$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft File: 4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft (raw, json) Hash identifier: jVKXK3eKmI2PlDXnr+KsidkFR16dJAI+anmoAUTY1u4= Subject key identifier: 57:F3:9E:BA:85:62:96:4D:BF:A2:D0:34:93:FD:72:64:B7:7F:B4:EF Authority key identifier: 4A:CA:AD:0A:28:A6:50:A9:BD:65:B0:A6:E1:90:57:F4:7B:DB:94:2F Certificate issuer: /CN=4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F Certificate serial: 22302062E2F4C384D413631F166C1F3F953A25C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 16:57:30 +0000 Manifest this update: Mon 20 Jul 2026 16:52:30 +0000 Manifest next update: Tue 21 Jul 2026 19:41:30 +0000 Files and hashes: 1: 3130332e3136332e3234302e302f32342d3234203d3e20313431383837.roa (hash: 5Ssmm5grz5Tl3MtkZw82jMEzuLc9usDz6SBlVHYxN7U=) 2: 4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl (hash: 0QnIae0iju7pk/j1JXOYtocmyiIqC5fniHnS0Yfyk6I=) 3: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (hash: 7y1kc2AMpxx6evn2aDQV63VxhXeky0gM842l022bSD4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:30:20:62:e2:f4:c3:84:d4:13:63:1f:16:6c:1f:3f:95:3a:25:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F Validity Not Before: Jul 20 16:52:30 2026 GMT Not After : Jul 21 19:41:30 2026 GMT Subject: CN=57F39EBA8562964DBFA2D03493FD7264B77FB4EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:4e:1a:32:fd:42:b9:f2:ae:70:04:f4:bb:c2: 15:f0:11:79:a7:fc:c4:6d:e9:1c:0b:90:42:65:ea: 2e:91:64:34:cc:4a:25:8d:67:83:33:bb:62:50:3e: da:e8:83:0b:b6:f9:db:50:47:d0:f6:84:1c:8c:b2: 26:d7:66:15:70:4d:80:b2:64:31:88:cf:f4:d6:61: c4:57:5b:c4:8c:c0:40:af:37:96:9a:ab:21:0c:c2: 12:21:4a:5a:e4:a4:23:18:43:aa:7c:01:dc:1d:79: 25:40:6c:be:21:a8:35:36:f8:69:c0:e0:34:43:ef: 8f:56:7e:ab:0c:97:2a:84:c8:1a:fd:d0:23:81:c9: b4:2e:a2:3a:7d:d4:b2:45:a9:a6:32:3d:95:97:e3: 50:6c:f8:b6:c0:2e:ed:32:af:d5:7d:55:59:99:6c: 76:d9:af:d4:c8:3c:34:a7:31:4b:d6:30:f7:b7:b4: 50:54:5e:ca:28:1f:ec:f9:13:b4:b5:02:76:25:80: 8e:a2:6f:11:39:6f:a4:4a:21:04:9e:4b:72:78:2d: 40:a6:a0:47:42:31:a2:3f:0f:c7:43:d2:60:f9:1d: ab:e0:b7:43:5d:70:28:b0:d3:c1:bc:8c:40:85:78: 56:49:da:7c:18:3e:23:9e:62:98:53:dc:2b:5e:82: ea:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F3:9E:BA:85:62:96:4D:BF:A2:D0:34:93:FD:72:64:B7:7F:B4:EF X509v3 Authority Key Identifier: keyid:4A:CA:AD:0A:28:A6:50:A9:BD:65:B0:A6:E1:90:57:F4:7B:DB:94:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:31:95:d6:5f:06:47:93:2e:d2:cb:60:c0:02:fc:21:4f:fe: 