$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft File: 4DD4106B03003D9C5B51BF893631C8E467E07F65.mft (raw, json) Hash identifier: LQqFaj/gLvMOg1gdQ2Z+Pd/ALqKVQsuUdLhpYWAydrQ= Subject key identifier: 7F:84:EE:3A:CC:3F:6F:C7:37:2B:24:F1:91:B6:D7:F2:67:0E:7A:D4 Authority key identifier: 4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65 Certificate issuer: /CN=4DD4106B03003D9C5B51BF893631C8E467E07F65 Certificate serial: 0F91E517A68CA63C758F45D40E84D14994B18BB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft Manifest number: 93 Signing time: Thu 20 Aug 2026 07:47:19 +0000 Manifest this update: Thu 20 Aug 2026 07:42:19 +0000 Manifest next update: Fri 21 Aug 2026 09:45:19 +0000 Files and hashes: 1: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: 8wp+UX0eKC57lngDUIgSZuJvHJ5tDAZofYJHo8cFmpA=) 2: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: vt8DYAXcs1pDLyawi9vIroRmMQYzGKkbfW81Knq/qWg=) 3: 4DD4106B03003D9C5B51BF893631C8E467E07F65.crl (hash: JMI27mI4SY2Bj8Ce6X38ly5K8kq4uEGk6m3kxWc9r4s=) 4: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: 1g+y0imkE46p3egXComeqIG0umuFfgQzJzzyy2lkq6g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 06:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:91:e5:17:a6:8c:a6:3c:75:8f:45:d4:0e:84:d1:49:94:b1:8b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD4106B03003D9C5B51BF893631C8E467E07F65 Validity Not Before: Aug 20 07:42:19 2026 GMT Not After : Aug 21 09:45:19 2026 GMT Subject: CN=7F84EE3ACC3F6FC7372B24F191B6D7F2670E7AD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:51:67:cf:6e:b1:f3:21:ef:56:d9:be:74: 36:9f:cc:e4:05:ff:06:97:a1:96:04:ff:75:4d:6f: 88:1e:89:83:26:78:ad:04:c3:ad:0a:48:40:09:46: d3:4b:5f:8f:8c:51:29:db:e6:b4:f2:3c:ec:40:fc: aa:43:20:26:0c:c6:54:c9:72:e9:c2:4f:15:2c:29: 8b:b4:99:41:f5:34:d9:b6:c2:0c:93:9e:19:c6:23: 92:8a:8d:05:c2:83:25:14:9d:1a:93:e2:08:3f:48: d4:67:25:24:0d:51:6e:53:14:ab:3a:2e:44:30:38: 23:68:af:4c:cb:20:23:6f:45:00:ac:59:0c:20:0f: a4:16:d2:91:65:f3:e0:a2:a8:1b:1f:c3:0e:a3:ce: 76:ac:a5:90:a1:ef:e0:8d:3e:fa:2f:5d:fd:a1:39: ca:99:35:da:e8:a9:e4:10:8b:49:dc:c6:30:8c:b5: ad:b0:86:df:09:00:00:7a:8b:57:ea:c6:75:ed:41: c0:89:57:3d:ba:98:52:79:06:08:cb:8c:c0:62:3d: d7:fb:6f:bb:6c:e9:0e:45:30:68:ef:2c:fa:1b:b3: 0d:79:56:de:96:fa:6d:d3:ed:50:d3:7c:b2:41:3a: a2:da:17:3e:50:8b:e9:be:b5:f2:1c:a5:4e:fc:80: 27:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:84:EE:3A:CC:3F:6F:C7:37:2B:24:F1:91:B6:D7:F2:67:0E:7A:D4 X509v3 Authority Key Identifier: keyid:4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:0b:2d:7c:dc:18:c4:88:73:6e:37:7c:91:d0:c1:60:c0:d1: bf:53:32:03:ca:32:b5:ee:30:bd:05:02:91:1a:75:d1:1f:4d: 22:89:af:87:d7:92:ca:15:52:75:f5:c8:a6:ab:76:f6:94:4a: 86:21:ce:84:6e:83:96:5e:b9:99:42:85:11:a1:b1:5a:0a:1b: c2:ee:65:a6:b9:36:e7:86:95:3e:75:36:0c:e6:08:86:fa:5e: 79:7a:81:42:bd:62:ca:54:2d:38:8d:d7:34:90:9e:84:84:ba: 10:86:9f:52:f5:74:81:f0:a0:23:51:79:8f:7f:32:b2:95:2b: a5:3c:5a:de:e5:c4:b9:93:84:08:f5:6a:b7:1e:1b:c7:af:ed: 82:f0:97:42:37:e8:2f:1c:df:41:fa:3b:ba:95:3d:2f:a0:cf: c3:22:05:91:24:77:70:9e:57:64:34:e3:a2:e6:1a:ce:d4:9d: 5c:80:0c:5e:fe:b4:61:45:b4:92:99:84:e0:50:7e:88:73:7d: 99:97:7f:5b:8b:50:6a:b4:57:e4:0e:3c:d1:56:86:a6:59:a7: 1d:5b:b5:ca:3f:f7:21:69:4b:74:b4:c1:9a:e2:1e:4c:a3:9b: ca:cc:b1:d3:8f:10:ca:a2:c9:e2:16:58:3d:42:5f:26:43:3f: cb:4a:e3:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD5HlF6aMpjx1j0XUDoTRSZSxi7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERENDEwNkIwMzAwM0Q5QzVCNTFCRjg5MzYzMUM4RTQ2 N0UwN0Y2NTAeFw0yNjA4MjAwNzQyMTlaFw0yNjA4MjEwOTQ1MTlaMDMxMTAvBgNV BAMTKDdGODRFRTNBQ0MzRjZGQzczNzJCMjRGMTkxQjZEN0YyNjcwRTdBRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16FFnz26x8yHvVtm+dDafzOQF /waXoZYE/3VNb4geiYMmeK0Ew60KSEAJRtNLX4+MUSnb5rTyPOxA/KpDICYMxlTJ cunCTxUsKYu0mUH1NNm2wgyTnhnGI5KKjQXCgyUUnRqT4gg/SNRnJSQNUW5TFKs6 LkQwOCNor0zLICNvRQCsWQwgD6QW0pFl8+CiqBsfww6jznaspZCh7+CNPvovXf2h OcqZNdroqeQQi0ncxjCMta2wht8JAAB6i1fqxnXtQcCJVz26mFJ5BgjLjMBiPdf7 b7ts6Q5FMGjvLPobsw15Vt6W+m3T7VDTfLJBOqLaFz5Qi+m+tfIcpU78gCdtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf4TuOsw/b8c3KyTxkbbX8mcOetQwHwYDVR0j BBgwFoAUTdQQawMAPZxbUb+JNjHI5Gfgf2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkZTkzNmItNTNjZi00YjA4LWI1ZjctMmI5MGRlMjFmZTk0LzAvNERENDEwNkIw MzAwM0Q5QzVCNTFCRjg5MzYzMUM4RTQ2N0UwN0Y2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REQ0MTA2QjAzMDAzRDlDNUI1MUJGODkzNjMxQzhFNDY3RTA3 RjY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvNERENDEwNkIwMzAwM0Q5QzVCNTFCRjg5MzYzMUM4 RTQ2N0UwN0Y2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwLLXzcGMSIc243fJHQwWDA0b9TMgPKMrXu ML0FApEaddEfTSKJr4fXksoVUnX1yKardvaUSoYhzoRug5ZeuZlChRGhsVoKG8Lu Zaa5NueGlT51NgzmCIb6Xnl6gUK9YspULTiN1zSQnoSEuhCGn1L1dIHwoCNReY9/ MrKVK6U8Wt7lxLmThAj1arceG8ev7YLwl0I36C8c30H6O7qVPS+gz8MiBZEkd3Ce V2Q046LmGs7UnVyADF7+tGFFtJKZhOBQfohzfZmXf1uLUGq0V+QOPNFWhqZZpx1b tco/9yFpS3S0wZriHkyjm8rMsdOPEMqiyeIWWD1CXyZDP8tK4+4= -----END CERTIFICATE-----Generated at Thu Aug 20 13:17:52 2026 by rpki-client