$ rpki-client -vvf rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft File: 4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft (raw, json) Hash identifier: /TrCp9qjUQVC3DmOcdOgxNEloGQ9qOB+PM8/1hUe224= Subject key identifier: DA:54:87:8B:F9:71:D5:A3:76:C6:3D:DA:48:4A:48:19:10:13:67:3E Authority key identifier: 4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD Certificate issuer: /CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Certificate serial: 054C366ED7860165253A11C72E900B0C0EFABC0E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 04:11:04 +0000 Manifest this update: Tue 21 Jul 2026 04:06:04 +0000 Manifest next update: Wed 22 Jul 2026 08:04:04 +0000 Files and hashes: 1: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: NuzvjRElosYE2UG7+eZwvvIrrAeM5hY3Zl0vPo88tlQ=) 2: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: ZfYq00HTDjpvUdw6nAEEEqjvY8Q+YEiON1rQ+odVxcw=) 3: 4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl (hash: ItPrlAyQXfRmqAMXHJgEzcmCf3lK17Km5ATCBiCNxIw=) 4: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: JeyiXx4erlba3GA8MtFHqgBMpzij5IWYDmBP3qqgmrQ=) 5: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: OQGBTyYct40Pw4G0aqEIxJAdvOkNRB0tfWNHiKyDkc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:4c:36:6e:d7:86:01:65:25:3a:11:c7:2e:90:0b:0c:0e:fa:bc:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Validity Not Before: Jul 21 04:06:04 2026 GMT Not After : Jul 22 08:04:04 2026 GMT Subject: CN=DA54878BF971D5A376C63DDA484A48191013673E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4a:c4:68:14:a0:7a:1b:1d:44:a8:89:8f:2a: 05:5d:41:7e:3b:b5:fc:ed:9d:58:35:4d:20:e9:46: 9b:24:5c:bc:98:fb:ad:4e:d8:6b:5e:04:38:8a:f4: 9c:e7:77:6d:b4:99:4a:17:cd:76:27:2a:23:dd:f5: 08:09:ed:2f:aa:04:26:a6:85:a6:9b:a4:41:9b:19: 5a:e8:92:fc:1f:1a:bf:f3:42:1e:d4:ea:ff:50:54: 7b:10:9a:a9:00:0a:f3:30:4e:7a:b9:08:40:fa:58: 42:b7:50:3f:93:b8:82:aa:87:4b:5d:2e:ca:17:10: 7c:13:7d:5a:af:b9:7f:43:f9:85:6a:03:fa:07:f9: ad:65:e9:b2:78:b1:69:16:4f:1b:2f:e3:e2:a9:41: 59:bb:d2:d8:94:dd:4e:58:03:bd:e9:51:eb:25:d8: 98:47:df:38:41:f5:63:d1:45:53:34:c3:9f:40:1e: 93:02:5f:24:9a:da:b6:2f:cf:eb:31:50:9a:1f:0b: 66:0f:b1:d1:3d:5b:dc:9e:ba:39:70:02:fd:30:73: f7:bf:b6:dc:58:db:28:c3:75:9b:61:b0:ed:c5:68: f9:21:74:c0:63:3e:39:fc:6a:d5:b6:38:05:04:fd: 10:d3:d5:26:b8:8a:1f:24:35:06:c8:eb:28:bc:28: 4a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:54:87:8B:F9:71:D5:A3:76:C6:3D:DA:48:4A:48:19:10:13:67:3E X509v3 Authority Key Identifier: keyid:4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e3:de:55:17:bf:04:93:c9:5c:49:80:74:b8:8d:f1:3a:93: 77:fd:6f:d2:4d:88:de:9e:a4:f0:7a:15:5d:d3:f9:46:4d:85: 22:d3:4d:76:fa:fe:d6:e1:f9:3a:de:8a:68:9c:00:80:fa:4e: 1c:59:a4:b6:94:33:99:c8:fe:33:18:ce:85:9a:6e:19:91:50: 31:29:20:9e:f2:6d:6b:06:3b:74:5c:e6:1e:db:e4:f4:f8:be: cc:2e:a0:ba:60:e4:09:4f:b1:a2:98:29:83:dc:d1:6b:29:ac: a1:09:4b:df:d5:81:65:95:c7:fb:56:dc:15:c3:5a:7f:21:cf: bd:d0:28:87:81:b0:74:83:61:f4:19:01:20:38:b1:7e:40:56: 7c:ca:00:95:95:18:55:85:7a:47:ad:ee:a0:80:4d:c9:64:73: 13:dc:28:28:74:9c:26:c4:ee:df:ac:b9:2d:a7:d5:78:03:28: 2a:a7:f3:74:d8:10:f2:e1:67:36:15:ce:72:21:18:e5:ff:72: f2:0d:75:f8:f9:b6:bf:61:96:3c:3c:49:42:2b:0a:bf:d1:8e: 8a:72:1c:11:43:5b:fa:6f:fc:b4:93:d6:9b:e4:5a:a7:ba:45: 29:03:8e:c8:6b:24:ae:0b:67:16:92:a1:dc:8a:8e:76:4d:d7: c4:0b:af:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBUw2bteGAWUlOhHHLpALDA76vA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBQzRCMDVDNjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYz MkIzNkRDRDAeFw0yNjA3MjEwNDA2MDRaFw0yNjA3MjIwODA0MDRaMDMxMTAvBgNV BAMTKERBNTQ4NzhCRjk3MUQ1QTM3NkM2M0REQTQ4NEE0ODE5MTAxMzY3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNSsRoFKB6Gx1EqImPKgVdQX47 tfztnVg1TSDpRpskXLyY+61O2GteBDiK9Jznd220mUoXzXYnKiPd9QgJ7S+qBCam haabpEGbGVrokvwfGr/zQh7U6v9QVHsQmqkACvMwTnq5CED6WEK3UD+TuIKqh0td LsoXEHwTfVqvuX9D+YVqA/oH+a1l6bJ4sWkWTxsv4+KpQVm70tiU3U5YA73pUesl 2JhH3zhB9WPRRVM0w59AHpMCXySa2rYvz+sxUJofC2YPsdE9W9yeujlwAv0wc/e/ ttxY2yjDdZthsO3FaPkhdMBjPjn8atW2OAUE/RDT1Sa4ih8kNQbI6yi8KEq5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2lSHi/lx1aN2xj3aSEpIGRATZz4wHwYDVR0j BBgwFoAUTKxLBcYiClqRf+qRfTR2bzKzbc0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZTljOWYtZDYwNy00NDk3LWFmMjgtNGQyYjkwOTJkNWE2LzAvNENBQzRCMDVD NjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYzMkIzNkRDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0FDNEIwNUM2MjIwQTVBOTE3RkVBOTE3RDM0NzY2RjMyQjM2 RENELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvNENBQzRCMDVDNjIyMEE1QTkxN0ZFQTkxN0QzNDc2 NkYzMkIzNkRDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrj3lUXvwSTyVxJgHS4jfE6k3f9b9JNiN6e pPB6FV3T+UZNhSLTTXb6/tbh+TreimicAID6ThxZpLaUM5nI/jMYzoWabhmRUDEp IJ7ybWsGO3Rc5h7b5PT4vswuoLpg5AlPsaKYKYPc0WsprKEJS9/VgWWVx/tW3BXD Wn8hz73QKIeBsHSDYfQZASA4sX5AVnzKAJWVGFWFeket7qCATclkcxPcKCh0nCbE 7t+suS2n1XgDKCqn83TYEPLhZzYVznIhGOX/cvINdfj5tr9hljw8SUIrCr/Rjopy HBFDW/pv/LST1pvkWqe6RSkDjshrJK4LZxaSodyKjnZN18QLr1s= -----END CERTIFICATE-----Generated at Tue Jul 21 06:40:22 2026 by rpki-client