$ rpki-client -vvf rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft File: 4958ACA345C7658A0DAF8E986F7577A772837161.mft (raw, json) Hash identifier: HZseJ5HjPzXfo/i++BfkDKDgCwm+Z4GG8E6T0Yzz6Sw= Subject key identifier: 8B:5B:EF:2F:58:64:E8:35:E1:71:95:0C:E4:39:AC:27:04:B5:EB:2A Authority key identifier: 49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61 Certificate issuer: /CN=4958ACA345C7658A0DAF8E986F7577A772837161 Certificate serial: 742C62DDE2EA1F5E5330820581A8A14CCCDAED87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 00:26:27 +0000 Manifest this update: Tue 21 Jul 2026 00:21:27 +0000 Manifest next update: Wed 22 Jul 2026 02:15:27 +0000 Files and hashes: 1: 4958ACA345C7658A0DAF8E986F7577A772837161.crl (hash: oQp60+2fhszxxGleAXC1XgaW4IuqXhiQH+uA2nK8A+o=) 2: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (hash: HGbCMrvkn9HLdb/84AEUgwBryTJVzNaclVbYnTuUOj0=) 3: 3130332e3137392e36342e302f32342d3234203d3e20313439333335.roa (hash: ERSYk3hZf9PVzWt1WH0Bk7NUbuFdmrm4ZK2jNR3DM5g=) 4: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (hash: KtDrnG9lvgnRMSX5R+jeLWfcRpbu+ptwzkE+z8AdY3o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:2c:62:dd:e2:ea:1f:5e:53:30:82:05:81:a8:a1:4c:cc:da:ed:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4958ACA345C7658A0DAF8E986F7577A772837161 Validity Not Before: Jul 21 00:21:27 2026 GMT Not After : Jul 22 02:15:27 2026 GMT Subject: CN=8B5BEF2F5864E835E171950CE439AC2704B5EB2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ed:1e:21:1d:e5:da:11:8f:8c:af:63:eb:9e: ee:67:ab:fe:ab:17:f8:a2:6c:78:a0:9a:0c:74:d7: 30:1f:5c:cc:ac:0c:a8:64:5f:ca:c9:b2:14:91:a0: da:ca:54:3e:56:f1:f8:7b:57:20:7d:cf:c5:4b:17: e5:39:25:a5:d3:7d:1c:11:eb:b1:2d:71:cd:3c:6c: a6:76:b2:38:44:8e:b0:03:ff:01:8e:7d:47:71:b7: 14:fa:57:c3:19:1d:db:f4:0c:98:01:be:32:58:c1: da:9b:30:80:69:24:af:a3:70:55:b4:ec:2b:64:5b: fb:bb:76:fa:e7:ae:79:22:fc:40:bc:b8:ce:84:41: e8:ae:8c:16:19:5e:1d:5b:1e:13:58:7d:fa:81:f5: 8f:34:c9:86:5b:81:97:d5:c9:da:06:02:19:85:d1: 99:3b:0e:5b:7b:b3:ab:d6:02:a6:81:68:96:72:75: ad:b2:01:5f:db:6e:d8:e4:1b:49:49:fc:8b:49:03: bf:93:4f:d5:ce:df:cd:fe:4b:81:ae:31:73:36:b2: 88:ec:f6:ea:75:fa:e8:f8:81:54:27:9b:05:77:11: 7e:32:fd:bc:86:5a:f0:a3:ea:64:ca:f1:b9:69:76: 35:f6:14:98:47:cf:e4:ed:90:d5:c3:f9:de:96:f9: 6a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5B:EF:2F:58:64:E8:35:E1:71:95:0C:E4:39:AC:27:04:B5:EB:2A X509v3 Authority Key Identifier: keyid:49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c0:42:13:0f:45:a2:a1:78:1a:b3:19:6d:89:f5:58:f8:47: ac:43:06:1e:a1:41:81:8f:c3:72:5d:74:63:a4:40:d8:fe:9e: e2:38:50:e7:41:b9:00:33:34:cb:bc:46:02:e1:2a:77:aa:f7: c6:8f:84:12:69:3b:e9:23:30:15:40:a0:94:4f:99:dc:20:25: 00:0b:bf:5d:e2:9a:28:3b:fc:b8:f0:bb:05:a9:6f:d5:39:26: bc:17:c6:60:8c:d5:1a:fc:b7:fb:d9:32:fc:4e:0b:70:66:5f: f8:18:0b:d3:8f:4c:6a:e3:08:69:ba:81:53:3b:82:6d:6e:8b: f6:fa:b7:3d:73:33:83:f9:38:59:12:93:55:07:d1:ec:01:e7: b0:c4:9f:81:b8:05:6f:dd:93:db:88:06:31:0c:bd:2d:c5:db: 03:fd:66:b6:aa:5b:a3:1a:cb:21:76:69:a3:55:78:9d:1d:30: b6:82:c0:9c:00:85:18:a5:5b:8f:a2:62:c2:18:22:f6:ab:2f: 82:d2:d8:ed:a7:78:4e:cc:36:0e:64:36:c5:67:7d:24:41:eb: 6f:cd:a0:bc:54:93:bd:39:07:13:12:e2:63:80:53:72:61:db: 3f:26:6d:3f:7f:3e:15:ea:90:3a:3b:f0:5c:01:f1:e2:1d:16: 7d:f5:89:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdCxi3eLqH15TMIIFgaihTMza7YcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1OEFDQTM0NUM3NjU4QTBEQUY4RTk4NkY3NTc3QTc3 MjgzNzE2MTAeFw0yNjA3MjEwMDIxMjdaFw0yNjA3MjIwMjE1MjdaMDMxMTAvBgNV BAMTKDhCNUJFRjJGNTg2NEU4MzVFMTcxOTUwQ0U0MzlBQzI3MDRCNUVCMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI7R4hHeXaEY+Mr2Prnu5nq/6r F/iibHigmgx01zAfXMysDKhkX8rJshSRoNrKVD5W8fh7VyB9z8VLF+U5JaXTfRwR 67Etcc08bKZ2sjhEjrAD/wGOfUdxtxT6V8MZHdv0DJgBvjJYwdqbMIBpJK+jcFW0 7CtkW/u7dvrnrnki/EC8uM6EQeiujBYZXh1bHhNYffqB9Y80yYZbgZfVydoGAhmF 0Zk7Dlt7s6vWAqaBaJZyda2yAV/bbtjkG0lJ/ItJA7+TT9XO383+S4GuMXM2sojs 9up1+uj4gVQnmwV3EX4y/byGWvCj6mTK8blpdjX2FJhHz+TtkNXD+d6W+WpZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi1vvL1hk6DXhcZUM5DmsJwS16yowHwYDVR0j BBgwFoAUSViso0XHZYoNr46Yb3V3p3KDcWEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc3ZGUwMTMtOWI1Ni00OWZmLThiNzktMzY2N2EzNDVjYjhkLzAvNDk1OEFDQTM0 NUM3NjU4QTBEQUY4RTk4NkY3NTc3QTc3MjgzNzE2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTU4QUNBMzQ1Qzc2NThBMERBRjhFOTg2Rjc1NzdBNzcyODM3 MTYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc3ZGUwMTMtOWI1Ni00OWZmLThi NzktMzY2N2EzNDVjYjhkLzAvNDk1OEFDQTM0NUM3NjU4QTBEQUY4RTk4NkY3NTc3 QTc3MjgzNzE2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3AQhMPRaKheBqzGW2J9Vj4R6xDBh6hQYGP w3JddGOkQNj+nuI4UOdBuQAzNMu8RgLhKneq98aPhBJpO+kjMBVAoJRPmdwgJQAL v13imig7/LjwuwWpb9U5JrwXxmCM1Rr8t/vZMvxOC3BmX/gYC9OPTGrjCGm6gVM7 gm1ui/b6tz1zM4P5OFkSk1UH0ewB57DEn4G4BW/dk9uIBjEMvS3F2wP9ZraqW6Ma yyF2aaNVeJ0dMLaCwJwAhRilW4+iYsIYIvarL4LS2O2neE7MNg5kNsVnfSRB62/N oLxUk705BxMS4mOAU3Jh2z8mbT9/PhXqkDo78FwB8eIdFn31ibQ= -----END CERTIFICATE-----Generated at Tue Jul 21 06:46:31 2026 by rpki-client