$ rpki-client -vvf rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft File: 4FE0444622A2C111B372D11A38DAFE7648673D36.mft (raw, json) Hash identifier: cgANLeRFS8IKUyTIOYFSlG9FnkY7WjBgbrBgIfO0iS4= Subject key identifier: 8F:6B:88:32:27:92:40:A0:18:53:3F:C1:22:4A:76:83:6B:32:71:91 Authority key identifier: 4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36 Certificate issuer: /CN=4FE0444622A2C111B372D11A38DAFE7648673D36 Certificate serial: 6874ABC7FBA40D7A5B3C9BD386DDE21546F8EF11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 14:14:12 +0000 Manifest this update: Mon 20 Jul 2026 14:09:12 +0000 Manifest next update: Tue 21 Jul 2026 16:57:12 +0000 Files and hashes: 1: 4FE0444622A2C111B372D11A38DAFE7648673D36.crl (hash: Vbwk/+W57qzmJbbvxiPmzN2eOrwMQNysbu5towfgSfI=) 2: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: KpYQSU+oal444FTCzAQqpO+RSPbHAZ+ta2JoMh51nbo=) 3: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: jwm0S2hFDX+dZX8vIrEhkY9/01RjPCQuv88vNZDWSb8=) 4: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: gRZjicumGEoblrElHZ58yAQf9cx0JwPN+oerGxN3DUY=) 5: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: EeoonxSdNuxOduC2I/c7vz+iodDJX+FOusUJ8W+8sks=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.crl rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:74:ab:c7:fb:a4:0d:7a:5b:3c:9b:d3:86:dd:e2:15:46:f8:ef:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FE0444622A2C111B372D11A38DAFE7648673D36 Validity Not Before: Jul 20 14:09:12 2026 GMT Not After : Jul 21 16:57:12 2026 GMT Subject: CN=8F6B8832279240A018533FC1224A76836B327191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:68:b1:bf:22:60:5e:56:94:ca:f2:08:b5:0b: 1b:a8:42:b8:04:b5:5e:7c:1f:6c:25:24:00:2a:da: 1e:06:1c:36:ff:a6:b9:ef:52:4c:8e:92:b2:72:3d: c0:b7:79:87:29:c3:df:09:26:a3:b1:d6:fc:4f:f2: 91:7e:f8:c5:c0:71:4e:80:9f:4d:3a:c4:11:0c:bf: e0:c6:c3:46:08:0e:18:b4:50:b4:6e:34:c7:a4:e6: 14:0b:39:e6:7b:98:a8:7f:60:95:05:85:f7:53:19: 5c:69:b6:1c:38:ca:cc:35:b2:63:24:0d:9c:04:31: 3c:d1:c9:07:44:99:b1:b4:41:55:35:70:f3:58:c3: 9b:de:65:d5:fe:80:ce:04:4f:b8:67:fe:46:7e:de: fd:47:e8:d2:c0:7f:a2:35:c4:91:91:bf:ae:33:2b: bb:d7:d9:6b:cf:ba:04:42:d5:85:67:5c:97:1a:0f: 80:10:60:05:55:7c:5e:e2:e3:fb:3c:45:b4:40:d1: c2:e2:ff:10:37:ac:93:64:2b:c9:6c:96:19:17:fe: 2d:9a:56:18:a2:79:24:26:7c:38:93:f1:70:28:96: 33:aa:b6:1f:44:fd:09:60:21:da:a2:9a:6e:3a:4a: 58:7c:ab:41:58:bc:66:3c:67:88:95:6c:08:13:54: 55:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6B:88:32:27:92:40:A0:18:53:3F:C1:22:4A:76:83:6B:32:71:91 