$ rpki-client -vvf rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft File: 4DC2282186B6221A7A52575CE005F2B42354E4A6.mft (raw, json) Hash identifier: 7BP2KSAP4rY7kaUwd+N6k4V31tSNWAlv8dYWyeZZLxk= Subject key identifier: EB:8C:F0:8C:20:31:45:3F:BF:93:C0:86:AA:6A:22:3F:5C:E1:9D:FC Authority key identifier: 4D:C2:28:21:86:B6:22:1A:7A:52:57:5C:E0:05:F2:B4:23:54:E4:A6 Certificate issuer: /CN=4DC2282186B6221A7A52575CE005F2B42354E4A6 Certificate serial: 5DC61F5B7AE2B7E59DE980EFDBF4395E726A3D50 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 13:38:18 +0000 Manifest this update: Mon 20 Jul 2026 13:33:18 +0000 Manifest next update: Tue 21 Jul 2026 13:53:18 +0000 Files and hashes: 1: 4DC2282186B6221A7A52575CE005F2B42354E4A6.crl (hash: 44P/SSVvH2UxkLMH5qlXpHgEu7AqdebMBIdnGWaULKA=) 2: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: Z0k2HMfcMKksaFrziJOtsyyQXBDq/OhSupVq38YlMrI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.crl rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 13:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c6:1f:5b:7a:e2:b7:e5:9d:e9:80:ef:db:f4:39:5e:72:6a:3d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC2282186B6221A7A52575CE005F2B42354E4A6 Validity Not Before: Jul 20 13:33:18 2026 GMT Not After : Jul 21 13:53:18 2026 GMT Subject: CN=EB8CF08C2031453FBF93C086AA6A223F5CE19DFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:a0:4f:64:36:c1:6b:e8:ac:d8:dd:00:a0: 1a:59:2c:7c:dd:58:15:a2:4e:31:71:2b:b5:d7:34: bd:b5:ab:f9:5a:9a:0c:54:72:ef:39:a8:d5:62:97: 89:68:ff:e4:59:cb:4e:cc:c2:71:81:6f:75:0c:f5: 2f:70:9c:2b:75:e6:63:27:48:14:57:44:bf:02:56: 6b:97:d7:0c:2d:23:82:55:9e:10:4a:83:c2:a5:c7: 3a:70:48:d8:61:da:ea:5e:c9:26:cd:c9:69:ed:b6: 67:59:9c:2b:5d:9f:d1:28:75:5b:7b:ee:82:de:07: 14:2c:84:1a:46:45:9b:43:7b:02:50:50:f1:76:2f: 8d:d7:97:56:0a:12:54:37:66:4b:0b:ee:57:58:51: 13:a8:17:da:2e:ba:ba:f5:f0:2d:e0:ee:84:f0:43: 88:3c:04:78:9f:fd:6c:a7:f6:ce:fa:e6:87:75:b5: 1f:09:7a:ad:c3:04:61:e8:b3:e1:de:a8:ac:77:fb: 8d:a1:f5:76:63:4d:9f:cd:d9:65:d9:9b:e4:eb:5e: 3d:64:91:c1:b5:d0:27:f5:1e:c6:2a:36:9b:c0:47: d0:dd:ea:3f:c5:c8:51:25:ba:37:74:9a:06:24:ce: c7:62:e1:fd:d6:ae:ff:bb:49:54:f1:3d:cb:65:eb: 01:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8C:F0:8C:20:31:45:3F:BF:93:C0:86:AA:6A:22:3F:5C:E1:9D:FC X509v3 Authority Key Identifier: keyid:4D:C2:28:21:86:B6:22:1A:7A:52:57:5C:E0:05:F2:B4:23:54:E4:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:56:38:4b:65:62:5c:d6:36:53:6f:f1:1a:38:82:6a:48:d8: cf:6a:dc:30:81:1d:6e:fb:dc:86:d9:34:79:f9:f7:80:2d:6b: f8:b4:7b:cc:b2:4f:fa:10:52:a9:f0:68:c7:e9:8c:43:f3:89: 2d:b3:07:07:ca:fd:bf:b3:49:86:93:eb:71:e3:8f:86:62:03: 81:d6:19:47:9a:30:7b:7e:d7:35:94:ec:8f:ec:91:40:ea:bc: c4:51:b8:51:2d:2f:cd:0c:11:c0:81:f3:47:81:de:3e:e7:ca: e6:a2:e4:67:5a:d1:46:d5:7a:c3:81:e9:90:57:b9:bb:3d:d5: 0a:db:c1:8f:5b:28:75:d3:ac:ec:8c:09:ed:de:1f:98:89:97: 7f:e1:dc:e2:2f:60:90:94:43:eb:08:93:23:42:e5:10:63:48: 2e:35:cd:91:dc:64:9d:72:11:82:10:da:77:ff:bc:a5:09:11: 1d:25:55:2f:3e:f9:a4:82:e1:2f:f8:21:be:1b:1b:99:0e:4c: 94:33:24:42:e9:69:99:0c:d1:53:5a:4e:57:f3:6a:65:d3:54: 3f:ef:75:76:bb:df:34:63:88:ba:95:e9:5a:e3:a5:65:d3:f3: af:dd:0e:b2:df:4b:52:ea:fc:dd:43:99:77:be:f0:eb:79:85: 8d:6f:6a:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXcYfW3rit+Wd6YDv2/Q5XnJqPVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDMjI4MjE4NkI2MjIxQTdBNTI1NzVDRTAwNUYyQjQy MzU0RTRBNjAeFw0yNjA3MjAxMzMzMThaFw0yNjA3MjExMzUzMThaMDMxMTAvBgNV BAMTKEVCOENGMDhDMjAzMTQ1M0ZCRjkzQzA4NkFBNkEyMjNGNUNFMTlERkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCueqBPZDbBa+is2N0AoBpZLHzd WBWiTjFxK7XXNL21q/lamgxUcu85qNVil4lo/+RZy07MwnGBb3UM9S9wnCt15mMn SBRXRL8CVmuX1wwtI4JVnhBKg8KlxzpwSNhh2upeySbNyWnttmdZnCtdn9EodVt7 7oLeBxQshBpGRZtDewJQUPF2L43Xl1YKElQ3ZksL7ldYUROoF9ouurr18C3g7oTw Q4g8BHif/Wyn9s765od1tR8Jeq3DBGHos+HeqKx3+42h9XZjTZ/N2WXZm+TrXj1k kcG10Cf1HsYqNpvAR9Dd6j/FyFElujd0mgYkzsdi4f3Wrv+7SVTxPctl6wFJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU64zwjCAxRT+/k8CGqmoiP1zhnfwwHwYDVR0j BBgwFoAUTcIoIYa2Ihp6Uldc4AXytCNU5KYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmUxMWU5OGYtZjU0ZS00NjBiLTg4ZjMtYmY5MWUwNDQzZTkwLzAvNERDMjI4MjE4 NkI2MjIxQTdBNTI1NzVDRTAwNUYyQjQyMzU0RTRBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REMyMjgyMTg2QjYyMjFBN0E1MjU3NUNFMDA1RjJCNDIzNTRF NEE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvNERDMjI4MjE4NkI2MjIxQTdBNTI1NzVDRTAwNUYy QjQyMzU0RTRBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZWOEtlYlzWNlNv8Ro4gmpI2M9q3DCBHW77 3IbZNHn594Ata/i0e8yyT/oQUqnwaMfpjEPziS2zBwfK/b+zSYaT63Hjj4ZiA4HW GUeaMHt+1zWU7I/skUDqvMRRuFEtL80MEcCB80eB3j7nyuai5Gda0UbVesOB6ZBX ubs91QrbwY9bKHXTrOyMCe3eH5iJl3/h3OIvYJCUQ+sIkyNC5RBjSC41zZHcZJ1y EYIQ2nf/vKUJER0lVS8++aSC4S/4Ib4bG5kOTJQzJELpaZkM0VNaTlfzamXTVD/v dXa73zRjiLqV6VrjpWXT86/dDrLfS1Lq/N1DmXe+8Ot5hY1var0= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:46 2026 by rpki-client