$ rpki-client -vvf rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft File: 4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft (raw, json) Hash identifier: hrpWlW/Q7QZh4opkNKJ7egFr5/d9rIoFk6iv4zkWMGU= Subject key identifier: 0F:E6:45:24:BE:39:B2:EA:3C:B4:C5:41:9A:48:8F:AD:6F:D0:30:56 Authority key identifier: 4E:B1:60:AE:98:58:8B:60:D5:AE:42:91:EF:D8:D1:D4:E4:1D:EA:0C Certificate issuer: /CN=4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C Certificate serial: 38BE6786A02A372FCC2DE5224B7F979AEFD7E81F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 19:25:23 +0000 Manifest this update: Mon 20 Jul 2026 19:20:23 +0000 Manifest next update: Tue 21 Jul 2026 19:57:23 +0000 Files and hashes: 1: 3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (hash: UTTE4RHMUx5iXqdVFLmPyr84/+QQI3n2et5AtGkuCdU=) 2: 4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.crl (hash: aMwa/DUS63sJQh6mg5ZR1SffmMLcfGPQ68bmVrhCc4U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.crl rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:be:67:86:a0:2a:37:2f:cc:2d:e5:22:4b:7f:97:9a:ef:d7:e8:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C Validity Not Before: Jul 20 19:20:23 2026 GMT Not After : Jul 21 19:57:23 2026 GMT Subject: CN=0FE64524BE39B2EA3CB4C5419A488FAD6FD03056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fc:f9:d0:8a:75:24:46:fb:5d:f1:de:90:d2: 87:37:58:a6:24:d8:4a:83:25:83:f8:46:8a:ca:54: c8:d1:ec:3d:d0:c0:7b:42:5f:20:3f:8f:5e:24:92: 44:40:f5:e9:ee:b6:ab:c0:de:70:20:0b:f8:6d:be: 69:ae:e9:69:be:2d:71:e1:3b:c0:0d:7f:3a:30:30: c5:31:4c:78:59:f4:f5:6b:ab:24:f0:6d:bf:c3:1c: 31:db:38:03:24:8b:f7:77:27:66:8c:6a:3b:98:ba: 23:06:06:b9:e0:96:9f:d8:3b:5f:c7:9f:87:90:66: 74:cc:5a:cc:88:56:23:27:ff:1d:fc:6b:b9:ba:4d: 97:f7:a8:75:48:aa:36:f9:45:b8:a9:3e:e0:86:b0: d1:c0:0c:d6:d4:46:8f:bb:21:f4:a3:df:15:b4:ef: 36:68:35:6f:b9:17:a4:14:08:7d:64:86:d6:e0:23: a8:e2:40:17:dc:3d:bb:c8:0b:2b:ec:c2:61:46:d8: 75:9f:98:c0:8f:ad:b0:11:8c:30:29:64:a0:d2:62: 9a:97:64:b4:1b:9b:82:00:cf:e8:74:2a:3c:3a:22: 5b:ea:9d:d9:2e:15:78:9c:b6:8b:d2:75:b7:92:06: d3:b8:17:2f:d6:59:78:c4:0d:2c:9d:63:c6:8f:f0: d7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E6:45:24:BE:39:B2:EA:3C:B4:C5:41:9A:48:8F:AD:6F:D0:30:56 X509v3 Authority Key Identifier: keyid:4E:B1:60:AE:98:58:8B:60:D5:AE:42:91:EF:D8:D1:D4:E4:1D:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:29:b2:e0:0e:dc:26:15:36:ab:d9:bf:cd:39:43:43:ea:2d: