$ rpki-client -vvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft File: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft (raw, json) Hash identifier: aUXyc6sQQVEab+KbfcdJQJlZsmtFINjuj1lwY8LPJ+M= Subject key identifier: 05:11:AE:46:58:63:E4:9E:47:10:B6:66:29:D7:E3:0D:1D:A1:39:ED Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 6666137A5A3DD384FA1C8196F085FCB6243EDEC0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:08:10 +0000 Manifest this update: Fri 24 Jul 2026 03:03:10 +0000 Manifest next update: Sat 25 Jul 2026 06:18:10 +0000 Files and hashes: 1: 323430313a626534303a3a2f33322d3438203d3e20313336383431.roa (hash: pUzTSX764GWtHHO9jcVOxnVCQQd9HOcC1kC/yiGkLr8=) 2: 3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa (hash: 1SNuWHPKyjm9i33KVxLucA1qoW0DruITzpVEbkOYzp4=) 3: 3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (hash: z5zbKQho3avhtYmaIotiPUiQQJ/mO8YtqexQXDW4gG0=) 4: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (hash: lcj9Lo8ozccThBUG7wqDK1apaR2k1E0ODhzzBgFVW1M=) 5: 3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa (hash: 2ukK53+fe7S5M2zaDBH1WtDgIsIsj4+Dshs68GBh99o=) 6: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl (hash: NjiJ0C6JiP54ftayvZe1Lb6DsmlAvLJhQze7kInJcK0=) 7: 323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa (hash: Q+ngoFu885sNrsbrQRL3AeApBJ1Eb5cBUZ33V1u7hNU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:66:13:7a:5a:3d:d3:84:fa:1c:81:96:f0:85:fc:b6:24:3e:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: Jul 24 03:03:10 2026 GMT Not After : Jul 25 06:18:10 2026 GMT Subject: CN=0511AE465863E49E4710B66629D7E30D1DA139ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d8:77:fd:ec:c4:cb:4b:a0:8a:75:29:61:5c: a1:64:3f:bb:71:65:2b:9e:e5:81:f9:31:96:17:fb: ed:e9:7d:ba:32:87:83:2a:5a:8f:4e:b9:6e:b5:1b: 65:93:2f:00:3b:17:44:5e:68:df:d7:af:51:6f:59: bd:10:c8:46:e8:79:39:f5:99:56:12:51:fd:f3:16: 10:82:1e:b3:19:be:32:05:76:26:ef:3f:69:94:c5: 77:33:93:18:89:30:f1:32:29:4b:ee:91:ae:34:cd: 50:47:cd:74:71:58:f2:04:16:45:36:a7:cf:ef:e9: 81:3b:22:f8:1d:1a:57:86:9d:ac:a5:bb:cb:55:a0: 4d:d2:2e:ab:34:41:cf:95:fc:eb:b4:e5:ad:fa:69: 73:18:c6:30:1e:98:12:00:a8:7a:ac:b3:70:f3:ac: b3:f8:da:76:30:6f:8a:c6:f2:2d:82:61:94:2a:94: ca:d7:b9:e9:bc:2d:a1:6b:c8:17:e1:7c:0e:da:76: c4:2b:45:5a:01:08:be:1a:8d:17:62:e2:da:35:2f: 12:73:03:e9:de:57:62:fb:c6:a4:6b:dc:d9:ef:54: 5d:5c:f1:6f:88:46:09:ce:bb:26:1b:11:64:2a:77: 3d:1a:38:a9:7e:5f:3d:1f:e2:4b:f4:b1:bd:4d:d1: 6a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:11:AE:46:58:63:E4:9E:47:10:B6:66:29:D7:E3:0D:1D:A1:39:ED