$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft File: 4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft (raw, json) Hash identifier: 8JObzqKsQzBHsWluDVjQCtTFd0wyw/dkSnD08hMUeqw= Subject key identifier: 19:C9:8F:FD:7E:20:28:C8:6D:6E:31:73:AF:A4:7C:AA:24:68:24:2C Authority key identifier: 4F:9D:EF:EA:18:F9:7C:95:D8:6B:C7:B3:9D:B7:D8:00:C1:F1:92:0F Certificate issuer: /CN=4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F Certificate serial: 3742BD7967DCBB4F4FC4D5A4DEE48E862D4FED57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 20:52:06 +0000 Manifest this update: Mon 20 Jul 2026 20:47:06 +0000 Manifest next update: Tue 21 Jul 2026 23:47:06 +0000 Files and hashes: 1: 4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl (hash: RoZSddGFlxvt81gRh7jF+ghbF6A4GV3NYjLR8nnBOr0=) 2: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: uBR3IGblPNZJ3jWpF0OXwKYD/CzwZlm+xMvRiWr2v+Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:42:bd:79:67:dc:bb:4f:4f:c4:d5:a4:de:e4:8e:86:2d:4f:ed:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F Validity Not Before: Jul 20 20:47:06 2026 GMT Not After : Jul 21 23:47:06 2026 GMT Subject: CN=19C98FFD7E2028C86D6E3173AFA47CAA2468242C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cb:b8:1a:ca:66:c9:1e:73:3c:92:df:26:5f: a8:86:1c:1a:da:58:da:93:0a:b2:5a:bb:b2:7e:05: 9e:7c:8c:4c:d8:19:a1:a9:de:73:5e:6e:33:16:3d: b2:6c:2b:52:41:8b:33:c7:42:a1:38:53:dc:ec:a6: 54:26:a9:85:66:8c:c5:f7:99:51:5c:67:95:67:ee: bb:41:37:0b:7b:b6:42:bb:11:e3:66:2b:34:28:98: 21:19:47:f0:ab:de:c1:10:03:7a:e3:c9:87:8b:90: 9d:b7:23:d5:9b:22:13:05:ae:f4:d8:ce:a9:43:2e: 95:63:07:13:a2:32:5f:f8:0a:ef:c7:b1:7c:c2:bf: ef:12:4c:43:11:4b:78:84:2e:0c:41:76:e5:a6:6f: a3:95:29:f3:4d:8a:b0:e6:2b:8e:4f:9d:b2:17:c3: 18:0c:64:b3:9c:71:b5:bb:1f:18:9d:36:d1:92:64: cb:1d:be:a8:1f:b7:28:8a:12:00:af:d6:ca:cf:4e: 0e:88:72:bf:ae:a8:23:74:b7:a6:bf:c4:fe:ab:1b: 5f:99:48:f6:b8:5c:87:06:f3:c6:69:b7:27:5f:87: 23:25:61:aa:9d:96:eb:8c:c5:f2:28:a3:0c:c6:3d: 2d:bd:4e:e0:ec:a9:9d:dc:ce:46:bc:48:02:7a:96: d8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C9:8F:FD:7E:20:28:C8:6D:6E:31:73:AF:A4:7C:AA:24:68:24:2C X509v3 Authority Key Identifier: keyid:4F:9D:EF:EA:18:F9:7C:95:D8:6B:C7:B3:9D:B7:D8:00:C1:F1:92:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:76:71:7e:0f:dd:20:48:65:9a:e7:0c:a3:c6:c1:e4:a1:e6: 