$ rpki-client -vvf rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft File: 4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft (raw, json) Hash identifier: Q7g4k2qPkeKBEhc2dwu/it6O4u2xKtDv0+GUA+Avl6w= Subject key identifier: 61:DB:D1:54:25:F6:6A:96:6D:9D:CF:F3:AE:7A:D2:90:56:C7:A7:B5 Authority key identifier: 4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD Certificate issuer: /CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Certificate serial: 3FA8783ECCBD00CEAAEC27DA6BFECCB88FEEAFEF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 07:13:12 +0000 Manifest this update: Fri 24 Jul 2026 07:08:12 +0000 Manifest next update: Sat 25 Jul 2026 07:18:12 +0000 Files and hashes: 1: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: NuzvjRElosYE2UG7+eZwvvIrrAeM5hY3Zl0vPo88tlQ=) 2: 4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl (hash: qjTGtHLsUE//cqLsoz3tKSPHJx0MmBxIcwaJOTrSXFk=) 3: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: ZfYq00HTDjpvUdw6nAEEEqjvY8Q+YEiON1rQ+odVxcw=) 4: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: JeyiXx4erlba3GA8MtFHqgBMpzij5IWYDmBP3qqgmrQ=) 5: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: OQGBTyYct40Pw4G0aqEIxJAdvOkNRB0tfWNHiKyDkc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a8:78:3e:cc:bd:00:ce:aa:ec:27:da:6b:fe:cc:b8:8f:ee:af:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Validity Not Before: Jul 24 07:08:12 2026 GMT Not After : Jul 25 07:18:12 2026 GMT Subject: CN=61DBD15425F66A966D9DCFF3AE7AD29056C7A7B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:89:3d:fc:71:58:57:66:b3:73:16:0d:5d:64: 29:74:8c:b6:02:f6:7c:f7:1d:75:18:10:86:b8:73: 40:f6:96:14:94:98:d6:b4:e1:75:2b:70:f4:e4:4c: 1a:61:9e:af:d6:8f:93:6a:60:e0:96:95:df:ed:47: 05:8e:4f:3c:8c:7c:f1:86:b8:8b:8b:fa:a7:7f:95: b3:f9:7e:6e:0e:98:b3:14:12:fa:ae:d8:7e:52:ea: cc:c2:76:42:11:b9:2e:69:62:32:e6:d3:f3:89:7f: ae:ad:c6:a6:13:12:94:6d:17:19:a7:85:11:6e:a9: 72:25:a7:3a:74:75:c0:ff:c5:d0:3f:55:3c:0f:53: 1c:9d:fe:ae:2a:f9:02:9e:a4:5c:c3:d7:c4:9f:07: ca:1a:97:7c:0e:01:5e:a8:24:c4:5b:7a:60:09:93: 14:7c:c1:8a:ef:40:36:12:37:e3:94:90:48:fb:98: ed:d9:ec:7e:9b:7f:b0:04:91:7b:db:80:50:be:13: 48:9e:55:f7:cd:8c:b1:34:5c:e2:29:9f:1f:8e:1d: df:8d:0b:de:57:6e:be:f8:9a:9a:ad:dc:68:1e:f7: e2:96:d1:8c:e7:b9:59:f2:82:2f:38:a9:0c:53:80: 7e:c0:c2:51:9f:90:58:6a:0c:72:2c:fd:8a:07:13: 03:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DB:D1:54:25:F6:6A:96:6D:9D:CF:F3:AE:7A:D2:90:56:C7:A7:B5 X509v3 Authority Key Identifier: keyid:4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e9:e6:97:14:b4:e0:e9:4a:a2:fb:5c:65:ef:50:62:b0:a1: aa:7d:8d:b2:51:6e:ba:2b:28:8d:36:db:ad:bc:a0:e4:ab:f8: 21:b4:ea:f5:42:78:66:fb:da:62:af:4b:cc:a3:32:83:83:b2: b3:4e:d1:59:8a:49:68:95:25:dc:85:5d:8c:b2:8f:73:29:29: 53:25:25:f9:8f:0e:45:1c:4e:00:da:d8:90:7c:61:77:f0:a7: ff:f4:0a:38:64:9f:3d:d3:0f:d1:f7:ce:7a:3a:f8:35:ea:cd: ea:26:d6:5c:d0:16:48:7e:ce:88:f5:72:f6:ea:ac:3d:a0:87: e5:21:89:61:d7:cb:75:3c:7b:d9:31:42:2e:fd:af:c7:9a:1b: d5:f4:d8:ab:d8:a7:a3:b3:35:2b:05:a0:89:41:66:6f:5f:e4: e2:72:cf:e0:b6:10:33:0c:d9:2d:94:ed:4d:24:86:10:4a:06: d5:44:48:62:54:ea:16:cb:c5:f8:0c:02:c3:68:bc:10:27:f7: ff:68:1f:51:e8:87:3f:bd:16:cc:12:81:84:4d:58:9a:10:63: 49:e1:9f:81:f8:3f:2c:6f:5c:fe:ec:18:03:76:35:f9:59:73: 9d:82:9c:34:c6:35:9e:d9:88:3b:8b:05:93:6b:c9:17:e3:de: cb:6f:b4:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP6h4Psy9AM6q7Cfaa/7MuI/ur+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBQzRCMDVDNjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYz MkIzNkRDRDAeFw0yNjA3MjQwNzA4MTJaFw0yNjA3MjUwNzE4MTJaMDMxMTAvBgNV BAMTKDYxREJEMTU0MjVGNjZBOTY2RDlEQ0ZGM0FFN0FEMjkwNTZDN0E3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJiT38cVhXZrNzFg1dZCl0jLYC 9nz3HXUYEIa4c0D2lhSUmNa04XUrcPTkTBphnq/Wj5NqYOCWld/tRwWOTzyMfPGG uIuL+qd/lbP5fm4OmLMUEvqu2H5S6szCdkIRuS5pYjLm0/OJf66txqYTEpRtFxmn hRFuqXIlpzp0dcD/xdA/VTwPUxyd/q4q+QKepFzD18SfB8oal3wOAV6oJMRbemAJ kxR8wYrvQDYSN+OUkEj7mO3Z7H6bf7AEkXvbgFC+E0ieVffNjLE0XOIpnx+OHd+N C95Xbr74mpqt3Gge9+KW0YznuVnygi84qQxTgH7AwlGfkFhqDHIs/YoHEwNpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYdvRVCX2apZtnc/zrnrSkFbHp7UwHwYDVR0j BBgwFoAUTKxLBcYiClqRf+qRfTR2bzKzbc0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZTljOWYtZDYwNy00NDk3LWFmMjgtNGQyYjkwOTJkNWE2LzAvNENBQzRCMDVD NjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYzMkIzNkRDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0FDNEIwNUM2MjIwQTVBOTE3RkVBOTE3RDM0NzY2RjMyQjM2 RENELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvNENBQzRCMDVDNjIyMEE1QTkxN0ZFQTkxN0QzNDc2 NkYzMkIzNkRDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7p5pcUtODpSqL7XGXvUGKwoap9jbJRbror KI022628oOSr+CG06vVCeGb72mKvS8yjMoODsrNO0VmKSWiVJdyFXYyyj3MpKVMl JfmPDkUcTgDa2JB8YXfwp//0Cjhknz3TD9H3zno6+DXqzeom1lzQFkh+zoj1cvbq rD2gh+UhiWHXy3U8e9kxQi79r8eaG9X02KvYp6OzNSsFoIlBZm9f5OJyz+C2EDMM 2S2U7U0khhBKBtVESGJU6hbLxfgMAsNovBAn9/9oH1Hohz+9FswSgYRNWJoQY0nh n4H4PyxvXP7sGAN2NflZc52CnDTGNZ7ZiDuLBZNryRfj3stvtFY= -----END CERTIFICATE-----Generated at Fri Jul 24 08:53:43 2026 by rpki-client