c5:89:6d:b5:e5:eb:df:d8:c2:9f:d9:06:ac:1f:7e:ca:c0:04: 6a:ee:97:38:53:f9:81:2c:1d:5b:44:b7:11:73:69:49:f4:39: e3:b1:51:79:10:40:57:32:ab:8b:10:c9:de:88:ca:50:07:0e: e6:dc:88:6b:e9:c2:07:e3:44:29:54:9e:2f:3e:30:3b:1f:5e: 24:c5:fc:a1:d1:3c:60:c4:18:85:28:fd:2d:cd:13:f0:c1:c4: 0e:f2:50:72:94:b3:5f:f2:2d:45:4d:0b:0f:f1:01:15:ac:b8: 6d:14:bb:be:36:13:a7:95:d2:76:6e:f4:1e:2e:8c:bc:3c:33: 38:e0:09:72:28:31:8a:e4:30:61:38:38:15:46:3b:72:ba:19: f8:ad:5c:56:75:7d:80:06:32:36:eb:a0:a7:6f:1a:6f:53:b2: c8:2c:40:b2:19:69:f8:21:4f:ee:a5:85:d2:25:1a:0b:3b:1a: 0b:16:c4:82:6e:b7:c6:87:28:20:bb:88:ea:ef:f6:45:c1:d7: 5c:90:55:16:c9:20:3f:b2:f1:1c:11:62:1a:dc:95:58:56:b1: 34:60:9c:37:28:71:15:d3:de:e3:14:09:41:70:28:2c:87:0b: 68:be:99:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOL5nhqAqNy/MLeUiS3+Xmu/X6B8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVCMTYwQUU5ODU4OEI2MEQ1QUU0MjkxRUZEOEQxRDRF NDFERUEwQzAeFw0yNjA3MjAxOTIwMjNaFw0yNjA3MjExOTU3MjNaMDMxMTAvBgNV BAMTKDBGRTY0NTI0QkUzOUIyRUEzQ0I0QzU0MTlBNDg4RkFENkZEMDMwNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf/PnQinUkRvtd8d6Q0oc3WKYk 2EqDJYP4RorKVMjR7D3QwHtCXyA/j14kkkRA9enutqvA3nAgC/htvmmu6Wm+LXHh O8ANfzowMMUxTHhZ9PVrqyTwbb/DHDHbOAMki/d3J2aMajuYuiMGBrnglp/YO1/H n4eQZnTMWsyIViMn/x38a7m6TZf3qHVIqjb5RbipPuCGsNHADNbURo+7IfSj3xW0 7zZoNW+5F6QUCH1khtbgI6jiQBfcPbvICyvswmFG2HWfmMCPrbARjDApZKDSYpqX ZLQbm4IAz+h0Kjw6IlvqndkuFXictovSdbeSBtO4Fy/WWXjEDSydY8aP8NdzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD+ZFJL45suo8tMVBmkiPrW/QMFYwHwYDVR0j BBgwFoAUTrFgrphYi2DVrkKR79jR1OQd6gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM1MGYwNzgtYzUzNS00ZjhlLTk2MGYtMzJjMTYyM2FhNGIxLzAvNEVCMTYwQUU5 ODU4OEI2MEQ1QUU0MjkxRUZEOEQxRDRFNDFERUEwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RUIxNjBBRTk4NTg4QjYwRDVBRTQyOTFFRkQ4RDFENEU0MURF QTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM1MGYwNzgtYzUzNS00ZjhlLTk2 MGYtMzJjMTYyM2FhNGIxLzAvNEVCMTYwQUU5ODU4OEI2MEQ1QUU0MjkxRUZEOEQx RDRFNDFERUEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgpsuAO3CYVNqvZv805Q0PqLcWJbbXl69/Y wp/ZBqwffsrABGrulzhT+YEsHVtEtxFzaUn0OeOxUXkQQFcyq4sQyd6IylAHDubc iGvpwgfjRClUni8+MDsfXiTF/KHRPGDEGIUo/S3NE/DBxA7yUHKUs1/yLUVNCw/x ARWsuG0Uu742E6eV0nZu9B4ujLw8MzjgCXIoMYrkMGE4OBVGO3K6GfitXFZ1fYAG MjbroKdvGm9TssgsQLIZafghT+6lhdIlGgs7GgsWxIJut8aHKCC7iOrv9kXB11yQ VRbJID+y8RwRYhrclVhWsTRgnDcocRXT3uMUCUFwKCyHC2i+mbI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:37:44 2026 by rpki-client