$ rpki-client -vvf rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft File: 4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft (raw, json) Hash identifier: 6loWqzFwr1yu4Zl0Da9EqkYuHToLiO7sBVK43cmgSnU= Subject key identifier: EE:D0:26:A9:2D:D6:CE:C8:18:71:6B:51:71:30:0C:CF:27:1C:5B:60 Authority key identifier: 4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15 Certificate issuer: /CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515 Certificate serial: 3CB550FA96169C3DABDA645589E7DF30F741BA10 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft Manifest number: 61 Signing time: Mon 13 Jul 2026 12:23:40 +0000 Manifest this update: Mon 13 Jul 2026 12:18:40 +0000 Manifest next update: Tue 14 Jul 2026 15:59:40 +0000 Files and hashes: 1: 4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl (hash: KFfnxOhLw8q2Y4S9Vepq+3JJf97SlLs/7tmkZyv3ZQ8=) 2: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: kEQuuE3MZPluiYnypOmYBPYLGkYCAstrSIg304qTUMU=) 3: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: pqH7WpxtojGs6NyUT0vVoZIYUBKEAJzFb6PabPXpeUg=) 4: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: NFMSe8jpXIOrJJynKVDw112aSae0hUPV8Ycnly1ty30=) 5: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: j4hOV3opgjAagd+hKmonrIvCvECab8tS3BbyVP+3UsM=) 6: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: xBC6wC0qaSZA17wYqb5z2deY4tddRBLazqglI6ol9r0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 15:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b5:50:fa:96:16:9c:3d:ab:da:64:55:89:e7:df:30:f7:41:ba:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515 Validity Not Before: Jul 13 12:18:40 2026 GMT Not After : Jul 14 15:59:40 2026 GMT Subject: CN=EED026A92DD6CEC818716B5171300CCF271C5B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:18:1c:be:05:d5:18:ca:4d:b8:7f:a2:f3:89: 51:1b:f1:26:0d:fe:98:8c:05:e6:cc:18:2b:8b:35: 13:59:a1:d4:5f:d5:ac:07:7f:74:ec:5c:62:23:91: 4b:d3:fa:d5:01:25:57:9a:61:60:ce:16:33:20:c1: 0c:2f:7e:cc:38:1b:73:3d:08:1a:db:05:e7:84:e4: 7e:23:72:61:2d:fd:fa:ee:1e:0e:f8:11:2a:1d:ec: ff:c0:6f:93:52:a6:a7:84:d7:fc:8a:03:58:f6:98: 87:ea:fd:fd:09:db:3f:f4:e3:24:c5:21:16:95:19: 3a:53:71:f5:a3:2b:94:63:b9:88:9f:d3:31:18:b2: 5c:84:1d:c7:43:be:ae:73:cf:36:22:00:59:20:17: 24:ff:80:c2:ef:5f:71:76:42:67:cf:4c:31:14:7e: 2d:1f:b4:cd:06:36:ec:30:2e:9d:fb:7d:37:66:90: 4c:33:de:7a:ad:74:fd:5e:dc:6a:cf:35:6f:67:4d: bd:d6:c8:78:31:bc:95:a3:7b:25:a5:f2:04:a0:a8: e1:f8:d2:38:22:4a:64:57:83:cc:cd:2c:1a:29:3f: f8:7f:12:bc:f9:67:f7:04:e7:73:5b:51:a7:27:ff: 5e:7c:5a:f0:50:99:65:50:2b:cd:6f:51:23:d6:c2: d0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D0:26:A9:2D:D6:CE:C8:18:71:6B:51:71:30:0C:CF:27:1C:5B:60 X509v3 Authority Key Identifier: keyid:4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:b0:98:45:7d:31:0b:90:96:8e:95:4d:f1:55:57:95:06:4d: d7:c4:6a:65:fd:4e:74:0b:38:02:18:1d:97:43:bc:24:12:78: e7:d3:f2:c0:27:a6:78:a3:3c:87:d3:e9:f5:f8:5c:27:eb:01: 92:b2:08:7a:ed:fc:13:ec:44:c6:cd:57:73:ca:ef:4c:d5:2e: ba:bd:9b:69:39:5d:12:3e:a6:7e:d2:d2:67:b7:8b:20:87:26: 29:d7:b6:09:d9:6d:54:5a:c8:79:0c:dd:01:46:d9:35:6d:62: 69:3c:43:ef:bf:ed:dd:00:00:2a:d1:9a:81:ed:2c:a1:49:79: 86:8d:cd:4b:75:19:f2:f8:35:21:c3:c7:b6:0b:97:a2:1a:04: d6:35:70:36:1c:48:00:d5:27:b6:aa:2c:ef:83:5a:f3:1c:e7: d3:3f:0c:9e:05:3d:22:cb:67:27:66:59:d2:f6:31:aa:f1:89: 9b:4a:e4:a0:1e:91:2e:e6:73:e8:08:72:c8:23:3c:16:80:90: ba:be:65:2c:22:f5:44:43:68:51:27:db:9e:ff:b9:d8:cb:91: 6f:dc:e1:29:2c:e7:33:fa:7c:65:33:f0:d0:a4:72:a8:27:dc: ba:e2:e3:35:ad:9f:ba:35:88:0a:6f:4e:5d:e3:4c:f0:c0:71: c5:cf:77:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPLVQ+pYWnD2r2mRVieffMPdBuhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0QkY4NEU3RDZGMzlENjI3QkU1QjUwQTkxNzMxNURG RUJGMTUxNTAeFw0yNjA3MTMxMjE4NDBaFw0yNjA3MTQxNTU5NDBaMDMxMTAvBgNV BAMTKEVFRDAyNkE5MkRENkNFQzgxODcxNkI1MTcxMzAwQ0NGMjcxQzVCNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtGBy+BdUYyk24f6LziVEb8SYN /piMBebMGCuLNRNZodRf1awHf3TsXGIjkUvT+tUBJVeaYWDOFjMgwQwvfsw4G3M9 CBrbBeeE5H4jcmEt/fruHg74ESod7P/Ab5NSpqeE1/yKA1j2mIfq/f0J2z/04yTF IRaVGTpTcfWjK5RjuYif0zEYslyEHcdDvq5zzzYiAFkgFyT/gMLvX3F2QmfPTDEU fi0ftM0GNuwwLp37fTdmkEwz3nqtdP1e3GrPNW9nTb3WyHgxvJWjeyWl8gSgqOH4 0jgiSmRXg8zNLBopP/h/Erz5Z/cE53NbUacn/158WvBQmWVQK81vUSPWwtBRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7tAmqS3WzsgYcWtRcTAMzyccW2AwHwYDVR0j BBgwFoAUTUv4Tn1vOdYnvltQqRcxXf6/FRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0ZTZiMmQtM2RkYi00NmViLTgzZWYtYzk5YjIwMDM3ODNmLzAvNEQ0QkY4NEU3 RDZGMzlENjI3QkU1QjUwQTkxNzMxNURGRUJGMTUxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRCRjg0RTdENkYzOUQ2MjdCRTVCNTBBOTE3MzE1REZFQkYx NTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz ZWYtYzk5YjIwMDM3ODNmLzAvNEQ0QkY4NEU3RDZGMzlENjI3QkU1QjUwQTkxNzMx NURGRUJGMTUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmwmEV9MQuQlo6VTfFVV5UGTdfEamX9TnQL OAIYHZdDvCQSeOfT8sAnpnijPIfT6fX4XCfrAZKyCHrt/BPsRMbNV3PK70zVLrq9 m2k5XRI+pn7S0me3iyCHJinXtgnZbVRayHkM3QFG2TVtYmk8Q++/7d0AACrRmoHt LKFJeYaNzUt1GfL4NSHDx7YLl6IaBNY1cDYcSADVJ7aqLO+DWvMc59M/DJ4FPSLL ZydmWdL2MarxiZtK5KAekS7mc+gIcsgjPBaAkLq+ZSwi9URDaFEn257/udjLkW/c 4Sks5zP6fGUz8NCkcqgn3Lri4zWtn7o1iApvTl3jTPDAccXPdwU= -----END CERTIFICATE-----Generated at Tue Jul 14 03:44:53 2026 by rpki-client