$ rpki-client -vvf rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft File: A4249B719E5F988286AD3B4164C4E77F434FF948.mft (raw, json) Hash identifier: 3xUPnltc9SqH3GuHZvZRwN91xooJEckozu9EziXQLIA= Subject key identifier: EE:85:5D:8B:D7:89:47:39:D1:0B:75:B8:14:AC:7D:C7:6C:EC:88:12 Authority key identifier: A4:24:9B:71:9E:5F:98:82:86:AD:3B:41:64:C4:E7:7F:43:4F:F9:48 Certificate issuer: /CN=A4249B719E5F988286AD3B4164C4E77F434FF948 Certificate serial: 71629C60DABE26D22DF1BDA2454E41D739C1A8CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 10:35:27 +0000 Manifest this update: Sun 02 Aug 2026 10:30:27 +0000 Manifest next update: Mon 03 Aug 2026 13:45:27 +0000 Files and hashes: 1: A4249B719E5F988286AD3B4164C4E77F434FF948.crl (hash: HDaeu4swUOlAnONTD7pdo9XB3zudqT9zveOaoEbxiJs=) 2: 3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa (hash: /8ZMrBAQoa3qQ8hBZzRb+TXTbN8qY8Wvj8VBQo+giW0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.crl rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 13:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:62:9c:60:da:be:26:d2:2d:f1:bd:a2:45:4e:41:d7:39:c1:a8:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4249B719E5F988286AD3B4164C4E77F434FF948 Validity Not Before: Aug 2 10:30:27 2026 GMT Not After : Aug 3 13:45:27 2026 GMT Subject: CN=EE855D8BD7894739D10B75B814AC7DC76CEC8812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:d9:b5:f0:4c:4c:ef:77:52:d1:05:a5:87: d4:9d:d3:7f:de:cd:3e:92:32:0c:30:6b:cd:f4:6a: e5:3e:48:b4:9f:5f:1c:dd:d5:43:cc:5e:1d:59:90: 09:32:1f:35:25:90:4d:00:de:52:a5:ce:82:a2:cb: 0a:e2:96:61:40:c0:6b:dc:15:87:e5:30:1c:13:1a: dc:42:57:74:7a:00:a1:c0:c0:77:4e:d9:23:db:a4: a0:41:03:73:5c:1f:5a:2b:73:5b:35:61:e9:00:09: 40:73:9c:d1:3e:91:60:c8:c5:54:f0:59:f2:bb:3c: 69:f3:92:94:d3:28:b0:ac:86:ad:43:c3:48:72:8a: c4:8c:35:35:ff:9d:27:15:46:d7:36:19:79:04:c1: 7a:ed:24:3a:4f:9f:57:29:83:0f:57:a4:73:38:a5: 8a:73:53:13:2f:97:c1:27:0c:c3:74:6e:c8:c3:37: 81:01:44:6b:d7:02:9c:6c:1d:1b:e6:08:d7:89:45: 3c:b0:ba:66:14:ef:f1:3b:d3:59:d3:fe:82:58:66: 55:d2:9f:2e:be:d4:bd:dd:0e:ac:d8:47:a5:0d:81: ce:e4:c8:64:e2:29:ed:99:d9:19:40:de:2c:68:ae: cc:e9:7b:7b:41:e8:2b:e7:e9:47:d5:b2:87:6f:45: 12:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:85:5D:8B:D7:89:47:39:D1:0B:75:B8:14:AC:7D:C7:6C:EC:88:12 X509v3 Authority Key Identifier: keyid:A4:24:9B:71:9E:5F:98:82:86:AD:3B:41:64:C4:E7:7F:43:4F:F9:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e8:cb:54:28:1d:9b:50:1f:db:37:06:dd:7c:d1:bf:7c:14: