$ rpki-client -vvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft File: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft (raw, json) Hash identifier: Ql+pJGfaINv2h6aOizU6gjU9HnE7BAz+AG/kp0PA2JY= Subject key identifier: 1F:AA:6B:24:B2:3D:0D:FF:1D:15:57:A7:1A:77:38:AA:A6:B0:EF:AC Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 31681511D89E83648F8EC3B99EBF2DFF69461734 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 12:37:30 +0000 Manifest this update: Sun 19 Jul 2026 12:32:30 +0000 Manifest next update: Mon 20 Jul 2026 15:32:30 +0000 Files and hashes: 1: 3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa (hash: 1SNuWHPKyjm9i33KVxLucA1qoW0DruITzpVEbkOYzp4=) 2: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (hash: lcj9Lo8ozccThBUG7wqDK1apaR2k1E0ODhzzBgFVW1M=) 3: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl (hash: +UFlPPHW9JfOEbZXy/wK4gQsukqwySCrdypEF7gMJf0=) 4: 323430313a626534303a3a2f33322d3438203d3e20313336383431.roa (hash: pUzTSX764GWtHHO9jcVOxnVCQQd9HOcC1kC/yiGkLr8=) 5: 3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa (hash: 2ukK53+fe7S5M2zaDBH1WtDgIsIsj4+Dshs68GBh99o=) 6: 323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa (hash: Q+ngoFu885sNrsbrQRL3AeApBJ1Eb5cBUZ33V1u7hNU=) 7: 3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (hash: z5zbKQho3avhtYmaIotiPUiQQJ/mO8YtqexQXDW4gG0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:68:15:11:d8:9e:83:64:8f:8e:c3:b9:9e:bf:2d:ff:69:46:17:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: Jul 19 12:32:30 2026 GMT Not After : Jul 20 15:32:30 2026 GMT Subject: CN=1FAA6B24B23D0DFF1D1557A71A7738AAA6B0EFAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:91:67:fd:29:91:43:7b:33:2b:60:f0:82:f8: 02:9e:04:c8:40:1b:f7:fb:9f:9b:42:2e:54:c0:d6: e0:72:bd:b5:f6:c6:09:3a:f0:ee:68:2f:5a:8f:86: b7:26:6e:c3:20:32:b5:84:eb:b3:c9:98:5e:1b:00: 2a:91:96:00:17:ea:c5:c7:9c:b1:b4:38:c9:65:21: 4b:73:50:29:d2:4b:3d:14:a4:cf:aa:36:87:69:e1: ec:ef:dc:c3:45:20:33:4d:2b:8d:0b:2c:02:ac:61: 0f:6d:91:1d:73:ba:b4:ac:b1:91:1a:33:41:ef:14: 15:2a:4e:2e:c9:15:e9:d8:2e:64:94:97:44:5c:cc: 76:b1:17:bc:cd:9f:27:5b:3a:4e:a3:ca:59:d6:24: 6d:98:e0:bf:ac:b8:b0:6d:4c:67:54:93:5d:c2:96: cd:65:ba:97:fc:0b:49:6a:cb:a4:41:d0:4a:8a:cf: 6b:4f:53:ba:9b:40:cf:a2:f0:8c:8c:ec:e0:43:6c: f6:29:ac:2d:54:e2:02:3c:45:5c:56:ea:5e:e7:66: ca:2b:02:3d:70:7e:98:81:3f:04:11:bf:d6:57:e1: d8:9b:ad:e2:0a:b0:7c:80:eb:cb:90:ea:25:83:1b: 4d:7d:51:48:fc:a1:64:64:c5:f0:3b:f7:77:03:de: de:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AA:6B:24:B2:3D:0D:FF:1D:15:57:A7:1A:77:38:AA:A6:B0:EF:AC