$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft File: 4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft (raw, json) Hash identifier: brgyRh/CRsPO9wptxb/5BGF6t80j+xMFFF4rKrvBNjM= Subject key identifier: 24:29:87:DC:BA:0D:F4:CD:6B:18:7D:89:9C:38:35:D1:CF:06:C2:65 Authority key identifier: 4A:B7:BD:8A:13:F8:8A:9A:CC:16:3E:CD:B0:8E:E4:9E:AB:29:00:E0 Certificate issuer: /CN=4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0 Certificate serial: 47F7F464BA4E77D36E37A0E94BDB3BB91BCC95D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 16:16:39 +0000 Manifest this update: Mon 20 Jul 2026 16:11:39 +0000 Manifest next update: Tue 21 Jul 2026 19:15:39 +0000 Files and hashes: 1: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: U4x7nHOIPSopo3seWvdUR/rW9/Lem7oTQ8rb2DjIll4=) 2: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 4GyYBNeN6eFsPcbI1361ngWI6JUq/EEA9jGEIXv0P9w=) 3: 4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl (hash: 47cJHhse4Z5N5NnlzxlcxWPFUHwJn6UB8SXPl/uAwZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f7:f4:64:ba:4e:77:d3:6e:37:a0:e9:4b:db:3b:b9:1b:cc:95:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0 Validity Not Before: Jul 20 16:11:39 2026 GMT Not After : Jul 21 19:15:39 2026 GMT Subject: CN=242987DCBA0DF4CD6B187D899C3835D1CF06C265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:39:1a:02:b9:52:13:28:30:5c:9f:88:c2:35: 72:fb:fa:ec:b0:2a:9c:1b:6f:89:10:36:c1:31:07: 50:88:7f:b9:a5:ad:72:09:1a:6c:b0:6f:f1:2f:ec: 9d:0b:15:72:19:00:2e:2f:88:f4:b3:74:77:01:cf: a0:4d:22:34:b8:1b:c9:e5:3e:5b:0c:3e:bc:5c:3a: 20:40:ab:bb:b0:48:27:65:36:ff:b7:49:dc:be:a0: 92:69:58:5a:cc:3d:00:56:13:ef:2c:9f:a1:66:41: 65:59:fd:62:6b:c3:c6:e0:8a:8d:ad:c5:95:df:32: 53:bc:c4:22:bc:15:be:6e:af:c9:9b:22:fb:24:fd: b9:64:d9:38:c4:5b:65:cc:fe:84:b8:ba:32:82:70: 9c:01:8b:4d:eb:58:27:d3:a4:44:25:1e:b5:37:0c: 5b:69:18:e7:d3:23:d7:b0:a5:6e:ee:02:5c:aa:dd: 1a:7e:82:dc:95:a0:22:53:56:9c:32:bb:27:4a:b0: e5:a7:1f:0f:29:de:80:28:ad:75:63:ba:f5:5e:40: ae:68:15:e1:69:2a:70:1d:0d:f1:02:e3:9f:8c:5f: fd:da:10:52:d2:7a:8f:4b:e8:40:00:3e:32:af:b0: f1:9a:5c:07:9e:22:9f:6a:10:ac:bb:8f:2f:f3:84: 37:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:29:87:DC:BA:0D:F4:CD:6B:18:7D:89:9C:38:35:D1:CF:06:C2:65 X509v3 Authority Key Identifier: keyid:4A:B7:BD:8A:13:F8:8A:9A:CC:16:3E:CD:B0:8E:E4:9E:AB:29:00:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:0f:31:a4:a4:62:bf:b4:62:1e:26:35:cc:70:ba:42:67:2f: 