$ rpki-client -vvf rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft File: 4A690EC844644FC7C72921E7FA9D8B8827A68133.mft (raw, json) Hash identifier: ezVOdPIit7nFA3m58UhmulF3vPU/hvow94PJbHifQ3k= Subject key identifier: 93:FF:4A:8C:78:43:46:CA:C4:F8:05:F1:D4:B3:59:D2:7B:36:21:6C Authority key identifier: 4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33 Certificate issuer: /CN=4A690EC844644FC7C72921E7FA9D8B8827A68133 Certificate serial: 287EF2918669672E9ECE628390FD504F0272C01C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft Manifest number: 67 Signing time: Fri 17 Jul 2026 07:57:48 +0000 Manifest this update: Fri 17 Jul 2026 07:52:48 +0000 Manifest next update: Sat 18 Jul 2026 09:19:48 +0000 Files and hashes: 1: 4A690EC844644FC7C72921E7FA9D8B8827A68133.crl (hash: N20LQphkuJmc3hMiIEAJSACAmhcdFbocu+BluW3uycs=) 2: 323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (hash: UugzJo0XG4CnPFobTcgFSX6/vfuVvh/vQ7HS0KjLKPQ=) 3: 3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa (hash: pESLqdHWwG9pCnMMcNgeB95CfcGiK8SY4ni1NsaDZJU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 09:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:7e:f2:91:86:69:67:2e:9e:ce:62:83:90:fd:50:4f:02:72:c0:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A690EC844644FC7C72921E7FA9D8B8827A68133 Validity Not Before: Jul 17 07:52:48 2026 GMT Not After : Jul 18 09:19:48 2026 GMT Subject: CN=93FF4A8C784346CAC4F805F1D4B359D27B36216C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2d:bb:cd:af:7c:10:fd:ae:14:f6:0f:c5:00: 50:0c:3c:e6:b7:c8:5d:47:fd:f2:16:9a:3d:d2:d2: d3:d8:ee:48:e5:89:38:fa:6f:97:ff:f5:94:2f:a1: ca:10:43:78:6d:82:ab:99:c9:b3:a6:28:ff:4d:97: 64:27:2c:3e:cd:3a:a4:49:71:2d:94:8d:c0:cb:ab: 1f:3f:5b:9d:ae:e8:b3:a0:0c:fb:78:0a:be:53:68: 62:72:7b:69:ad:d0:30:a0:a1:db:da:b9:db:de:40: a3:63:9c:93:ca:74:2f:f4:e3:08:0f:0f:6a:b3:68: fa:c6:ce:3f:14:8e:20:47:63:8a:55:a5:fc:1e:03: bd:a1:82:18:d5:58:c8:5a:88:a6:77:05:7e:2a:0f: 9b:68:f3:44:09:d4:11:ad:2a:b7:30:a1:5f:2f:7e: 25:d6:04:e2:46:d2:a2:e9:fd:3f:46:65:bd:09:06: 2d:fd:80:45:11:53:a1:31:cf:91:42:e3:0b:34:6b: 07:9a:16:e3:4e:9a:23:6a:5d:a8:aa:60:04:c1:ed: 8f:2f:fb:9a:b8:df:ef:25:98:64:28:26:0c:a1:96: 1c:6c:00:ce:a6:10:73:30:ef:d3:7b:9f:d0:2d:7a: fd:0b:e8:16:8c:bf:4a:6a:f3:3c:87:e5:ef:4c:22: e2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FF:4A:8C:78:43:46:CA:C4:F8:05:F1:D4:B3:59:D2:7B:36:21:6C X509v3 Authority Key Identifier: keyid:4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:14:83:29:5f:77:7f:19:54:ed:cb:fa:04:76:5d:2c:93:9b: ca:9a:c3:64:59:95:e2:11:56:a6:00:38:7f:da:e2:57:cb:be: a8:03:29:9f:35:32:4b:20:94:e4:48:1a:75:d6:61:fd:b3:43: a3:87:64:51:ab:e3:ea:53:1d:89:19:04:af:f6:3a:26:51:65: 5f:12:38:d1:85:e7:66:8e:35:5f:84:d5:ad:2a:66:10:51:3b: 42:bd:4f:34:49:86:70:d2:2b:b7:0f:f1:b5:1b:4f:8e:4d:42: 1f:f9:7a:ef:1f:f5:87:42:ea:8a:46:ea:3c:f3:4a:df:4a:ce: b0:e2:c8:73:ac:d2:03:76:74:ed:03:23:09:e4:90:08:a2:06: 7e:45:23:ea:77:cc:1f:cc:1d:b8:e2:e0:08:ec:2c:c3:50:12: 11:0d:9d:3e:07:0c:55:ea:8c:8e:4b:5a:30:96:c0:03:96:30: f6:86:a2:4d:71:31:5e:49:36:44:90:53:83:34:7c:4a:0c:b6: f4:dd:3c:65:71:2a:c6:43:a4:c5:39:41:20:32:3b:e8:cf:a5: ea:44:67:73:2f:f3:dd:06:9b:38:13:b7:73:d6:35:c0:01:46: d2:82:b2:fd:47:a9:66:b3:27:72:b6:e7:93:7e:ab:50:56:bb: e2:42:87:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKH7ykYZpZy6ezmKDkP1QTwJywBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2OTBFQzg0NDY0NEZDN0M3MjkyMUU3RkE5RDhCODgy N0E2ODEzMzAeFw0yNjA3MTcwNzUyNDhaFw0yNjA3MTgwOTE5NDhaMDMxMTAvBgNV BAMTKDkzRkY0QThDNzg0MzQ2Q0FDNEY4MDVGMUQ0QjM1OUQyN0IzNjIxNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLbvNr3wQ/a4U9g/FAFAMPOa3 yF1H/fIWmj3S0tPY7kjliTj6b5f/9ZQvocoQQ3htgquZybOmKP9Nl2QnLD7NOqRJ cS2UjcDLqx8/W52u6LOgDPt4Cr5TaGJye2mt0DCgodvaudveQKNjnJPKdC/04wgP D2qzaPrGzj8UjiBHY4pVpfweA72hghjVWMhaiKZ3BX4qD5to80QJ1BGtKrcwoV8v fiXWBOJG0qLp/T9GZb0JBi39gEURU6Exz5FC4ws0aweaFuNOmiNqXaiqYATB7Y8v +5q43+8lmGQoJgyhlhxsAM6mEHMw79N7n9Atev0L6BaMv0pq8zyH5e9MIuLdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk/9KjHhDRsrE+AXx1LNZ0ns2IWwwHwYDVR0j BBgwFoAUSmkOyERkT8fHKSHn+p2LiCemgTMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTBmZjAyMmEtOWIxNi00YjRjLTk4YTItNTM0OTk0ZjU4OWQwLzAvNEE2OTBFQzg0 NDY0NEZDN0M3MjkyMUU3RkE5RDhCODgyN0E2ODEzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTY5MEVDODQ0NjQ0RkM3QzcyOTIxRTdGQTlEOEI4ODI3QTY4 MTMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTBmZjAyMmEtOWIxNi00YjRjLTk4 YTItNTM0OTk0ZjU4OWQwLzAvNEE2OTBFQzg0NDY0NEZDN0M3MjkyMUU3RkE5RDhC ODgyN0E2ODEzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoUgylfd38ZVO3L+gR2XSyTm8qaw2RZleIR VqYAOH/a4lfLvqgDKZ81MksglORIGnXWYf2zQ6OHZFGr4+pTHYkZBK/2OiZRZV8S ONGF52aONV+E1a0qZhBRO0K9TzRJhnDSK7cP8bUbT45NQh/5eu8f9YdC6opG6jzz St9KzrDiyHOs0gN2dO0DIwnkkAiiBn5FI+p3zB/MHbji4AjsLMNQEhENnT4HDFXq jI5LWjCWwAOWMPaGok1xMV5JNkSQU4M0fEoMtvTdPGVxKsZDpMU5QSAyO+jPpepE Z3Mv890GmzgTt3PWNcABRtKCsv1HqWazJ3K255N+q1BWu+JCh4w= -----END CERTIFICATE-----Generated at Sat Jul 18 01:50:42 2026 by rpki-client