X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f3:92:5b:71:de:4e:6d:fb:b5:62:ae:f9:07:eb:65:d1:b7: 64:c1:30:29:e4:60:23:0b:96:8f:c7:8c:2d:bb:48:c2:5d:a6: 43:5e:0f:37:a5:56:a8:54:68:bd:b8:e9:31:40:ec:28:9f:dc: 57:c6:8f:4f:27:5b:de:6a:1a:6c:84:c9:d1:76:5d:d3:90:11: 72:9d:83:d3:9b:c4:7c:d8:e4:28:f3:8f:31:de:2c:e2:62:9c: 68:a8:03:02:6f:be:31:81:57:9a:b2:46:a3:90:b3:32:4b:e4: 6e:01:0c:2a:a6:3a:7f:54:2b:df:1b:1d:78:39:54:cf:dc:3b: a6:eb:38:8d:05:a2:98:c8:85:f7:86:2f:55:a7:bd:10:30:b4: f8:96:14:92:3d:38:ab:62:6c:56:8c:4b:b0:c4:7a:a5:c8:b2: 25:ea:cd:68:7d:ba:da:bc:44:f3:50:9a:1a:cd:ff:3a:25:43: 3c:ef:b3:2c:30:fa:b2:d4:0a:84:95:45:49:31:64:aa:8e:5c: 80:64:54:99:a4:31:60:30:97:85:b8:3a:8d:26:d7:47:68:6f: ac:d5:f2:f8:1b:b8:e3:bc:2e:a2:1c:92:9d:ba:6b:80:ec:9d: 37:2e:74:20:13:6a:93:77:48:fa:e0:aa:09:94:e1:ca:db:16: 65:c5:83:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMWgVEdieg2SPjsO5nr8t/2lGFzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVF NTdENTI0NDAeFw0yNjA3MTkxMjMyMzBaFw0yNjA3MjAxNTMyMzBaMDMxMTAvBgNV BAMTKDFGQUE2QjI0QjIzRDBERkYxRDE1NTdBNzFBNzczOEFBQTZCMEVGQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2kWf9KZFDezMrYPCC+AKeBMhA G/f7n5tCLlTA1uByvbX2xgk68O5oL1qPhrcmbsMgMrWE67PJmF4bACqRlgAX6sXH nLG0OMllIUtzUCnSSz0UpM+qNodp4ezv3MNFIDNNK40LLAKsYQ9tkR1zurSssZEa M0HvFBUqTi7JFenYLmSUl0RczHaxF7zNnydbOk6jylnWJG2Y4L+suLBtTGdUk13C ls1lupf8C0lqy6RB0EqKz2tPU7qbQM+i8IyM7OBDbPYprC1U4gI8RVxW6l7nZsor Aj1wfpiBPwQRv9ZX4dibreIKsHyA68uQ6iWDG019UUj8oWRkxfA793cD3t6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH6prJLI9Df8dFVenGnc4qqaw76wwHwYDVR0j BBgwFoAUTaEdWvXxeucWUZ+EomPhpeV9UkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDczMDRiODMtMzBhYS00YmJmLTlmZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFG NUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVFNTdENTI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1 MjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDczMDRiODMtMzBhYS00YmJmLTlm ZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0Ux QTVFNTdENTI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDzkltx3k5t+7VirvkH62XRt2TBMCnkYCML lo/HjC27SMJdpkNeDzelVqhUaL246TFA7Cif3FfGj08nW95qGmyEydF2XdOQEXKd g9ObxHzY5CjzjzHeLOJinGioAwJvvjGBV5qyRqOQszJL5G4BDCqmOn9UK98bHXg5 VM/cO6brOI0FopjIhfeGL1WnvRAwtPiWFJI9OKtibFaMS7DEeqXIsiXqzWh9utq8 RPNQmhrN/zolQzzvsyww+rLUCoSVRUkxZKqOXIBkVJmkMWAwl4W4Oo0m10dob6zV 8vgbuOO8LqIckp26a4DsnTcudCATapN3SPrgqgmU4crbFmXFg10= -----END CERTIFICATE-----Generated at Sun Jul 19 23:32:52 2026 by rpki-client