$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft File: 4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft (raw, json) Hash identifier: s8Ze8V66H7D0y6KzjIRHs+mt47IfDv20BnAqAYyylj4= Subject key identifier: BE:A4:D8:AE:B7:14:CF:31:53:D7:41:F4:FC:EA:CA:35:99:5C:3E:C9 Authority key identifier: 4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7 Certificate issuer: /CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7 Certificate serial: 20C0B97A5DEE3F7BA9CF6EB31C003DC310C6E2E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 23:19:51 +0000 Manifest this update: Mon 20 Jul 2026 23:14:51 +0000 Manifest next update: Wed 22 Jul 2026 01:10:51 +0000 Files and hashes: 1: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: ZJlUpKOWZJT4nAWuCuBDhZRS/ZCGAJEy+RmXu9xZXqc=) 2: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: 889d8hZgsoEONtwHkfZfmAhOTIvpzaLSt/rrvU4dZ6Y=) 3: 4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl (hash: qehHbXRZudAVS+1O6hrDVgyEhni35Q+RXcpY3XFW0kI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c0:b9:7a:5d:ee:3f:7b:a9:cf:6e:b3:1c:00:3d:c3:10:c6:e2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7 Validity Not Before: Jul 20 23:14:51 2026 GMT Not After : Jul 22 01:10:51 2026 GMT Subject: CN=BEA4D8AEB714CF3153D741F4FCEACA35995C3EC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:25:e2:5e:98:60:64:2f:21:2a:20:3a:4e: 05:21:ae:4b:b7:02:69:22:07:e5:2b:6e:49:37:db: 13:8a:2a:f0:7f:45:85:cc:51:af:3b:29:81:9b:57: 83:24:a8:ac:1d:48:ce:37:61:03:e4:ec:f2:47:ba: b2:a7:4a:71:ea:95:d9:97:f9:8b:20:b1:7a:b8:f8: 82:2a:09:90:80:e0:81:6f:79:a3:4e:4b:d5:d0:5d: 8e:76:a4:6d:2c:f3:e0:46:27:77:f0:cc:2b:5d:61: 48:e6:54:39:ca:db:cc:24:c0:03:d4:a1:9d:e6:84: f3:7d:49:a9:11:b3:36:9d:67:21:2d:07:69:50:fc: 27:74:48:13:0c:66:4a:c0:ea:f1:a0:54:59:d2:55: fa:3f:b8:f6:03:fb:7a:dc:e2:c0:9d:e3:50:52:46: 01:63:7c:e0:d6:d3:3b:c0:78:4c:ce:a6:23:21:c1: 16:ce:b0:09:a1:df:c4:53:a5:49:29:70:fa:01:53: b2:33:31:c9:98:27:e8:0e:77:8a:4a:82:8e:37:77: c4:e3:67:09:8b:a3:01:b6:44:c6:7f:f2:9e:cc:b5: e3:83:b3:39:a6:e1:0d:ce:57:e6:f3:69:84:6d:a4: 7d:7c:59:8d:8b:48:52:30:49:4c:49:1e:d8:40:27: 9e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A4:D8:AE:B7:14:CF:31:53:D7:41:F4:FC:EA:CA:35:99:5C:3E:C9 X509v3 Authority Key Identifier: keyid:4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:cf:84:03:16:45:05:f1:dc:0e:4f:7b:49:bd:8c:5c:2a:ed: 