzY0NjBEQkU2MDQ2Qjg1N0I1N0ZERkI1MjhDMkRB MDlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDg4NTc1YzgtNTRmZS00ODAxLWE3 YjEtNTE3ZDBlNmI4YjczLzAvNEIxRUFCQTc2NDYwREJFNjA0NkI4NTdCNTdGREZC NTI4QzJEQTA5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4gsWtWZe+sDWDWVdmdYYRkutlMHqJJazic eLhXJE1Mh5UL2Ev7Yy0WGfkwn5koEST5n/MPGmSaQXvsRAu9LOA+EkOrxVKGq9o6 vW4+ddJCj6uHTkFaD2YnbUFws83KhOYC4wTSekNG6sEgYf+GSaNfa+feRbl0Dk0F nkwW0Lc/lRnigdglgitvjVYfa73GvTY5IeVp+IsGmgOdG5Jn98cRVHQ0z+MKWVl+ U/vnVIIATJ104cd4qips0+6BuWilz4fwWzaShmZgxWU7aLi6zb835CpACgM/0WCH tXzJB7HU1F8y7+YbrUssD0+dqwib/hxVTZSq8xM6Vom1Z5YVrrs= -----END CERTIFICATE-----Generated at Thu Jun 18 17:09:04 2026 by rpki-client