$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft File: 4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft (raw, json) Hash identifier: Xx3T7cn++iHsfsyvp7RmB4fvKbf0ok8ftpYlM+o6rfY= Subject key identifier: 71:CD:E1:AA:34:E6:DE:2A:05:27:6B:1B:3C:15:79:BB:DA:A6:14:8A Authority key identifier: 4F:9D:EF:EA:18:F9:7C:95:D8:6B:C7:B3:9D:B7:D8:00:C1:F1:92:0F Certificate issuer: /CN=4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F Certificate serial: 5A0C9744F214410871327F2EE41658C38F82F72D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:00:44 +0000 Manifest this update: Thu 23 Jul 2026 20:55:44 +0000 Manifest next update: Fri 24 Jul 2026 21:00:44 +0000 Files and hashes: 1: 4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl (hash: fdCuJ5Rwgwxs+2lnrfkWy85AR6lufCR/XqQB+ARvOWY=) 2: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: uBR3IGblPNZJ3jWpF0OXwKYD/CzwZlm+xMvRiWr2v+Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0c:97:44:f2:14:41:08:71:32:7f:2e:e4:16:58:c3:8f:82:f7:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F Validity Not Before: Jul 23 20:55:44 2026 GMT Not After : Jul 24 21:00:44 2026 GMT Subject: CN=71CDE1AA34E6DE2A05276B1B3C1579BBDAA6148A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fd:04:51:dd:e4:ce:ea:9b:4e:ac:24:ba:aa: ec:5e:12:12:c9:67:c9:2d:16:96:0f:35:8b:52:f4: c7:cc:7c:51:cf:7a:10:8a:f5:72:c5:ca:7b:44:98: 38:9e:81:f8:db:09:40:55:11:07:a5:b7:13:f3:ab: f7:5d:69:3d:63:e7:56:ef:d6:e6:6c:04:c1:ff:77: d4:bb:82:a1:01:b9:bc:4a:8d:35:47:71:4f:92:f5: ac:8e:89:bc:af:3b:1d:1c:56:ce:fc:4c:d9:f5:4c: a2:64:d7:f2:f6:65:85:74:bb:c3:7d:58:0f:aa:ee: aa:68:d7:e8:e1:3f:98:ee:a7:c0:a3:4e:2d:24:66: 1c:32:93:fc:b0:70:04:0b:ae:70:de:6e:07:59:6f: f4:2e:0b:a6:c1:32:02:4d:6b:c6:13:b1:56:65:74: 66:9a:54:e0:76:fb:98:ba:b5:7a:48:00:e9:c4:43: de:c0:34:bd:f7:a5:3d:e9:a5:48:ca:88:64:09:44: 7e:fd:1a:0e:2b:f5:fa:53:3f:9f:a7:8f:c0:43:c9: 68:35:53:1e:3c:fe:3b:10:e0:6f:2b:45:43:b7:6f: af:ef:58:31:0d:fc:8d:5b:4b:e0:a6:7b:a7:fc:46: bc:86:25:67:60:78:7e:6e:dc:69:98:5c:62:37:bc: 53:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CD:E1:AA:34:E6:DE:2A:05:27:6B:1B:3C:15:79:BB:DA:A6:14:8A X509v3 Authority Key Identifier: keyid:4F:9D:EF:EA:18:F9:7C:95:D8:6B:C7:B3:9D:B7:D8:00:C1:F1:92:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:a6:12:e7:f6:48:dc:ba:11:58:5a:51:dc:77:4a:06:d1:01: 