$ rpki-client -vvf rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft File: 4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft (raw, json) Hash identifier: mirI3prLZbj9OSv26QkU0OyT81eTFRmBGLiuW5g2XEk= Subject key identifier: 3A:48:44:AB:49:30:D4:D4:2F:3F:65:F2:8D:BD:F5:E3:4B:35:55:57 Authority key identifier: 42:72:D3:49:E0:4B:3A:5D:02:56:1E:E1:92:95:E0:FD:26:B3:7C:BE Certificate issuer: /CN=4272D349E04B3A5D02561EE19295E0FD26B37CBE Certificate serial: 0368CAC7E5CFD881F89AF79E5BE8F2443437A86E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft Manifest number: 69 Signing time: Mon 20 Jul 2026 16:01:18 +0000 Manifest this update: Mon 20 Jul 2026 15:56:18 +0000 Manifest next update: Tue 21 Jul 2026 18:49:18 +0000 Files and hashes: 1: 4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl (hash: RMhcbn6UCRiyjsozncsyDhmf/+M7/atVN+znLXRuqdE=) 2: 3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa (hash: psydRP9iI2xqdgTYldVyaNuPRMq6F5KFPK4XNBT7jw0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:68:ca:c7:e5:cf:d8:81:f8:9a:f7:9e:5b:e8:f2:44:34:37:a8:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4272D349E04B3A5D02561EE19295E0FD26B37CBE Validity Not Before: Jul 20 15:56:18 2026 GMT Not After : Jul 21 18:49:18 2026 GMT Subject: CN=3A4844AB4930D4D42F3F65F28DBDF5E34B355557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f1:8d:01:23:d8:57:db:aa:19:4c:c0:09:29: 23:9a:37:ce:28:16:96:fc:65:16:37:7b:9f:b0:42: 03:43:b6:23:34:fa:c4:c9:33:fd:34:f1:8d:eb:07: 95:03:1b:dd:f2:c6:b9:77:fa:7a:29:9c:7b:72:07: 88:3e:27:23:45:21:ab:16:24:9c:82:8d:72:a0:2f: 84:05:17:a5:dd:e8:22:2e:8f:4b:73:1b:5a:09:72: e8:be:f8:01:c5:7f:e1:77:0d:f6:be:fc:b2:36:43: 3c:11:86:a7:63:ee:33:ae:e5:ca:e3:1d:cd:aa:90: ed:cc:99:3e:c0:6c:b8:e9:e0:5e:53:ec:d5:61:1d: 3e:a6:bb:e2:93:fc:9f:be:a5:01:13:12:66:bc:1f: b6:82:df:81:cd:b8:1a:34:af:b7:5b:0f:b0:7c:88: 7d:13:f5:e1:c2:4a:ba:ac:da:15:48:a0:83:f7:92: 61:36:c5:bf:b1:1a:87:51:14:5e:66:a4:3f:29:fe: d1:a9:c5:5c:e3:8d:da:73:46:e6:2d:c4:bf:f3:87: c6:da:2a:a5:5c:b2:88:4e:03:82:5e:5f:80:60:73: e8:37:a1:5f:a3:6f:21:0a:7c:48:5b:ac:16:af:18: 94:1c:53:d0:b3:92:6c:28:9d:14:9b:bd:17:26:eb: e0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:48:44:AB:49:30:D4:D4:2F:3F:65:F2:8D:BD:F5:E3:4B:35:55:57 X509v3 Authority Key Identifier: keyid:42:72:D3:49:E0:4B:3A:5D:02:56:1E:E1:92:95:E0:FD:26:B3:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5a:e5:fd:40:da:ac:03:68:33:76:c9:8a:66:a4:72:5d:1f: f5:4e:52:36:56:16:37:c8:a5:01:5f:6d:0b:28:66:75:2a:91: 7b:ab:84:12:85:14:05:74:5d:b3:49:88:d1:b0:8e:a1:96:77: 7d:b9:87:d6:3d:2a:ad:3a:fa:9b:d6:ad:d1:f2:91:93:f3:10: 92:64:db:38:5d:88:53:97:ee:fc:8c:50:4c:36:01:b8:fd:68: 41:95:27:b0:5d:9b:b3:fd:04:35:f4:ed:1b:eb:dc:3b:76:e0: f0:66:4c:ec:80:a0:57:b5:08:cb:e8:87:20:dd:7b:93:9b:74: 4d:fc:2d:03:c2:4c:6a:21:18:0b:36:ce:fe:ab:ea:63:8c:c7: 55:91:b5:9c:21:82:63:b2:43:3d:d2:dd:ec:39:c1:38:39:47: b2:3f:b7:38:12:56:f5:da:96:72:e1:bd:7d:5b:7b:39:01:80: 6c:10:cd:5a:4f:d8:37:26:45:1e:f3:ea:4e:32:75:c8:2b:23: a7:c8:50:d7:7d:d5:de:d0:06:f6:1c:1f:6e:7c:df:b7:10:f9: 7a:f9:25:f5:c4:05:d3:e8:44:c4:01:4b:d5:c6:73:e7:b1:8a: c4:b5:2f:55:ec:fe:af:ed:10:7b:1c:7b:c2:da:ff:16:b9:7f: 83:cf:d3:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA2jKx+XP2IH4mveeW+jyRDQ3qG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI3MkQzNDlFMDRCM0E1RDAyNTYxRUUxOTI5NUUwRkQy NkIzN0NCRTAeFw0yNjA3MjAxNTU2MThaFw0yNjA3MjExODQ5MThaMDMxMTAvBgNV BAMTKDNBNDg0NEFCNDkzMEQ0RDQyRjNGNjVGMjhEQkRGNUUzNEIzNTU1NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI8Y0BI9hX26oZTMAJKSOaN84o Fpb8ZRY3e5+wQgNDtiM0+sTJM/008Y3rB5UDG93yxrl3+nopnHtyB4g+JyNFIasW JJyCjXKgL4QFF6Xd6CIuj0tzG1oJcui++AHFf+F3Dfa+/LI2QzwRhqdj7jOu5crj Hc2qkO3MmT7AbLjp4F5T7NVhHT6mu+KT/J++pQETEma8H7aC34HNuBo0r7dbD7B8 iH0T9eHCSrqs2hVIoIP3kmE2xb+xGodRFF5mpD8p/tGpxVzjjdpzRuYtxL/zh8ba KqVcsohOA4JeX4Bgc+g3oV+jbyEKfEhbrBavGJQcU9CzkmwonRSbvRcm6+DbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOkhEq0kw1NQvP2Xyjb3140s1VVcwHwYDVR0j BBgwFoAUQnLTSeBLOl0CVh7hkpXg/SazfL4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTY3NTBiZjktOWY1OC00MjhhLTg5NTItOGI1NTU1ZWY3Y2E3LzAvNDI3MkQzNDlF MDRCM0E1RDAyNTYxRUUxOTI5NUUwRkQyNkIzN0NCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MjcyRDM0OUUwNEIzQTVEMDI1NjFFRTE5Mjk1RTBGRDI2QjM3 Q0JFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTY3NTBiZjktOWY1OC00MjhhLTg5 NTItOGI1NTU1ZWY3Y2E3LzAvNDI3MkQzNDlFMDRCM0E1RDAyNTYxRUUxOTI5NUUw RkQyNkIzN0NCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9a5f1A2qwDaDN2yYpmpHJdH/VOUjZWFjfI pQFfbQsoZnUqkXurhBKFFAV0XbNJiNGwjqGWd325h9Y9Kq06+pvWrdHykZPzEJJk 2zhdiFOX7vyMUEw2Abj9aEGVJ7Bdm7P9BDX07Rvr3Dt24PBmTOyAoFe1CMvohyDd e5ObdE38LQPCTGohGAs2zv6r6mOMx1WRtZwhgmOyQz3S3ew5wTg5R7I/tzgSVvXa lnLhvX1bezkBgGwQzVpP2DcmRR7z6k4ydcgrI6fIUNd91d7QBvYcH25837cQ+Xr5 JfXEBdPoRMQBS9XGc+exisS1L1Xs/q/tEHsce8La/xa5f4PP01Y= -----END CERTIFICATE-----Generated at Tue Jul 21 07:00:33 2026 by rpki-client