$ rpki-client -vvf rpki-rsync.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/413B918E0446ABBEFD82F3C84760F8A2EA857731.mft File: 413B918E0446ABBEFD82F3C84760F8A2EA857731.mft (raw, json) Hash identifier: yqaso+0oeEOWVqjoB2AS81zlJkvkR3dhqCnEDwOTdUs= Subject key identifier: 4F:B6:C2:58:C2:A7:42:7B:C7:CD:6F:4E:8F:30:05:02:17:AA:9B:77 Authority key identifier: 41:3B:91:8E:04:46:AB:BE:FD:82:F3:C8:47:60:F8:A2:EA:85:77:31 Certificate issuer: /CN=413B918E0446ABBEFD82F3C84760F8A2EA857731 Certificate serial: 18655314DBA5796E74E7F1607B23227ABE05A9E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/413B918E0446ABBEFD82F3C84760F8A2EA857731.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/413B918E0446ABBEFD82F3C84760F8A2EA857731.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 16:42:10 +0000 Manifest this update: Mon 20 Jul 2026 16:37:10 +0000 Manifest next update: Tue 21 Jul 2026 19:25:10 +0000 Files and hashes: 1: 413B918E0446ABBEFD82F3C84760F8A2EA857731.crl (hash: eoFwrW0EKsfF/FLu2WCpDee3ZW83ooMKq8EH3Pxw9lM=) 2: 3130332e3235322e34382e302f32342d3234203d3e20313530393931.roa (hash: rg4ctx8xX6dAFUeBwVwtymFyHjkTy1MEtGpAlsjk8b8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/413B918E0446ABBEFD82F3C84760F8A2EA857731.crl rsync://rpki-rsync.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/413B918E0446ABBEFD82F3C84760F8A2EA857731.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/413B918E0446ABBEFD82F3C84760F8A2EA857731.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:65:53:14:db:a5:79:6e:74:e7:f1:60:7b:23:22:7a:be:05:a9:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=413B918E0446ABBEFD82F3C84760F8A2EA857731 Validity Not Before: Jul 20 16:37:10 2026 GMT Not After : Jul 21 19:25:10 2026 GMT Subject: CN=4FB6C258C2A7427BC7CD6F4E8F30050217AA9B77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3c:69:e3:ac:34:a6:e5:75:87:91:1f:68:7a: a7:04:e0:53:61:89:7b:43:97:7d:32:10:41:6a:14: b4:ab:8c:15:fe:a0:44:8e:77:1d:3a:d3:22:f8:75: 18:bc:f7:07:07:bb:32:da:5b:85:ea:f4:89:3b:13: c3:2d:0b:5d:c4:3f:56:04:db:72:35:02:91:e4:f2: 68:27:14:46:11:be:bc:06:db:fd:dd:cf:08:e5:d0: 14:ed:6d:af:3c:d5:d6:37:a6:25:f9:85:6c:fb:e1: de:51:94:05:60:87:17:bc:85:1a:af:23:8c:24:49: dd:d3:bf:39:b7:4d:ee:68:e6:e8:c6:b8:c3:2b:93: 7d:6c:bb:f1:01:fe:e2:f3:7a:3e:51:97:b6:93:ae: 58:43:90:92:21:b0:e4:05:5b:58:e5:ec:c3:c2:a6: c4:bc:d6:fc:ca:57:89:25:2b:fc:46:b6:06:b7:58: 64:57:b5:d8:97:94:15:dc:64:e7:26:fe:d2:f2:1f: 18:a6:28:c6:72:a8:46:c9:10:3b:66:50:01:3e:12: 6c:d0:4f:db:71:20:5e:69:fa:d8:47:34:83:ab:7f: d1:ac:76:84:76:eb:1a:a9:25:22:3c:70:7b:ad:a2: 70:8a:5c:fb:61:5f:d9:8f:f4:1d:d8:a9:04:cb:00: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B6:C2:58:C2:A7:42:7B:C7:CD:6F:4E:8F:30:05:02:17:AA:9B:77 X509v3 Authority Key Identifier: keyid:41:3B:91:8E:04:46:AB:BE:FD:82:F3:C8:47:60:F8:A2:EA:85:77:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/413B918E0446ABBEFD82F3C84760F8A2EA857731.