86:26:d1:a1:36:cf:b2:6d:19:8a:33:38:fa:d3:9f:03:c1:c8: 0a:11:fb:88:ab:fc:f4:36:e6:a0:eb:e1:e8:4c:74:18:63:48: a5:a6:ef:f9:bd:0d:c7:62:df:bd:a3:72:6f:b6:c9:6c:1b:85: af:a1:aa:aa:a0:08:86:9a:29:c1:c3:7d:c2:60:3a:5c:8a:04: 4e:8e:37:9b:70:cd:a9:18:06:0e:d3:4d:28:37:1a:04:50:69: 43:bf:a4:ee:e4:0b:5a:ca:6a:8d:1b:bc:b9:07:c5:b9:69:ed: a0:fe:38:47:d0:20:6f:12:39:7a:0b:f1:7d:9e:de:9b:69:f6: ea:3b:04:b1:b8:af:d6:90:01:6b:c1:81:0e:ac:8e:c5:0c:09: fa:3a:e6:57:1d:22:d5:32:f5:33:19:d0:c0:5a:ed:35:42:69: 2a:10:ae:05:8c:85:7a:eb:2c:1a:56:a4:bb:57:06:34:f8:d9: f1:7f:a4:f8:21:de:02:52:c5:f5:29:6a:ed:05:b3:88:71:37: ee:71:fa:35:23:27:b8:4a:8c:94:aa:c3:1a:49:48:74:84:59: 34:10:cd:ba:27:88:95:a1:c6:25:d2:41:60:d9:2a:3b:29:94: dd:69:67:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMC5el3uP3upz26zHAA9wxDG4ugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3M0FGNzgxM0EzOTZBQkQ3QkRFMjNBOTc5OTM1RjdD MkUxNjhFNzAeFw0yNjA3MjAyMzE0NTFaFw0yNjA3MjIwMTEwNTFaMDMxMTAvBgNV BAMTKEJFQTREOEFFQjcxNENGMzE1M0Q3NDFGNEZDRUFDQTM1OTk1QzNFQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6vSXiXphgZC8hKiA6TgUhrku3 AmkiB+Urbkk32xOKKvB/RYXMUa87KYGbV4MkqKwdSM43YQPk7PJHurKnSnHqldmX +YsgsXq4+IIqCZCA4IFveaNOS9XQXY52pG0s8+BGJ3fwzCtdYUjmVDnK28wkwAPU oZ3mhPN9SakRszadZyEtB2lQ/Cd0SBMMZkrA6vGgVFnSVfo/uPYD+3rc4sCd41BS RgFjfODW0zvAeEzOpiMhwRbOsAmh38RTpUkpcPoBU7IzMcmYJ+gOd4pKgo43d8Tj ZwmLowG2RMZ/8p7MteODszmm4Q3OV+bzaYRtpH18WY2LSFIwSUxJHthAJ55hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvqTYrrcUzzFT10H0/OrKNZlcPskwHwYDVR0j BBgwFoAUTXOveBOjlqvXveI6l5k198LhaOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQyYTViNTEtYmMwMC00ZDZiLTg3NjEtYzdkMGQzZjZkZTEyLzAvNEQ3M0FGNzgx M0EzOTZBQkQ3QkRFMjNBOTc5OTM1RjdDMkUxNjhFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDczQUY3ODEzQTM5NkFCRDdCREUyM0E5Nzk5MzVGN0MyRTE2 OEU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvNEQ3M0FGNzgxM0EzOTZBQkQ3QkRFMjNBOTc5OTM1 RjdDMkUxNjhFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHPhAMWRQXx3A5Pe0m9jFwq7YYm0aE2z7Jt GYozOPrTnwPByAoR+4ir/PQ25qDr4ehMdBhjSKWm7/m9Dcdi372jcm+2yWwbha+h qqqgCIaaKcHDfcJgOlyKBE6ON5twzakYBg7TTSg3GgRQaUO/pO7kC1rKao0bvLkH xblp7aD+OEfQIG8SOXoL8X2e3ptp9uo7BLG4r9aQAWvBgQ6sjsUMCfo65lcdItUy 9TMZ0MBa7TVCaSoQrgWMhXrrLBpWpLtXBjT42fF/pPgh3gJSxfUpau0Fs4hxN+5x +jUjJ7hKjJSqwxpJSHSEWTQQzboniJWhxiXSQWDZKjsplN1pZ1o= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:20 2026 by rpki-client