$ rpki-client -vvf rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft File: B486D413919D8F20144DB8254040D1237E34B8AA.mft (raw, json) Hash identifier: tW9sBftPR3DrAUjreYITskRzd143oVfvf4M9BCwbl38= Subject key identifier: C4:A0:F6:90:50:F8:2D:A5:70:9C:DF:40:95:12:8E:D6:00:65:E9:2E Authority key identifier: B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA Certificate issuer: /CN=B486D413919D8F20144DB8254040D1237E34B8AA Certificate serial: 7BDB9E47E7341B975E98663ADD3DB7C5FCDEC82E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 07:59:43 +0000 Manifest this update: Thu 23 Jul 2026 07:54:43 +0000 Manifest next update: Fri 24 Jul 2026 09:49:43 +0000 Files and hashes: 1: B486D413919D8F20144DB8254040D1237E34B8AA.crl (hash: PPRpvouC3i8dEOXTcwKJ5lSJlVWNYUfjIlDZQFap1OE=) 2: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: eldG4bxXfHfHBZuQpQd9deqvI4oVqZUOKXxgD57litE=) 3: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: 7QTUY2NQvJrxF3QQX7LUC6hqv5ttn70Xh40WXHVfruk=) 4: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: I7JOfc7cIihje61qrOhB8mNIVUiXPbuVCLb1xIG81r0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 09:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:db:9e:47:e7:34:1b:97:5e:98:66:3a:dd:3d:b7:c5:fc:de:c8:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B486D413919D8F20144DB8254040D1237E34B8AA Validity Not Before: Jul 23 07:54:43 2026 GMT Not After : Jul 24 09:49:43 2026 GMT Subject: CN=C4A0F69050F82DA5709CDF4095128ED60065E92E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:c5:46:eb:c3:1e:43:73:37:50:d0:f5:d6: b4:94:5e:cd:30:a5:6f:d6:14:59:87:72:ee:7c:22: d9:ad:1d:61:f5:43:c8:37:1d:6a:37:9c:ec:8a:d5: fa:24:8d:37:ed:3b:fa:ea:29:bb:47:e3:26:e2:e4: 79:47:c5:94:a2:c3:ad:03:8e:57:ae:84:96:26:18: 64:9e:ac:da:e6:b2:2b:de:0b:68:c8:50:58:dd:48: 58:c1:5d:34:57:32:82:de:e5:c1:15:0f:dc:cf:3e: 1e:a3:3f:2d:d6:51:4e:aa:e2:5e:43:d3:e7:ab:f8: 52:63:98:b6:3b:b4:1c:4b:3f:72:f0:09:08:f2:c3: 09:a0:a3:a6:2a:dd:b6:b2:a8:3d:e9:4c:d1:11:2e: f1:ca:51:69:31:24:c5:63:1f:42:85:c5:67:43:cd: 80:e9:49:24:fa:f6:11:62:21:f6:68:03:08:6a:15: 31:e4:c2:96:f8:2d:9a:dc:25:9f:7c:af:e2:f4:ce: 66:9b:e7:62:f3:a9:02:54:87:fa:1d:75:ef:3d:a5: 1d:1e:4a:81:76:96:88:a3:27:04:bc:90:f1:ed:b4: 7b:b7:65:b8:a1:50:29:6e:a3:46:b0:b9:51:bb:91: f1:8b:e6:2d:40:01:c6:29:59:a4:b8:e3:e2:28:23: 9e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A0:F6:90:50:F8:2D:A5:70:9C:DF:40:95:12:8E:D6:00:65:E9:2E X509v3 Authority Key Identifier: keyid:B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:04:5d:cc:58:36:9c:fd:8d:bd:46:dd:f9:1d:6a:f6:da:ac: 50:68:2f:bd:c6:1b:ac:cf:15:ab:b7:dc:f1:9d:85:03:2e:78: 45:4c:85:96:12:3e:ae:91:8e:e6:3b:04:d0:fd:08:e8:e7:cb: e4:b3:66:72:24:37:18:b8:ab:b9:3e:c4:47:04:a8:27:98:12: 81:d2:01:55:12:01:88:a5:67:1a:69:67:98:db:b6:13:0a:7c: 15:54:57:90:f5:f0:c5:82:15:cf:1e:6f:80:22:db:77:db:80: 7f:0e:e8:51:86:43:50:67:94:f1:01:d4:2c:86:ca:f0:ad:d1: 89:5d:f3:f6:82:d2:5e:a6:a7:6b:f8:34:bf:d3:56:c4:c8:76: b2:8a:96:52:80:c0:b6:5a:b1:af:a7:4e:8e:24:21:04:ec:64: 99:cd:e8:72:30:03:b0:ea:ca:21:d3:4c:ea:76:c1:4e:a2:6b: 08:c9:88:d0:42:41:97:45:e0:c9:6d:6d:cd:06:e6:25:dc:25: 1d:84:4e:f4:c2:06:2f:87:94:00:b1:7a:59:40:74:d6:5a:20: df:5d:ed:2d:31:84:56:cb:c0:d4:f0:5e:c9:a6:1a:e6:d6:9f: 5b:21:32:c5:6a:58:8f:8e:c1:50:b8:d7:90:98:a8:5e:e6:52: 65:86:82:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe9ueR+c0G5demGY63T23xfzeyC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4NkQ0MTM5MTlEOEYyMDE0NERCODI1NDA0MEQxMjM3 RTM0QjhBQTAeFw0yNjA3MjMwNzU0NDNaFw0yNjA3MjQwOTQ5NDNaMDMxMTAvBgNV BAMTKEM0QTBGNjkwNTBGODJEQTU3MDlDREY0MDk1MTI4RUQ2MDA2NUU5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyA8VG68MeQ3M3UND11rSUXs0w pW/WFFmHcu58ItmtHWH1Q8g3HWo3nOyK1fokjTftO/rqKbtH4ybi5HlHxZSiw60D jleuhJYmGGSerNrmsiveC2jIUFjdSFjBXTRXMoLe5cEVD9zPPh6jPy3WUU6q4l5D 0+er+FJjmLY7tBxLP3LwCQjywwmgo6Yq3bayqD3pTNERLvHKUWkxJMVjH0KFxWdD zYDpSST69hFiIfZoAwhqFTHkwpb4LZrcJZ98r+L0zmab52LzqQJUh/odde89pR0e SoF2loijJwS8kPHttHu3ZbihUCluo0awuVG7kfGL5i1AAcYpWaS44+IoI55dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxKD2kFD4LaVwnN9AlRKO1gBl6S4wHwYDVR0j BBgwFoAUtIbUE5GdjyAUTbglQEDRI340uKowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBjMTcxZjQtYmQxMS00OGVkLTg3ZjAtMjdlYTEyMDkwNjRmLzAvQjQ4NkQ0MTM5 MTlEOEYyMDE0NERCODI1NDA0MEQxMjM3RTM0QjhBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNDg2RDQxMzkxOUQ4RjIwMTQ0REI4MjU0MDQwRDEyMzdFMzRC OEFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQjQ4NkQ0MTM5MTlEOEYyMDE0NERCODI1NDA0MEQx MjM3RTM0QjhBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwEXcxYNpz9jb1G3fkdavbarFBoL73GG6zP Fau33PGdhQMueEVMhZYSPq6RjuY7BND9COjny+SzZnIkNxi4q7k+xEcEqCeYEoHS AVUSAYilZxppZ5jbthMKfBVUV5D18MWCFc8eb4Ai23fbgH8O6FGGQ1BnlPEB1CyG yvCt0Yld8/aC0l6mp2v4NL/TVsTIdrKKllKAwLZasa+nTo4kIQTsZJnN6HIwA7Dq yiHTTOp2wU6iawjJiNBCQZdF4Mltbc0G5iXcJR2ETvTCBi+HlACxellAdNZaIN9d 7S0xhFbLwNTwXsmmGubWn1shMsVqWI+OwVC415CYqF7mUmWGguE= -----END CERTIFICATE-----Generated at Fri Jul 24 02:39:25 2026 by rpki-client