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/413B918E0446ABBEFD82F3C84760F8A2EA857731.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/413B918E0446ABBEFD82F3C84760F8A2EA857731.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:1e:2e:b9:53:81:05:6b:22:21:ae:ff:50:a8:03:91:c4:0c: 6d:ca:a4:d6:74:b6:63:46:0b:46:b0:91:73:96:b4:30:87:3c: 4a:74:9d:16:1c:98:1d:3e:b9:5f:29:e9:26:97:b8:5b:d5:91: 84:cf:e0:f8:64:18:81:a3:1d:bb:e2:88:06:63:80:60:92:37: d4:5c:43:cd:44:d0:9f:20:39:1a:a9:73:4b:16:6c:59:bb:24: 56:92:10:a3:86:cc:e0:31:99:14:bf:d6:6a:a7:40:e7:1e:f6: ba:89:1d:dd:d5:7e:c2:7f:a4:6c:bb:c1:6f:ee:46:77:da:43: 96:71:3f:a6:43:61:2b:e7:01:22:86:67:28:2a:f0:84:66:ad: a2:cb:20:d7:f4:b2:8b:7b:ad:e8:08:49:c9:b7:da:b3:4b:06: 92:16:eb:16:b0:f2:59:54:10:59:ec:3a:a7:69:75:ec:57:48: 64:1a:0c:93:c9:ad:f5:98:08:30:85:87:fc:ae:42:52:17:44: 1b:4b:ed:26:2d:68:06:ee:27:41:0b:c1:99:f3:39:6a:4d:0b: c1:e7:0c:27:7e:fd:49:93:f5:b2:d7:3d:aa:53:93:60:2b:4d: e6:87:8d:c5:32:01:4b:73:45:88:97:1c:1e:dc:0f:fb:71:3e: 5c:f9:cf:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGGVTFNuleW505/FgeyMier4FqeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEzQjkxOEUwNDQ2QUJCRUZEODJGM0M4NDc2MEY4QTJF QTg1NzczMTAeFw0yNjA3MjAxNjM3MTBaFw0yNjA3MjExOTI1MTBaMDMxMTAvBgNV BAMTKDRGQjZDMjU4QzJBNzQyN0JDN0NENkY0RThGMzAwNTAyMTdBQTlCNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZPGnjrDSm5XWHkR9oeqcE4FNh iXtDl30yEEFqFLSrjBX+oESOdx060yL4dRi89wcHuzLaW4Xq9Ik7E8MtC13EP1YE 23I1ApHk8mgnFEYRvrwG2/3dzwjl0BTtba881dY3piX5hWz74d5RlAVghxe8hRqv I4wkSd3Tvzm3Te5o5ujGuMMrk31su/EB/uLzej5Rl7aTrlhDkJIhsOQFW1jl7MPC psS81vzKV4klK/xGtga3WGRXtdiXlBXcZOcm/tLyHximKMZyqEbJEDtmUAE+EmzQ T9txIF5p+thHNIOrf9GsdoR26xqpJSI8cHutonCKXPthX9mP9B3YqQTLAH4HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT7bCWMKnQnvHzW9OjzAFAheqm3cwHwYDVR0j BBgwFoAUQTuRjgRGq779gvPIR2D4ouqFdzEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTEzZWVkMmItOTU1ZS00MDkzLTg4YTQtZjRkZTNjYzliOWNkLzAvNDEzQjkxOEUw NDQ2QUJCRUZEODJGM0M4NDc2MEY4QTJFQTg1NzczMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTNCOTE4RTA0NDZBQkJFRkQ4MkYzQzg0NzYwRjhBMkVBODU3 NzMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTEzZWVkMmItOTU1ZS00MDkzLTg4 YTQtZjRkZTNjYzliOWNkLzAvNDEzQjkxOEUwNDQ2QUJCRUZEODJGM0M4NDc2MEY4 QTJFQTg1NzczMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkeLrlTgQVrIiGu/1CoA5HEDG3KpNZ0tmNG C0awkXOWtDCHPEp0nRYcmB0+uV8p6SaXuFvVkYTP4PhkGIGjHbviiAZjgGCSN9Rc Q81E0J8gORqpc0sWbFm7JFaSEKOGzOAxmRS/1mqnQOce9rqJHd3VfsJ/pGy7wW/u RnfaQ5ZxP6ZDYSvnASKGZygq8IRmraLLINf0sot7regIScm32rNLBpIW6xaw8llU EFnsOqdpdexXSGQaDJPJrfWYCDCFh/yuQlIXRBtL7SYtaAbuJ0ELwZnzOWpNC8Hn DCd+/UmT9bLXPapTk2ArTeaHjcUyAUtzRYiXHB7cD/txPlz5zxI= -----END CERTIFICATE-----Generated at Tue Jul 21 10:54:13 2026 by rpki-client