63:ef:8f:9e:9d:98:8a:7e:51:21:85:c5:b3:3d:28:07:fd:bc: 42:0e:b4:ee:5a:0d:45:e2:cc:49:ed:00:0a:55:68:7c:e7:3f: d2:5e:a2:fe:66:f4:6a:ea:cc:e7:a2:c8:c1:a0:fa:4d:01:30: 9e:b9:1d:b1:78:e8:fc:1b:ab:73:7d:78:a3:8b:00:1b:cd:a9: 61:3c:15:c3:62:01:86:5e:05:34:e5:c1:e6:55:b1:c2:b1:45: a6:e4:bd:ff:e4:e4:16:33:b9:50:2d:5f:59:98:65:2f:c5:21: 42:86:5a:2d:76:a3:e8:ab:ce:b6:46:23:19:27:33:69:f1:64: 66:db:94:53:b3:b6:46:17:d8:de:c2:30:95:61:6c:00:5d:a2: 30:b8:f0:c9:ab:8a:a7:e1:92:1d:b7:b2:b3:c6:90:1f:e5:0b: 04:db:cd:c4:8b:c3:88:73:be:2c:b8:46:b4:c1:e8:b6:26:36: d7:64:57:cc:5c:a9:9b:2f:c2:16:98:c3:e7:9f:15:8f:b4:56: c6:09:df:02:ad:f0:85:59:a2:6e:d4:08:9e:12:47:c2:00:c3: 43:f8:cf:2c:35:ef:fc:7a:1d:b7:d0:71:d1:e2:56:23:5c:90: c0:c2:6d:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/f0ZLpOd9NuN6DpS9s7uRvMldIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFCN0JEOEExM0Y4OEE5QUNDMTYzRUNEQjA4RUU0OUVB QjI5MDBFMDAeFw0yNjA3MjAxNjExMzlaFw0yNjA3MjExOTE1MzlaMDMxMTAvBgNV BAMTKDI0Mjk4N0RDQkEwREY0Q0Q2QjE4N0Q4OTlDMzgzNUQxQ0YwNkMyNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ORoCuVITKDBcn4jCNXL7+uyw Kpwbb4kQNsExB1CIf7mlrXIJGmywb/Ev7J0LFXIZAC4viPSzdHcBz6BNIjS4G8nl PlsMPrxcOiBAq7uwSCdlNv+3Sdy+oJJpWFrMPQBWE+8sn6FmQWVZ/WJrw8bgio2t xZXfMlO8xCK8Fb5ur8mbIvsk/blk2TjEW2XM/oS4ujKCcJwBi03rWCfTpEQlHrU3 DFtpGOfTI9ewpW7uAlyq3Rp+gtyVoCJTVpwyuydKsOWnHw8p3oAorXVjuvVeQK5o FeFpKnAdDfEC45+MX/3aEFLSeo9L6EAAPjKvsPGaXAeeIp9qEKy7jy/zhDdNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJCmH3LoN9M1rGH2JnDg10c8GwmUwHwYDVR0j BBgwFoAUSre9ihP4iprMFj7NsI7knqspAOAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ3NTA4OGUtNDlhZi00NzJiLTliNjItODFlNzNkYWFmMWQ2LzAvNEFCN0JEOEEx M0Y4OEE5QUNDMTYzRUNEQjA4RUU0OUVBQjI5MDBFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUI3QkQ4QTEzRjg4QTlBQ0MxNjNFQ0RCMDhFRTQ5RUFCMjkw MEUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvNEFCN0JEOEExM0Y4OEE5QUNDMTYzRUNEQjA4RUU0 OUVBQjI5MDBFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYPMaSkYr+0Yh4mNcxwukJnL2Pvj56dmIp+ USGFxbM9KAf9vEIOtO5aDUXizEntAApVaHznP9Jeov5m9GrqzOeiyMGg+k0BMJ65 HbF46Pwbq3N9eKOLABvNqWE8FcNiAYZeBTTlweZVscKxRabkvf/k5BYzuVAtX1mY ZS/FIUKGWi12o+irzrZGIxknM2nxZGbblFOztkYX2N7CMJVhbABdojC48Mmriqfh kh23srPGkB/lCwTbzcSLw4hzviy4RrTB6LYmNtdkV8xcqZsvwhaYw+efFY+0VsYJ 3wKt8IVZom7UCJ4SR8IAw0P4zyw17/x6HbfQcdHiViNckMDCbcw= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:23 2026 by rpki-client