$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft File: 4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft (raw, json) Hash identifier: x9Cop2cgQmQl/0x13G0NRq7Mpip4smCi5TWiBr8jgZM= Subject key identifier: 33:8F:74:AC:F4:DE:10:8B:3D:58:23:02:75:B3:8D:D1:DC:06:68:B5 Authority key identifier: 4C:83:95:0E:B9:8A:8B:1F:12:41:09:BD:E0:91:02:A2:EB:C2:8A:CC Certificate issuer: /CN=4C83950EB98A8B1F124109BDE09102A2EBC28ACC Certificate serial: 3B72DB2EC99104E35608B74EA6CD747F275E5A3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 02:03:15 +0000 Manifest this update: Tue 21 Jul 2026 01:58:15 +0000 Manifest next update: Wed 22 Jul 2026 04:13:15 +0000 Files and hashes: 1: 3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa (hash: 3oTd3qA7oalGsSJ103eTjg8luLc4IR3P9iD0vCHZrto=) 2: 3130332e3230362e3138362e302f32342d3234203d3e20313336313036.roa (hash: pLkBoj+4v20DRaLcdp6cqFNpj/dZk322J8DmIWECxxQ=) 3: 4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl (hash: fNzyCbbzlsT18hGxZiom9D8P/zJrgiJp6jo/Kq0+SsE=) 4: 3132332e3137362e3132322e302f32332d3234203d3e20313336313036.roa (hash: Fm5DIjTwEczH/woDzsRLyNQNU1aSAK7oH6OWe3cCsR0=) 5: 3132332e3137362e3132342e302f32322d3234203d3e20313336313036.roa (hash: L0MFIY3SqIZyxWL0GLOuM9CG7lSHx8DFxNDzapVGoYg=) 6: 323430303a643734303a3a2f33322d3438203d3e20313336313036.roa (hash: RIa7J3LAvz/WgKYY384LNu37wMI9xVMGk5ERckCbrdg=) 7: 3130332e38372e3138342e302f32322d3234203d3e20313336313036.roa (hash: cUNZmidOsIWQTz94E3YG+Xk0D06jdYQy+G4cYD1Jgrg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:72:db:2e:c9:91:04:e3:56:08:b7:4e:a6:cd:74:7f:27:5e:5a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C83950EB98A8B1F124109BDE09102A2EBC28ACC Validity Not Before: Jul 21 01:58:15 2026 GMT Not After : Jul 22 04:13:15 2026 GMT Subject: CN=338F74ACF4DE108B3D58230275B38DD1DC0668B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:38:f6:b8:50:fd:f5:bc:ca:02:d3:ea:b0:62: 0c:64:c6:88:e8:46:04:de:e6:51:68:94:46:3b:7f: c5:74:63:4a:89:cb:cf:a7:f3:f3:88:a1:f6:00:f8: 24:89:f1:bb:68:bc:e3:ce:6d:b5:cf:c3:e1:81:64: f6:fc:b5:3f:5b:c5:f7:6a:fb:ba:15:90:ec:da:b6: 15:f7:ce:d5:36:ea:cd:2e:27:a6:1d:df:da:a3:3d: 38:d5:dc:fd:1e:32:c9:50:58:9d:e7:99:d5:fb:fc: e8:02:1a:71:8a:81:6e:47:2e:d1:02:98:9d:c7:2e: b7:28:bf:19:5c:33:7f:21:8c:e3:ff:96:9d:81:e3: 65:31:76:cb:a5:f6:eb:b8:24:08:1b:fc:65:d7:9c: 16:65:7f:33:84:b8:0b:4a:90:09:93:a7:5c:a1:c7: 95:9e:47:88:ad:5c:ef:75:2a:fa:2d:53:03:3a:59: 48:2e:8b:60:02:53:56:5a:c1:6b:30:f7:c9:92:44: 1d:52:64:fb:b2:b0:45:5f:b9:ab:0c:52:d0:2f:70: 0e:63:f8:18:bb:e4:42:0f:7c:f0:18:9c:93:26:83: 73:72:68:be:e5:e6:7b:f9:48:22:0f:c0:3a:f4:e7: f8:06:14:93:ce:9f:cb:d3:fc:a2:b4:d3:87:d2:af: 42:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8F:74:AC:F4:DE:10:8B:3D:58:23:02:75:B3:8D:D1:DC:06:68:B5 X509v3 Authority Key Identifier: keyid:4C:83:95:0E:B9:8A:8B:1F:12:41:09:BD:E0:91:02:A2:EB:C2:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a5:5a:ff:3d:f5:c9:de:48:92:9b:af:f3:6d:1d:d4:05:59: fd:f5:9d:a9:00:4f:5e:89:95:ff:e1:2b:11:86:29:b1:b4:d2: 2f:52:ad:7c:7c:69:60:a8:01:34:91:0a:4c:55:86:6b:d3:85: a9:30:cb:43:8c:1c:7d:99:77:58:67:9a:d4:66:0a:4a:ea:1c: b2:bc:64:05:84:d2:f3:40:b1:ae:bb:10:c1:e4:85:71:c6:96: 6a:59:7f:89:68:73:26:f4:b4:5e:6f:22:f1:48:65:fe:4d:1a: 4f:80:1f:28:49:13:bd:a7:e9:65:c0:00:30:e4:40:33:c2:48: d8:5d:3b:b5:b9:94:88:8c:77:62:3a:a5:f0:40:16:ea:e4:fd: 8d:a5:b3:90:36:34:ce:10:44:9c:09:60:ca:ba:c2:7d:11:8d: d6:4a:68:ee:c4:73:be:e4:a0:14:ed:38:ea:36:c8:2d:60:94: 53:01:b5:1b:8e:d2:3e:92:fa:1e:ae:a9:95:7e:5f:15:e7:4b: 91:9a:f2:0e:58:0e:15:f9:8c:51:12:0d:12:a7:6f:23:c3:c9: 56:60:31:04:41:09:6d:3b:70:46:0d:ee:5f:3e:b7:e7:c8:d9: 62:39:14:d3:ab:3b:58:80:8e:42:55:f4:a8:19:2a:15:08:81: 26:79:6b:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3LbLsmRBONWCLdOps10fydeWjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4Mzk1MEVCOThBOEIxRjEyNDEwOUJERTA5MTAyQTJF QkMyOEFDQzAeFw0yNjA3MjEwMTU4MTVaFw0yNjA3MjIwNDEzMTVaMDMxMTAvBgNV BAMTKDMzOEY3NEFDRjRERTEwOEIzRDU4MjMwMjc1QjM4REQxREMwNjY4QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOPa4UP31vMoC0+qwYgxkxojo RgTe5lFolEY7f8V0Y0qJy8+n8/OIofYA+CSJ8btovOPObbXPw+GBZPb8tT9bxfdq +7oVkOzathX3ztU26s0uJ6Yd39qjPTjV3P0eMslQWJ3nmdX7/OgCGnGKgW5HLtEC mJ3HLrcovxlcM38hjOP/lp2B42Uxdsul9uu4JAgb/GXXnBZlfzOEuAtKkAmTp1yh x5WeR4itXO91KvotUwM6WUgui2ACU1ZawWsw98mSRB1SZPuysEVfuasMUtAvcA5j +Bi75EIPfPAYnJMmg3NyaL7l5nv5SCIPwDr05/gGFJPOn8vT/KK004fSr0K3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM490rPTeEIs9WCMCdbON0dwGaLUwHwYDVR0j BBgwFoAUTIOVDrmKix8SQQm94JECouvCiswwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2M5NzZlYzUtYjA1YS00ODBmLTg2ZGEtZDU1N2Y4NGEyMzY0LzAvNEM4Mzk1MEVC OThBOEIxRjEyNDEwOUJERTA5MTAyQTJFQkMyOEFDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzgzOTUwRUI5OEE4QjFGMTI0MTA5QkRFMDkxMDJBMkVCQzI4 QUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2M5NzZlYzUtYjA1YS00ODBmLTg2 ZGEtZDU1N2Y4NGEyMzY0LzAvNEM4Mzk1MEVCOThBOEIxRjEyNDEwOUJERTA5MTAy QTJFQkMyOEFDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJylWv899cneSJKbr/NtHdQFWf31nakAT16J lf/hKxGGKbG00i9SrXx8aWCoATSRCkxVhmvThakwy0OMHH2Zd1hnmtRmCkrqHLK8 ZAWE0vNAsa67EMHkhXHGlmpZf4locyb0tF5vIvFIZf5NGk+AHyhJE72n6WXAADDk QDPCSNhdO7W5lIiMd2I6pfBAFurk/Y2ls5A2NM4QRJwJYMq6wn0RjdZKaO7Ec77k oBTtOOo2yC1glFMBtRuO0j6S+h6uqZV+XxXnS5Ga8g5YDhX5jFESDRKnbyPDyVZg MQRBCW07cEYN7l8+t+fI2WI5FNOrO1iAjkJV9KgZKhUIgSZ5a3o= -----END CERTIFICATE-----Generated at Tue Jul 21 08:14:35 2026 by rpki-client