$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft File: 4DD4106B03003D9C5B51BF893631C8E467E07F65.mft (raw, json) Hash identifier: kVvP5MMNsM7lQqEkdSaekLLT7qODQ72ipcsQCEsY8qc= Subject key identifier: E7:F7:C9:DD:83:F3:8F:52:64:34:D1:22:07:8F:D7:3A:6F:4D:84:46 Authority key identifier: 4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65 Certificate issuer: /CN=4DD4106B03003D9C5B51BF893631C8E467E07F65 Certificate serial: 6621D50246295AC53D557A31C04AF973041E5B31 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 19:13:40 +0000 Manifest this update: Thu 23 Jul 2026 19:08:40 +0000 Manifest next update: Fri 24 Jul 2026 22:48:40 +0000 Files and hashes: 1: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: 8wp+UX0eKC57lngDUIgSZuJvHJ5tDAZofYJHo8cFmpA=) 2: 4DD4106B03003D9C5B51BF893631C8E467E07F65.crl (hash: kHxzowkiWGJkgLojkGnutXOvjA7JLphv2WAsv2dB5pI=) 3: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: 1g+y0imkE46p3egXComeqIG0umuFfgQzJzzyy2lkq6g=) 4: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: vt8DYAXcs1pDLyawi9vIroRmMQYzGKkbfW81Knq/qWg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:21:d5:02:46:29:5a:c5:3d:55:7a:31:c0:4a:f9:73:04:1e:5b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD4106B03003D9C5B51BF893631C8E467E07F65 Validity Not Before: Jul 23 19:08:40 2026 GMT Not After : Jul 24 22:48:40 2026 GMT Subject: CN=E7F7C9DD83F38F526434D122078FD73A6F4D8446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5e:56:e4:e8:7d:a0:6d:51:46:55:43:6a:14: 08:6c:3c:10:4f:1c:22:17:b0:0c:8c:59:57:c2:e5: c8:26:23:cd:9b:d1:56:a5:49:f6:60:53:18:61:ce: 2e:1a:c4:a2:fd:e1:9a:52:3d:ee:71:cf:ba:4c:26: 66:35:98:97:c5:ff:53:5e:e2:ce:90:d2:87:87:fd: f4:29:4f:cc:7e:fa:21:b6:cd:96:74:a7:e5:11:19: ee:8d:da:31:77:3e:21:61:af:f9:b9:66:55:bf:aa: a4:65:08:e9:d9:ae:99:ad:a1:28:1d:50:68:88:a9: 13:77:8f:be:98:b3:a1:d0:54:53:61:1f:f6:38:80: 9f:3a:ab:6f:e1:a4:49:4d:0d:ec:63:e9:11:5a:07: af:1c:42:bc:f0:b4:f3:3f:22:9c:bd:20:28:d8:82: 76:16:7f:ab:66:3f:9b:ca:3e:46:04:90:26:fd:ce: c8:9a:ff:92:9b:2a:d0:91:49:f1:7b:f8:f1:61:9d: 47:7e:b6:c4:6f:09:ef:41:af:9e:5c:cb:d5:ad:6e: 74:c2:94:ef:f2:29:43:25:33:cf:63:f8:a2:d0:d6: dd:64:85:41:88:7b:32:6a:c1:c0:fb:78:cc:3f:14: 9f:82:f2:81:d5:91:eb:0f:2a:e6:37:17:99:14:fd: cb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F7:C9:DD:83:F3:8F:52:64:34:D1:22:07:8F:D7:3A:6F:4D:84:46 X509v3 Authority Key Identifier: keyid:4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d4:4c:6c:fc:86:9c:90:82:f4:29:8f:e3:ff:bf:ad:eb:c5: ee:ac:74:6c:7e:68:b9:03:3a:52:b8:b2:1f:ac:ef:4a:e1:0e: f8:8e:6b:72:9a:1d:44:98:bc:1b:87:90:f6:6e:95:3b:a8:b8: ce:72:98:7e:51:ce:dd:9a:20:74:2b:33:05:37:82:eb:7b:ab: ef:48:f7:e7:a0:20:88:96:8d:d1:66:f0:49:02:70:de:60:f3: 2a:67:b2:6b:62:48:b0:2e:02:24:d3:e5:9a:1c:96:10:9d:86: 82:bd:fe:35:c8:31:e8:de:87:f5:6d:26:c3:d2:d0:c9:ba:ed: cf:39:ed:bc:d4:ff:ed:71:1c:56:f4:1d:ee:fe:9e:40:cb:fd: 8b:3a:ac:80:7e:f2:84:75:f4:42:0c:8f:9d:4f:ce:b9:eb:d4: 49:9a:96:c5:df:7f:c1:77:f7:aa:fb:69:72:0c:48:39:30:67: 0f:94:ab:69:43:19:40:60:2f:cb:a2:13:8b:06:67:55:46:ad: 9d:58:34:be:d3:47:aa:e0:63:bc:1a:1b:42:d5:ef:e2:54:fb: 67:6f:62:35:b9:65:44:80:91:09:ce:e6:ea:86:ca:0d:2d:da: a1:aa:85:3c:54:28:ad:e0:ff:80:93:bd:90:dd:ef:cb:49:14: 77:29:4d:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZiHVAkYpWsU9VXoxwEr5cwQeWzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERENDEwNkIwMzAwM0Q5QzVCNTFCRjg5MzYzMUM4RTQ2 N0UwN0Y2NTAeFw0yNjA3MjMxOTA4NDBaFw0yNjA3MjQyMjQ4NDBaMDMxMTAvBgNV BAMTKEU3RjdDOUREODNGMzhGNTI2NDM0RDEyMjA3OEZENzNBNkY0RDg0NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZXlbk6H2gbVFGVUNqFAhsPBBP HCIXsAyMWVfC5cgmI82b0ValSfZgUxhhzi4axKL94ZpSPe5xz7pMJmY1mJfF/1Ne 4s6Q0oeH/fQpT8x++iG2zZZ0p+URGe6N2jF3PiFhr/m5ZlW/qqRlCOnZrpmtoSgd UGiIqRN3j76Ys6HQVFNhH/Y4gJ86q2/hpElNDexj6RFaB68cQrzwtPM/Ipy9ICjY gnYWf6tmP5vKPkYEkCb9zsia/5KbKtCRSfF7+PFhnUd+tsRvCe9Br55cy9WtbnTC lO/yKUMlM89j+KLQ1t1khUGIezJqwcD7eMw/FJ+C8oHVkesPKuY3F5kU/cujAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/fJ3YPzj1JkNNEiB4/XOm9NhEYwHwYDVR0j BBgwFoAUTdQQawMAPZxbUb+JNjHI5Gfgf2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkZTkzNmItNTNjZi00YjA4LWI1ZjctMmI5MGRlMjFmZTk0LzAvNERENDEwNkIw MzAwM0Q5QzVCNTFCRjg5MzYzMUM4RTQ2N0UwN0Y2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REQ0MTA2QjAzMDAzRDlDNUI1MUJGODkzNjMxQzhFNDY3RTA3 RjY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvNERENDEwNkIwMzAwM0Q5QzVCNTFCRjg5MzYzMUM4 RTQ2N0UwN0Y2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbUTGz8hpyQgvQpj+P/v63rxe6sdGx+aLkD OlK4sh+s70rhDviOa3KaHUSYvBuHkPZulTuouM5ymH5Rzt2aIHQrMwU3gut7q+9I 9+egIIiWjdFm8EkCcN5g8ypnsmtiSLAuAiTT5ZoclhCdhoK9/jXIMejeh/VtJsPS 0Mm67c857bzU/+1xHFb0He7+nkDL/Ys6rIB+8oR19EIMj51Pzrnr1EmalsXff8F3 96r7aXIMSDkwZw+Uq2lDGUBgL8uiE4sGZ1VGrZ1YNL7TR6rgY7waG0LV7+JU+2dv YjW5ZUSAkQnO5uqGyg0t2qGqhTxUKK3g/4CTvZDd78tJFHcpTVA= -----END CERTIFICATE-----Generated at Fri Jul 24 09:27:42 2026 by rpki-client