$ rpki-client -vvf rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft File: 4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft (raw, json) Hash identifier: 5xsKuhMCewCSGWzFPaT0Xd34/Zinsk5jTaYrkQAjSHM= Subject key identifier: 45:55:52:AD:61:30:7B:6E:88:7C:CA:96:3E:64:75:B8:40:D0:30:EB Authority key identifier: 4B:1E:AB:A7:64:60:DB:E6:04:6B:85:7B:57:FD:FB:52:8C:2D:A0:9F Certificate issuer: /CN=4B1EABA76460DBE6046B857B57FDFB528C2DA09F Certificate serial: 0A283E442CC6D4428993E9DCAB6239ECC358A944 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 02:05:03 +0000 Manifest this update: Sun 02 Aug 2026 02:00:03 +0000 Manifest next update: Mon 03 Aug 2026 05:31:03 +0000 Files and hashes: 1: 4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl (hash: H//lpzrC4PTkQDaVmwSx1BzdVvtz66qGO3zw972k9n8=) 2: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: ySMFpx3jAtHRk6Y0gp/23WMKdK2+n4m1Qj3cdUQcw48=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:28:3e:44:2c:c6:d4:42:89:93:e9:dc:ab:62:39:ec:c3:58:a9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B1EABA76460DBE6046B857B57FDFB528C2DA09F Validity Not Before: Aug 2 02:00:03 2026 GMT Not After : Aug 3 05:31:03 2026 GMT Subject: CN=455552AD61307B6E887CCA963E6475B840D030EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dd:f7:05:52:a4:c2:c9:4c:d3:49:b1:a9:a2: bf:ad:3a:39:60:c4:7a:56:3d:eb:d3:9d:e4:84:50: 11:e2:cf:f8:82:ff:3c:77:fd:f8:fb:51:b9:81:01: 4e:7a:5c:2d:08:bb:68:51:d0:6c:ac:87:79:0f:81: 54:23:c6:1a:bd:34:a0:e8:a9:30:ca:bd:3d:cb:0b: 5c:a6:d5:e7:8f:ee:92:cf:e8:b5:58:e1:e5:02:e5: 63:fd:18:36:ea:cf:da:35:ba:99:ad:e0:f9:b6:19: b9:0d:7e:69:61:1b:5c:3f:8b:ca:db:42:bb:05:ad: 5a:ca:1d:1b:e2:b0:61:a9:b8:53:3c:d0:6d:35:5d: 14:93:cf:a6:7c:14:1f:6e:bf:a4:d7:e0:23:f0:f5: d3:b8:6e:34:f9:5c:be:e7:c0:45:77:ec:4c:82:46: ae:bb:72:03:4a:5d:4c:b1:a7:18:db:ee:2b:17:7a: 9d:27:a8:00:0b:bb:7b:ee:ff:bb:14:4f:5a:86:3d: 8d:2f:41:0f:a4:e6:33:5e:83:72:4f:a8:89:94:81: 09:f4:1d:c1:ee:ca:f0:12:d7:e5:26:19:cf:7c:69: 7d:8f:ba:2a:8b:db:9b:f2:f7:c3:7a:21:23:cc:ca: f5:dc:01:6a:67:25:07:06:8f:a8:9f:84:b4:e3:15: bf:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:55:52:AD:61:30:7B:6E:88:7C:CA:96:3E:64:75:B8:40:D0:30:EB X509v3 Authority Key Identifier: keyid:4B:1E:AB:A7:64:60:DB:E6:04:6B:85:7B:57:FD:FB:52:8C:2D:A0:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:a8:2d:fd:4e:df:f0:6c:dc:ed:42:48:7f:65:76:06:98:0b: 