$ rpki-client -vvf rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft File: 04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft (raw, json) Hash identifier: pCKMQuO7ldH6XPt6UAiNQN7axjVgcN+kLX67R4X1cjs= Subject key identifier: 4E:34:22:FE:0E:62:6A:ED:71:54:C3:61:C9:9A:7C:1F:55:0B:F0:B3 Authority key identifier: 04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4 Certificate issuer: /CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4 Certificate serial: 614417C6D2DCD99D3DE4DC5EC0C8CF184B8EEC39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 23:00:13 +0000 Manifest this update: Sun 19 Jul 2026 22:55:13 +0000 Manifest next update: Mon 20 Jul 2026 23:36:13 +0000 Files and hashes: 1: 323430363a343563303a3a2f33322d3332203d3e203634333030.roa (hash: 1M4q1NFllsSsvSfNvwTitiKk8jnGm1cKfR4Eial5H4E=) 2: 323430363a343563303a3a2f33332d3438203d3e203634333030.roa (hash: 0XuhY+T94wXhxTCvmTzUJVF+dBVIx5FGQo4RfqmReyU=) 3: 323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa (hash: 6uG8JEAg5YXu68O6z0VK1/htvcExMqCS4aozBNgJO50=) 4: 3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa (hash: BrjeraCPyUffk29JD70GjyNah0k3nj4heiQybdMxnEQ=) 5: 04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl (hash: Yjx1w4HnPPAwQK+sdTVwMP/un0Aa+3hRLVJ04wB8F0g=) 6: 3130332e3135332e3134382e302f32342d3234203d3e203634333030.roa (hash: dl9xVM2rxfLjhJqwGW0G8h/VTUN1oUgBuq0Qw5n8Lwg=) 7: 3130332e3135332e3134392e302f32342d3234203d3e203634333030.roa (hash: 5vV5ZfJoSxF8YdCtjpH1p1DLAYvEvLGC91Wktf8Mw9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:44:17:c6:d2:dc:d9:9d:3d:e4:dc:5e:c0:c8:cf:18:4b:8e:ec:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4 Validity Not Before: Jul 19 22:55:13 2026 GMT Not After : Jul 20 23:36:13 2026 GMT Subject: CN=4E3422FE0E626AED7154C361C99A7C1F550BF0B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ae:d5:57:60:e4:c9:60:56:59:9d:4a:0f:59: fa:82:b4:ea:49:48:3a:11:53:7b:e7:b5:86:d6:0f: 68:5e:73:9f:bb:9e:76:6b:ca:5c:5d:c9:1c:4b:7f: ed:62:07:bf:9f:35:67:2b:c0:bb:37:93:6e:ff:cd: d5:3b:9e:d9:f8:a4:d0:58:2b:9e:04:0e:2e:2c:50: 59:88:9f:0f:e6:99:5e:e2:90:f0:72:bb:5c:e8:20: 58:b7:91:c4:0f:ad:2f:13:c3:a1:20:f8:eb:e8:33: 91:77:7c:47:03:c8:f5:b1:9c:dd:a0:e6:b5:e6:09: 5c:eb:4e:3d:18:81:60:af:e2:75:26:db:12:6c:90: a8:92:14:49:23:c7:dd:98:49:75:3e:51:bd:b3:0a: bc:da:7f:a7:30:7a:35:c8:19:52:e8:6e:a0:fb:48: 81:c6:08:97:fe:86:3f:65:1b:7c:0e:f4:b2:25:d7: 6e:5a:e7:32:44:15:49:87:d7:39:0e:ca:8d:36:eb: 42:7e:25:60:a1:4e:15:76:a9:d7:d9:a6:19:e9:c4: 11:0d:b1:12:e7:51:dc:c7:b2:36:6a:3c:26:23:ee: 5b:c4:56:ad:4f:3d:b3:bc:20:a6:8e:8b:f7:ef:36: a2:e8:fa:72:df:a2:43:cb:e3:95:8f:25:8a:8a:cf: ad:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:34:22:FE:0E:62:6A:ED:71:54:C3:61:C9:9A:7C:1F:55:0B:F0:B3 X509v3 Authority Key Identifier: keyid:04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d6:b8:87:27:91:28:b8:51:c7:73:c7:02:f7:7f:b4:a4:b2: 68:e3:d8:e7:f8:0d:60:5c:98:42:7c:e0:26:07:6d:b6:fc:9f: 20:60:01:b9:f6:fe:a8:d0:f0:08:39:e0:c7:d2:52:6b:33:13: 97:67:9f:46:df:cf:5b:cb:0e:33:aa:d6:32:45:a3:c2:53:7c: 12:79:19:09:1f:84:d4:b6:f4:71:d4:6c:6e:3c:c0:77:fb:34: 51:bb:39:f0:1d:cd:69:a3:52:e5:dd:36:d4:48:4d:66:f8:b8: c9:c8:a5:2e:09:98:73:3c:e4:ad:b3:58:92:2a:96:08:ca:b8: 16:3b:b8:29:c1:8e:3c:9e:0f:a6:6a:b5:df:f0:16:50:1b:9f: 13:26:ed:0b:5d:7e:e8:8d:8d:21:e1:a6:aa:d7:cc:58:04:d1: 80:85:91:08:24:58:84:d0:3a:32:a6:29:67:a0:dc:e5:6d:61: ce:5c:50:aa:27:cd:3a:3d:cb:4c:12:13:f5:b7:d1:b5:18:d4: 93:79:aa:1d:4f:85:b0:f8:52:1c:ba:c9:2e:e4:86:56:0a:11: 25:a4:b8:07:13:8e:2f:01:90:7a:25:f4:77:ae:d9:e1:1b:48: a6:34:eb:5d:71:31:ba:cd:f3:3e:3d:ae:3b:a3:c7:4c:2d:fb: f4:a7:d1:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYUQXxtLc2Z095NxewMjPGEuO7DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREQjQ3NTVDNzVBODMxQ0Q5MTgxN0U2QTlCN0U0RTFF RDJERjJENDAeFw0yNjA3MTkyMjU1MTNaFw0yNjA3MjAyMzM2MTNaMDMxMTAvBgNV BAMTKDRFMzQyMkZFMEU2MjZBRUQ3MTU0QzM2MUM5OUE3QzFGNTUwQkYwQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDArtVXYOTJYFZZnUoPWfqCtOpJ SDoRU3vntYbWD2hec5+7nnZrylxdyRxLf+1iB7+fNWcrwLs3k27/zdU7ntn4pNBY K54EDi4sUFmInw/mmV7ikPByu1zoIFi3kcQPrS8Tw6Eg+OvoM5F3fEcDyPWxnN2g 5rXmCVzrTj0YgWCv4nUm2xJskKiSFEkjx92YSXU+Ub2zCrzaf6cwejXIGVLobqD7 SIHGCJf+hj9lG3wO9LIl125a5zJEFUmH1zkOyo0260J+JWChThV2qdfZphnpxBEN sRLnUdzHsjZqPCYj7lvEVq1PPbO8IKaOi/fvNqLo+nLfokPL45WPJYqKz61RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTjQi/g5iau1xVMNhyZp8H1UL8LMwHwYDVR0j BBgwFoAUBNtHVcdagxzZGBfmqbfk4e0t8tQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTQzMDRiNjQtMjg5OS00ODMwLTljM2MtMzc1ODRhMzI3ZTFlLzAvMDREQjQ3NTVD NzVBODMxQ0Q5MTgxN0U2QTlCN0U0RTFFRDJERjJENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNERCNDc1NUM3NUE4MzFDRDkxODE3RTZBOUI3RTRFMUVEMkRG MkQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQzMDRiNjQtMjg5OS00ODMwLTlj M2MtMzc1ODRhMzI3ZTFlLzAvMDREQjQ3NTVDNzVBODMxQ0Q5MTgxN0U2QTlCN0U0 RTFFRDJERjJENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrWuIcnkSi4UcdzxwL3f7Sksmjj2Of4DWBc mEJ84CYHbbb8nyBgAbn2/qjQ8Ag54MfSUmszE5dnn0bfz1vLDjOq1jJFo8JTfBJ5 GQkfhNS29HHUbG48wHf7NFG7OfAdzWmjUuXdNtRITWb4uMnIpS4JmHM85K2zWJIq lgjKuBY7uCnBjjyeD6Zqtd/wFlAbnxMm7QtdfuiNjSHhpqrXzFgE0YCFkQgkWITQ OjKmKWeg3OVtYc5cUKonzTo9y0wSE/W30bUY1JN5qh1PhbD4Uhy6yS7khlYKESWk uAcTji8BkHol9Heu2eEbSKY0611xMbrN8z49rjujx0wt+/Sn0fk= -----END CERTIFICATE-----Generated at Mon Jul 20 00:01:25 2026 by rpki-client