$ rpki-client -vvf rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.mft File: 4D81747956B88002B7CA79329A458E7D5CC04FC7.mft (raw, json) Hash identifier: uGSKqVwh1+l8tsFo1lp0lYwthAsa7w+mXdeZ0ikPDec= Subject key identifier: 31:71:9E:AC:BC:EB:24:42:B4:89:61:42:8C:58:DE:8B:17:E7:E4:2E Authority key identifier: 4D:81:74:79:56:B8:80:02:B7:CA:79:32:9A:45:8E:7D:5C:C0:4F:C7 Certificate issuer: /CN=4D81747956B88002B7CA79329A458E7D5CC04FC7 Certificate serial: 30440AC21F2E9939A67EAAB994D23ACDFDFF15AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D81747956B88002B7CA79329A458E7D5CC04FC7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 14:34:39 +0000 Manifest this update: Mon 20 Jul 2026 14:29:39 +0000 Manifest next update: Tue 21 Jul 2026 16:23:39 +0000 Files and hashes: 1: 4D81747956B88002B7CA79329A458E7D5CC04FC7.crl (hash: oQeVHHrvzL8EMh1ZQJcuMjuq93Hc3n1MLo6iCm5UMkY=) 2: 3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa (hash: pJiC24QIjxd6JDAGc4IBUzAveppgmfr21Asl7pAU+wU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.crl rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D81747956B88002B7CA79329A458E7D5CC04FC7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:44:0a:c2:1f:2e:99:39:a6:7e:aa:b9:94:d2:3a:cd:fd:ff:15:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D81747956B88002B7CA79329A458E7D5CC04FC7 Validity Not Before: Jul 20 14:29:39 2026 GMT Not After : Jul 21 16:23:39 2026 GMT Subject: CN=31719EACBCEB2442B48961428C58DE8B17E7E42E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b8:76:4f:c8:0f:69:af:08:57:9a:2e:51:c8: c5:bc:d6:07:8f:7d:a2:3f:c1:33:92:8b:c1:94:3a: 25:04:64:6f:cf:c9:2b:da:40:b0:93:2c:4e:62:61: d6:df:13:4b:8a:41:54:c1:1b:02:48:a9:4f:62:15: 82:48:c0:c5:c9:ec:18:36:90:6d:d0:72:90:06:1e: cc:a5:d1:b7:61:87:79:f4:78:bf:3f:5a:bd:bd:ac: e7:12:46:45:c5:8e:e7:d1:1b:29:5b:0f:bc:52:fe: 31:a1:95:98:ae:60:01:a8:70:f6:08:c8:c4:c3:f2: 41:47:7e:3a:83:9b:30:a5:2e:de:ef:fb:48:b9:ea: e1:f2:9c:94:83:2c:ce:bd:7f:79:57:89:8a:64:d8: 19:ae:08:8a:6d:f1:b1:bb:38:a3:33:d1:32:06:91: 20:2b:00:aa:b6:0c:2d:ff:3e:47:cc:5c:3b:f7:67: 2c:f8:8b:1a:73:8c:95:18:51:a2:fa:2f:0e:bc:ba: cd:e2:97:df:97:0e:89:1c:9d:d0:58:c6:1e:30:af: cb:fc:fc:13:05:65:3c:71:6e:dd:ce:7b:3b:75:f9: 8a:18:0c:c8:67:6c:a1:bd:bc:90:d8:32:1f:53:55: 8b:24:08:13:35:47:bf:d4:ea:f5:60:69:97:c3:1b: 7c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:71:9E:AC:BC:EB:24:42:B4:89:61:42:8C:58:DE:8B:17:E7:E4:2E X509v3 Authority Key Identifier: keyid:4D:81:74:79:56:B8:80:02:B7:CA:79:32:9A:45:8E:7D:5C:C0:4F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D81747956B88002B7CA79329A458E7D5CC04FC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:fe:17:2a:06:ce:79:59:3b:56:87:97:08:d1:06:3c:4e:d1: c7:75:82:ec:7f:e9:e2:54:92:35:a5:7c:65:ee:19:e1:be:9b: a7:e2:87:59:7b:c8:94:39:51:e6:f8:7e:4e:c5:bc:7e:b9:3c: da:d1:4d:3e:f7:b9:b2:26:70:57:ac:07:85:4f:49:28:d8:1e: ef:7b:c2:3c:7c:9d:57:f7:03:b3:76:02:08:c3:cd:73:bf:e0: 8b:18:c9:f9:5d:41:ab:62:3e:e0:80:ff:31:95:6c:0e:77:3f: 90:a8:4d:19:3c:b1:1d:d1:67:9d:06:75:2e:ac:bd:ce:9f:f7: aa:f9:c2:2d:75:68:65:d0:18:20:e8:20:c1:de:37:10:b7:45: ad:0e:2d:59:6e:4c:ad:eb:61:44:b3:de:ae:a0:7a:a1:e4:0b: 87:1e:92:15:03:6e:c8:7d:e4:92:a9:03:fa:a4:7b:7b:a0:bb: c2:14:58:d6:db:d9:93:19:d2:e6:53:6b:e7:bb:fe:3a:41:e8: b4:45:05:92:fd:9d:88:a3:93:87:1d:b0:c4:d5:80:60:41:fa: b3:31:38:97:97:44:8d:ef:e7:44:aa:2b:9a:34:a2:b7:a8:a5: 15:a2:41:12:b4:d7:7c:3e:32:8b:bc:50:f9:c2:01:0f:85:5c: 6f:b3:a8:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMEQKwh8umTmmfqq5lNI6zf3/Fa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4MTc0Nzk1NkI4ODAwMkI3Q0E3OTMyOUE0NThFN0Q1 Q0MwNEZDNzAeFw0yNjA3MjAxNDI5MzlaFw0yNjA3MjExNjIzMzlaMDMxMTAvBgNV BAMTKDMxNzE5RUFDQkNFQjI0NDJCNDg5NjE0MjhDNThERThCMTdFN0U0MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTuHZPyA9prwhXmi5RyMW81geP faI/wTOSi8GUOiUEZG/PySvaQLCTLE5iYdbfE0uKQVTBGwJIqU9iFYJIwMXJ7Bg2 kG3QcpAGHsyl0bdhh3n0eL8/Wr29rOcSRkXFjufRGylbD7xS/jGhlZiuYAGocPYI yMTD8kFHfjqDmzClLt7v+0i56uHynJSDLM69f3lXiYpk2BmuCIpt8bG7OKMz0TIG kSArAKq2DC3/PkfMXDv3Zyz4ixpzjJUYUaL6Lw68us3il9+XDokcndBYxh4wr8v8 /BMFZTxxbt3Oezt1+YoYDMhnbKG9vJDYMh9TVYskCBM1R7/U6vVgaZfDG3wVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMXGerLzrJEK0iWFCjFjeixfn5C4wHwYDVR0j BBgwFoAUTYF0eVa4gAK3ynkymkWOfVzAT8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWYwYTJiZWMtZjgxYS00YTNiLWExNDQtMTc1YjE2OGUyMmZkLzAvNEQ4MTc0Nzk1 NkI4ODAwMkI3Q0E3OTMyOUE0NThFN0Q1Q0MwNEZDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDgxNzQ3OTU2Qjg4MDAyQjdDQTc5MzI5QTQ1OEU3RDVDQzA0 RkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWYwYTJiZWMtZjgxYS00YTNiLWEx NDQtMTc1YjE2OGUyMmZkLzAvNEQ4MTc0Nzk1NkI4ODAwMkI3Q0E3OTMyOUE0NThF N0Q1Q0MwNEZDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADf+FyoGznlZO1aHlwjRBjxO0cd1gux/6eJU kjWlfGXuGeG+m6fih1l7yJQ5Ueb4fk7FvH65PNrRTT73ubImcFesB4VPSSjYHu97 wjx8nVf3A7N2AgjDzXO/4IsYyfldQatiPuCA/zGVbA53P5CoTRk8sR3RZ50GdS6s vc6f96r5wi11aGXQGCDoIMHeNxC3Ra0OLVluTK3rYUSz3q6geqHkC4cekhUDbsh9 5JKpA/qke3ugu8IUWNbb2ZMZ0uZTa+e7/jpB6LRFBZL9nYijk4cdsMTVgGBB+rMx OJeXRI3v50SqK5o0oreopRWiQRK013w+Mou8UPnCAQ+FXG+zqHU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:41:40 2026 by rpki-client