$ rpki-client -vvf rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft File: 4887E721DA907B8223025FFDE0F11420EEFD8351.mft (raw, json) Hash identifier: i8kt/S9rp1u7qfiEZBWyv7f/Fv2sQnKWk/dsUe4LpI0= Subject key identifier: 7D:87:79:C4:43:52:92:BB:59:A0:0F:C8:54:E1:0E:B5:45:15:BC:83 Authority key identifier: 48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51 Certificate issuer: /CN=4887E721DA907B8223025FFDE0F11420EEFD8351 Certificate serial: 2E0292C9BE5040E3255E85237777829EC0BAA796 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 18:14:07 +0000 Manifest this update: Mon 20 Jul 2026 18:09:07 +0000 Manifest next update: Tue 21 Jul 2026 18:59:07 +0000 Files and hashes: 1: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: 4n1fjzMSG2wHW3ycKcIEduoFrdhB7CHV6B09r5tY0kg=) 2: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: S7aZljmglE5xN0p6gxyZ/h445nngm6FqwRnmfuS0RS0=) 3: 4887E721DA907B8223025FFDE0F11420EEFD8351.crl (hash: O457LLoWXet/3Ye6CBJMJ0Vi3J0uzAdoEgWTOZpdxvs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:02:92:c9:be:50:40:e3:25:5e:85:23:77:77:82:9e:c0:ba:a7:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4887E721DA907B8223025FFDE0F11420EEFD8351 Validity Not Before: Jul 20 18:09:07 2026 GMT Not After : Jul 21 18:59:07 2026 GMT Subject: CN=7D8779C4435292BB59A00FC854E10EB54515BC83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:41:18:aa:24:54:13:92:96:33:b9:83:7d:6c: 4d:8d:6a:4e:5a:04:2e:8c:6a:71:5a:9e:f2:06:2a: b1:8c:a8:29:16:90:70:fc:39:38:21:ed:b7:c5:09: 8c:90:a7:d1:bb:66:a3:8e:35:66:4e:e0:82:94:d4: 57:72:58:ba:de:f2:90:a4:f0:73:27:52:1a:f2:2d: 41:25:7e:9e:79:5f:5b:ef:75:05:b3:31:7f:77:6b: c5:06:80:11:1a:89:0b:71:c5:f6:42:e4:53:c5:6d: 06:48:5f:be:7b:be:6b:2a:20:9f:c9:d3:0c:96:e5: 88:d9:ef:2d:24:b5:44:dc:aa:4c:3c:5d:8b:81:aa: 3f:3f:f7:f0:62:f7:77:cc:43:d5:7a:01:68:0b:d8: a7:90:47:14:16:5e:44:5d:fc:b0:c3:e8:e3:ed:ac: f8:d3:5f:a7:c5:1d:49:78:71:65:98:89:04:1c:f9: 58:c3:23:ec:bf:71:90:0b:a2:26:ae:66:af:af:21: 52:16:de:2c:21:68:87:2a:8e:76:5d:64:f6:35:9f: bc:37:fd:96:d4:af:9d:ab:fc:25:30:37:b6:3c:6d: ea:46:ca:6b:3d:a2:e4:0b:0d:a8:d5:d3:91:93:f0: 91:bf:f2:95:c2:be:c4:47:c7:b9:1c:25:cf:7b:83: 0d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:87:79:C4:43:52:92:BB:59:A0:0F:C8:54:E1:0E:B5:45:15:BC:83 X509v3 Authority Key Identifier: keyid:48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:cb:36:e7:a7:c9:a0:ee:e6:d3:f6:44:f5:95:3a:9a:0f:f1: 