$ rpki-client -vvf rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft File: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft (raw, json) Hash identifier: L6tmtpm1x364nqAetqfO0VdGxuO+BEk7QTGod+R4hUo= Subject key identifier: A3:93:87:05:E7:6E:B9:6D:0A:E0:C7:E5:14:B7:46:38:25:EC:69:F0 Authority key identifier: 48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 Certificate issuer: /CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Certificate serial: 143935F82F51BAD8BB896A1B83EEE84799095E99 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft Manifest number: 7A Signing time: Sun 02 Aug 2026 04:43:05 +0000 Manifest this update: Sun 02 Aug 2026 04:38:05 +0000 Manifest next update: Mon 03 Aug 2026 07:37:05 +0000 Files and hashes: 1: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: gNsJ7E8Wxy2p/7sU5QpT/62BpjOz3T6D3tTX9O4/j10=) 2: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: 5QHnLxUj5ToZbDP+kG+27eOW/Apgnrnl+qyMt1ibRXw=) 3: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl (hash: 5oSibNQtR7NRYb9jtgO5rnvp00ri4eWzw65Vl1Yxegw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:39:35:f8:2f:51:ba:d8:bb:89:6a:1b:83:ee:e8:47:99:09:5e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Validity Not Before: Aug 2 04:38:05 2026 GMT Not After : Aug 3 07:37:05 2026 GMT Subject: CN=A3938705E76EB96D0AE0C7E514B7463825EC69F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:21:93:e4:42:e9:ce:f4:be:c0:66:8a:73:68: 6e:38:d9:1e:a1:c9:01:f0:74:45:54:7c:e9:63:5e: a9:bf:22:f7:7c:c6:1c:a7:cc:37:10:49:aa:fe:d5: 3d:22:65:85:8d:61:cb:e3:c9:84:9f:ac:88:ce:11: 7d:f6:21:f1:a5:c7:c3:6b:43:2c:9b:6e:4f:62:de: a2:be:13:e9:25:dd:fd:be:ae:4b:d6:e3:00:f5:cd: f8:eb:00:43:96:d2:8f:56:f2:fc:94:20:f0:36:96: b5:4a:d9:c5:09:dc:d8:a3:3c:79:9d:64:49:d3:9c: 65:4b:b7:77:0b:7c:e9:ba:6c:2a:f6:13:07:31:a8: 88:21:68:ac:e4:72:28:3d:00:df:9b:af:6d:c7:1c: 41:a8:ce:a9:21:06:55:c0:9e:c4:7c:bd:ae:d3:69: 2c:28:b4:89:ab:f4:8b:d4:03:27:4c:78:ea:8c:7d: ff:2c:41:4a:52:35:76:25:a7:3d:9f:d6:f3:dc:2b: 01:51:41:6b:54:15:74:ea:88:2b:97:59:c5:66:71: 6b:1c:6f:3a:fe:06:a5:7c:9f:e6:9f:fc:e9:bb:ba: 38:68:39:84:b7:a6:d5:e9:5f:b9:0b:89:e4:b1:b6: cb:39:ce:0b:27:9e:7f:37:59:bd:a2:c4:ff:98:4e: ca:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:93:87:05:E7:6E:B9:6D:0A:E0:C7:E5:14:B7:46:38:25:EC:69:F0 X509v3 Authority Key Identifier: keyid:48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:3b:1a:38:12:3e:8a:51:62:8d:44:45:f1:80:99:7e:a1:1a: 11:21:00:3e:7e:d4:b7:8e:5b:89:00:95:6f:38:5b:c0:08:dc: 8c:bf:2e:53:cc:a7:e6:22:c0:4d:8e:57:a3:a1:f7:f2:a5:d6: e9:95:49:b5:aa:00:dc:54:a5:71:6d:81:b5:7d:f5:bc:d4:5e: ad:52:9e:0e:41:4e:a5:be:3a:74:80:f7:35:19:f0:70:56:67: 5e:23:46:1f:7f:60:e0:f4:6e:fe:aa:45:63:66:39:9d:fc:06: 10:7d:49:37:29:28:f9:fe:37:f2:07:c4:93:75:cb:0e:67:81: 2f:2d:4c:72:01:b7:4e:11:bf:8e:17:1e:04:14:c0:78:ea:82: 18:6a:d2:bb:1b:ac:b2:7e:ad:b1:a2:58:c8:e9:eb:e4:4a:ca: e0:f3:2c:af:55:57:4d:7d:10:8b:4d:eb:c7:cd:0b:55:be:05: 45:61:f0:b5:5c:c4:0a:cf:2d:e1:e9:66:00:ed:6d:f3:95:48: 9b:26:7a:90:0d:ea:d4:06:87:46:fe:f8:53:8d:6c:e3:39:29: 23:2c:de:38:88:2d:03:33:92:1a:2e:b0:29:3b:2b:8a:69:62: 3c:a8:d3:33:eb:ed:7f:8b:54:c9:04:f2:06:02:b9:5c:b4:6a: b3:b7:d6:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFDk1+C9Ruti7iWobg+7oR5kJXpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4 QUY2ODdEMzAeFw0yNjA4MDIwNDM4MDVaFw0yNjA4MDMwNzM3MDVaMDMxMTAvBgNV BAMTKEEzOTM4NzA1RTc2RUI5NkQwQUUwQzdFNTE0Qjc0NjM4MjVFQzY5RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgIZPkQunO9L7AZopzaG442R6h yQHwdEVUfOljXqm/Ivd8xhynzDcQSar+1T0iZYWNYcvjyYSfrIjOEX32IfGlx8Nr Qyybbk9i3qK+E+kl3f2+rkvW4wD1zfjrAEOW0o9W8vyUIPA2lrVK2cUJ3NijPHmd ZEnTnGVLt3cLfOm6bCr2EwcxqIghaKzkcig9AN+br23HHEGozqkhBlXAnsR8va7T aSwotImr9IvUAydMeOqMff8sQUpSNXYlpz2f1vPcKwFRQWtUFXTqiCuXWcVmcWsc bzr+BqV8n+af/Om7ujhoOYS3ptXpX7kLieSxtss5zgsnnn83Wb2ixP+YTsrlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo5OHBeduuW0K4MflFLdGOCXsafAwHwYDVR0j BBgwFoAUSIXnXWsKk49f7jX6uibeoIr2h9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZmN2VmMzQtNDk5MS00YmIxLTk2YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2 QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4QUY2ODdEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg1RTc1RDZCMEE5MzhGNUZFRTM1RkFCQTI2REVBMDhBRjY4 N0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZmN2VmMzQtNDk5MS00YmIxLTk2 YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRF QTA4QUY2ODdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADc7GjgSPopRYo1ERfGAmX6hGhEhAD5+1LeO W4kAlW84W8AI3Iy/LlPMp+YiwE2OV6Oh9/Kl1umVSbWqANxUpXFtgbV99bzUXq1S ng5BTqW+OnSA9zUZ8HBWZ14jRh9/YOD0bv6qRWNmOZ38BhB9STcpKPn+N/IHxJN1 yw5ngS8tTHIBt04Rv44XHgQUwHjqghhq0rsbrLJ+rbGiWMjp6+RKyuDzLK9VV019 EItN68fNC1W+BUVh8LVcxArPLeHpZgDtbfOVSJsmepAN6tQGh0b++FONbOM5KSMs 3jiILQMzkhousCk7K4ppYjyo0zPr7X+LVMkE8gYCuVy0arO31tI= -----END CERTIFICATE-----Generated at Sun Aug 2 22:45:41 2026 by rpki-client