$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft File: 4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft (raw, json) Hash identifier: ieKfnUcn1HONK/RavhbMpjLFuUPJn9eHIv7hQnx+nYc= Subject key identifier: 4F:82:17:E9:F8:99:01:D5:3D:E0:E0:F8:E0:E2:2B:50:AC:97:AC:A5 Authority key identifier: 4F:C4:8D:D4:A0:4D:6F:39:93:1A:F1:E8:DE:E3:5A:BD:F9:C7:76:FA Certificate issuer: /CN=4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA Certificate serial: 5617654FD9E125E53E29AD112FED15EEAB7D1B73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 16:42:13 +0000 Manifest this update: Mon 20 Jul 2026 16:37:13 +0000 Manifest next update: Tue 21 Jul 2026 16:56:13 +0000 Files and hashes: 1: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (hash: Y5XB9rqhcbsV9IQfUbYmWZisnqag3EEZWqXjsPcCSU4=) 2: 4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl (hash: q4ZL9ixrJEvVLbyEdh66yDRMFAy7gorpENY42dNRlJo=) 3: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (hash: H/rwQ/f8aUBtc58OK4kWZL1DduHZ4X5rHCUaLkdQAjM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:17:65:4f:d9:e1:25:e5:3e:29:ad:11:2f:ed:15:ee:ab:7d:1b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA Validity Not Before: Jul 20 16:37:13 2026 GMT Not After : Jul 21 16:56:13 2026 GMT Subject: CN=4F8217E9F89901D53DE0E0F8E0E22B50AC97ACA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:04:03:ae:60:9d:c1:ea:ea:d3:75:6f:d8:f5: d8:9b:9f:11:1b:7f:bd:73:e7:c7:9c:5a:62:fd:f2: 48:c9:5b:d1:45:4b:68:ea:3c:35:05:5a:62:7c:2e: eb:c2:8e:e1:c1:3c:3c:5f:33:79:02:f9:24:3f:07: d1:9a:d4:42:75:fc:6f:f6:45:84:bd:35:0d:25:a0: 17:6a:86:f9:5b:b2:15:25:ec:ee:97:2b:ce:fc:84: 87:ca:4b:de:33:80:96:77:93:01:e4:8a:4d:b1:a5: 85:27:a3:33:8c:1e:89:fb:28:f7:58:c4:8a:87:11: e0:11:7e:3c:e9:62:3d:ea:ab:b8:d6:85:61:65:f8: 11:a6:cb:fa:db:1b:e7:ec:e0:7d:7d:eb:f2:e3:ed: 9e:89:e2:fb:d1:2b:0a:70:bd:5f:bf:e3:0c:6d:2f: 7d:f9:7f:ee:14:82:7f:cf:c2:8d:9a:14:3c:e2:ee: ff:6f:ea:1e:03:91:aa:33:c6:99:92:d5:4a:58:ed: 85:d9:2c:66:49:0b:14:60:84:48:75:ac:ef:72:d9: 60:86:be:4f:94:89:6f:41:44:b7:22:b7:74:dc:4c: 41:e5:9d:80:fa:94:6d:42:72:ca:09:e7:72:64:4c: cb:1e:07:92:ae:04:4f:e1:ba:95:dc:a7:4d:bc:10: 73:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:82:17:E9:F8:99:01:D5:3D:E0:E0:F8:E0:E2:2B:50:AC:97:AC:A5 X509v3 Authority Key Identifier: keyid:4F:C4:8D:D4:A0:4D:6F:39:93:1A:F1:E8:DE:E3:5A:BD:F9:C7:76:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:41:5a:fe:93:c4:fe:59:37:43:32:73:db:65:43:fd:96:29: e4:de:e2:23:a5:a5:5f:52:66:8d:21:6d:8a:dd:69:62:9e:68: af:6e:a2:6b:f6:de:05:40:37:51:1b:4d:e0:53:2a:be:ef:01: f1:e7:95:75:77:db:ee:dc:36:51:07:2a:18:2b:61:67:05:34: 78:46:97:04:03:a4:b6:f9:76:00:05:b7:d8:0e:67:19:29:4d: 87:eb:b1:d7:92:fc:ea:87:d5:52:cc:37:b0:9d:1b:7e:b4:d8: 25:85:e5:89:72:60:6c:30:53:fe:06:5f:08:3a:66:11:1f:47: 88:86:2e:4a:c0:9c:c3:5a:0b:1b:b0:a8:1a:57:dd:cf:b4:87: 30:6d:03:04:07:cc:76:9a:cf:e8:0e:a4:4b:8e:96:9f:a9:bd: 6e:26:6b:db:42:15:fd:cf:22:9b:2a:34:40:a9:a1:35:18:4a: 50:21:d5:7e:8f:37:69:0a:a5:e6:94:86:74:65:41:5d:d3:7d: c4:bd:b7:89:65:60:87:45:1f:c8:a0:94:59:cb:d2:e0:81:f3: 11:85:fc:ad:9e:07:c6:8f:ba:da:36:d8:d9:1f:ec:b4:65:26: d1:e0:ca:74:f0:5e:2b:98:c6:f2:31:dc:30:40:17:5c:17:e2: dc:14:df:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVhdlT9nhJeU+Ka0RL+0V7qt9G3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDNDhERDRBMDRENkYzOTkzMUFGMUU4REVFMzVBQkRG OUM3NzZGQTAeFw0yNjA3MjAxNjM3MTNaFw0yNjA3MjExNjU2MTNaMDMxMTAvBgNV BAMTKDRGODIxN0U5Rjg5OTAxRDUzREUwRTBGOEUwRTIyQjUwQUM5N0FDQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdBAOuYJ3B6urTdW/Y9dibnxEb f71z58ecWmL98kjJW9FFS2jqPDUFWmJ8LuvCjuHBPDxfM3kC+SQ/B9Ga1EJ1/G/2 RYS9NQ0loBdqhvlbshUl7O6XK878hIfKS94zgJZ3kwHkik2xpYUnozOMHon7KPdY xIqHEeARfjzpYj3qq7jWhWFl+BGmy/rbG+fs4H196/Lj7Z6J4vvRKwpwvV+/4wxt L335f+4Ugn/Pwo2aFDzi7v9v6h4DkaozxpmS1UpY7YXZLGZJCxRghEh1rO9y2WCG vk+UiW9BRLcit3TcTEHlnYD6lG1CcsoJ53JkTMseB5KuBE/hupXcp028EHO3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT4IX6fiZAdU94OD44OIrUKyXrKUwHwYDVR0j BBgwFoAUT8SN1KBNbzmTGvHo3uNavfnHdvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2IwMWM5NjctOTlkMC00YzIxLTk2NDItODdhZGE2NzE1NWM4LzAvNEZDNDhERDRB MDRENkYzOTkzMUFGMUU4REVFMzVBQkRGOUM3NzZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkM0OERENEEwNEQ2RjM5OTMxQUYxRThERUUzNUFCREY5Qzc3 NkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2IwMWM5NjctOTlkMC00YzIxLTk2 NDItODdhZGE2NzE1NWM4LzAvNEZDNDhERDRBMDRENkYzOTkzMUFGMUU4REVFMzVB QkRGOUM3NzZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlBWv6TxP5ZN0Myc9tlQ/2WKeTe4iOlpV9S Zo0hbYrdaWKeaK9uomv23gVAN1EbTeBTKr7vAfHnlXV32+7cNlEHKhgrYWcFNHhG lwQDpLb5dgAFt9gOZxkpTYfrsdeS/OqH1VLMN7CdG3602CWF5YlyYGwwU/4GXwg6 ZhEfR4iGLkrAnMNaCxuwqBpX3c+0hzBtAwQHzHaaz+gOpEuOlp+pvW4ma9tCFf3P IpsqNECpoTUYSlAh1X6PN2kKpeaUhnRlQV3TfcS9t4llYIdFH8iglFnL0uCB8xGF /K2eB8aPuto22Nkf7LRlJtHgynTwXiuYxvIx3DBAF1wX4twU34M= -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:30 2026 by rpki-client