$ rpki-client -vvf rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft File: 4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft (raw, json) Hash identifier: eWwpTmbALGAwt/cgRygU/qw7LmBmVgehB1ewhRgybRg= Subject key identifier: 03:49:96:48:EE:61:04:49:A5:2B:20:8A:52:86:9A:C4:23:7E:96:C8 Authority key identifier: 4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A Certificate issuer: /CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A Certificate serial: 355A2E1BBEBB2C6EC1929FAF6A727012DFB33276 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 05:44:22 +0000 Manifest this update: Sun 02 Aug 2026 05:39:22 +0000 Manifest next update: Mon 03 Aug 2026 09:00:22 +0000 Files and hashes: 1: 4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl (hash: kGf5oScIZKQKmzRYIQpy0k8ey7TyZBDeLN0VS4snAy8=) 2: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: NbzRk+anslHWDpTfVCq58hG430siKypJAEmOtHHoBDU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:5a:2e:1b:be:bb:2c:6e:c1:92:9f:af:6a:72:70:12:df:b3:32:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A Validity Not Before: Aug 2 05:39:22 2026 GMT Not After : Aug 3 09:00:22 2026 GMT Subject: CN=03499648EE610449A52B208A52869AC4237E96C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:14:5b:a8:d2:66:ed:8f:c0:db:86:76:0c: b7:6c:ca:eb:59:09:be:9c:e4:d5:09:a7:c7:92:b3: 14:3b:52:34:61:3c:08:84:af:82:e2:8b:64:4a:26: 78:95:d1:ed:6d:a4:be:fd:cf:54:b9:d6:8c:b9:52: 5f:ab:89:bf:55:00:50:cc:2c:ca:c1:cb:8b:0b:fb: 3c:e9:df:b7:22:40:41:04:cc:e8:6f:a7:d8:e0:e6: e4:bb:21:69:42:45:20:0b:b3:68:6f:56:f7:81:a6: eb:bc:47:4f:8c:bc:c2:9e:65:44:82:ec:3e:4b:2f: a3:4d:0b:08:27:9d:d5:94:49:bd:ca:88:d3:0b:f0: b0:84:1e:1e:be:c2:7a:dd:e8:2c:15:f2:8b:c0:f0: ae:b0:a5:57:01:81:75:2a:1d:6f:e6:c3:b2:9b:f5: 2b:b7:f0:b8:0d:40:72:79:db:c3:53:11:5e:b3:f2: d8:f4:0d:ed:6b:32:db:8d:cb:5f:ad:a2:24:4a:2e: a6:7d:40:37:88:9d:9c:62:5b:1a:57:0d:87:d9:bb: 8c:99:d2:0c:fb:83:43:73:08:dd:f5:86:59:6f:6f: a1:44:9f:31:46:e4:88:74:fc:cb:6d:f5:98:42:d9: 14:2f:47:18:ec:5c:42:35:3a:20:45:ce:3b:1d:ac: 01:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:49:96:48:EE:61:04:49:A5:2B:20:8A:52:86:9A:C4:23:7E:96:C8 X509v3 Authority Key Identifier: keyid:4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:69:3f:2f:9e:63:78:3a:9a:2c:c2:07:42:a8:1a:1b:04:ef: 6f:ba:d9:5a:75:6c:07:8c:c8:70:b9:5f:3d:66:b6:97:9c:d8: 58:41:05:75:d1:ab:9d:8c:9d:be:18:15:59:9e:03:b6:fa:a3: ef:25:cc:1f:ec:7c:78:42:41:ef:a5:1d:44:1f:78:8d:13:70: 1b:e1:fa:b4:a4:6b:92:7e:78:34:04:1a:bd:d5:02:6c:96:92: d2:45:fe:50:be:b5:9e:47:c8:89:23:97:45:ed:a5:2e:84:95: bd:79:39:0b:23:14:33:70:11:4a:fa:0f:01:9b:17:d2:ba:ad: d0:01:2c:ab:f9:c4:98:96:7e:a1:98:ec:17:90:52:75:c3:9a: 0b:0d:ed:62:4c:12:6f:af:4f:e2:79:f9:80:8b:f8:5b:5b:86: 70:a6:92:a2:f2:54:ef:63:fe:1b:8c:f4:7a:52:80:dc:de:6d: dd:52:17:69:94:9f:e5:24:a3:bb:7a:ee:bd:09:fa:42:15:78: d3:93:ca:d8:43:cf:c9:dc:37:71:3c:39:52:0c:17:48:8e:bd: 1e:d5:22:7e:70:bd:d2:84:cc:cd:d1:b5:3a:24:e5:f7:a0:a9: 49:f7:53:ca:d2:32:fd:c9:fa:b6:12:7a:cc:37:f8:56:bd:44: cb:47:76:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNVouG767LG7Bkp+vanJwEt+zMnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDRUI1NjBCQzQyOERCRUM0RUMyRUYyRUY3NDJDOUJE QURDRTMwQTAeFw0yNjA4MDIwNTM5MjJaFw0yNjA4MDMwOTAwMjJaMDMxMTAvBgNV BAMTKDAzNDk5NjQ4RUU2MTA0NDlBNTJCMjA4QTUyODY5QUM0MjM3RTk2QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76xRbqNJm7Y/A24Z2DLdsyutZ Cb6c5NUJp8eSsxQ7UjRhPAiEr4Lii2RKJniV0e1tpL79z1S51oy5Ul+rib9VAFDM LMrBy4sL+zzp37ciQEEEzOhvp9jg5uS7IWlCRSALs2hvVveBpuu8R0+MvMKeZUSC 7D5LL6NNCwgnndWUSb3KiNML8LCEHh6+wnrd6CwV8ovA8K6wpVcBgXUqHW/mw7Kb 9Su38LgNQHJ528NTEV6z8tj0De1rMtuNy1+toiRKLqZ9QDeInZxiWxpXDYfZu4yZ 0gz7g0NzCN31hllvb6FEnzFG5Ih0/Mtt9ZhC2RQvRxjsXEI1OiBFzjsdrAHxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA0mWSO5hBEmlKyCKUoaaxCN+lsgwHwYDVR0j BBgwFoAUTc61YLxCjb7E7C7y73Qsm9rc4wowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGViYTg2N2EtOGY4NC00NjYzLWIzMjAtZjQzNTI4MmI5ZmZlLzAvNERDRUI1NjBC QzQyOERCRUM0RUMyRUYyRUY3NDJDOUJEQURDRTMwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RENFQjU2MEJDNDI4REJFQzRFQzJFRjJFRjc0MkM5QkRBRENF MzBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvNERDRUI1NjBCQzQyOERCRUM0RUMyRUYyRUY3NDJD OUJEQURDRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFpPy+eY3g6mizCB0KoGhsE72+62Vp1bAeM yHC5Xz1mtpec2FhBBXXRq52Mnb4YFVmeA7b6o+8lzB/sfHhCQe+lHUQfeI0TcBvh +rSka5J+eDQEGr3VAmyWktJF/lC+tZ5HyIkjl0XtpS6Elb15OQsjFDNwEUr6DwGb F9K6rdABLKv5xJiWfqGY7BeQUnXDmgsN7WJMEm+vT+J5+YCL+FtbhnCmkqLyVO9j /huM9HpSgNzebd1SF2mUn+Uko7t67r0J+kIVeNOTythDz8ncN3E8OVIMF0iOvR7V In5wvdKEzM3RtTok5fegqUn3U8rSMv3J+rYSesw3+Fa9RMtHdmI= -----END CERTIFICATE-----Generated at Sun Aug 2 22:45:30 2026 by rpki-client