$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft File: 14649B106FA0C411D7FCD73A4B0147226E8A8454.mft (raw, json) Hash identifier: In7n1NF4zNgRmqTUfBhwd8c+kfsgIqcvU4gp53acW3c= Subject key identifier: A3:B7:F6:71:84:FB:0C:A3:55:26:10:9E:59:4D:A2:A2:92:80:19:DA Authority key identifier: 14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54 Certificate issuer: /CN=14649B106FA0C411D7FCD73A4B0147226E8A8454 Certificate serial: 53D3674D7118079E27A9C91007801E7C70422449 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft Manifest number: 50 Signing time: Tue 30 Jun 2026 05:57:43 +0000 Manifest this update: Tue 30 Jun 2026 05:52:43 +0000 Manifest next update: Wed 01 Jul 2026 06:29:43 +0000 Files and hashes: 1: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (hash: HpCznd8LAemIm49TlwLV1GhAVKIU4sZ5BY+7TeR1EA4=) 2: 3130332e38392e3136342e302f32342d3234203d3e20313333383030.roa (hash: eR7s3iDJUbgwn7vG0iEll3YQrHiAYjHNsvD28zhjxXY=) 3: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (hash: j+ssfk4JgFO6Pb/CGHEOZfos8czQhoSwZB6YERcUzUI=) 4: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (hash: O5MLHMcohhvApO1/L1RvpM2jYbsZVQ8eLBzNQkddTHQ=) 5: 14649B106FA0C411D7FCD73A4B0147226E8A8454.crl (hash: pAQ0QxdTdkCtFOnPpqTmVC3ug7R+nIRuJGgZO0L2ubs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 06:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d3:67:4d:71:18:07:9e:27:a9:c9:10:07:80:1e:7c:70:42:24:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14649B106FA0C411D7FCD73A4B0147226E8A8454 Validity Not Before: Jun 30 05:52:43 2026 GMT Not After : Jul 1 06:29:43 2026 GMT Subject: CN=A3B7F67184FB0CA35526109E594DA2A2928019DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c7:36:cc:9f:33:23:65:43:dc:ce:9c:33:bd: f6:56:f0:2a:fa:1f:ec:92:17:2d:36:30:2e:fd:91: bf:cb:e2:85:95:04:97:47:07:8e:27:c4:84:68:fc: b8:95:44:06:b5:1d:98:2f:e6:17:da:7f:be:2a:60: c3:00:e4:2b:57:9e:00:d0:4d:8d:04:c4:ff:db:c8: 91:47:4d:57:f6:79:95:d0:a9:6f:92:e5:cb:a4:4b: 2e:ff:a1:47:e6:71:71:1c:d8:3d:ba:d4:bb:a7:4d: 77:72:c9:c8:48:c9:dc:bd:69:77:55:6d:25:8d:7a: ea:2e:88:1a:36:c2:16:35:b5:60:0f:86:96:6a:42: 1b:52:e8:a5:86:cb:3c:00:50:e9:1a:f1:e2:b5:20: 29:74:9a:40:24:5c:19:e7:15:fa:8e:97:fc:75:a5: 4e:33:88:12:a1:a5:47:07:18:c1:ee:0a:9a:60:98: 47:37:31:c0:16:ca:f9:75:c1:42:af:8f:a6:ff:f8: 55:d4:c7:6c:21:44:d1:98:ac:d4:b8:dc:33:d5:5e: e9:30:5f:fa:f1:15:1c:7e:c9:cb:52:26:38:65:42: 7b:a0:a1:31:ce:d0:2f:c7:97:9a:96:b9:a8:b6:a7: b4:56:52:fc:ea:fb:ed:0b:8d:e3:f7:40:26:8d:92: ea:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B7:F6:71:84:FB:0C:A3:55:26:10:9E:59:4D:A2:A2:92:80:19:DA X509v3 Authority