$ rpki-client -vvf rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft File: 4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft (raw, json) Hash identifier: oPGpVLOu1jO4xl+DZnDtDnzxGle83Y3afa2+0Outa1s= Subject key identifier: 0D:EA:A7:1F:8E:15:81:C2:08:37:E4:D6:8C:B7:15:85:7E:D1:ED:00 Authority key identifier: 4B:B3:1C:C0:C0:64:3A:8E:F7:5F:54:B2:C3:50:B6:D9:E3:FD:4F:E4 Certificate issuer: /CN=4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4 Certificate serial: 504BF466D4A573DF42B5CBA5AB326A1E781BA40F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 18:59:55 +0000 Manifest this update: Mon 20 Jul 2026 18:54:55 +0000 Manifest next update: Tue 21 Jul 2026 20:16:55 +0000 Files and hashes: 1: 3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa (hash: epbts0iMFTrBEO83zvZ3MaXP2Z9y72tIdDCt87torNA=) 2: 4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl (hash: H0e8uWQrsmgpMyhGsgkuDFDE2Wp9PCCcV7Q4MQz0gr4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4b:f4:66:d4:a5:73:df:42:b5:cb:a5:ab:32:6a:1e:78:1b:a4:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4 Validity Not Before: Jul 20 18:54:55 2026 GMT Not After : Jul 21 20:16:55 2026 GMT Subject: CN=0DEAA71F8E1581C20837E4D68CB715857ED1ED00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1a:9c:7d:45:2d:8d:1c:e8:66:0a:9c:6b:e5: 01:8a:35:37:22:70:b5:02:d4:0c:42:45:dd:80:92: c6:4a:25:0f:7f:d9:d9:bd:87:95:4e:4a:66:b0:65: b7:2a:6e:7a:58:44:eb:39:3e:4d:bf:b3:61:2b:c8: ff:05:a4:1c:84:05:81:3f:7b:78:ac:c0:be:f2:69: 4f:3e:a4:b3:b5:f1:ae:28:64:08:4f:bf:53:bc:43: cb:3f:d0:42:b4:7b:ba:37:c2:70:ae:84:f7:03:d2: 04:b6:2b:dd:8e:bb:fd:51:08:f6:f3:1b:b1:f5:1d: 3c:bf:8c:b5:5a:b9:3d:06:fc:94:24:1e:48:cc:44: 0c:16:65:0b:8e:32:51:d2:2e:8e:d5:ef:57:ca:3f: dd:d8:a8:f5:cf:a2:d2:89:8e:80:99:f7:2c:01:63: 34:46:90:1d:ae:02:80:e2:bf:7b:62:5d:d6:82:83: 26:32:16:02:a5:8f:eb:39:24:31:a3:79:eb:a2:ac: 5e:30:65:6e:8c:cf:ae:4a:43:1e:43:f5:39:01:fc: 56:26:f1:20:68:cf:33:ca:45:13:c4:38:46:4a:e6: 0c:63:16:b4:3d:d5:63:38:d6:43:be:22:66:23:c6: e9:ba:50:4b:44:27:92:d5:7b:39:a1:6a:1f:3b:0d: 90:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EA:A7:1F:8E:15:81:C2:08:37:E4:D6:8C:B7:15:85:7E:D1:ED:00 X509v3 Authority Key Identifier: keyid:4B:B3:1C:C0:C0:64:3A:8E:F7:5F:54:B2:C3:50:B6:D9:E3:FD:4F:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:8f:e1:30:1d:c6:45:d3:3d:ed:2e:23:46:e7:7d:48:72:3e: 3f:83:d0:da:8b:90:8b:c5:32:c4:7e:b7:ca:7c:43:e4:d0:33: 