$ rpki-client -vvf rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft File: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft (raw, json) Hash identifier: /FzZb9zpFSnubjWhRDMHcNZ5XxWLrf1dnPMLqQmz/mo= Subject key identifier: B4:53:7F:DE:5F:FC:8F:89:06:70:95:C2:0F:55:80:66:C3:DD:2D:58 Authority key identifier: 4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3 Certificate issuer: /CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3 Certificate serial: 58D8245A293757F9DDC2D718C3891FAB6E80C8D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 23:19:47 +0000 Manifest this update: Mon 20 Jul 2026 23:14:47 +0000 Manifest next update: Wed 22 Jul 2026 01:40:47 +0000 Files and hashes: 1: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl (hash: ivg9zzXqzOV4uApV6z6RfSgFAW/+X17fJ/tJY7jFVLg=) 2: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: +WxXMuFbrHKDjWOS8r0LmF3/UaAmCxzNKESEznXTLHE=) 3: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: PWQir4scae8YfD6/q+bk0ejgh+XhSzNVifyQAj+tAMA=) 4: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: Dk9FmD1Gd6LwGA6mFHwlSjHioZF8VJSA0K7I5b1rqPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d8:24:5a:29:37:57:f9:dd:c2:d7:18:c3:89:1f:ab:6e:80:c8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3 Validity Not Before: Jul 20 23:14:47 2026 GMT Not After : Jul 22 01:40:47 2026 GMT Subject: CN=B4537FDE5FFC8F89067095C20F558066C3DD2D58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:99:d8:7d:be:46:e8:c3:55:7e:c3:90:d2: d1:d9:3e:2f:48:43:25:91:07:ca:12:c7:75:dc:46: 47:ae:c8:dc:08:22:a9:24:34:79:47:66:32:f7:2f: 37:0f:37:37:54:c6:64:54:02:80:eb:c4:12:35:e0: 55:37:11:de:df:38:8f:e8:05:a3:ab:06:c8:fb:fe: 3a:cc:30:4a:cf:1f:4c:2d:11:c6:db:c0:63:8b:28: ea:6a:72:bc:3b:51:5d:0b:e9:88:eb:fe:4c:85:cc: 9e:98:72:d8:7f:ed:e1:ef:b8:66:bc:a5:1c:36:a5: b4:da:18:21:29:fd:a1:cc:14:94:94:a1:89:08:a9: 13:fa:d9:3f:0c:88:9f:64:87:c4:1f:96:bd:fa:01: 39:b9:62:57:6f:60:5e:23:21:2d:f4:6e:c6:bf:b5: 0c:2d:41:48:fa:c2:d2:97:d7:17:f9:9b:bd:ca:e6: 7d:57:d6:bf:64:99:fb:c2:76:61:c1:aa:12:66:71: 94:b3:b3:9c:7f:9b:af:99:ed:69:b1:4c:05:97:3a: b7:48:4a:35:60:97:f9:a1:22:b8:8f:0a:66:9a:64: 93:85:ab:1a:8e:08:7f:ca:59:07:0b:91:03:8f:f6: 06:ca:72:2a:c2:ed:3c:50:a7:59:ce:7c:a3:41:eb: 1e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:53:7F:DE:5F:FC:8F:89:06:70:95:C2:0F:55:80:66:C3:DD:2D:58 X509v3 Authority Key Identifier: keyid:4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a6:31:f2:d5:30:ac:fc:85:9f:8a:ab:e2:5c:b0:18:07:44: 