Key Identifier: keyid:14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a4:2b:00:15:76:83:0a:bc:92:0e:e2:7c:61:4b:2a:b2:9e: 92:72:6b:c0:7c:91:5c:2f:c9:cb:b7:71:68:6a:9a:5d:05:54: 33:cb:1b:e0:04:b3:92:a9:2d:27:c4:50:27:fa:52:d2:77:30: 70:87:88:94:0d:cf:66:76:ab:a1:1c:34:11:51:f2:18:c4:c6: c0:71:97:10:9e:f3:7a:8c:dd:2a:7d:65:27:17:e5:8a:20:d9: bb:59:99:05:65:aa:d8:64:10:14:80:39:11:45:49:d4:e0:0f: 68:12:53:46:3f:b1:e7:e3:3f:c3:af:89:f3:c0:c8:2e:fc:d0: a0:26:9d:c8:95:6e:2c:ce:5c:9d:ed:bf:2f:cb:e8:eb:06:2e: 55:e9:28:b8:aa:c2:94:ba:4c:f9:61:2b:69:af:f9:a0:87:c6: e2:4a:36:bf:92:fa:76:f3:45:d0:4a:bd:f3:c5:2a:4d:76:25: 5f:a5:7a:a5:1b:76:2c:ae:25:07:81:8b:16:c2:15:dc:86:e8: 92:fb:33:81:fa:6a:80:40:1c:45:f1:da:fb:85:26:0f:7d:1d: 68:3e:8e:99:18:d8:1e:68:12:f4:6b:88:fa:0a:5f:b3:1d:51: a4:ba:3f:eb:1f:41:cb:77:f1:6a:8e:43:d7:f7:7e:5b:d7:e8: 96:5c:19:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU9NnTXEYB54nqckQB4AefHBCJEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2NDlCMTA2RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2 RThBODQ1NDAeFw0yNjA2MzAwNTUyNDNaFw0yNjA3MDEwNjI5NDNaMDMxMTAvBgNV BAMTKEEzQjdGNjcxODRGQjBDQTM1NTI2MTA5RTU5NERBMkEyOTI4MDE5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxzbMnzMjZUPczpwzvfZW8Cr6 H+ySFy02MC79kb/L4oWVBJdHB44nxIRo/LiVRAa1HZgv5hfaf74qYMMA5CtXngDQ TY0ExP/byJFHTVf2eZXQqW+S5cukSy7/oUfmcXEc2D261LunTXdyychIydy9aXdV bSWNeuouiBo2whY1tWAPhpZqQhtS6KWGyzwAUOka8eK1ICl0mkAkXBnnFfqOl/x1 pU4ziBKhpUcHGMHuCppgmEc3McAWyvl1wUKvj6b/+FXUx2whRNGYrNS43DPVXukw X/rxFRx+yctSJjhlQnugoTHO0C/Hl5qWuai2p7RWUvzq++0LjeP3QCaNkuqLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo7f2cYT7DKNVJhCeWU2iopKAGdowHwYDVR0j BBgwFoAUFGSbEG+gxBHX/Nc6SwFHIm6KhFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQxNzZkZGQtYTk4MC00M2Q2LTk0YTctOTVlZWRhNTM5NjY1LzAvMTQ2NDlCMTA2 RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2RThBODQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDY0OUIxMDZGQTBDNDExRDdGQ0Q3M0E0QjAxNDcyMjZFOEE4 NDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQxNzZkZGQtYTk4MC00M2Q2LTk0 YTctOTVlZWRhNTM5NjY1LzAvMTQ2NDlCMTA2RkEwQzQxMUQ3RkNENzNBNEIwMTQ3 MjI2RThBODQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAykKwAVdoMKvJIO4nxhSyqynpJya8B8kVwv ycu3cWhqml0FVDPLG+AEs5KpLSfEUCf6UtJ3MHCHiJQNz2Z2q6EcNBFR8hjExsBx lxCe83qM3Sp9ZScX5Yog2btZmQVlqthkEBSAORFFSdTgD2gSU0Y/sefjP8OvifPA yC780KAmnciVbizOXJ3tvy/L6OsGLlXpKLiqwpS6TPlhK2mv+aCHxuJKNr+S+nbz RdBKvfPFKk12JV+leqUbdiyuJQeBixbCFdyG6JL7M4H6aoBAHEXx2vuFJg99HWg+ jpkY2B5oEvRriPoKX7MdUaS6P+sfQct38WqOQ9f3flvX6JZcGTQ= -----END CERTIFICATE-----Generated at Tue Jun 30 20:20:32 2026 by rpki-client