$ rpki-client -vvf rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft File: 4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft (raw, json) Hash identifier: 1jLpMHdvDTq28yd25nL0jz7d7u+JtdsuD5NtI91y82g= Subject key identifier: FD:6E:46:C9:A3:DD:AD:E6:9D:57:EB:5D:36:71:5E:C3:43:61:78:06 Authority key identifier: 4F:57:E7:C6:47:ED:C2:A7:F8:8D:A2:E0:ED:27:18:37:05:D1:BE:A8 Certificate issuer: /CN=4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8 Certificate serial: 395E5EBEB73E5174533B721AE5D6D5D0D452DDB0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 01:53:04 +0000 Manifest this update: Tue 21 Jul 2026 01:48:04 +0000 Manifest next update: Wed 22 Jul 2026 04:24:04 +0000 Files and hashes: 1: 3130332e3137382e39302e302f32332d3233203d3e20313430343034.roa (hash: ZkcJ9wfmIKEugmJByxtJwR7ao5xiPesfYT/0HhMfeP0=) 2: 4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.crl (hash: fdA/nV7KjL7aHRygdmfiblhO4PiPZ8PzQ/krGE/C3CQ=) 3: 3130332e3137382e39312e302f32342d3234203d3e20313430343034.roa (hash: 6Uutpwq/rWWifiMD0z9UYdw7tMZltuDb9h43wNM8zNc=) 4: 3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa (hash: RvtUSv5wWi3n8E8bv7TL5og1sIQ+mOz0JnsESGUYn90=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.crl rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5e:5e:be:b7:3e:51:74:53:3b:72:1a:e5:d6:d5:d0:d4:52:dd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8 Validity Not Before: Jul 21 01:48:04 2026 GMT Not After : Jul 22 04:24:04 2026 GMT Subject: CN=FD6E46C9A3DDADE69D57EB5D36715EC343617806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:42:26:2d:6d:4f:1b:52:55:b8:90:49:a3:3d: c0:6b:7f:9d:24:bb:7a:57:8e:fe:45:ef:49:a3:b9: 95:d2:16:d4:25:bf:15:cf:1b:f5:71:72:d8:08:d3: 6d:73:4c:62:e1:a2:f5:e9:29:9b:33:57:8d:70:0e: 03:d7:69:b4:95:f6:53:a3:fa:b6:d1:8b:8c:d5:c7: 2b:ca:26:72:16:89:33:36:2d:9f:5a:79:57:2c:91: 2f:7f:cd:4c:35:0d:58:f4:18:79:90:69:86:30:e8: a1:66:5b:cd:f3:cd:8c:2f:15:32:58:7d:cc:08:67: f8:2b:84:fc:d8:b2:62:f2:83:fb:94:1d:4c:e3:db: 63:ac:3a:bd:34:40:56:3f:f7:b6:fa:cb:a3:97:7c: 83:59:de:b9:ac:c9:d4:ea:1a:95:81:9e:8b:20:53: 8b:ad:fe:bb:e7:a8:6c:21:7f:65:15:fe:bd:6f:45: 6a:01:30:5a:da:b1:01:a3:ea:f7:73:dc:df:73:e8: 90:8f:d1:9a:fd:d8:05:36:61:12:31:5d:18:9c:50: de:9b:64:87:a6:8b:a4:14:bf:ed:66:f2:bd:20:06: 1a:1f:db:0b:6f:9e:61:b3:0a:0c:6d:ed:46:12:87: 32:0c:4f:10:41:85:73:96:ef:cf:82:fb:8d:17:27: b1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6E:46:C9:A3:DD:AD:E6:9D:57:EB:5D:36:71:5E:C3:43:61:78:06 X509v3 Authority Key Identifier: keyid:4F:57:E7:C6:47:ED:C2:A7:F8:8D:A2:E0:ED:27:18:37:05:D1:BE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:cb:15:6f:cb:d4:95:95:c5:23:a2:db:64:d9:72:1c:7f:99: 41:fb:36:6c:11:df:e0:20:72:01:9e:73:f8:43:9c:aa:c1:b4: 74:28:2f:95:f6:23:1a:79:4a:a0:c4:46:26:63:5f:d5:1e:98: c4:f9:bc:20:91:28:82:0b:d5:ca:2a:0c:de:53:11:7c:0c:bb: 67:3a:96:a0:02:03:80:8b:33:08:b4:b0:6b:87:cc:c3:26:cd: b0:76:ad:11:27:cd:2b:7c:97:67:4b:6b:b2:c3:cd:2c:f6:b7: 48:00:0c:83:a0:95:ca:96:a4:79:44:43:26:37:c6:f8:62:a6: 7f:9f:58:1e:78:c4:e7:26:4e:fa:ac:7e:8f:8e:35:e2:06:d8: 34:be:53:21:36:ed:b7:c8:44:dc:b6:4e:88:8e:e6:02:13:cc: af:b2:86:c3:2c:91:49:47:9a:00:9e:66:70:59:9e:e4:77:b6: 26:19:50:ff:a6:6d:64:2c:56:b4:13:cb:05:34:3b:1c:ac:95: 25:5c:0a:71:78:66:e2:84:55:ad:0d:6f:c3:c2:4f:d9:a0:6d: 99:17:c2:21:63:be:4d:f6:c5:dc:10:6b:c5:5e:db:93:e0:b3: 29:44:8f:27:12:fe:7b:ad:5f:40:36:b2:44:1f:d8:7c:30:24: 4e:2c:48:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOV5evrc+UXRTO3Ia5dbV0NRS3bAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY1N0U3QzY0N0VEQzJBN0Y4OERBMkUwRUQyNzE4Mzcw NUQxQkVBODAeFw0yNjA3MjEwMTQ4MDRaFw0yNjA3MjIwNDI0MDRaMDMxMTAvBgNV BAMTKEZENkU0NkM5QTNEREFERTY5RDU3RUI1RDM2NzE1RUMzNDM2MTc4MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbQiYtbU8bUlW4kEmjPcBrf50k u3pXjv5F70mjuZXSFtQlvxXPG/VxctgI021zTGLhovXpKZszV41wDgPXabSV9lOj +rbRi4zVxyvKJnIWiTM2LZ9aeVcskS9/zUw1DVj0GHmQaYYw6KFmW83zzYwvFTJY fcwIZ/grhPzYsmLyg/uUHUzj22OsOr00QFY/97b6y6OXfINZ3rmsydTqGpWBnosg U4ut/rvnqGwhf2UV/r1vRWoBMFrasQGj6vdz3N9z6JCP0Zr92AU2YRIxXRicUN6b ZIemi6QUv+1m8r0gBhof2wtvnmGzCgxt7UYShzIMTxBBhXOW78+C+40XJ7FZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/W5GyaPdreadV+tdNnFew0NheAYwHwYDVR0j BBgwFoAUT1fnxkftwqf4jaLg7ScYNwXRvqgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzEzNzM5ZTEtYjVkYi00NzM0LTgzOGEtYjBiNTgwYmViOWYzLzAvNEY1N0U3QzY0 N0VEQzJBN0Y4OERBMkUwRUQyNzE4MzcwNUQxQkVBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RjU3RTdDNjQ3RURDMkE3Rjg4REEyRTBFRDI3MTgzNzA1RDFC RUE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzEzNzM5ZTEtYjVkYi00NzM0LTgz OGEtYjBiNTgwYmViOWYzLzAvNEY1N0U3QzY0N0VEQzJBN0Y4OERBMkUwRUQyNzE4 MzcwNUQxQkVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3LFW/L1JWVxSOi22TZchx/mUH7NmwR3+Ag cgGec/hDnKrBtHQoL5X2Ixp5SqDERiZjX9UemMT5vCCRKIIL1coqDN5TEXwMu2c6 lqACA4CLMwi0sGuHzMMmzbB2rREnzSt8l2dLa7LDzSz2t0gADIOglcqWpHlEQyY3 xvhipn+fWB54xOcmTvqsfo+ONeIG2DS+UyE27bfIRNy2ToiO5gITzK+yhsMskUlH mgCeZnBZnuR3tiYZUP+mbWQsVrQTywU0OxyslSVcCnF4ZuKEVa0Nb8PCT9mgbZkX wiFjvk32xdwQa8Ve25PgsylEjycS/nutX0A2skQf2HwwJE4sSKA= -----END CERTIFICATE-----Generated at Tue Jul 21 07:06:33 2026 by rpki-client