$ rpki-client -vvf rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft File: 4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft (raw, json) Hash identifier: qfkwhZSkrFb43sa94j6Qh6LXYmMofQ2t6CCpqTyFLh0= Subject key identifier: 62:F4:C8:C0:67:19:DC:58:A0:A7:D2:B2:35:E4:C2:4F:CF:5A:DF:CD Authority key identifier: 41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5 Certificate issuer: /CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5 Certificate serial: 50F4A7A8F9A6912ACB05895EE1063A197D2E0ED2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 12:37:09 +0000 Manifest this update: Mon 20 Jul 2026 12:32:09 +0000 Manifest next update: Tue 21 Jul 2026 14:04:09 +0000 Files and hashes: 1: 4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl (hash: 3A3TSBwAQtegGJ/ileaIHiRFv/0CVPJj5YnfQrw7Hmw=) 2: 3130332e3231342e3233362e302f32342d3234203d3e20313335343339.roa (hash: dMqa0oYO4c22L7uxBboRe6E/5z9CmS2c9aynUToZXQs=) 3: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (hash: t4tJtjdDpsJpFR/xtJD4ECgHePAHDWhC6e/Cj+1efek=) 4: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (hash: ATgc6Id4lihO/sLAGAO1j7xGe/4awMhi2w1w0ztaLuU=) 5: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (hash: MIfS/eHMskBKSqBbwRfOeUTCESkdJmMT09TJQUGAcLg=) 6: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (hash: chcA0La2Ovm9yQOvdpAAt2EqYZMflbdwEaNV+8DJqdc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f4:a7:a8:f9:a6:91:2a:cb:05:89:5e:e1:06:3a:19:7d:2e:0e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5 Validity Not Before: Jul 20 12:32:09 2026 GMT Not After : Jul 21 14:04:09 2026 GMT Subject: CN=62F4C8C06719DC58A0A7D2B235E4C24FCF5ADFCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:48:71:78:fa:ff:87:98:ea:9a:9d:31:50:22: a0:d4:47:6e:e3:98:8f:ce:fa:f0:58:19:bf:6b:c8: 16:03:8f:40:3b:6e:87:52:91:12:c4:0a:06:f0:09: da:39:86:e0:d4:35:70:a5:a0:f0:16:e5:4f:98:cf: 72:91:e1:32:40:48:de:7c:fe:09:fe:0e:82:1c:7c: ad:6c:53:a1:84:95:2b:cb:27:61:32:1d:05:dd:5b: e3:b6:f7:5d:d2:70:20:30:3a:4f:6b:9e:60:2e:74: 12:b6:3b:cc:f8:72:bc:55:2f:dd:2e:94:07:7c:36: 2e:11:63:d9:80:fb:42:6a:4e:45:fe:7d:e1:b6:51: 3a:23:37:42:b0:6e:17:94:ff:70:72:be:19:c8:e3: 06:7f:82:d2:03:80:cb:55:9c:21:84:3c:59:96:f9: 39:a5:f8:f4:b8:0e:04:25:a0:62:2c:cb:41:d9:9f: 5a:08:e7:7a:30:5b:f7:77:4f:bb:64:cb:f6:94:99: da:7c:99:12:0a:65:a4:90:f9:cf:a8:3d:d1:8c:2b: 5e:29:79:6f:af:2c:3c:2e:02:e4:c5:4c:62:ae:0e: 45:34:d7:68:f3:f4:c2:58:29:3c:05:08:de:16:11: c7:b1:73:86:f5:7e:9d:b5:45:82:23:08:6d:43:f3: 09:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F4:C8:C0:67:19:DC:58:A0:A7:D2:B2:35:E4:C2:4F:CF:5A:DF:CD