$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft File: 4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft (raw, json) Hash identifier: kCLc39jqvBW7N41pzC4CDK32iCfizZK8CR959kdWT40= Subject key identifier: 1A:E2:D6:B8:78:51:03:21:F3:F2:60:C7:1B:91:BA:0E:A6:84:25:3D Authority key identifier: 4E:74:77:DA:BC:79:30:FE:18:09:FE:CA:C0:EA:75:1E:02:71:CB:4D Certificate issuer: /CN=4E7477DABC7930FE1809FECAC0EA751E0271CB4D Certificate serial: 609B970FE8BBD5E1BC929BBEFA292B9E8645D544 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 15:45:58 +0000 Manifest this update: Mon 20 Jul 2026 15:40:58 +0000 Manifest next update: Tue 21 Jul 2026 19:10:58 +0000 Files and hashes: 1: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: Zw4QmhGoJFSvupLpsnKhkJ+LH7pcQWGQYF42nA48zgM=) 2: 4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl (hash: vDNLV8H7MAYYcX/5wTuZ+RBsOw7CuW14PMQfQVpFGzY=) 3: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: 6Yw4zWSLXh3EP0vz7URtYM2sAyDkZxqfeg6Oy1ZSbCU=) 4: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: 1TQlSvM9bM0BPJInGgS17LfSaiZ9EQP3P7+JjRlSEnE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:9b:97:0f:e8:bb:d5:e1:bc:92:9b:be:fa:29:2b:9e:86:45:d5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E7477DABC7930FE1809FECAC0EA751E0271CB4D Validity Not Before: Jul 20 15:40:58 2026 GMT Not After : Jul 21 19:10:58 2026 GMT Subject: CN=1AE2D6B878510321F3F260C71B91BA0EA684253D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:96:83:21:0d:e7:65:70:86:11:f3:6e:61:6b: e1:f2:a7:4a:06:cd:e8:fc:76:55:35:6f:c2:01:4a: 78:1c:69:52:9d:f8:64:a5:c1:82:cb:f0:df:8a:41: 12:69:37:8a:e6:5a:9f:96:0c:1b:32:c5:fc:bb:50: 3a:10:a3:a4:bb:a6:9e:57:45:f3:78:9a:61:c6:37: 64:17:bf:28:4a:1f:fb:bc:7b:8c:4e:cb:de:10:9b: d7:57:19:2c:ec:c6:05:8a:7b:b6:ed:62:19:11:d3: f7:9d:da:30:c4:c9:27:fe:f7:4c:b2:51:f3:b1:6f: 98:db:ab:b2:6d:2f:6d:d6:d0:5e:ac:7c:f1:b9:4c: c2:35:52:37:e7:74:6b:32:84:3b:4a:3d:9a:c4:32: 54:b2:96:45:b0:bf:00:97:34:da:1b:29:85:b8:03: 74:e5:cb:7d:8a:3a:b3:7e:a0:99:c1:b7:fd:95:3f: 71:06:f0:b6:74:0a:df:df:20:a5:37:36:f6:ce:f8: 31:35:ca:5b:61:b9:0d:ca:38:9c:89:32:1e:0c:33: d5:a9:f0:59:f1:6e:1d:36:ff:96:03:0f:be:95:dc: 4c:ed:ad:04:3a:1f:cf:1d:ea:4e:23:af:74:8f:09: 3b:33:e2:1a:c5:3d:53:b3:00:3f:f5:44:c4:22:6d: 8e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E2:D6:B8:78:51:03:21:F3:F2:60:C7:1B:91:BA:0E:A6:84:25:3D X509v3 Authority Key Identifier: keyid:4E:74:77:DA:BC:79:30:FE:18:09:FE:CA:C0:EA:75:1E:02:71:CB:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:9a:da:05:a7:94:11:91:c9:d3:5f:ef:b5:83:48:34:37:7b: 86:07:86:98:6f:0a:39:8d:81:de:76:20:42:e8:f7:f4:88:bd: e0:19:eb:46:00:43:f8:86:f8:df:e4:5d:25:4d:43:ad:8a:5e: 82:c7:d6:12:03:5d:11:be:a9:17:71:4b:eb:c4:29:01:49:26: 71:62:1a:4e:fc:13:d0:ee:c5:a9:19:42:89:69:8c:72:14:4b: b6:b0:2b:aa:fe:2d:5a:60:91:a2:7a:17:8a:52:88:b7:0f:cf: e5:fc:3c:bd:9d:87:9d:be:d2:a9:22:fc:e6:7f:66:40:a3:9e: eb:ae:ac:c2:3f:33:9d:0a:7a:64:26:60:40:b0:f3:27:ae:6e: 26:02:32:90:1b:52:a7:8a:94:a5:3e:55:dc:65:84:16:2e:dc: 29:27:30:e4:c0:e2:5b:59:bb:d3:7d:d1:e5:35:2a:27:ba:4b: 7c:69:81:c9:a4:fb:22:d0:36:f3:65:dd:6f:7c:cf:97:d3:87: d8:99:a6:db:f7:0c:0f:37:f4:c8:30:28:bd:a7:dd:fc:aa:cb: a0:95:d7:3b:5e:c0:4f:dc:cb:29:1e:35:53:8d:21:08:4b:c1: 23:1a:e6:0f:f3:4e:e4:cb:09:a3:d2:09:1a:dd:88:43:87:6c: 8c:70:d8:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJuXD+i71eG8kpu++ikrnoZF1UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU3NDc3REFCQzc5MzBGRTE4MDlGRUNBQzBFQTc1MUUw MjcxQ0I0RDAeFw0yNjA3MjAxNTQwNThaFw0yNjA3MjExOTEwNThaMDMxMTAvBgNV BAMTKDFBRTJENkI4Nzg1MTAzMjFGM0YyNjBDNzFCOTFCQTBFQTY4NDI1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgloMhDedlcIYR825ha+Hyp0oG zej8dlU1b8IBSngcaVKd+GSlwYLL8N+KQRJpN4rmWp+WDBsyxfy7UDoQo6S7pp5X RfN4mmHGN2QXvyhKH/u8e4xOy94Qm9dXGSzsxgWKe7btYhkR0/ed2jDEySf+90yy UfOxb5jbq7JtL23W0F6sfPG5TMI1UjfndGsyhDtKPZrEMlSylkWwvwCXNNobKYW4 A3Tly32KOrN+oJnBt/2VP3EG8LZ0Ct/fIKU3NvbO+DE1ylthuQ3KOJyJMh4MM9Wp 8Fnxbh02/5YDD76V3EztrQQ6H88d6k4jr3SPCTsz4hrFPVOzAD/1RMQibY4RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGuLWuHhRAyHz8mDHG5G6DqaEJT0wHwYDVR0j BBgwFoAUTnR32rx5MP4YCf7KwOp1HgJxy00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJjOGNkYTUtMzQ4My00MmIwLWIzODUtZmMwNzA3MTZmYmNjLzAvNEU3NDc3REFC Qzc5MzBGRTE4MDlGRUNBQzBFQTc1MUUwMjcxQ0I0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTc0NzdEQUJDNzkzMEZFMTgwOUZFQ0FDMEVBNzUxRTAyNzFD QjRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvNEU3NDc3REFCQzc5MzBGRTE4MDlGRUNBQzBFQTc1 MUUwMjcxQ0I0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKa2gWnlBGRydNf77WDSDQ3e4YHhphvCjmN gd52IELo9/SIveAZ60YAQ/iG+N/kXSVNQ62KXoLH1hIDXRG+qRdxS+vEKQFJJnFi Gk78E9DuxakZQolpjHIUS7awK6r+LVpgkaJ6F4pSiLcPz+X8PL2dh52+0qki/OZ/ ZkCjnuuurMI/M50KemQmYECw8yeubiYCMpAbUqeKlKU+VdxlhBYu3CknMOTA4ltZ u9N90eU1Kie6S3xpgcmk+yLQNvNl3W98z5fTh9iZptv3DA839MgwKL2n3fyqy6CV 1ztewE/cyykeNVONIQhLwSMa5g/zTuTLCaPSCRrdiEOHbIxw2EY= -----END CERTIFICATE-----Generated at Tue Jul 21 06:30:50 2026 by rpki-client