$ rpki-client -vvf rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft File: 4BCE188DE42B539EBB860A376D13FE292B001147.mft (raw, json) Hash identifier: b6BYYPLE1CxIq4GxmgTDLswIfDfgZuXoOECCX8RV+dg= Subject key identifier: 9F:20:73:B9:9F:66:2F:76:F9:FB:A0:F0:C1:D4:BC:46:4A:55:D2:8F Authority key identifier: 4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47 Certificate issuer: /CN=4BCE188DE42B539EBB860A376D13FE292B001147 Certificate serial: 4D22E58D413A9A52557B7C9C38EC06A5F70A28DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 23:04:26 +0000 Manifest this update: Mon 20 Jul 2026 22:59:26 +0000 Manifest next update: Wed 22 Jul 2026 02:48:26 +0000 Files and hashes: 1: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: /L4LgvuxEYbH0dgsif++d85ZiL7YhQs+ni89j41DhXM=) 2: 4BCE188DE42B539EBB860A376D13FE292B001147.crl (hash: IeMke/KMA2OVQxF72lklLiK6YcPXu5uc0ZQGuYt+0gk=) 3: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: u8jjg+GiS9S6r5A4phLntvppacWIJllmMAB+9fmlXA0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:22:e5:8d:41:3a:9a:52:55:7b:7c:9c:38:ec:06:a5:f7:0a:28:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BCE188DE42B539EBB860A376D13FE292B001147 Validity Not Before: Jul 20 22:59:26 2026 GMT Not After : Jul 22 02:48:26 2026 GMT Subject: CN=9F2073B99F662F76F9FBA0F0C1D4BC464A55D28F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:30:bf:c2:19:8b:81:9d:18:19:57:f0:e1:18: f3:61:c9:a2:53:ce:b9:ac:2f:c6:47:d7:08:e2:ed: 49:c8:2d:7b:1f:36:5c:36:86:c9:47:d5:83:ad:2c: bb:59:83:0a:62:75:4e:a9:6c:c6:f1:8e:01:27:ab: 96:1c:cd:02:8c:46:dd:88:f8:ca:86:d6:d7:34:9a: 7a:f1:52:8b:c1:23:f4:47:0e:7a:2d:09:85:37:05: be:be:11:d2:43:11:66:23:8a:02:5a:d9:35:b9:99: 9f:ef:85:a8:7c:7b:22:be:a6:23:51:33:b5:1f:37: 7d:f0:c6:a7:65:f1:27:50:ee:d0:28:2a:0d:b5:2d: 2a:17:eb:61:08:54:13:b3:00:07:cc:87:32:db:f7: 2b:53:d7:c5:e7:e4:04:25:70:a2:e4:99:ea:40:1c: 6b:1a:5c:27:f9:9f:84:a5:e2:41:2c:a9:03:b9:32: 14:4c:ea:1a:d5:bb:34:90:b1:05:6e:99:1b:70:45: f2:97:da:ac:68:f4:90:45:25:57:cc:df:c9:7f:ee: ff:73:15:a6:a1:f3:31:8d:f6:dd:9d:1e:e4:ff:3a: ee:b2:79:ef:c8:35:4c:5d:4e:8c:dc:d4:e7:ec:00: 99:03:c5:69:6e:87:4d:18:b9:a2:6f:cd:31:f9:0a: 5c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:20:73:B9:9F:66:2F:76:F9:FB:A0:F0:C1:D4:BC:46:4A:55:D2:8F X509v3 Authority Key Identifier: keyid:4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:fc:1e:17:3d:d1:dc:c8:4a:79:27:9f:76:d7:47:b9:cd:bd: 