08:55:ad:0e:21:20:80:2c:76:1c:e8:ca:e0:2d:ac:8a:ad:db: 33:c9:3d:90:00:34:8c:29:63:0e:15:7f:76:bf:ad:c9:8e:0d: f8:4e:f6:df:33:f8:2a:2e:83:f4:a4:cc:24:00:c4:19:50:a5: e1:2b:a3:db:24:3c:ff:ea:8e:0a:46:ca:72:d0:84:70:75:92: 82:b8:5d:7e:d7:cd:82:d9:39:9a:11:2b:98:97:f5:2a:a0:f0: 64:35:9f:88:ed:5a:b3:f4:63:e5:62:c2:d6:eb:e8:b5:05:5a: b9:c1:cd:76:84:b3:a4:3d:5f:7b:32:b0:28:41:8b:a4:60:a6: bf:82:dc:c3:32:30:cf:f3:79:0c:ab:b8:37:0c:31:64:ce:23: e6:f3:d3:29:f6:bd:f7:3a:4d:b0:5d:a4:88:fd:c2:db:ce:07: 13:eb:c0:70:90:c3:02:ac:1e:c2:cc:df:68:00:d9:bf:f5:28: 91:a5:66:a6:09:28:b0:c8:3c:82:aa:a8:0b:bb:47:2e:14:eb: 73:c0:e8:a6:7b:cc:04:30:ab:b9:e8:3a:9d:e6:df:e1:a8:a2: f2:f5:37:d9:1d:46:a2:e2:20:81:e5:41:fd:13:b7:1d:51:51: d7:f1:e5:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN0K9eWfcu09PxNWk3uSOhi1P7VcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY5REVGRUExOEY5N0M5NUQ4NkJDN0IzOURCN0Q4MDBD MUYxOTIwRjAeFw0yNjA3MjAyMDQ3MDZaFw0yNjA3MjEyMzQ3MDZaMDMxMTAvBgNV BAMTKDE5Qzk4RkZEN0UyMDI4Qzg2RDZFMzE3M0FGQTQ3Q0FBMjQ2ODI0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgy7gaymbJHnM8kt8mX6iGHBra WNqTCrJau7J+BZ58jEzYGaGp3nNebjMWPbJsK1JBizPHQqE4U9zsplQmqYVmjMX3 mVFcZ5Vn7rtBNwt7tkK7EeNmKzQomCEZR/Cr3sEQA3rjyYeLkJ23I9WbIhMFrvTY zqlDLpVjBxOiMl/4Cu/HsXzCv+8STEMRS3iELgxBduWmb6OVKfNNirDmK45PnbIX wxgMZLOccbW7HxidNtGSZMsdvqgftyiKEgCv1srPTg6Icr+uqCN0t6a/xP6rG1+Z SPa4XIcG88ZptydfhyMlYaqdluuMxfIoowzGPS29TuDsqZ3czka8SAJ6ltiNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGcmP/X4gKMhtbjFzr6R8qiRoJCwwHwYDVR0j BBgwFoAUT53v6hj5fJXYa8eznbfYAMHxkg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE4ZjA0MzUtNGQzOC00N2VmLTg1MGYtNTFiYTQ2MTdmYjNkLzAvNEY5REVGRUEx OEY5N0M5NUQ4NkJDN0IzOURCN0Q4MDBDMUYxOTIwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RjlERUZFQTE4Rjk3Qzk1RDg2QkM3QjM5REI3RDgwMEMxRjE5 MjBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvNEY5REVGRUExOEY5N0M5NUQ4NkJDN0IzOURCN0Q4 MDBDMUYxOTIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEN2cX4P3SBIZZrnDKPGweSh5ghVrQ4hIIAs dhzoyuAtrIqt2zPJPZAANIwpYw4Vf3a/rcmODfhO9t8z+Coug/SkzCQAxBlQpeEr o9skPP/qjgpGynLQhHB1koK4XX7XzYLZOZoRK5iX9Sqg8GQ1n4jtWrP0Y+Viwtbr 6LUFWrnBzXaEs6Q9X3sysChBi6Rgpr+C3MMyMM/zeQyruDcMMWTOI+bz0yn2vfc6 TbBdpIj9wtvOBxPrwHCQwwKsHsLM32gA2b/1KJGlZqYJKLDIPIKqqAu7Ry4U63PA 6KZ7zAQwq7noOp3m3+GoovL1N9kdRqLiIIHlQf0Ttx1RUdfx5aE= -----END CERTIFICATE-----Generated at Tue Jul 21 07:01:31 2026 by rpki-client