$ rpki-client -vvf rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft File: 4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft (raw, json) Hash identifier: Q2A45bxAJGR7mOOZMCoiQ4R/ynprnmQ4MFM9Z/tQ1cU= Subject key identifier: DD:3D:9C:51:61:6B:C1:94:42:B9:FA:D5:AF:E2:57:EF:DA:2F:C6:AA Authority key identifier: 4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3 Certificate issuer: /CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3 Certificate serial: 1BF1E7049E296F9EBC8B7DC1B9EE36D38BF57890 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 23:19:49 +0000 Manifest this update: Mon 20 Jul 2026 23:14:49 +0000 Manifest next update: Tue 21 Jul 2026 23:54:49 +0000 Files and hashes: 1: 3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa (hash: YUIYXOMtckDPfw6P14i0EQXXM9bXJM2DHMRCUnkqTUY=) 2: 4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl (hash: RAniXaCBdidyblRLRyZ+mZrSm61lpVP5hzx9O4qPJ+A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f1:e7:04:9e:29:6f:9e:bc:8b:7d:c1:b9:ee:36:d3:8b:f5:78:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3 Validity Not Before: Jul 20 23:14:49 2026 GMT Not After : Jul 21 23:54:49 2026 GMT Subject: CN=DD3D9C51616BC19442B9FAD5AFE257EFDA2FC6AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7e:c2:c7:86:ea:43:09:d3:11:f6:2d:10:51: 01:9a:27:9d:bb:ef:56:34:2e:d6:f9:90:57:91:fd: 91:a6:c7:e7:74:19:0c:99:49:71:0e:1d:55:b4:9b: 35:de:ba:bc:f0:be:59:96:df:45:5f:83:f9:58:88: 81:bb:ad:fe:c3:49:0d:45:c1:c7:bb:75:a4:c4:b4: ba:d3:b8:e5:9a:f4:8d:12:0d:38:b5:be:75:83:79: 0f:07:32:dd:73:98:d6:9a:8a:f3:2c:0c:20:ab:be: 09:8a:3d:4c:ca:5d:e0:05:8f:c6:e1:7f:7a:ff:61: b1:21:da:7d:88:15:a2:8b:ff:02:35:9e:7d:f4:fa: 06:81:3c:40:48:ed:cc:2e:d7:db:e2:99:f1:45:45: bd:97:e6:09:81:14:23:b4:63:38:af:9a:f1:82:1e: 75:be:b9:d6:e6:8b:0c:6c:59:b5:f3:0d:38:21:22: bb:a9:cb:95:b0:1b:18:4f:d3:9c:67:a6:62:0a:40: 3e:6d:d9:a3:c5:69:10:1e:7e:a9:c9:1c:4a:22:ce: d4:c0:31:6e:cc:8b:9a:1c:f4:4d:40:75:a5:74:b6: f4:cd:52:bc:4c:f5:05:17:d0:82:c3:6f:0e:2e:90: 1d:26:ec:d7:65:0b:a0:05:60:ae:4a:ec:4d:5f:84: 4f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3D:9C:51:61:6B:C1:94:42:B9:FA:D5:AF:E2:57:EF:DA:2F:C6:AA X509v3 Authority Key Identifier: keyid:4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:66:d4:d5:e6:6b:db:13:eb:a4:6a:06:0e:56:d0:0c:84:2c: 86:f9:10:b3:c8:c4:12:ee:0a:80:29:b5:fa:33:11:67:e6:aa: f1:7f:4e:07:f9:cb:91:af:30:70:11:f0:55:e3:33:74:82:31: 21:f5:3e:f7:ad:9f:c0:27:57:bf:c5:e2:48:1e:71:05:ca:15: ae:eb:50:ab:68:62:84:2a:15:91:c1:96:83:62:e4:bb:b5:0e: 16:b1:a5:df:19:71:7f:84:41:c8:15:f4:84:8c:ad:2d:d8:94: 16:24:23:d1:0e:10:df:62:48:8e:12:d6:04:6c:91:c6:82:0f: 7e:dd:dc:e2:21:4f:84:85:23:91:98:16:0d:d1:9e:ea:36:05: e5:8e:b7:ad:c7:e9:f3:fb:f1:56:7c:71:d8:b5:16:40:3f:f2: 06:31:b1:bb:16:21:2f:4a:dc:a7:00:c5:6e:b9:18:62:2d:a9: b8:2b:2a:09:99:d1:4a:3c:de:1c:a2:84:62:d9:b7:b8:58:4b: e7:eb:fa:27:65:93:ec:e4:2f:a7:7f:5c:1d:61:c9:a1:14:82: 2b:55:4f:dc:04:a2:4a:84:1d:65:f4:90:16:db:3e:ac:6f:61: 51:8a:be:2e:54:94:ab:8f:0a:29:4c:2d:04:74:99:4d:84:42: 7d:d3:de:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/HnBJ4pb568i33Bue4204v1eJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3NDUwQzI3OTRFNDI1NTlFRkJGM0E5MEZCMDQzRDU2 QTJGOTdFMzAeFw0yNjA3MjAyMzE0NDlaFw0yNjA3MjEyMzU0NDlaMDMxMTAvBgNV BAMTKEREM0Q5QzUxNjE2QkMxOTQ0MkI5RkFENUFGRTI1N0VGREEyRkM2QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAfsLHhupDCdMR9i0QUQGaJ527 71Y0Ltb5kFeR/ZGmx+d0GQyZSXEOHVW0mzXeurzwvlmW30Vfg/lYiIG7rf7DSQ1F wce7daTEtLrTuOWa9I0SDTi1vnWDeQ8HMt1zmNaaivMsDCCrvgmKPUzKXeAFj8bh f3r/YbEh2n2IFaKL/wI1nn30+gaBPEBI7cwu19vimfFFRb2X5gmBFCO0YzivmvGC HnW+udbmiwxsWbXzDTghIrupy5WwGxhP05xnpmIKQD5t2aPFaRAefqnJHEoiztTA MW7Mi5oc9E1AdaV0tvTNUrxM9QUX0ILDbw4ukB0m7NdlC6AFYK5K7E1fhE/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3T2cUWFrwZRCufrVr+JX79ovxqowHwYDVR0j BBgwFoAUTXRQwnlOQlWe+/OpD7BD1Wovl+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM1ZjE1YzktNTg0My00NzA1LWI2OTQtZmU1ZTdjZTE5ODA4LzAvNEQ3NDUwQzI3 OTRFNDI1NTlFRkJGM0E5MEZCMDQzRDU2QTJGOTdFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDc0NTBDMjc5NEU0MjU1OUVGQkYzQTkwRkIwNDNENTZBMkY5 N0UzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM1ZjE1YzktNTg0My00NzA1LWI2 OTQtZmU1ZTdjZTE5ODA4LzAvNEQ3NDUwQzI3OTRFNDI1NTlFRkJGM0E5MEZCMDQz RDU2QTJGOTdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARm1NXma9sT66RqBg5W0AyELIb5ELPIxBLu CoAptfozEWfmqvF/Tgf5y5GvMHAR8FXjM3SCMSH1Pvetn8AnV7/F4kgecQXKFa7r UKtoYoQqFZHBloNi5Lu1Dhaxpd8ZcX+EQcgV9ISMrS3YlBYkI9EOEN9iSI4S1gRs kcaCD37d3OIhT4SFI5GYFg3Rnuo2BeWOt63H6fP78VZ8cdi1FkA/8gYxsbsWIS9K 3KcAxW65GGItqbgrKgmZ0Uo83hyihGLZt7hYS+fr+idlk+zkL6d/XB1hyaEUgitV T9wEokqEHWX0kBbbPqxvYVGKvi5UlKuPCilMLQR0mU2EQn3T3q8= -----END CERTIFICATE-----Generated at Tue Jul 21 06:12:25 2026 by rpki-client