$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft File: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft (raw, json) Hash identifier: V7DO63Xts8kO6rxlJmkw4azuFjJ32UvxZoAWl0r27ok= Subject key identifier: D3:CE:BC:35:D8:6E:C1:00:F3:E1:6B:0E:3E:2C:B8:44:C8:B3:C2:D2 Authority key identifier: 4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 Certificate issuer: /CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Certificate serial: 50CEA69F5286A583CA482DBEBF7788399E364272 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:27:34 +0000 Manifest this update: Thu 23 Jul 2026 18:22:34 +0000 Manifest next update: Fri 24 Jul 2026 19:18:34 +0000 Files and hashes: 1: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: 6pyTfAlzYTBLrXJyXEzbPma6QqEhBhRMnugG93bjYxI=) 2: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: fT4vbblEyZhxJwWJVYRrx1888tV3IqafJdFzwCoLzIU=) 3: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl (hash: WvqxmAzSopzfWYZJtEAsV5s9eeiNvChi3BDf3I3SZ5g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ce:a6:9f:52:86:a5:83:ca:48:2d:be:bf:77:88:39:9e:36:42:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Validity Not Before: Jul 23 18:22:34 2026 GMT Not After : Jul 24 19:18:34 2026 GMT Subject: CN=D3CEBC35D86EC100F3E16B0E3E2CB844C8B3C2D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:55:6a:61:38:57:97:80:60:77:c8:a0:64:1b: 21:32:da:b6:ee:28:4c:0b:aa:12:1a:06:77:bc:0d: 44:97:e2:f3:a6:18:85:42:f0:06:bd:56:ab:9c:8c: 7d:eb:d9:36:f6:ec:6d:34:f7:ed:f3:d8:c5:87:2a: 99:c6:41:30:50:9d:00:d9:51:36:07:df:9e:19:ee: be:ba:0a:aa:c3:19:20:de:61:3b:8b:ff:ae:50:e5: 36:57:7b:d4:bc:39:0a:06:d5:93:a6:32:c3:3c:79: 5e:6f:09:7b:c5:4d:dd:df:f5:8b:08:03:aa:19:dd: 68:6e:4a:b2:15:f9:26:c8:57:15:c3:fb:75:57:04: 1e:19:db:46:25:dc:13:65:53:79:47:59:87:2a:13: 20:97:a9:bf:a6:f3:82:b1:24:2c:5b:41:7e:05:7b: 05:6e:50:75:75:8c:22:4d:ce:f9:c8:3a:f2:22:64: 38:94:ea:d5:7d:b1:6c:f0:3f:68:db:a8:f9:1a:ca: c3:b4:9a:11:d8:fe:45:f4:45:5c:fc:37:a6:ee:52: a4:32:b6:8d:a0:69:8d:ac:30:20:fc:f7:4c:47:bf: e8:51:73:0c:52:dc:7a:41:24:87:6d:75:10:8a:95: b4:3c:6d:bd:6f:b9:1c:40:d1:a0:99:fd:26:cd:0d: 3c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CE:BC:35:D8:6E:C1:00:F3:E1:6B:0E:3E:2C:B8:44:C8:B3:C2:D2 X509v3 Authority Key Identifier: keyid:4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d6:de:06:ef:d4:e2:e1:02:c6:89:b8:1f:dd:94:d7:6e:b7: 49:2d:b7:e6:a8:0b:ae:f5:be:84:74:9b:41:3e:85:ed:5b:30: 64:2c:22:22:11:13:32:8f:f0:1a:2c:0c:15:67:a0:07:0e:43: 0d:90:fe:2a:a8:63:2e:d8:7f:b5:db:b5:d9:f3:e3:28:bf:4b: 83:f2:8d:e4:d8:1c:38:30:5f:5f:6f:92:ab:f5:2e:0f:96:38: cf:c9:9d:e6:0e:bf:a2:09:09:1e:91:64:bf:44:b7:c2:f8:9a: 43:0f:de:55:79:1c:c5:3c:a5:6a:7a:f0:22:e5:27:98:59:fa: 39:23:a2:b7:57:03:05:5c:46:d1:8c:e6:a9:df:08:24:d5:77: d8:3b:68:86:b5:c5:4e:c9:27:0e:82:cc:85:fb:c1:8b:9b:72: 0e:57:fe:5f:88:54:e7:11:b1:8f:8b:26:eb:9f:fd:aa:32:f7: c6:03:f4:46:13:db:d7:24:67:aa:c4:97:38:13:a0:a6:36:69: 17:34:ac:a9:67:07:e6:f1:ab:6d:19:77:c1:16:ef:52:ad:11: 21:7e:df:d9:7d:11:4d:e1:ac:8f:fa:4c:6c:a8:87:70:0b:6a: bc:d7:75:8f:b3:71:e4:2f:22:ae:f5:58:b0:6f:c9:05:60:76: fa:54:98:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUM6mn1KGpYPKSC2+v3eIOZ42QnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JCRTJE MEUwRDM5MTAeFw0yNjA3MjMxODIyMzRaFw0yNjA3MjQxOTE4MzRaMDMxMTAvBgNV BAMTKEQzQ0VCQzM1RDg2RUMxMDBGM0UxNkIwRTNFMkNCODQ0QzhCM0MyRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeVWphOFeXgGB3yKBkGyEy2rbu KEwLqhIaBne8DUSX4vOmGIVC8Aa9VqucjH3r2Tb27G009+3z2MWHKpnGQTBQnQDZ UTYH354Z7r66CqrDGSDeYTuL/65Q5TZXe9S8OQoG1ZOmMsM8eV5vCXvFTd3f9YsI A6oZ3WhuSrIV+SbIVxXD+3VXBB4Z20Yl3BNlU3lHWYcqEyCXqb+m84KxJCxbQX4F ewVuUHV1jCJNzvnIOvIiZDiU6tV9sWzwP2jbqPkaysO0mhHY/kX0RVz8N6buUqQy to2gaY2sMCD890xHv+hRcwxS3HpBJIdtdRCKlbQ8bb1vuRxA0aCZ/SbNDTwxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0868NdhuwQDz4WsOPiy4RMizwtIwHwYDVR0j BBgwFoAUTUy+ZRqiIPkIjk27vJe74tDg05EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwN2UzZDgtOWJmYy00NDgzLWEyZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUx QUEyMjBGOTA4OEU0REJCQkM5N0JCRTJEMEUwRDM5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRDQkU2NTFBQTIyMEY5MDg4RTREQkJCQzk3QkJFMkQwRTBE MzkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy ZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JC RTJEMEUwRDM5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHW3gbv1OLhAsaJuB/dlNdut0ktt+aoC671 voR0m0E+he1bMGQsIiIREzKP8BosDBVnoAcOQw2Q/iqoYy7Yf7Xbtdnz4yi/S4Py jeTYHDgwX19vkqv1Lg+WOM/JneYOv6IJCR6RZL9Et8L4mkMP3lV5HMU8pWp68CLl J5hZ+jkjordXAwVcRtGM5qnfCCTVd9g7aIa1xU7JJw6CzIX7wYubcg5X/l+IVOcR sY+LJuuf/aoy98YD9EYT29ckZ6rElzgToKY2aRc0rKlnB+bxq20Zd8EW71KtESF+ 39l9EU3hrI/6TGyoh3ALarzXdY+zceQvIq71WLBvyQVgdvpUmGI= -----END CERTIFICATE-----Generated at Fri Jul 24 09:10:24 2026 by rpki-client