X509v3 Authority Key Identifier: keyid:41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:75:92:7e:91:a0:6e:1e:38:d9:03:95:a3:39:f4:f7:4f:6a: b6:0f:49:2e:51:d4:83:cc:9d:ea:12:a4:db:15:7f:7e:53:0a: a6:69:76:4f:7d:e4:a7:1b:6c:12:27:04:8a:73:49:46:12:42: cc:9f:78:16:6f:f9:62:b4:36:dd:44:b0:e1:2f:43:8e:0b:bc: ca:cc:ad:8c:91:96:9b:8e:57:d8:d6:ee:38:35:f5:3d:21:a1: 6e:da:58:2c:c8:c6:ac:fd:c1:37:9d:77:ee:53:39:0a:9c:d1: d7:eb:6b:b1:1a:07:44:2d:57:bc:73:17:cd:69:62:74:66:d4: eb:80:6e:d1:66:41:18:83:cf:aa:b4:9a:7d:40:81:8b:5b:76: 6e:8a:89:49:73:f6:97:87:3a:06:93:e0:d3:eb:c1:a9:a9:4e: d6:a1:6f:21:8b:86:ca:49:11:fd:32:93:54:f7:d6:a4:53:d6: 25:36:af:5e:d7:8e:44:bb:31:0a:cb:93:78:9b:5f:a9:96:33: ec:dd:48:91:7d:ed:78:82:20:72:50:6e:a5:a2:5f:bb:89:ad: 1e:7d:e8:58:14:7b:20:28:b5:97:7c:3e:23:ab:8a:8b:16:17: b4:db:c4:3d:d3:c5:3c:7d:b9:66:be:1b:d9:37:a7:3a:39:fc: c4:f5:15:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUPSnqPmmkSrLBYle4QY6GX0uDtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEzOEUwQUQ0NjQ2RDhCNUIxOTE2NDgxMzEwNUUyRUM3 QzVBQzRBNTAeFw0yNjA3MjAxMjMyMDlaFw0yNjA3MjExNDA0MDlaMDMxMTAvBgNV BAMTKDYyRjRDOEMwNjcxOURDNThBMEE3RDJCMjM1RTRDMjRGQ0Y1QURGQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgSHF4+v+HmOqanTFQIqDUR27j mI/O+vBYGb9ryBYDj0A7bodSkRLECgbwCdo5huDUNXCloPAW5U+Yz3KR4TJASN58 /gn+DoIcfK1sU6GElSvLJ2EyHQXdW+O2913ScCAwOk9rnmAudBK2O8z4crxVL90u lAd8Ni4RY9mA+0JqTkX+feG2UTojN0KwbheU/3ByvhnI4wZ/gtIDgMtVnCGEPFmW +Tml+PS4DgQloGIsy0HZn1oI53owW/d3T7tky/aUmdp8mRIKZaSQ+c+oPdGMK14p eW+vLDwuAuTFTGKuDkU012jz9MJYKTwFCN4WEcexc4b1fp21RYIjCG1D8wlxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYvTIwGcZ3Figp9KyNeTCT89a380wHwYDVR0j BBgwFoAUQTjgrUZG2LWxkWSBMQXi7HxaxKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2RlNzE0MzctODVmYy00N2FmLTk2ODctOTAzYmFmYjJjMTYxLzAvNDEzOEUwQUQ0 NjQ2RDhCNUIxOTE2NDgxMzEwNUUyRUM3QzVBQzRBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTM4RTBBRDQ2NDZEOEI1QjE5MTY0ODEzMTA1RTJFQzdDNUFD NEE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2RlNzE0MzctODVmYy00N2FmLTk2 ODctOTAzYmFmYjJjMTYxLzAvNDEzOEUwQUQ0NjQ2RDhCNUIxOTE2NDgxMzEwNUUy RUM3QzVBQzRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHF1kn6RoG4eONkDlaM59PdParYPSS5R1IPM neoSpNsVf35TCqZpdk995KcbbBInBIpzSUYSQsyfeBZv+WK0Nt1EsOEvQ44LvMrM rYyRlpuOV9jW7jg19T0hoW7aWCzIxqz9wTedd+5TOQqc0dfra7EaB0QtV7xzF81p YnRm1OuAbtFmQRiDz6q0mn1AgYtbdm6KiUlz9peHOgaT4NPrwampTtahbyGLhspJ Ef0yk1T31qRT1iU2r17XjkS7MQrLk3ibX6mWM+zdSJF97XiCIHJQbqWiX7uJrR59 6FgUeyAotZd8PiOriosWF7TbxD3TxTx9uWa+G9k3pzo5/MT1FSk= -----END CERTIFICATE-----Generated at Tue Jul 21 06:19:13 2026 by rpki-client