92:99:27:35:58:e0:9c:77:3f:a6:97:76:a8:24:bc:dc:18:8d: 5f:30:b1:2f:72:55:2c:ca:0a:32:21:52:9b:04:e2:67:01:96: 85:c5:95:66:5b:cc:6b:01:3c:56:8f:2a:48:1c:6c:e7:0b:12: 25:a0:7a:b2:7c:03:e3:1b:da:7d:2c:a4:63:40:b3:5b:67:35: f4:62:4e:d6:4c:8d:dd:f8:c0:14:49:9d:f5:a5:69:48:7c:32: 21:f5:15:77:47:c9:c4:8c:fd:e6:c5:2f:14:9a:34:e4:6e:91: 23:57:df:32:ea:41:15:e1:72:46:68:ce:93:dd:05:52:7a:a1: d1:fe:32:e3:5c:a0:28:04:e2:a4:ef:ad:02:b3:35:30:1a:79: 5f:df:53:b2:49:0e:70:eb:7f:54:7f:87:6e:1e:6f:63:06:32: bf:06:82:e6:5d:f7:3f:e5:81:c8:46:e5:3f:cb:61:d1:af:33: d8:b7:7e:ca:2c:6d:58:be:2e:f3:36:7f:06:49:74:ab:81:54: c4:aa:c9:d6:fa:7c:07:5c:f5:3e:9a:0e:50:f5:1d:de:37:25: 18:ee:c4:05:9d:66:ac:4f:9e:b2:0a:c6:2d:18:96:23:15:ca: e4:db:25:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCig+RCzG1EKJk+ncq2I57MNYqUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIxRUFCQTc2NDYwREJFNjA0NkI4NTdCNTdGREZCNTI4 QzJEQTA5RjAeFw0yNjA4MDIwMjAwMDNaFw0yNjA4MDMwNTMxMDNaMDMxMTAvBgNV BAMTKDQ1NTU1MkFENjEzMDdCNkU4ODdDQ0E5NjNFNjQ3NUI4NDBEMDMwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63fcFUqTCyUzTSbGpor+tOjlg xHpWPevTneSEUBHiz/iC/zx3/fj7UbmBAU56XC0Iu2hR0Gysh3kPgVQjxhq9NKDo qTDKvT3LC1ym1eeP7pLP6LVY4eUC5WP9GDbqz9o1upmt4Pm2GbkNfmlhG1w/i8rb QrsFrVrKHRvisGGpuFM80G01XRSTz6Z8FB9uv6TX4CPw9dO4bjT5XL7nwEV37EyC Rq67cgNKXUyxpxjb7isXep0nqAALu3vu/7sUT1qGPY0vQQ+k5jNeg3JPqImUgQn0 HcHuyvAS1+UmGc98aX2PuiqL25vy98N6ISPMyvXcAWpnJQcGj6ifhLTjFb9bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURVVSrWEwe26IfMqWPmR1uEDQMOswHwYDVR0j BBgwFoAUSx6rp2Rg2+YEa4V7V/37UowtoJ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDg4NTc1YzgtNTRmZS00ODAxLWE3YjEtNTE3ZDBlNmI4YjczLzAvNEIxRUFCQTc2 NDYwREJFNjA0NkI4NTdCNTdGREZCNTI4QzJEQTA5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QjFFQUJBNzY0NjBEQkU2MDQ2Qjg1N0I1N0ZERkI1MjhDMkRB MDlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDg4NTc1YzgtNTRmZS00ODAxLWE3 YjEtNTE3ZDBlNmI4YjczLzAvNEIxRUFCQTc2NDYwREJFNjA0NkI4NTdCNTdGREZC NTI4QzJEQTA5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWoLf1O3/Bs3O1CSH9ldgaYC5KZJzVY4Jx3 P6aXdqgkvNwYjV8wsS9yVSzKCjIhUpsE4mcBloXFlWZbzGsBPFaPKkgcbOcLEiWg erJ8A+Mb2n0spGNAs1tnNfRiTtZMjd34wBRJnfWlaUh8MiH1FXdHycSM/ebFLxSa NORukSNX3zLqQRXhckZozpPdBVJ6odH+MuNcoCgE4qTvrQKzNTAaeV/fU7JJDnDr f1R/h24eb2MGMr8GguZd9z/lgchG5T/LYdGvM9i3fsosbVi+LvM2fwZJdKuBVMSq ydb6fAdc9T6aDlD1Hd43JRjuxAWdZqxPnrIKxi0YliMVyuTbJbc= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:33 2026 by rpki-client