$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft File: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft (raw, json) Hash identifier: aSHdQ8xCfI8Sy18zNhwFcWTjIBIr5yhVe8QPB4N5NUw= Subject key identifier: 79:00:92:2D:54:3E:95:16:8C:AD:A5:92:AD:BF:30:EA:97:5B:8D:C7 Authority key identifier: 4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 Certificate issuer: /CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Certificate serial: 4AE95276BF9BD64E6B971164DB55ECF3B4D0C382 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 11:23:21 +0000 Manifest this update: Fri 24 Jul 2026 11:18:21 +0000 Manifest next update: Sat 25 Jul 2026 14:21:21 +0000 Files and hashes: 1: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: fT4vbblEyZhxJwWJVYRrx1888tV3IqafJdFzwCoLzIU=) 2: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl (hash: URhD0LPA+d2BKPjTfuSeFP+UEQsUMdjKumJZYxdzY1U=) 3: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: 6pyTfAlzYTBLrXJyXEzbPma6QqEhBhRMnugG93bjYxI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e9:52:76:bf:9b:d6:4e:6b:97:11:64:db:55:ec:f3:b4:d0:c3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Validity Not Before: Jul 24 11:18:21 2026 GMT Not After : Jul 25 14:21:21 2026 GMT Subject: CN=7900922D543E95168CADA592ADBF30EA975B8DC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:10:b5:5b:86:95:be:ca:7c:c2:64:be:e9:ed: 75:24:5f:bf:22:c4:8e:df:68:5c:43:dd:fb:55:69: fa:34:d5:06:e1:73:92:23:2c:f5:19:4f:09:6e:fb: 05:5c:a4:ad:f5:32:ae:f5:c2:aa:70:48:84:b6:b9: 5d:5c:4a:82:94:51:e9:c6:07:2f:4a:34:93:d2:f6: 39:13:b0:22:66:f4:68:12:76:e5:95:07:b6:94:84: 83:a8:bd:a7:83:1c:bc:cd:c1:3e:d1:4c:dd:43:b8: 5a:59:57:b1:0d:64:45:97:a5:25:36:5f:aa:a3:a1: ca:27:4f:06:09:8f:02:31:5c:1c:5e:4a:0d:41:1f: 0d:85:66:20:95:ed:b4:89:89:87:15:fa:8e:b2:33: 94:3a:c7:b1:54:59:c8:a0:80:4c:ba:09:6d:6b:b6: da:f4:06:79:ff:54:be:d2:f9:c3:a5:89:21:b6:a0: 17:a9:04:62:7a:f6:9c:33:d2:5d:e7:8d:ca:8d:68: ad:b8:ee:46:3a:b4:3e:66:58:60:9d:fd:aa:b8:ce: 8a:3c:94:af:ef:3d:4b:06:09:8d:59:3f:b4:3a:f7: f8:90:6d:0e:46:e4:73:70:fc:62:d1:eb:71:59:01: e2:92:b3:21:8b:be:34:d9:cf:2f:04:76:17:68:fe: 8d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:00:92:2D:54:3E:95:16:8C:AD:A5:92:AD:BF:30:EA:97:5B:8D:C7 X509v3 Authority Key Identifier: keyid:4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5d:41:b0:60:70:eb:57:63:b1:dc:a5:c6:87:ae:55:79:66: be:b6:2f:f1:56:2d:72:c9:86:01:44:c2:21:f0:1d:49:86:dd: 24:c3:e5:7d:4d:e0:6d:b5:54:e6:b5:9c:c8:14:a4:2d:98:12: d9:51:51:2b:96:c6:b9:0a:62:42:e9:b0:4f:4e:73:33:50:f4: df:31:f6:53:7e:08:ba:12:c0:02:74:c3:87:78:a1:9e:84:d6: 0b:5f:0a:4c:44:b0:04:46:57:b8:60:ba:42:1b:33:da:56:d3: 57:b2:b6:8c:27:ac:cf:aa:15:bf:a3:41:11:16:ce:2a:e4:4d: fe:8e:24:6f:e5:1d:53:66:13:63:c8:35:4c:07:b1:66:0a:b1: 68:d6:cc:8e:d0:0f:f0:c8:8a:10:f9:9d:33:71:b1:7b:5f:15: 13:d0:c5:28:ab:f8:75:41:14:16:8f:5e:ec:c8:37:93:e8:66: 05:6f:e5:3f:b1:98:42:b9:94:48:f5:f6:86:3c:f6:5e:14:32: 1f:14:59:ee:88:8c:b9:97:85:ad:53:51:41:80:26:32:eb:b2: a8:e1:0a:69:67:77:44:b7:22:b1:88:06:60:aa:92:2f:26:21: 57:77:4a:7c:bf:a3:2b:fb:d9:2f:d9:aa:28:cb:90:4d:61:b7: 7e:8c:10:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSulSdr+b1k5rlxFk21Xs87TQw4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JCRTJE MEUwRDM5MTAeFw0yNjA3MjQxMTE4MjFaFw0yNjA3MjUxNDIxMjFaMDMxMTAvBgNV BAMTKDc5MDA5MjJENTQzRTk1MTY4Q0FEQTU5MkFEQkYzMEVBOTc1QjhEQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ELVbhpW+ynzCZL7p7XUkX78i xI7faFxD3ftVafo01Qbhc5IjLPUZTwlu+wVcpK31Mq71wqpwSIS2uV1cSoKUUenG By9KNJPS9jkTsCJm9GgSduWVB7aUhIOovaeDHLzNwT7RTN1DuFpZV7ENZEWXpSU2 X6qjoconTwYJjwIxXBxeSg1BHw2FZiCV7bSJiYcV+o6yM5Q6x7FUWciggEy6CW1r ttr0Bnn/VL7S+cOliSG2oBepBGJ69pwz0l3njcqNaK247kY6tD5mWGCd/aq4zoo8 lK/vPUsGCY1ZP7Q69/iQbQ5G5HNw/GLR63FZAeKSsyGLvjTZzy8Edhdo/o2rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeQCSLVQ+lRaMraWSrb8w6pdbjccwHwYDVR0j BBgwFoAUTUy+ZRqiIPkIjk27vJe74tDg05EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwN2UzZDgtOWJmYy00NDgzLWEyZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUx QUEyMjBGOTA4OEU0REJCQkM5N0JCRTJEMEUwRDM5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRDQkU2NTFBQTIyMEY5MDg4RTREQkJCQzk3QkJFMkQwRTBE MzkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy ZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JC RTJEMEUwRDM5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5dQbBgcOtXY7HcpcaHrlV5Zr62L/FWLXLJ hgFEwiHwHUmG3STD5X1N4G21VOa1nMgUpC2YEtlRUSuWxrkKYkLpsE9OczNQ9N8x 9lN+CLoSwAJ0w4d4oZ6E1gtfCkxEsARGV7hgukIbM9pW01eytownrM+qFb+jQREW zirkTf6OJG/lHVNmE2PINUwHsWYKsWjWzI7QD/DIihD5nTNxsXtfFRPQxSir+HVB FBaPXuzIN5PoZgVv5T+xmEK5lEj19oY89l4UMh8UWe6IjLmXha1TUUGAJjLrsqjh Cmlnd0S3IrGIBmCqki8mIVd3Sny/oyv72S/ZqijLkE1ht36MEMU= -----END CERTIFICATE-----Generated at Fri Jul 24 13:52:14 2026 by rpki-client