38:ff:1d:51:1e:fb:fb:50:33:df:d4:56:df:a8:bf:1b:16:89: 3f:6d:d6:36:00:42:c2:7c:e9:96:b7:e8:24:23:06:b0:77:d9: 53:52:48:3e:5a:ae:13:d5:19:5a:bf:74:34:27:74:4b:ec:4f: fe:45:2c:e0:77:b9:f4:15:56:89:03:53:a1:80:73:d9:68:ef: 1b:7d:33:ba:ea:2e:c5:0c:51:01:e8:56:79:95:01:f3:a4:17: da:ac:95:33:a0:5d:f3:6a:e9:b9:c4:b5:63:c3:67:47:bd:9a: fc:29:eb:f9:93:e0:16:83:16:7f:e5:be:a7:99:83:3d:93:91: 90:ff:d4:9b:9c:f2:f4:03:04:ca:de:db:bb:a3:b5:1d:48:a5: f3:28:41:d1:86:3d:f6:da:6a:02:de:79:ba:2d:17:b5:be:83: 52:9c:64:01:8a:08:89:6f:85:4a:14:ef:25:b2:ff:9b:85:6b: 7b:99:8b:a0:73:65:d4:35:6a:93:52:84:99:07:ae:09:cf:ec: 4b:bd:dc:11:65:95:67:b8:45:61:73:9c:0c:ea:98:0c:d4:76: bc:4c:da:63:96:9b:07:2b:8c:1c:25:65:29:0d:f9:b9:1a:83: 7a:0b:a1:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNgkWik3V/ndwtcYw4kfq26AyNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQwMDhBRDQ3NjFCQzcyRTNBREZBOEI0Njc3QTQ0MDc2 REE4OTBCMzAeFw0yNjA3MjAyMzE0NDdaFw0yNjA3MjIwMTQwNDdaMDMxMTAvBgNV BAMTKEI0NTM3RkRFNUZGQzhGODkwNjcwOTVDMjBGNTU4MDY2QzNERDJENTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3v5nYfb5G6MNVfsOQ0tHZPi9I QyWRB8oSx3XcRkeuyNwIIqkkNHlHZjL3LzcPNzdUxmRUAoDrxBI14FU3Ed7fOI/o BaOrBsj7/jrMMErPH0wtEcbbwGOLKOpqcrw7UV0L6Yjr/kyFzJ6Ycth/7eHvuGa8 pRw2pbTaGCEp/aHMFJSUoYkIqRP62T8MiJ9kh8Qflr36ATm5YldvYF4jIS30bsa/ tQwtQUj6wtKX1xf5m73K5n1X1r9kmfvCdmHBqhJmcZSzs5x/m6+Z7WmxTAWXOrdI SjVgl/mhIriPCmaaZJOFqxqOCH/KWQcLkQOP9gbKcirC7TxQp1nOfKNB6x57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtFN/3l/8j4kGcJXCD1WAZsPdLVgwHwYDVR0j BBgwFoAUTQCK1HYbxy4636i0Z3pEB22okLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTIyOWNhNTAtZTk1Yy00NWJiLTljMzAtNjNlMTJhZjdhNWUxLzAvNEQwMDhBRDQ3 NjFCQzcyRTNBREZBOEI0Njc3QTQ0MDc2REE4OTBCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDAwOEFENDc2MUJDNzJFM0FERkE4QjQ2NzdBNDQwNzZEQTg5 MEIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj MzAtNjNlMTJhZjdhNWUxLzAvNEQwMDhBRDQ3NjFCQzcyRTNBREZBOEI0Njc3QTQ0 MDc2REE4OTBCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADimMfLVMKz8hZ+Kq+JcsBgHRDj/HVEe+/tQ M9/UVt+ovxsWiT9t1jYAQsJ86Za36CQjBrB32VNSSD5arhPVGVq/dDQndEvsT/5F LOB3ufQVVokDU6GAc9lo7xt9M7rqLsUMUQHoVnmVAfOkF9qslTOgXfNq6bnEtWPD Z0e9mvwp6/mT4BaDFn/lvqeZgz2TkZD/1Juc8vQDBMre27ujtR1IpfMoQdGGPfba agLeebotF7W+g1KcZAGKCIlvhUoU7yWy/5uFa3uZi6BzZdQ1apNShJkHrgnP7Eu9 3BFllWe4RWFznAzqmAzUdrxM2mOWmwcrjBwlZSkN+bkag3oLoV4= -----END CERTIFICATE-----Generated at Tue Jul 21 06:18:28 2026 by rpki-client