X509v3 Authority Key Identifier: keyid:4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:25:61:92:d7:51:ae:c1:7b:80:c3:67:7a:67:8f:dd:5c:2b: 84:6f:68:fd:c6:d9:99:da:68:1a:c8:ab:99:09:9c:43:5a:72: cb:b8:54:38:bc:d8:6b:9d:1a:4c:b5:02:60:5d:3d:1a:30:34: de:0d:8f:1b:ef:d6:a8:84:83:4c:84:e5:f5:37:f4:08:19:95: 4c:80:5a:58:f7:c2:83:28:2d:60:62:9a:db:18:df:b8:8e:21: df:32:a6:75:b3:b7:c5:c4:29:a4:14:12:61:2a:0a:7c:30:58: d5:74:b3:f3:23:8f:d1:df:f5:20:bf:37:5d:df:dc:9d:41:53: 65:14:25:3d:2c:92:9b:48:39:29:29:25:92:a8:55:a3:7b:a3: 0b:89:62:cf:73:b8:2f:8c:30:48:82:58:15:ee:4d:02:0d:dd: 2e:99:da:04:90:a4:49:a2:eb:e1:48:1d:2c:36:9d:3b:eb:c8: d3:7a:36:0a:46:4d:9e:7b:fd:f0:81:2f:fa:05:7a:e8:76:e6: 33:54:ea:f0:ef:94:bc:3d:85:49:e9:29:88:94:0c:a8:f4:7b: 9c:47:3d:2c:34:f4:4d:90:78:9f:0d:9f:79:e1:7b:31:88:36: ce:9f:c0:45:76:ae:ec:71:39:71:97:a3:27:1d:c1:d0:46:e4: 87:c6:bf:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaHSrx/ukDXpbPJvTht3iFUb47xEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZFMDQ0NDYyMkEyQzExMUIzNzJEMTFBMzhEQUZFNzY0 ODY3M0QzNjAeFw0yNjA3MjAxNDA5MTJaFw0yNjA3MjExNjU3MTJaMDMxMTAvBgNV BAMTKDhGNkI4ODMyMjc5MjQwQTAxODUzM0ZDMTIyNEE3NjgzNkIzMjcxOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoaLG/ImBeVpTK8gi1CxuoQrgE tV58H2wlJAAq2h4GHDb/prnvUkyOkrJyPcC3eYcpw98JJqOx1vxP8pF++MXAcU6A n006xBEMv+DGw0YIDhi0ULRuNMek5hQLOeZ7mKh/YJUFhfdTGVxpthw4ysw1smMk DZwEMTzRyQdEmbG0QVU1cPNYw5veZdX+gM4ET7hn/kZ+3v1H6NLAf6I1xJGRv64z K7vX2WvPugRC1YVnXJcaD4AQYAVVfF7i4/s8RbRA0cLi/xA3rJNkK8lslhkX/i2a VhiieSQmfDiT8XAoljOqth9E/QlgIdqimm46Slh8q0FYvGY8Z4iVbAgTVFVJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj2uIMieSQKAYUz/BIkp2g2sycZEwHwYDVR0j BBgwFoAUT+BERiKiwRGzctEaONr+dkhnPTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTFmZDM1MWUtMmJkNy00MTkxLTkxMDYtNTNmODc1MDE2ZjBlLzAvNEZFMDQ0NDYy MkEyQzExMUIzNzJEMTFBMzhEQUZFNzY0ODY3M0QzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkUwNDQ0NjIyQTJDMTExQjM3MkQxMUEzOERBRkU3NjQ4Njcz RDM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvNEZFMDQ0NDYyMkEyQzExMUIzNzJEMTFBMzhEQUZF NzY0ODY3M0QzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJclYZLXUa7Be4DDZ3pnj91cK4RvaP3G2Zna aBrIq5kJnENacsu4VDi82GudGky1AmBdPRowNN4Njxvv1qiEg0yE5fU39AgZlUyA Wlj3woMoLWBimtsY37iOId8ypnWzt8XEKaQUEmEqCnwwWNV0s/Mjj9Hf9SC/N13f 3J1BU2UUJT0skptIOSkpJZKoVaN7owuJYs9zuC+MMEiCWBXuTQIN3S6Z2gSQpEmi 6+FIHSw2nTvryNN6NgpGTZ57/fCBL/oFeuh25jNU6vDvlLw9hUnpKYiUDKj0e5xH PSw09E2QeJ8Nn3nhezGINs6fwEV2ruxxOXGXoycdwdBG5IfGvwI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:52:08 2026 by rpki-client