3a:80:fc:f4:62:38:9d:10:9b:ff:e4:93:db:4c:a2:c9:08:dc: 42:59:89:16:d7:8d:b0:b1:16:fe:14:07:9c:cf:9f:f6:bb:9d: 23:7f:cc:b4:07:4b:db:6a:4e:03:90:e7:ea:b5:c7:ea:3d:28: cc:d3:78:63:1a:dc:6e:8a:45:17:1e:ec:d3:94:22:da:2e:f3: 6e:0e:02:90:43:35:66:2b:1e:27:bd:5a:a9:24:54:66:33:b8: e1:34:3a:92:05:b3:33:83:d5:fd:d8:22:af:10:2d:f4:09:df: 54:bc:a4:42:7a:c9:35:e3:80:36:87:5c:8a:16:25:d8:80:bf: d2:67:c8:af:5c:e0:2d:a1:cb:1f:d8:01:d0:6d:9c:32:e6:7d: 3b:34:98:7d:47:d1:0f:8f:4e:d8:78:15:8f:80:d4:e8:51:06: 3f:7c:88:45:ef:41:79:83:73:8f:06:a8:84:66:27:78:01:38: 7b:0b:f5:af:94:ce:3e:8e:52:48:07:56:83:26:7f:7b:9f:e3: 11:eb:f6:49:03:f8:3a:e5:a9:a1:7d:c0:a2:fa:fb:ac:c8:86: 77:6a:ec:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUEv0ZtSlc99CtculqzJqHngbpA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJCMzFDQzBDMDY0M0E4RUY3NUY1NEIyQzM1MEI2RDlF M0ZENEZFNDAeFw0yNjA3MjAxODU0NTVaFw0yNjA3MjEyMDE2NTVaMDMxMTAvBgNV BAMTKDBERUFBNzFGOEUxNTgxQzIwODM3RTRENjhDQjcxNTg1N0VEMUVEMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeGpx9RS2NHOhmCpxr5QGKNTci cLUC1AxCRd2AksZKJQ9/2dm9h5VOSmawZbcqbnpYROs5Pk2/s2EryP8FpByEBYE/ e3iswL7yaU8+pLO18a4oZAhPv1O8Q8s/0EK0e7o3wnCuhPcD0gS2K92Ou/1RCPbz G7H1HTy/jLVauT0G/JQkHkjMRAwWZQuOMlHSLo7V71fKP93YqPXPotKJjoCZ9ywB YzRGkB2uAoDiv3tiXdaCgyYyFgKlj+s5JDGjeeuirF4wZW6Mz65KQx5D9TkB/FYm 8SBozzPKRRPEOEZK5gxjFrQ91WM41kO+ImYjxum6UEtEJ5LVezmhah87DZAzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDeqnH44VgcIIN+TWjLcVhX7R7QAwHwYDVR0j BBgwFoAUS7McwMBkOo73X1Syw1C22eP9T+QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTExYTNkNTYtYWM3NS00OTgxLTk3MjYtYzQ0MDIxNGM4MWVkLzAvNEJCMzFDQzBD MDY0M0E4RUY3NUY1NEIyQzM1MEI2RDlFM0ZENEZFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkIzMUNDMEMwNjQzQThFRjc1RjU0QjJDMzUwQjZEOUUzRkQ0 RkU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTExYTNkNTYtYWM3NS00OTgxLTk3 MjYtYzQ0MDIxNGM4MWVkLzAvNEJCMzFDQzBDMDY0M0E4RUY3NUY1NEIyQzM1MEI2 RDlFM0ZENEZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKP4TAdxkXTPe0uI0bnfUhyPj+D0NqLkIvF MsR+t8p8Q+TQMzqA/PRiOJ0Qm//kk9tMoskI3EJZiRbXjbCxFv4UB5zPn/a7nSN/ zLQHS9tqTgOQ5+q1x+o9KMzTeGMa3G6KRRce7NOUItou824OApBDNWYrHie9Wqkk VGYzuOE0OpIFszOD1f3YIq8QLfQJ31S8pEJ6yTXjgDaHXIoWJdiAv9JnyK9c4C2h yx/YAdBtnDLmfTs0mH1H0Q+PTth4FY+A1OhRBj98iEXvQXmDc48GqIRmJ3gBOHsL 9a+Uzj6OUkgHVoMmf3uf4xHr9kkD+DrlqaF9wKL6+6zIhndq7FA= -----END CERTIFICATE-----Generated at Tue Jul 21 07:00:34 2026 by rpki-client