$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft File: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft (raw, json) Hash identifier: MhzebSfbpgCn8TJ98ceQ1LT0xUvqEhc16+OBw5JPc30= Subject key identifier: 62:4B:C0:B6:33:AA:21:47:72:83:39:15:E9:50:AC:DD:9F:7F:61:AE Authority key identifier: 4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 Certificate issuer: /CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Certificate serial: 0D481379E6A77D43EA82CDD6CFEBC71DF4868DCF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft Manifest number: 94 Signing time: Thu 20 Aug 2026 08:48:27 +0000 Manifest this update: Thu 20 Aug 2026 08:43:27 +0000 Manifest next update: Fri 21 Aug 2026 09:14:27 +0000 Files and hashes: 1: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: 6pyTfAlzYTBLrXJyXEzbPma6QqEhBhRMnugG93bjYxI=) 2: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: fT4vbblEyZhxJwWJVYRrx1888tV3IqafJdFzwCoLzIU=) 3: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl (hash: KIougmNoeCTUmSVWTqi2GhER4yCspOkoD4OAN4D1Li0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 06:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:48:13:79:e6:a7:7d:43:ea:82:cd:d6:cf:eb:c7:1d:f4:86:8d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Validity Not Before: Aug 20 08:43:27 2026 GMT Not After : Aug 21 09:14:27 2026 GMT Subject: CN=624BC0B633AA214772833915E950ACDD9F7F61AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:26:59:53:c9:d4:e9:8d:26:28:73:85:b5:cc: 20:a0:dd:5d:5f:7c:cb:af:0c:e1:97:d2:9d:2d:7c: 3c:bf:cd:7c:9a:87:32:9f:5b:4a:98:11:0b:2a:3e: bf:36:c0:42:ea:0e:b6:af:d7:ff:9a:e4:d2:a5:e7: 8e:b0:3e:b3:d2:85:6f:d6:54:37:f6:0a:d9:fd:13: 41:90:39:3a:c0:82:dd:03:09:21:0c:1c:1f:00:43: 34:7c:31:13:08:87:83:07:83:e3:b8:a7:53:43:ca: 1f:bd:30:00:5c:b2:2b:e4:9a:89:b8:0c:87:8a:7a: 1a:f2:4f:29:b1:30:ff:5b:5b:5b:7d:a8:75:16:97: b7:9f:0b:5b:c9:10:5d:c2:11:45:ee:00:2d:53:ca: 46:8f:b1:a7:f3:f5:5c:dc:ad:4f:a3:e2:7d:f0:04: 6d:46:65:ab:6b:e6:96:d4:4b:cb:5f:6a:c9:a0:52: 40:33:3a:cd:86:0b:e7:50:27:20:40:27:6a:f8:45: b9:f8:af:b4:c4:d6:7c:67:63:4f:74:90:f2:a8:8a: ac:d7:27:a2:1a:91:92:a0:db:0e:d4:dc:29:30:2c: 21:de:fc:83:78:0a:a3:e9:8b:af:7a:f7:91:fa:a6: 1e:1d:27:ac:d7:d1:de:a7:47:f2:11:3f:4d:9b:f6: 00:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4B:C0:B6:33:AA:21:47:72:83:39:15:E9:50:AC:DD:9F:7F:61:AE X509v3 Authority Key Identifier: keyid:4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:78:b3:7e:b7:da:27:ee:0d:89:e1:e5:fe:8b:79:df:72:71: 03:7b:4b:b0:ed:c0:85:54:62:3b:b7:fa:29:6f:ac:8d:a0:08: a2:6b:0b:e9:af:6e:16:db:16:ad:e5:1c:fd:87:c4:b7:bc:af: cd:eb:74:58:0b:85:5d:08:a7:15:6a:e7:56:85:75:68:71:c9: 20:f9:f0:06:9c:93:f5:6c:a8:46:67:d9:48:27:a1:01:31:47: c0:44:da:27:0f:85:43:dc:d4:db:ed:05:d6:90:3d:58:73:6c: c3:85:d4:5a:3b:84:a6:6d:d9:6a:bf:29:96:28:18:20:bd:da: a0:4d:6a:1c:f5:49:77:70:02:ba:a3:11:52:d2:21:ef:e4:a4: 2f:08:87:07:6e:b3:47:49:f2:c1:56:38:0e:78:5f:c1:ff:5d: 65:b8:bf:d8:cb:92:4c:28:cc:4b:4d:43:76:b5:00:03:78:90: b2:00:d9:19:8f:87:06:1b:58:e5:b0:18:94:01:08:77:dd:1f: 50:b5:5b:66:de:c8:94:4a:11:27:78:08:12:f5:89:ae:4b:5d: 73:f7:c8:8c:c4:6f:d4:60:bc:5c:23:89:7b:81:85:d5:7e:8a: 86:0d:3f:41:8f:cf:03:79:8e:86:b2:e9:08:92:ee:f5:96:76: 01:02:9a:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDUgTeeanfUPqgs3Wz+vHHfSGjc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JCRTJE MEUwRDM5MTAeFw0yNjA4MjAwODQzMjdaFw0yNjA4MjEwOTE0MjdaMDMxMTAvBgNV BAMTKDYyNEJDMEI2MzNBQTIxNDc3MjgzMzkxNUU5NTBBQ0REOUY3RjYxQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPJllTydTpjSYoc4W1zCCg3V1f fMuvDOGX0p0tfDy/zXyahzKfW0qYEQsqPr82wELqDrav1/+a5NKl546wPrPShW/W VDf2Ctn9E0GQOTrAgt0DCSEMHB8AQzR8MRMIh4MHg+O4p1NDyh+9MABcsivkmom4 DIeKehryTymxMP9bW1t9qHUWl7efC1vJEF3CEUXuAC1TykaPsafz9VzcrU+j4n3w BG1GZatr5pbUS8tfasmgUkAzOs2GC+dQJyBAJ2r4Rbn4r7TE1nxnY090kPKoiqzX J6IakZKg2w7U3CkwLCHe/IN4CqPpi69695H6ph4dJ6zX0d6nR/IRP02b9gAxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYkvAtjOqIUdygzkV6VCs3Z9/Ya4wHwYDVR0j BBgwFoAUTUy+ZRqiIPkIjk27vJe74tDg05EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwN2UzZDgtOWJmYy00NDgzLWEyZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUx QUEyMjBGOTA4OEU0REJCQkM5N0JCRTJEMEUwRDM5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRDQkU2NTFBQTIyMEY5MDg4RTREQkJCQzk3QkJFMkQwRTBE MzkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy ZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JC RTJEMEUwRDM5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZ4s3632ifuDYnh5f6Led9ycQN7S7DtwIVU Yju3+ilvrI2gCKJrC+mvbhbbFq3lHP2HxLe8r83rdFgLhV0IpxVq51aFdWhxySD5 8Aack/VsqEZn2UgnoQExR8BE2icPhUPc1NvtBdaQPVhzbMOF1Fo7hKZt2Wq/KZYo GCC92qBNahz1SXdwArqjEVLSIe/kpC8Ihwdus0dJ8sFWOA54X8H/XWW4v9jLkkwo zEtNQ3a1AAN4kLIA2RmPhwYbWOWwGJQBCHfdH1C1W2beyJRKESd4CBL1ia5LXXP3 yIzEb9RgvFwjiXuBhdV+ioYNP0GPzwN5joay6QiS7vWWdgECmow= -----END CERTIFICATE-----Generated at Thu Aug 20 13:34:23 2026 by rpki-client