X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:f5:9b:04:a3:6f:1e:a5:39:88:d5:39:58:bd:d5:7e:ba:78: 8f:07:d4:d9:64:5b:c4:c1:51:39:c9:43:43:ed:11:0d:3d:4c: a3:2f:b0:ec:a1:1b:2c:a8:6e:97:d9:38:4a:dd:f6:46:e4:b1: 9c:04:50:d2:9c:5b:45:df:be:32:7e:dd:79:05:51:55:99:a6: f9:c8:ff:2a:62:a5:df:3b:dd:fd:92:ed:48:ca:3d:ee:54:28: 78:b0:9f:1f:a6:4a:29:b5:4d:74:c3:ea:04:0e:5e:34:0b:d3: 99:a0:69:c4:b5:0f:45:2f:c6:18:c1:94:5c:67:bc:1f:14:df: 90:ba:49:5b:27:81:f4:30:c2:d7:dc:41:c1:9a:11:e4:49:a4: 86:e0:51:7e:97:a7:7d:53:5f:35:27:3e:12:3e:52:ab:4c:99: 37:96:d0:8f:85:b8:f1:f1:08:df:b7:f0:2d:ad:0f:96:44:7b: 8b:a8:a1:98:0f:c8:f6:04:9f:07:a3:36:3a:3c:41:2f:18:be: ba:2c:31:81:5d:b5:3d:af:c2:0e:34:36:1e:69:16:3b:77:99: 1c:c4:fb:8b:19:24:ca:d2:69:97:2b:56:f1:0e:f8:ed:54:11: 32:b8:f9:de:ee:6a:ad:93:16:7b:c3:43:b3:bf:db:63:1a:c3: ef:30:7f:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZmYTelo904T6HIGW8IX8tiQ+3sAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVF NTdENTI0NDAeFw0yNjA3MjQwMzAzMTBaFw0yNjA3MjUwNjE4MTBaMDMxMTAvBgNV BAMTKDA1MTFBRTQ2NTg2M0U0OUU0NzEwQjY2NjI5RDdFMzBEMURBMTM5RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC02Hf97MTLS6CKdSlhXKFkP7tx ZSue5YH5MZYX++3pfboyh4MqWo9OuW61G2WTLwA7F0ReaN/Xr1FvWb0QyEboeTn1 mVYSUf3zFhCCHrMZvjIFdibvP2mUxXczkxiJMPEyKUvuka40zVBHzXRxWPIEFkU2 p8/v6YE7IvgdGleGnaylu8tVoE3SLqs0Qc+V/Ou05a36aXMYxjAemBIAqHqss3Dz rLP42nYwb4rG8i2CYZQqlMrXuem8LaFryBfhfA7adsQrRVoBCL4ajRdi4to1LxJz A+neV2L7xqRr3NnvVF1c8W+IRgnOuyYbEWQqdz0aOKl+Xz0f4kv0sb1N0WqFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBRGuRlhj5J5HELZmKdfjDR2hOe0wHwYDVR0j BBgwFoAUTaEdWvXxeucWUZ+EomPhpeV9UkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDczMDRiODMtMzBhYS00YmJmLTlmZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFG NUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVFNTdENTI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1 MjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDczMDRiODMtMzBhYS00YmJmLTlm ZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0Ux QTVFNTdENTI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJn1mwSjbx6lOYjVOVi91X66eI8H1NlkW8TB UTnJQ0PtEQ09TKMvsOyhGyyobpfZOErd9kbksZwEUNKcW0XfvjJ+3XkFUVWZpvnI /ypipd873f2S7UjKPe5UKHiwnx+mSim1TXTD6gQOXjQL05mgacS1D0UvxhjBlFxn vB8U35C6SVsngfQwwtfcQcGaEeRJpIbgUX6Xp31TXzUnPhI+UqtMmTeW0I+FuPHx CN+38C2tD5ZEe4uooZgPyPYEnwejNjo8QS8YvrosMYFdtT2vwg40Nh5pFjt3mRzE +4sZJMrSaZcrVvEO+O1UETK4+d7uaq2TFnvDQ7O/22Maw+8wf5E= -----END CERTIFICATE-----Generated at Fri Jul 24 05:11:21 2026 by rpki-client