9f:2d:e9:6e:f6:ae:81:5a:e5:12:3b:d2:59:19:fc:12:cb:4f: 3e:cf:71:10:c9:c5:a1:11:eb:54:4b:16:b9:51:fb:2d:48:76: 7a:dd:fe:6c:ef:20:2b:0c:74:ed:63:7d:0f:33:f6:b6:02:fe: ca:82:df:b5:e6:3e:bd:09:17:c8:c4:cf:13:3e:85:37:a9:62: ac:ab:99:52:74:17:0c:64:4e:24:63:5f:14:f3:27:2f:dd:a5: f1:b1:01:84:96:51:48:8d:c5:9b:9f:c4:52:90:fe:2e:a4:7b: 15:ed:d0:e9:b9:6f:1a:12:9d:7e:4a:45:a9:b9:f5:73:51:36: d2:7c:e0:c6:cb:f7:a6:c8:66:fa:56:8e:4c:8e:f7:ed:13:5d: 99:20:f2:55:9c:4d:f9:93:b8:57:21:8e:40:7b:37:b5:c6:e1: 57:31:92:40:07:f9:08:4a:1b:5c:5a:66:2a:81:38:94:5f:cf: 62:f2:51:c8:d6:9b:95:24:f5:18:5f:21:d0:23:f2:29:76:d1: 93:9e:5a:2d:37:c7:89:01:2d:1c:dd:b1:5d:cc:c1:1b:b7:68: b4:e3:01:e6:2e:60:69:00:85:1b:04:0b:7e:22:d7:9c:f8:61: b5:cf:d5:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTSLljUE6mlJVe3ycOOwGpfcKKN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDRTE4OERFNDJCNTM5RUJCODYwQTM3NkQxM0ZFMjky QjAwMTE0NzAeFw0yNjA3MjAyMjU5MjZaFw0yNjA3MjIwMjQ4MjZaMDMxMTAvBgNV BAMTKDlGMjA3M0I5OUY2NjJGNzZGOUZCQTBGMEMxRDRCQzQ2NEE1NUQyOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXML/CGYuBnRgZV/DhGPNhyaJT zrmsL8ZH1wji7UnILXsfNlw2hslH1YOtLLtZgwpidU6pbMbxjgEnq5YczQKMRt2I +MqG1tc0mnrxUovBI/RHDnotCYU3Bb6+EdJDEWYjigJa2TW5mZ/vhah8eyK+piNR M7UfN33wxqdl8SdQ7tAoKg21LSoX62EIVBOzAAfMhzLb9ytT18Xn5AQlcKLkmepA HGsaXCf5n4Sl4kEsqQO5MhRM6hrVuzSQsQVumRtwRfKX2qxo9JBFJVfM38l/7v9z Faah8zGN9t2dHuT/Ou6yee/INUxdTozc1OfsAJkDxWluh00YuaJvzTH5ClztAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnyBzuZ9mL3b5+6DwwdS8RkpV0o8wHwYDVR0j BBgwFoAUS84YjeQrU567hgo3bRP+KSsAEUcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNjZDYwYjItMGY1Ny00ZmM1LWJjNjItMWQ5YjZjNDhmY2YwLzAvNEJDRTE4OERF NDJCNTM5RUJCODYwQTM3NkQxM0ZFMjkyQjAwMTE0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkNFMTg4REU0MkI1MzlFQkI4NjBBMzc2RDEzRkUyOTJCMDAx MTQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNjZDYwYjItMGY1Ny00ZmM1LWJj NjItMWQ5YjZjNDhmY2YwLzAvNEJDRTE4OERFNDJCNTM5RUJCODYwQTM3NkQxM0ZF MjkyQjAwMTE0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFX8Hhc90dzISnknn3bXR7nNvZ8t6W72roFa 5RI70lkZ/BLLTz7PcRDJxaER61RLFrlR+y1Idnrd/mzvICsMdO1jfQ8z9rYC/sqC 37XmPr0JF8jEzxM+hTepYqyrmVJ0FwxkTiRjXxTzJy/dpfGxAYSWUUiNxZufxFKQ /i6kexXt0Om5bxoSnX5KRam59XNRNtJ84MbL96bIZvpWjkyO9+0TXZkg8lWcTfmT uFchjkB7N7XG4VcxkkAH+QhKG1xaZiqBOJRfz2LyUcjWm5Uk9RhfIdAj8il20ZOe Wi03x4kBLRzdsV3MwRu3aLTjAeYuYGkAhRsEC34i15z4YbXP1aE= -----END CERTIFICATE-----Generated at Tue Jul 21 07:01:48 2026 by rpki-client