$ rpki-client -vvf rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft File: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft (raw, json) Hash identifier: g0QGnbj1TTws3pwAvUEAG4HNjWNs2tz16iz2AbTN3Hs= Subject key identifier: DD:93:8A:44:B7:D3:6D:9D:0B:DD:67:46:14:22:26:E1:98:86:98:C0 Authority key identifier: 4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B Certificate issuer: /CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Certificate serial: 2E112E54F6F4E7DEB3789EAE8A6BC20A9690283F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 18:44:54 +0000 Manifest this update: Sun 19 Jul 2026 18:39:54 +0000 Manifest next update: Mon 20 Jul 2026 22:19:54 +0000 Files and hashes: 1: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: 7ql88/IJdY/aWaZ2NP20wpbVy2vo7/DTiipCEcxNsYM=) 2: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl (hash: fBMjtLiKkuRbe2jdJgOezZLMd9fFWyTPM7ZJU5lpTN0=) 3: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: IlV0vgNjpTuApXjZnZRsOZX0dY/TDSqULrpC6FIi3II=) 4: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: RcYrOS6rHRHWdeyezVsL3GaabN57kfPwCIDe/5oYbMs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 22:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:11:2e:54:f6:f4:e7:de:b3:78:9e:ae:8a:6b:c2:0a:96:90:28:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Validity Not Before: Jul 19 18:39:54 2026 GMT Not After : Jul 20 22:19:54 2026 GMT Subject: CN=DD938A44B7D36D9D0BDD6746142226E1988698C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3c:29:7a:fa:9e:14:a4:86:ca:68:be:f7:10: 62:13:4d:cd:3b:a1:8b:8e:6e:ac:a7:2a:95:61:ce: 61:e2:77:7f:f3:ef:2f:98:01:1f:94:49:74:c5:02: 16:0d:c0:36:80:c4:bb:aa:e8:a3:f7:66:4f:4e:d1: d2:99:7c:fa:4f:e4:48:08:6f:20:8f:f5:d4:e6:88: f7:32:9e:f0:a3:a5:06:cb:ef:84:99:21:ec:bd:ba: ef:00:0d:69:66:de:fb:77:70:04:da:11:0e:3f:5a: f0:8e:17:5e:30:6b:98:38:ef:6a:ca:a8:c5:f8:73: 7b:5e:ba:3f:f4:0b:bd:6c:1f:38:48:b6:44:2e:32: e1:46:3e:9d:f8:66:bd:0d:25:50:51:31:f6:67:cb: 1f:77:d6:3d:27:dc:83:05:99:ac:dc:60:55:e1:d4: db:de:a0:b6:5b:80:50:eb:11:86:f8:87:a8:2e:8e: 76:82:30:a6:c2:08:c5:60:16:0b:f7:ba:19:6d:4f: ba:41:3d:f6:96:96:b5:f8:cd:b5:26:5f:fd:ad:06: 59:72:d0:81:76:43:44:53:fd:2e:69:04:48:24:bb: 54:54:83:e8:6c:88:99:8d:6f:03:fc:ec:62:6c:86: c8:f3:f3:8f:96:1d:49:fc:45:82:c1:ae:7f:e9:36: e8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:93:8A:44:B7:D3:6D:9D:0B:DD:67:46:14:22:26:E1:98:86:98:C0 X509v3 Authority Key Identifier: keyid:4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d0:a1:0d:80:28:69:4c:7c:3d:22:f9:e8:cf:cf:39:9f:7a: a1:99:27:5f:bc:71:a8:73:cd:ec:57:d1:c8:d4:78:ad:3d:dd: 55:d1:aa:13:f4:53:f9:59:b2:56:cd:86:68:f2:18:a3:fe:df: 24:6b:75:f6:c7:62:5c:d9:68:48:3d:53:f8:44:85:45:7e:d3: da:f0:a9:f0:ad:6e:78:c4:08:9e:d1:01:61:23:b8:17:b8:8d: e6:56:11:28:03:fd:fc:d0:ab:23:6c:c5:06:49:53:da:02:ab: de:90:b0:50:4c:3e:2d:94:7a:45:b5:a3:8b:0f:12:cd:d2:36: 98:f5:2e:d6:70:21:2b:c1:d4:c9:57:e8:45:3a:4a:32:5f:95: 30:bb:4f:ad:fe:16:fc:6d:c8:98:21:cc:f1:14:50:9b:1f:30: 71:76:50:84:de:51:f4:94:f2:f1:46:ab:e3:21:6d:a9:ae:1f: a1:dc:b5:e4:6b:93:48:9b:31:03:b4:c6:de:85:e5:d5:1c:dc: a1:3a:24:92:b0:d0:b5:c9:83:3e:7f:68:fb:14:89:8b:77:79: cb:57:21:50:f0:66:36:66:a3:b1:d4:60:ef:ed:15:eb:01:6c: 3c:65:73:00:ca:72:84:1d:61:d7:21:90:77:6f:e6:9f:33:a6: cc:2b:ab:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhEuVPb0596zeJ6uimvCCpaQKD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQy NjA2OUMyQjAeFw0yNjA3MTkxODM5NTRaFw0yNjA3MjAyMjE5NTRaMDMxMTAvBgNV BAMTKEREOTM4QTQ0QjdEMzZEOUQwQkRENjc0NjE0MjIyNkUxOTg4Njk4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjPCl6+p4UpIbKaL73EGITTc07 oYuObqynKpVhzmHid3/z7y+YAR+USXTFAhYNwDaAxLuq6KP3Zk9O0dKZfPpP5EgI byCP9dTmiPcynvCjpQbL74SZIey9uu8ADWlm3vt3cATaEQ4/WvCOF14wa5g472rK qMX4c3teuj/0C71sHzhItkQuMuFGPp34Zr0NJVBRMfZnyx931j0n3IMFmazcYFXh 1NveoLZbgFDrEYb4h6gujnaCMKbCCMVgFgv3uhltT7pBPfaWlrX4zbUmX/2tBlly 0IF2Q0RT/S5pBEgku1RUg+hsiJmNbwP87GJshsjz84+WHUn8RYLBrn/pNuiZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ZOKRLfTbZ0L3WdGFCIm4ZiGmMAwHwYDVR0j BBgwFoAUSvelxvVMX9vYlXp/5bckJCYGnCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE1OWEzNjItOTUwYy00NWMyLWFlY2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZG NTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQyNjA2OUMyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QUY3QTVDNkY1NEM1RkRCRDg5NTdBN0ZFNUI3MjQyNDI2MDY5 QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0 MjQyNjA2OUMyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzQoQ2AKGlMfD0i+ejPzzmfeqGZJ1+8cahz zexX0cjUeK093VXRqhP0U/lZslbNhmjyGKP+3yRrdfbHYlzZaEg9U/hEhUV+09rw qfCtbnjECJ7RAWEjuBe4jeZWESgD/fzQqyNsxQZJU9oCq96QsFBMPi2UekW1o4sP Es3SNpj1LtZwISvB1MlX6EU6SjJflTC7T63+FvxtyJghzPEUUJsfMHF2UITeUfSU 8vFGq+MhbamuH6HcteRrk0ibMQO0xt6F5dUc3KE6JJKw0LXJgz5/aPsUiYt3ectX IVDwZjZmo7HUYO/tFesBbDxlcwDKcoQdYdchkHdv5p8zpswrq84= -----END CERTIFICATE-----Generated at Mon Jul 20 04:26:53 2026 by rpki-client