94:79:e9:8a:34:e6:41:92:3d:b4:d0:43:c5:3d:9e:54:6a:ae: e2:d4:d0:da:a9:ad:1a:87:37:34:f0:e5:ff:b5:3c:ea:ef:3c: dd:db:e2:7c:70:65:73:88:40:16:df:4a:83:3f:09:48:49:de: 5d:a9:ad:70:3c:66:af:43:8f:39:c1:51:7c:7d:0a:81:6a:93: 49:bf:80:06:8d:8f:1d:0f:53:c6:3e:00:47:76:73:b3:9e:35: dd:f3:b5:ba:13:22:59:4e:85:7b:dc:d5:11:3b:2b:69:50:f9: 82:e7:e2:cc:04:ca:21:c1:ae:a4:dc:96:96:85:82:ca:0f:60: 31:b8:a6:0c:17:9d:d7:ad:51:4b:e7:80:c0:d7:6f:94:bb:ba: fa:d2:43:e9:7f:0d:e4:34:eb:68:ad:95:6c:38:11:30:7d:db: b1:e2:40:34:8d:b9:92:b2:9b:f6:b7:88:17:a5:3f:06:7d:b3: 23:22:7d:ef:68:32:27:40:cf:68:ae:26:4c:47:50:44:e7:4f: e3:25:9c:7f:e0:e8:4c:28:5d:4d:de:e8:81:b0:b3:df:bb:a1: db:6e:83:b9:19:61:10:a7:dc:2b:14:57:c0:90:8d:c3:5d:dd: 24:7f:3b:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjAgYuL0w4TUE2MfFmwfP5U6JcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDQUFEMEEyOEE2NTBBOUJENjVCMEE2RTE5MDU3RjQ3 QkRCOTQyRjAeFw0yNjA3MjAxNjUyMzBaFw0yNjA3MjExOTQxMzBaMDMxMTAvBgNV BAMTKDU3RjM5RUJBODU2Mjk2NERCRkEyRDAzNDkzRkQ3MjY0Qjc3RkI0RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5Thoy/UK58q5wBPS7whXwEXmn /MRt6RwLkEJl6i6RZDTMSiWNZ4Mzu2JQPtrogwu2+dtQR9D2hByMsibXZhVwTYCy ZDGIz/TWYcRXW8SMwECvN5aaqyEMwhIhSlrkpCMYQ6p8AdwdeSVAbL4hqDU2+GnA 4DRD749WfqsMlyqEyBr90COBybQuojp91LJFqaYyPZWX41Bs+LbALu0yr9V9VVmZ bHbZr9TIPDSnMUvWMPe3tFBUXsooH+z5E7S1AnYlgI6ibxE5b6RKIQSeS3J4LUCm oEdCMaI/D8dD0mD5Havgt0NdcCiw08G8jECFeFZJ2nwYPiOeYphT3CteguppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV/OeuoVilk2/otA0k/1yZLd/tO8wHwYDVR0j BBgwFoAUSsqtCiimUKm9ZbCm4ZBX9HvblC8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M1Yjc4NWQtODMwMy00NWM1LTlhNTgtZWMxMjg4NzQwODY2LzAvNEFDQUFEMEEy OEE2NTBBOUJENjVCMEE2RTE5MDU3RjQ3QkRCOTQyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUNBQUQwQTI4QTY1MEE5QkQ2NUIwQTZFMTkwNTdGNDdCREI5 NDJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvNEFDQUFEMEEyOEE2NTBBOUJENjVCMEE2RTE5MDU3 RjQ3QkRCOTQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYxldZfBkeTLtLLYMAC/CFP/pR56Yo05kGS PbTQQ8U9nlRqruLU0NqprRqHNzTw5f+1POrvPN3b4nxwZXOIQBbfSoM/CUhJ3l2p rXA8Zq9DjznBUXx9CoFqk0m/gAaNjx0PU8Y+AEd2c7OeNd3ztboTIllOhXvc1RE7 K2lQ+YLn4swEyiHBrqTclpaFgsoPYDG4pgwXndetUUvngMDXb5S7uvrSQ+l/DeQ0 62itlWw4ETB927HiQDSNuZKym/a3iBelPwZ9syMife9oMidAz2iuJkxHUETnT+Ml nH/g6EwoXU3e6IGws9+7odtug7kZYRCn3CsUV8CQjcNd3SR/O0o= -----END CERTIFICATE-----Generated at Tue Jul 21 07:19:37 2026 by rpki-client