92:0a:8d:d4:dd:fb:8b:a0:25:89:68:ef:96:16:d5:84:62:4a: d5:b0:be:bc:30:77:ef:30:8b:5d:b3:8a:11:eb:0f:69:3a:c5: 71:3c:8c:a8:57:43:11:d6:cf:cb:fa:ed:f4:b9:a9:95:dd:3f: 62:2e:4c:6c:e9:d6:e5:fa:ce:80:e4:ed:21:27:39:66:30:85: 54:5c:0f:2c:03:ba:0e:93:4d:fb:59:64:46:70:ae:74:6d:dd: 09:9d:61:7b:8b:6c:f2:a3:73:26:a0:ae:ba:8c:a3:d9:bf:24: f8:1a:d8:d6:37:c2:c6:4e:1f:ac:8f:1d:f0:8c:96:d6:16:c7: 0e:7b:44:e6:90:64:60:ac:c9:35:65:b9:28:7c:61:28:2b:e9: 7e:9d:3b:51:82:e5:ab:eb:ab:a2:e1:a7:49:82:3e:12:1e:7b: 52:c9:a5:0a:30:9e:df:b6:00:c9:1a:ea:78:32:11:25:6c:ed: 85:c6:d9:9b:11:88:99:ef:58:21:00:a0:92:06:40:10:13:a5: 9d:9d:68:63:ce:55:ef:5b:1f:84:b9:16:f2:c3:0c:b1:cc:1c: 94:25:9c:ba:1f:fb:c8:c0:27:97:08:63:a7:cc:3a:4f:64:fb: 23:68:ff:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWgyXRPIUQQhxMn8u5BZYw4+C9y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY5REVGRUExOEY5N0M5NUQ4NkJDN0IzOURCN0Q4MDBD MUYxOTIwRjAeFw0yNjA3MjMyMDU1NDRaFw0yNjA3MjQyMTAwNDRaMDMxMTAvBgNV BAMTKDcxQ0RFMUFBMzRFNkRFMkEwNTI3NkIxQjNDMTU3OUJCREFBNjE0OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/QRR3eTO6ptOrCS6quxeEhLJ Z8ktFpYPNYtS9MfMfFHPehCK9XLFyntEmDiegfjbCUBVEQeltxPzq/ddaT1j51bv 1uZsBMH/d9S7gqEBubxKjTVHcU+S9ayOibyvOx0cVs78TNn1TKJk1/L2ZYV0u8N9 WA+q7qpo1+jhP5jup8CjTi0kZhwyk/ywcAQLrnDebgdZb/QuC6bBMgJNa8YTsVZl dGaaVOB2+5i6tXpIAOnEQ97ANL33pT3ppUjKiGQJRH79Gg4r9fpTP5+nj8BDyWg1 Ux48/jsQ4G8rRUO3b6/vWDEN/I1bS+Cme6f8RryGJWdgeH5u3GmYXGI3vFPBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcc3hqjTm3ioFJ2sbPBV5u9qmFIowHwYDVR0j BBgwFoAUT53v6hj5fJXYa8eznbfYAMHxkg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE4ZjA0MzUtNGQzOC00N2VmLTg1MGYtNTFiYTQ2MTdmYjNkLzAvNEY5REVGRUEx OEY5N0M5NUQ4NkJDN0IzOURCN0Q4MDBDMUYxOTIwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RjlERUZFQTE4Rjk3Qzk1RDg2QkM3QjM5REI3RDgwMEMxRjE5 MjBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvNEY5REVGRUExOEY5N0M5NUQ4NkJDN0IzOURCN0Q4 MDBDMUYxOTIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMWmEuf2SNy6EVhaUdx3SgbRAZIKjdTd+4ug JYlo75YW1YRiStWwvrwwd+8wi12zihHrD2k6xXE8jKhXQxHWz8v67fS5qZXdP2Iu TGzp1uX6zoDk7SEnOWYwhVRcDywDug6TTftZZEZwrnRt3QmdYXuLbPKjcyagrrqM o9m/JPga2NY3wsZOH6yPHfCMltYWxw57ROaQZGCsyTVluSh8YSgr6X6dO1GC5avr q6Lhp0mCPhIee1LJpQownt+2AMka6ngyESVs7YXG2ZsRiJnvWCEAoJIGQBATpZ2d aGPOVe9bH4S5FvLDDLHMHJQlnLof+8jAJ5cIY6fMOk9k+yNo/+o= -----END CERTIFICATE-----Generated at Fri Jul 24 13:52:21 2026 by rpki-client