$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft File: 4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft (raw, json) Hash identifier: FJyPcHr5nIBWtDg/U8svM6/eLj2G/neNPv/641bboWM= Subject key identifier: 9B:76:90:76:E4:47:D0:25:5F:59:B5:36:98:96:DA:57:5E:53:4E:60 Authority key identifier: 4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE Certificate issuer: /CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Certificate serial: 5756B1648D983B11814CEFA42130ADFD8EC81FE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 13:07:45 +0000 Manifest this update: Mon 20 Jul 2026 13:02:45 +0000 Manifest next update: Tue 21 Jul 2026 14:22:45 +0000 Files and hashes: 1: 3130332e3232342e36342e302f32342d3234203d3e203539313538.roa (hash: vQnWFglYbzJwVQsCkKEdFaQ62I0WzkhSOu2hoX2jL1c=) 2: 3130332e3232342e36372e302f32342d3234203d3e203539313538.roa (hash: Aw8k55kVz/A5ACNLxhHkCsixHFEWcXHRzRLrIEuRqgk=) 3: 4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl (hash: 5icVQx8wdsQw8tbe24rk1c+cr6+ff7kJnn0Cz3yfBiw=) 4: 3130332e3232342e36352e302f32342d3234203d3e203539313538.roa (hash: h0Ywdp2xV/0uaBG2V+ZPA5ElWunEb3BnR0JL9D5MtcM=) 5: 3130332e3232342e36362e302f32342d3234203d3e203539313538.roa (hash: CaktXeTtnkylUI+n1xZGKMIR5SWqXLjJULrGhcPeRfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:56:b1:64:8d:98:3b:11:81:4c:ef:a4:21:30:ad:fd:8e:c8:1f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Validity Not Before: Jul 20 13:02:45 2026 GMT Not After : Jul 21 14:22:45 2026 GMT Subject: CN=9B769076E447D0255F59B5369896DA575E534E60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8d:e1:a6:e7:bb:de:ab:4f:c1:e7:cb:72:35: bc:6e:81:49:e6:84:80:c5:ea:ad:65:e3:8c:89:f7: 56:48:a7:48:28:1e:16:9d:ea:6a:a5:3b:74:1e:e6: 6a:d7:79:ca:b3:c1:93:16:89:80:ed:96:c8:5c:66: c8:1e:b0:d2:0e:d2:e3:55:65:de:bd:fe:d3:86:60: de:4f:4c:26:88:9f:f2:b0:79:93:a7:ae:aa:fe:de: b4:9b:95:48:c6:83:f3:b3:eb:6e:ff:31:0f:93:8f: aa:67:a1:c0:5e:9f:b7:42:32:67:80:f5:e6:49:5d: 94:1b:bb:95:bb:f7:cc:53:1d:e0:4e:89:40:a3:ba: 04:1b:81:93:ba:16:3a:ff:cb:20:17:47:e4:1e:89: 17:a8:2b:65:49:a4:ae:ba:22:33:46:cd:1b:84:db: 5c:6f:bb:bf:c2:f0:d2:2a:97:19:df:24:ab:26:3c: fa:45:d6:38:8d:40:35:4f:92:fd:1b:ca:64:35:da: a2:ae:e2:4f:8e:66:c4:2a:91:61:b6:af:72:54:11: a5:96:c1:78:fd:35:37:13:79:5d:92:c8:ea:cd:a3: 60:5b:de:58:19:4c:8c:f7:0b:a9:0b:2a:ce:9c:18: 32:7b:17:f2:fd:4f:0c:d6:43:d8:93:a2:a5:8d:42: 9a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:76:90:76:E4:47:D0:25:5F:59:B5:36:98:96:DA:57:5E:53:4E:60 X509v3 Authority Key Identifier: keyid:4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:3b:26:d7:c0:a8:fe:d0:16:c5:2a:ec:bb:ee:5c:2c:e4:88: 9b:72:97:c7:5a:5d:40:90:ab:87:64:41:89:2e:37:0d:d6:d2: bd:68:11:b0:7a:08:a2:f3:6b:a2:15:d4:dc:b1:00:c7:ab:47: 08:37:29:fd:f7:30:b1:a3:9d:02:2d:81:fc:38:f5:9a:41:1b: 21:0c:76:2b:58:cf:ab:86:2a:ae:57:91:e0:c5:78:a1:a0:5f: 72:5f:f2:24:ec:b8:63:4b:d0:e9:ab:e0:c0:33:bc:0b:d9:07: bd:f3:d8:44:75:50:80:93:49:96:93:1c:e6:cb:69:43:0e:80: 94:a3:60:c6:0e:70:5e:19:d8:94:02:0b:27:42:14:44:08:04: 08:6a:ba:5e:82:1d:ff:f6:67:10:0c:3a:3b:ed:4f:69:c5:36: a7:e3:bc:4a:06:2e:3c:b4:2b:ea:47:0f:b7:77:63:f7:91:5d: 81:f0:de:f4:8e:16:54:14:51:40:3f:9e:14:12:ab:46:90:b3: c5:9f:65:5e:d0:7c:a8:25:8d:9b:bd:29:7f:70:3b:6f:68:73: 4d:a7:d4:3f:d6:a1:20:ff:6d:e5:b3:ea:fb:e2:7e:05:67:b3: f6:bd:ea:a5:cd:7b:54:a6:18:b0:a3:0b:4d:eb:b9:0f:c5:f7: ec:a0:74:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1axZI2YOxGBTO+kITCt/Y7IH+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNG Q0Q5QThBRTAeFw0yNjA3MjAxMzAyNDVaFw0yNjA3MjExNDIyNDVaMDMxMTAvBgNV BAMTKDlCNzY5MDc2RTQ0N0QwMjU1RjU5QjUzNjk4OTZEQTU3NUU1MzRFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvjeGm57veq0/B58tyNbxugUnm hIDF6q1l44yJ91ZIp0goHhad6mqlO3Qe5mrXecqzwZMWiYDtlshcZsgesNIO0uNV Zd69/tOGYN5PTCaIn/KweZOnrqr+3rSblUjGg/Oz627/MQ+Tj6pnocBen7dCMmeA 9eZJXZQbu5W798xTHeBOiUCjugQbgZO6Fjr/yyAXR+QeiReoK2VJpK66IjNGzRuE 21xvu7/C8NIqlxnfJKsmPPpF1jiNQDVPkv0bymQ12qKu4k+OZsQqkWG2r3JUEaWW wXj9NTcTeV2SyOrNo2Bb3lgZTIz3C6kLKs6cGDJ7F/L9TwzWQ9iToqWNQpqNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm3aQduRH0CVfWbU2mJbaV15TTmAwHwYDVR0j BBgwFoAUTL6OBwyTDnsCvlZXxVKObPzZqK4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4ZDU0YWUtODcwZC00MzQ4LWFiNTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcw QzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNGQ0Q5QThBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0JFOEUwNzBDOTMwRTdCMDJCRTU2NTdDNTUyOEU2Q0ZDRDlB OEFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE4ZDU0YWUtODcwZC00MzQ4LWFi NTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhF NkNGQ0Q5QThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA07JtfAqP7QFsUq7LvuXCzkiJtyl8daXUCQ q4dkQYkuNw3W0r1oEbB6CKLza6IV1NyxAMerRwg3Kf33MLGjnQItgfw49ZpBGyEM ditYz6uGKq5XkeDFeKGgX3Jf8iTsuGNL0Omr4MAzvAvZB73z2ER1UICTSZaTHObL aUMOgJSjYMYOcF4Z2JQCCydCFEQIBAhqul6CHf/2ZxAMOjvtT2nFNqfjvEoGLjy0 K+pHD7d3Y/eRXYHw3vSOFlQUUUA/nhQSq0aQs8WfZV7QfKgljZu9KX9wO29oc02n 1D/WoSD/beWz6vvifgVns/a96qXNe1SmGLCjC03ruQ/F9+ygdME= -----END CERTIFICATE-----Generated at Tue Jul 21 06:37:14 2026 by rpki-client