$ rpki-client -vvf rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft File: 4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft (raw, json) Hash identifier: zPRE1sARUTkqkzGEBlIv+qa9pOTv7FW2kdoqdf+/nuU= Subject key identifier: 2A:3F:77:BE:6B:B4:AF:CB:8C:47:24:BB:51:8D:FE:0D:C9:EC:C2:78 Authority key identifier: 4A:18:E5:54:0F:B9:CF:E0:7A:95:ED:F8:9B:AF:7C:E9:78:E9:42:58 Certificate issuer: /CN=4A18E5540FB9CFE07A95EDF89BAF7CE978E94258 Certificate serial: 7947045C0FE98E82AC53D31D2C344C3F607A81B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 06:07:23 +0000 Manifest this update: Thu 23 Jul 2026 06:02:23 +0000 Manifest next update: Fri 24 Jul 2026 09:03:23 +0000 Files and hashes: 1: 4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl (hash: 2MsD0yFXKKx+92561mSbtEkjnH9UJL/9VpiJLjno9ns=) 2: 3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa (hash: CHd91Km0nR+qP58cZt8MMTA3jronphrVjPNjJ4FduNs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 09:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:47:04:5c:0f:e9:8e:82:ac:53:d3:1d:2c:34:4c:3f:60:7a:81:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A18E5540FB9CFE07A95EDF89BAF7CE978E94258 Validity Not Before: Jul 23 06:02:23 2026 GMT Not After : Jul 24 09:03:23 2026 GMT Subject: CN=2A3F77BE6BB4AFCB8C4724BB518DFE0DC9ECC278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:77:31:f4:aa:b1:64:1d:b8:76:ef:b2:7c:d9: 9a:ca:1b:fe:d9:f6:b0:5a:7c:c0:ac:ab:e7:78:8f: 70:a9:7d:20:b7:07:49:8c:7e:e7:e0:e3:d0:89:c8: c9:a0:3d:44:f2:e8:39:e5:a7:90:5c:1c:56:13:fd: f9:04:c6:d1:33:dc:22:04:3a:3e:e2:dc:1f:98:1a: 85:66:3e:52:44:fa:df:de:f8:ac:9b:ad:e0:bb:0f: ca:dd:c8:eb:33:74:45:cc:e3:e4:51:57:cf:03:a6: 81:4b:81:95:0a:20:28:5c:b4:9b:27:4b:39:05:44: 52:9f:eb:5e:41:a5:a4:7a:10:aa:56:2a:c4:00:6f: 55:86:aa:e9:2d:e9:4b:fb:c1:92:08:60:f7:14:ab: 36:e6:06:7b:10:24:16:dc:ed:df:bf:61:4f:2b:7a: 91:91:5a:0b:bc:72:f9:53:22:47:eb:22:0b:7f:66: f3:ff:ba:54:38:0f:8b:0b:e4:95:54:8d:17:92:68: 5a:47:c7:38:b0:2c:28:cf:53:94:41:20:4b:b6:1a: d3:aa:eb:14:45:cf:61:50:24:18:fc:37:9c:6e:5f: 2f:be:44:63:6a:dd:47:78:87:c2:72:b8:cd:4f:d5: 68:c2:18:81:51:83:32:d1:6b:11:90:5c:04:9c:28: 95:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3F:77:BE:6B:B4:AF:CB:8C:47:24:BB:51:8D:FE:0D:C9:EC:C2:78 X509v3 Authority Key Identifier: keyid:4A:18:E5:54:0F:B9:CF:E0:7A:95:ED:F8:9B:AF:7C:E9:78:E9:42:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:8c:e1:72:22:2f:75:11:b7:3c:b3:75:15:2b:c1:ec:ee:91: 