ea:69:16:bf:94:39:31:9a:06:6e:a4:f3:e0:1b:69:27:60:b8: bb:f7:4f:99:df:77:95:be:65:a7:f2:3e:4b:a0:a5:b4:1f:8c: 2b:f0:66:f9:c3:26:37:1c:2a:e3:3e:de:44:f0:e6:48:cf:40: 52:fc:11:44:bf:96:dd:05:c4:e3:42:76:a9:bd:da:62:0b:18: 6d:4b:9c:75:80:d7:65:6c:c1:30:ba:a6:d7:d6:e2:72:b9:a0: 03:f8:ac:7c:8b:fc:fe:5c:d9:ab:74:a8:06:08:81:31:c8:95: ab:cf:c3:ac:e2:85:59:28:f0:69:89:ef:c6:5f:69:1f:da:3e: 32:bf:54:59:ab:0c:03:10:dc:39:ab:ec:4e:05:eb:b6:2f:17: fa:53:2d:02:d4:c6:08:32:79:37:e8:64:bd:ff:c7:f5:85:3f: 13:43:7e:2d:5e:8f:ee:9b:fe:97:27:03:7e:f3:73:7f:b8:44: ef:97:d0:65:02:94:65:0f:8d:70:b5:4a:1e:c3:d8:8e:41:98: ee:b7:21:4e:c1:cd:6f:08:f8:63:5c:5e:46:66:5f:c0:e3:c9: c3:86:e4:c8:d7:c8:01:0e:23:b4:22:34:37:5c:b4:40:bf:c3: 99:89:db:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcWKcYNq+JtIt8b2iRU5B1znBqMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyNDlCNzE5RTVGOTg4Mjg2QUQzQjQxNjRDNEU3N0Y0 MzRGRjk0ODAeFw0yNjA4MDIxMDMwMjdaFw0yNjA4MDMxMzQ1MjdaMDMxMTAvBgNV BAMTKEVFODU1RDhCRDc4OTQ3MzlEMTBCNzVCODE0QUM3REM3NkNFQzg4MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeTdm18ExM73dS0QWlh9Sd03/e zT6SMgwwa830auU+SLSfXxzd1UPMXh1ZkAkyHzUlkE0A3lKlzoKiywrilmFAwGvc FYflMBwTGtxCV3R6AKHAwHdO2SPbpKBBA3NcH1orc1s1YekACUBznNE+kWDIxVTw WfK7PGnzkpTTKLCshq1Dw0hyisSMNTX/nScVRtc2GXkEwXrtJDpPn1cpgw9XpHM4 pYpzUxMvl8EnDMN0bsjDN4EBRGvXApxsHRvmCNeJRTywumYU7/E701nT/oJYZlXS ny6+1L3dDqzYR6UNgc7kyGTiKe2Z2RlA3ixorszpe3tB6Cvn6UfVsodvRRIPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7oVdi9eJRznRC3W4FKx9x2zsiBIwHwYDVR0j BBgwFoAUpCSbcZ5fmIKGrTtBZMTnf0NP+UgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWJjYzYyYWUtMjBjOC00OTc0LWFhZTktYjEwOGRmOGUyZjU5LzAvQTQyNDlCNzE5 RTVGOTg4Mjg2QUQzQjQxNjRDNEU3N0Y0MzRGRjk0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNDI0OUI3MTlFNUY5ODgyODZBRDNCNDE2NEM0RTc3RjQzNEZG OTQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWJjYzYyYWUtMjBjOC00OTc0LWFh ZTktYjEwOGRmOGUyZjU5LzAvQTQyNDlCNzE5RTVGOTg4Mjg2QUQzQjQxNjRDNEU3 N0Y0MzRGRjk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInoy1QoHZtQH9s3Bt180b98FOppFr+UOTGa Bm6k8+AbaSdguLv3T5nfd5W+ZafyPkugpbQfjCvwZvnDJjccKuM+3kTw5kjPQFL8 EUS/lt0FxONCdqm92mILGG1LnHWA12VswTC6ptfW4nK5oAP4rHyL/P5c2at0qAYI gTHIlavPw6zihVko8GmJ78ZfaR/aPjK/VFmrDAMQ3Dmr7E4F67YvF/pTLQLUxggy eTfoZL3/x/WFPxNDfi1ej+6b/pcnA37zc3+4RO+X0GUClGUPjXC1Sh7D2I5BmO63 IU7BzW8I+GNcXkZmX8DjycOG5MjXyAEOI7QiNDdctEC/w5mJ22M= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:40 2026 by rpki-client