75:aa:95:36:aa:33:4f:cb:55:8e:30:75:83:3c:97:6e:bc:bd: 31:f8:31:8a:a6:d7:9a:12:07:a5:fb:8d:59:16:32:55:b0:e8: 66:de:ac:d8:e3:30:a0:0e:2a:8a:4e:6a:8f:e5:29:3a:81:ec: 43:81:3e:26:9f:24:f2:65:a4:3c:06:d8:6b:0d:12:06:ca:ad: c2:8b:29:e5:d5:a7:5a:d3:c1:b4:25:c3:b9:7d:b4:84:86:99: ac:5d:a4:3a:ac:c1:6e:42:be:2c:69:0c:47:aa:b3:b8:f9:21: 72:ed:3a:dd:c1:e3:87:40:49:bc:a7:b9:89:68:3f:55:98:da: 7f:c3:37:71:df:05:e5:33:79:e1:09:6d:69:77:d8:83:95:5c: 91:60:79:50:b6:2c:b4:79:03:7b:e5:3f:98:90:e7:2b:74:c8: 95:b8:7b:fd:9f:26:24:99:cd:f9:de:9b:61:4c:62:ac:7a:c2: f7:c4:4f:83:67:b9:22:13:9f:5f:49:f8:73:8f:12:f3:87:83: ed:9f:63:02:f8:25:7e:28:d3:98:bb:b6:80:30:89:ae:66:91: 4f:21:d8:55:60:f6:ec:e2:ef:27:5f:85:38:f2:c5:26:1c:17: 62:d8:46:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULgKSyb5QQOMlXoUjd3eCnsC6p5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4N0U3MjFEQTkwN0I4MjIzMDI1RkZERTBGMTE0MjBF RUZEODM1MTAeFw0yNjA3MjAxODA5MDdaFw0yNjA3MjExODU5MDdaMDMxMTAvBgNV BAMTKDdEODc3OUM0NDM1MjkyQkI1OUEwMEZDODU0RTEwRUI1NDUxNUJDODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUQRiqJFQTkpYzuYN9bE2Nak5a BC6ManFanvIGKrGMqCkWkHD8OTgh7bfFCYyQp9G7ZqOONWZO4IKU1FdyWLre8pCk 8HMnUhryLUElfp55X1vvdQWzMX93a8UGgBEaiQtxxfZC5FPFbQZIX757vmsqIJ/J 0wyW5YjZ7y0ktUTcqkw8XYuBqj8/9/Bi93fMQ9V6AWgL2KeQRxQWXkRd/LDD6OPt rPjTX6fFHUl4cWWYiQQc+VjDI+y/cZALoiauZq+vIVIW3iwhaIcqjnZdZPY1n7w3 /ZbUr52r/CUwN7Y8bepGyms9ouQLDajV05GT8JG/8pXCvsRHx7kcJc97gw3FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfYd5xENSkrtZoA/IVOEOtUUVvIMwHwYDVR0j BBgwFoAUSIfnIdqQe4IjAl/94PEUIO79g1EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM0MGRmMTMtYzRlOS00MjE4LWIxMTQtZGVhZDE2NDgyODVjLzAvNDg4N0U3MjFE QTkwN0I4MjIzMDI1RkZERTBGMTE0MjBFRUZEODM1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg3RTcyMURBOTA3QjgyMjMwMjVGRkRFMEYxMTQyMEVFRkQ4 MzUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvNDg4N0U3MjFEQTkwN0I4MjIzMDI1RkZERTBGMTE0 MjBFRUZEODM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHLNuenyaDu5tP2RPWVOpoP8XWqlTaqM0/L VY4wdYM8l268vTH4MYqm15oSB6X7jVkWMlWw6GberNjjMKAOKopOao/lKTqB7EOB PiafJPJlpDwG2GsNEgbKrcKLKeXVp1rTwbQlw7l9tISGmaxdpDqswW5CvixpDEeq s7j5IXLtOt3B44dASbynuYloP1WY2n/DN3HfBeUzeeEJbWl32IOVXJFgeVC2LLR5 A3vlP5iQ5yt0yJW4e/2fJiSZzfnem2FMYqx6wvfET4NnuSITn19J+HOPEvOHg+2f YwL4JX4o05i7toAwia5mkU8h2FVg9uzi7ydfhTjyxSYcF2LYRhs= -----END CERTIFICATE-----Generated at Tue Jul 21 06:46:32 2026 by rpki-client