$ rpki-client -vvf rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft File: 4D687A8309B055D62F3035664A59E96297B81009.mft (raw, json) Hash identifier: YjE0XoCJOMfc7sMyyUQzGubWGIDVKrZYX7GaZvLi1X8= Subject key identifier: F1:CB:28:16:73:7B:AA:B8:1A:DC:65:AB:8F:B4:AA:22:8B:CB:85:ED Authority key identifier: 4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 Certificate issuer: /CN=4D687A8309B055D62F3035664A59E96297B81009 Certificate serial: 6BBA43899265439742B267B57A01B9BB456F37A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 15:10:43 +0000 Manifest this update: Sun 02 Aug 2026 15:05:43 +0000 Manifest next update: Mon 03 Aug 2026 18:52:43 +0000 Files and hashes: 1: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: tjAZ37II5WIJfFalAyrLUGpbSIz9sgJWYsOEq442hNI=) 2: 4D687A8309B055D62F3035664A59E96297B81009.crl (hash: c/c4/lH+cya11R7MJS3eqod6KIAA7j83AjHecpuoAY4=) 3: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: qwKrohM8yd0iJN/MCZ42zzEDzwWYAIoaAZk2ayeImcw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ba:43:89:92:65:43:97:42:b2:67:b5:7a:01:b9:bb:45:6f:37:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D687A8309B055D62F3035664A59E96297B81009 Validity Not Before: Aug 2 15:05:43 2026 GMT Not After : Aug 3 18:52:43 2026 GMT Subject: CN=F1CB2816737BAAB81ADC65AB8FB4AA228BCB85ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:62:27:d0:12:2b:5f:d4:50:ca:96:90:81:fe: eb:b1:f3:85:af:b9:07:b3:44:6d:d0:8b:d4:ea:af: 42:8f:ab:f7:d9:8f:b7:58:cd:46:c8:d6:69:04:9a: cd:69:b3:76:9d:88:bf:07:8e:07:96:25:8f:c7:f4: 16:b6:a4:7b:4b:bf:47:00:56:f3:15:51:00:aa:1d: d6:08:8e:4e:ea:79:b9:32:5f:8b:3f:6b:32:ef:49: 80:95:d4:90:57:62:d7:e4:c9:94:3b:04:4b:0b:03: 13:f9:3e:bc:6d:c6:48:1f:46:6b:69:a6:2e:b0:46: 79:02:5c:8f:94:54:53:7a:8a:bc:6f:61:de:ee:df: f3:b4:39:e5:ec:ed:f9:2d:25:4b:4c:09:c2:8a:f3: cb:c9:2e:76:d8:8d:1c:53:c0:fc:09:9d:02:a8:c6: 08:24:09:5f:25:b4:71:44:41:df:c5:9e:d0:82:2f: b2:ce:e8:ac:f3:62:16:58:cd:fd:a1:eb:2b:1b:57: c9:00:8f:d2:fa:0d:23:82:f0:ef:f8:92:93:d7:d8: 4a:30:5e:81:a3:62:2f:6d:dc:96:27:00:06:ca:06: b9:6d:69:09:5e:bd:b8:d0:56:26:ef:88:fd:2e:be: b4:2f:f4:f5:03:0a:04:b1:39:09:fd:55:87:6e:27: cc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CB:28:16:73:7B:AA:B8:1A:DC:65:AB:8F:B4:AA:22:8B:CB:85:ED X509v3 Authority Key Identifier: keyid:4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:a5:f4:c2:0d:2b:3e:b4:04:20:72:30:58:c5:68:51:f2:1b: 78:a4:a9:9e:9a:6a:50:77:d2:ff:9e:20:af:9c:86:e4:81:07: 0d:4a:fb:0c:ab:b6:99:a7:e0:cf:9e:db:cc:c9:f6:51:4f:89: af:e4:86:e3:ea:b4:07:5c:fe:a5:19:f9:2c:1b:f4:6e:e5:16: 79:76:81:37:1f:d2:36:96:d0:11:15:4a:d6:65:d4:c3:55:48: 6a:1c:f7:04:09:00:36:95:c4:a5:56:40:2c:57:08:08:d5:bb: e3:d7:34:8b:99:b7:e4:cc:de:06:08:35:80:56:d7:91:26:1f: ab:ea:40:86:7c:2b:ba:f9:8f:dc:e1:19:0b:e7:f7:2e:bf:23: f4:7e:60:dd:e1:ee:cc:46:ba:8d:a8:40:a6:68:e2:0a:5a:2d: 82:5b:67:e6:cb:12:93:b7:f7:04:77:72:81:50:3b:be:b7:c1: cc:05:ca:e0:d1:c6:a4:44:3c:9f:73:2f:dc:f3:ff:df:9e:35: 81:0a:8e:3b:c2:3a:36:3f:f9:ad:b3:da:96:1a:53:5b:4e:f4: 7c:06:8c:a2:5a:d1:e9:72:3a:34:05:e7:0b:db:2e:20:65:93: 94:ff:88:1d:d5:ae:d9:e0:a5:84:1c:15:b9:1d:7c:f9:7d:da: ef:04:48:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7pDiZJlQ5dCsme1egG5u0VvN6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5 N0I4MTAwOTAeFw0yNjA4MDIxNTA1NDNaFw0yNjA4MDMxODUyNDNaMDMxMTAvBgNV BAMTKEYxQ0IyODE2NzM3QkFBQjgxQURDNjVBQjhGQjRBQTIyOEJDQjg1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWYifQEitf1FDKlpCB/uux84Wv uQezRG3Qi9Tqr0KPq/fZj7dYzUbI1mkEms1ps3adiL8HjgeWJY/H9Ba2pHtLv0cA VvMVUQCqHdYIjk7qebkyX4s/azLvSYCV1JBXYtfkyZQ7BEsLAxP5PrxtxkgfRmtp pi6wRnkCXI+UVFN6irxvYd7u3/O0OeXs7fktJUtMCcKK88vJLnbYjRxTwPwJnQKo xggkCV8ltHFEQd/FntCCL7LO6KzzYhZYzf2h6ysbV8kAj9L6DSOC8O/4kpPX2Eow XoGjYi9t3JYnAAbKBrltaQlevbjQVibviP0uvrQv9PUDCgSxOQn9VYduJ8z5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8csoFnN7qrga3GWrj7SqIovLhe0wHwYDVR0j BBgwFoAUTWh6gwmwVdYvMDVmSlnpYpe4EAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg5MTM4OTMtNWY2NC00YTVlLWE4ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMw OUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5N0I4MTAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80RDY4N0E4MzA5QjA1NUQ2MkYzMDM1NjY0QTU5RTk2Mjk3Qjgx MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5 NjI5N0I4MTAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJal9MINKz60BCByMFjFaFHyG3ikqZ6aalB3 0v+eIK+chuSBBw1K+wyrtpmn4M+e28zJ9lFPia/khuPqtAdc/qUZ+Swb9G7lFnl2 gTcf0jaW0BEVStZl1MNVSGoc9wQJADaVxKVWQCxXCAjVu+PXNIuZt+TM3gYINYBW 15EmH6vqQIZ8K7r5j9zhGQvn9y6/I/R+YN3h7sxGuo2oQKZo4gpaLYJbZ+bLEpO3 9wR3coFQO763wcwFyuDRxqREPJ9zL9zz/9+eNYEKjjvCOjY/+a2z2pYaU1tO9HwG jKJa0elyOjQF5wvbLiBlk5T/iB3VrtngpYQcFbkdfPl92u8ESCc= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:51 2026 by rpki-client