7b:38:8a:51:3c:7a:97:19:9a:bc:28:bd:59:f4:db:be:7c:4c: fa:08:71:4f:0a:9d:9d:12:e7:5a:bd:37:c4:6c:19:a2:0c:99: cf:67:8d:73:60:6c:f5:3f:33:ca:52:db:d9:1e:14:e8:21:67: f5:35:a5:3a:d7:09:47:65:3c:95:44:f3:f5:50:0d:65:c0:e1: f5:b7:9b:08:b4:f6:08:47:2f:2e:63:20:55:e1:c4:de:a0:30: ac:55:6b:82:10:bc:77:3c:36:eb:98:44:bd:75:7c:55:d2:91: af:0c:d9:ca:4c:06:51:43:a4:fc:04:fb:ad:ed:80:a4:0c:c1: 1b:ba:78:07:35:cf:fc:26:4c:cb:e7:58:74:7b:64:f8:2a:36: 5e:c1:d3:10:fb:4c:88:8e:3d:90:7f:3b:10:42:e9:b7:42:b3: 1a:f9:30:6e:d2:b3:e0:38:ce:84:22:d1:26:c7:ba:e0:8a:84: bb:fb:a9:28:2d:fc:70:0d:eb:f0:80:ab:14:c2:83:54:ab:b8: 1d:75:55:da:d0:15:c5:1d:a5:b2:a0:be:31:08:92:66:82:4c: 73:f4:70:65:29:76:51:70:b8:17:6a:53:15:ca:99:72:75:3b: 19:ca:bb:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeUcEXA/pjoKsU9MdLDRMP2B6gbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEExOEU1NTQwRkI5Q0ZFMDdBOTVFREY4OUJBRjdDRTk3 OEU5NDI1ODAeFw0yNjA3MjMwNjAyMjNaFw0yNjA3MjQwOTAzMjNaMDMxMTAvBgNV BAMTKDJBM0Y3N0JFNkJCNEFGQ0I4QzQ3MjRCQjUxOERGRTBEQzlFQ0MyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfdzH0qrFkHbh277J82ZrKG/7Z 9rBafMCsq+d4j3CpfSC3B0mMfufg49CJyMmgPUTy6Dnlp5BcHFYT/fkExtEz3CIE Oj7i3B+YGoVmPlJE+t/e+KybreC7D8rdyOszdEXM4+RRV88DpoFLgZUKIChctJsn SzkFRFKf615BpaR6EKpWKsQAb1WGqukt6Uv7wZIIYPcUqzbmBnsQJBbc7d+/YU8r epGRWgu8cvlTIkfrIgt/ZvP/ulQ4D4sL5JVUjReSaFpHxziwLCjPU5RBIEu2GtOq 6xRFz2FQJBj8N5xuXy++RGNq3Ud4h8JyuM1P1WjCGIFRgzLRaxGQXAScKJV3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKj93vmu0r8uMRyS7UY3+DcnswngwHwYDVR0j BBgwFoAUShjlVA+5z+B6le34m6986XjpQlgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjlmYzk5NmYtNzJjYS00ZDZiLWEwZTctZmY1YmM0MmIwNTg5LzAvNEExOEU1NTQw RkI5Q0ZFMDdBOTVFREY4OUJBRjdDRTk3OEU5NDI1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTE4RTU1NDBGQjlDRkUwN0E5NUVERjg5QkFGN0NFOTc4RTk0 MjU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjlmYzk5NmYtNzJjYS00ZDZiLWEw ZTctZmY1YmM0MmIwNTg5LzAvNEExOEU1NTQwRkI5Q0ZFMDdBOTVFREY4OUJBRjdD RTk3OEU5NDI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGM4XIiL3URtzyzdRUrwezukXs4ilE8epcZ mrwovVn02758TPoIcU8KnZ0S51q9N8RsGaIMmc9njXNgbPU/M8pS29keFOghZ/U1 pTrXCUdlPJVE8/VQDWXA4fW3mwi09ghHLy5jIFXhxN6gMKxVa4IQvHc8NuuYRL11 fFXSka8M2cpMBlFDpPwE+63tgKQMwRu6eAc1z/wmTMvnWHR7ZPgqNl7B0xD7TIiO PZB/OxBC6bdCsxr5MG7Ss+A4zoQi0SbHuuCKhLv7qSgt/HAN6/CAqxTCg1SruB11 VdrQFcUdpbKgvjEIkmaCTHP0cGUpdlFwuBdqUxXKmXJ1OxnKu0E= -----END CERTIFICATE-----Generated at Fri Jul 24 02:37:25 2026 by rpki-client