$ rpki-client -vvf rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft File: B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft (raw, json) Hash identifier: bD3Mq0sPxsDt2RQH+vBJQDGChSta6mbSK6h2nwBKJak= Subject key identifier: 5C:A5:CE:78:7D:35:62:89:ED:81:51:3C:F9:BB:40:30:F7:29:9E:56 Authority key identifier: B4:11:1F:C0:D1:83:6A:54:CF:F3:50:9A:FF:A8:39:33:C2:45:1C:AF Certificate issuer: /CN=B4111FC0D1836A54CFF3509AFFA83933C2451CAF Certificate serial: 0A3DA45859A457277EF61D705E2DFB4C11E0A55B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft Manifest number: 6A Signing time: Tue 21 Jul 2026 00:05:52 +0000 Manifest this update: Tue 21 Jul 2026 00:00:52 +0000 Manifest next update: Wed 22 Jul 2026 02:10:52 +0000 Files and hashes: 1: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: 7ewRXVv5rl+QG1YNIYilvzKzYUQ3mx2Wk/pMwVKtEKI=) 2: B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl (hash: kxhUAKqwF9TrGtjtRFog08LM/Z1lI+xtynSysJIudUk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3d:a4:58:59:a4:57:27:7e:f6:1d:70:5e:2d:fb:4c:11:e0:a5:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4111FC0D1836A54CFF3509AFFA83933C2451CAF Validity Not Before: Jul 21 00:00:52 2026 GMT Not After : Jul 22 02:10:52 2026 GMT Subject: CN=5CA5CE787D356289ED81513CF9BB4030F7299E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:aa:da:e2:af:3e:d0:88:63:ed:6c:a5:f8:1f: c1:87:5a:15:05:7a:37:b9:4e:96:b0:00:aa:58:8e: 18:3f:68:12:4e:db:a1:94:6d:52:87:6d:9c:6a:f9: 67:96:51:ab:5d:09:6f:e1:b4:0b:d3:2b:1a:d0:db: f5:70:f4:82:7e:84:9d:87:f7:ff:24:e2:c6:17:6c: 57:8d:b8:f0:5d:b8:3c:71:9a:13:45:83:a2:b1:5b: b3:f2:5b:32:34:a0:9b:7b:b2:b0:52:74:23:64:61: 2b:42:77:dd:68:ba:6d:4c:02:27:1d:99:9a:10:a4: d3:cc:7c:f3:b9:e6:b5:a2:5c:94:fa:03:c8:33:88: e7:98:76:62:29:0b:cd:e8:d4:b0:50:bc:61:e6:4a: 57:35:26:aa:ef:c7:de:23:e8:49:d4:12:9e:db:ed: 24:24:85:e9:f6:fd:40:17:c4:23:20:6c:6b:8f:da: 8f:ae:04:5c:da:3a:aa:df:82:65:a5:a6:55:7d:d3: ab:a4:31:a8:e7:5f:3a:6c:56:21:66:07:4a:8d:55: 4c:7e:36:23:cb:c4:14:46:2e:42:4e:02:20:0e:06: 81:e1:e7:b0:e3:22:21:21:47:88:59:93:ca:6f:b7: 7b:96:d0:ff:c8:ff:db:f0:99:c9:6b:6f:52:b4:9c: 3f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A5:CE:78:7D:35:62:89:ED:81:51:3C:F9:BB:40:30:F7:29:9E:56 X509v3 Authority Key Identifier: keyid:B4:11:1F:C0:D1:83:6A:54:CF:F3:50:9A:FF:A8:39:33:C2:45:1C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:67:56:5f:fc:80:f9:f3:4d:8d:2b:4b:7b:dd:ee:48:bb:32: b1:86:6c:d8:ce:2e:72:74:39:d6:d7:10:71:37:14:66:46:46: ea:5f:53:8e:c1:a7:92:02:89:e2:30:b8:19:46:36:99:ca:0f: b9:e8:c3:07:da:fa:5f:d5:d9:9d:08:50:c8:f7:56:45:16:e9: 56:f7:1c:31:0d:5d:f7:02:30:53:0d:b2:f0:0b:31:14:31:f5: 8a:f8:e4:4c:57:fd:65:bc:38:09:ea:3b:71:53:c7:80:d5:67: d5:81:b2:51:64:2c:46:05:97:e7:73:27:da:2a:97:13:8d:f1: 22:74:a0:d6:60:a9:02:8b:46:00:bc:59:a3:44:f2:d7:d9:dc: 8c:8a:91:42:e0:6f:2e:28:32:6b:16:9c:89:5b:ea:c0:a2:f3: 82:77:fb:2b:9d:b0:75:43:fd:fb:01:62:cf:d7:0c:bd:db:bc: 6e:a2:bd:fa:66:61:3d:3f:48:c9:21:ef:ad:d6:ac:ee:20:ac: 07:a7:65:47:3a:11:a5:e8:50:26:0f:fe:ae:7b:be:bc:d7:69: 37:c1:5e:0f:f2:33:df:c3:76:ad:4c:44:5b:3a:72:d7:cd:0b: 90:5e:47:63:f5:db:9e:86:8e:13:05:ff:ff:d6:db:3a:b4:a2: 0d:65:fe:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCj2kWFmkVyd+9h1wXi37TBHgpVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQxMTFGQzBEMTgzNkE1NENGRjM1MDlBRkZBODM5MzND MjQ1MUNBRjAeFw0yNjA3MjEwMDAwNTJaFw0yNjA3MjIwMjEwNTJaMDMxMTAvBgNV BAMTKDVDQTVDRTc4N0QzNTYyODlFRDgxNTEzQ0Y5QkI0MDMwRjcyOTlFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPqtrirz7QiGPtbKX4H8GHWhUF eje5TpawAKpYjhg/aBJO26GUbVKHbZxq+WeWUatdCW/htAvTKxrQ2/Vw9IJ+hJ2H 9/8k4sYXbFeNuPBduDxxmhNFg6KxW7PyWzI0oJt7srBSdCNkYStCd91oum1MAicd mZoQpNPMfPO55rWiXJT6A8gziOeYdmIpC83o1LBQvGHmSlc1Jqrvx94j6EnUEp7b 7SQkhen2/UAXxCMgbGuP2o+uBFzaOqrfgmWlplV906ukMajnXzpsViFmB0qNVUx+ NiPLxBRGLkJOAiAOBoHh57DjIiEhR4hZk8pvt3uW0P/I/9vwmclrb1K0nD9JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXKXOeH01YontgVE8+btAMPcpnlYwHwYDVR0j BBgwFoAUtBEfwNGDalTP81Ca/6g5M8JFHK8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ3NThlOGUtNDljOC00OGI4LWJkY2ItMzUzMzllMmFlNjAxLzAvQjQxMTFGQzBE MTgzNkE1NENGRjM1MDlBRkZBODM5MzNDMjQ1MUNBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNDExMUZDMEQxODM2QTU0Q0ZGMzUwOUFGRkE4MzkzM0MyNDUx Q0FGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUtNDljOC00OGI4LWJk Y2ItMzUzMzllMmFlNjAxLzAvQjQxMTFGQzBEMTgzNkE1NENGRjM1MDlBRkZBODM5 MzNDMjQ1MUNBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1nVl/8gPnzTY0rS3vd7ki7MrGGbNjOLnJ0 OdbXEHE3FGZGRupfU47Bp5ICieIwuBlGNpnKD7nowwfa+l/V2Z0IUMj3VkUW6Vb3 HDENXfcCMFMNsvALMRQx9Yr45ExX/WW8OAnqO3FTx4DVZ9WBslFkLEYFl+dzJ9oq lxON8SJ0oNZgqQKLRgC8WaNE8tfZ3IyKkULgby4oMmsWnIlb6sCi84J3+yudsHVD /fsBYs/XDL3bvG6ivfpmYT0/SMkh763WrO4grAenZUc6EaXoUCYP/q57vrzXaTfB Xg/yM9/Ddq1MRFs6ctfNC5BeR2P1256GjhMF///W2zq0og1l/lg= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:16 2026 by rpki-client