$ rpki-client -vvf rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft File: 4D687A8309B055D62F3035664A59E96297B81009.mft (raw, json) Hash identifier: t2btKeXk8LYII4o8zmA2o7rq0j1sO+60UnwOzOJF2Y0= Subject key identifier: 0F:58:BE:1B:66:4A:02:A0:44:3C:BB:BA:08:DE:78:76:90:CB:72:8D Authority key identifier: 4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 Certificate issuer: /CN=4D687A8309B055D62F3035664A59E96297B81009 Certificate serial: 3F3DD0DEC9D14497D8D3E8E4A5F046BA8AB5E9E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:45:23 +0000 Manifest this update: Thu 23 Jul 2026 16:40:23 +0000 Manifest next update: Fri 24 Jul 2026 20:18:23 +0000 Files and hashes: 1: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: qwKrohM8yd0iJN/MCZ42zzEDzwWYAIoaAZk2ayeImcw=) 2: 4D687A8309B055D62F3035664A59E96297B81009.crl (hash: sGFANMbI7AMfhRsMzRtj9vrjyEySDJ5sLIuW3+5FJKw=) 3: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: tjAZ37II5WIJfFalAyrLUGpbSIz9sgJWYsOEq442hNI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:3d:d0:de:c9:d1:44:97:d8:d3:e8:e4:a5:f0:46:ba:8a:b5:e9:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D687A8309B055D62F3035664A59E96297B81009 Validity Not Before: Jul 23 16:40:23 2026 GMT Not After : Jul 24 20:18:23 2026 GMT Subject: CN=0F58BE1B664A02A0443CBBBA08DE787690CB728D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f2:98:ee:e4:99:fa:0b:ea:9f:4d:1a:a5:31: b3:80:43:c2:84:7f:57:fb:fa:f0:b5:f6:20:a9:bb: a9:d9:c2:61:0b:8c:c1:00:65:e0:2a:b6:c0:a4:3d: da:04:16:56:00:48:ef:38:df:7a:f9:43:f0:63:df: 5a:cb:4d:cc:66:91:b3:ae:83:ff:76:f6:be:09:69: b1:3c:12:a0:22:2e:e6:43:dd:6a:4b:97:d9:cd:14: b6:d9:a8:e4:62:80:ff:58:06:a1:78:3a:d4:40:fe: e7:6a:5a:e0:9e:cd:21:40:66:ef:c7:e3:1f:77:79: b7:06:02:5f:eb:cf:19:fc:80:e9:57:07:ee:ea:16: fb:be:69:d5:12:a8:24:5d:ea:7b:f9:91:d3:b1:db: 1e:e8:33:d4:60:a4:e5:78:4c:d9:20:6b:fa:c1:66: f8:79:35:af:35:8c:53:5f:96:99:e3:21:b8:3f:44: e9:7d:6d:53:da:a0:1f:1d:8b:6f:c9:dd:0e:7a:83: e2:bd:07:4a:64:c8:3f:35:b4:99:36:d6:ea:40:82: ca:0e:2e:cb:ae:9e:b1:61:86:0c:81:5c:5e:a2:92: 76:a2:12:65:c7:45:52:06:99:cd:d3:90:01:66:9a: c1:b4:85:2a:a8:f6:75:28:7d:9c:c2:f2:1d:0b:d3: a2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:58:BE:1B:66:4A:02:A0:44:3C:BB:BA:08:DE:78:76:90:CB:72:8D X509v3 Authority Key Identifier: keyid:4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:0e:e9:31:7f:1c:c8:ef:b4:06:a9:d8:64:79:7f:4c:4e:4a: ae:cb:9b:99:00:84:6e:01:4e:88:45:c2:ed:1d:5a:45:bc:ba: 73:03:d7:71:ec:8d:9d:86:c9:e4:68:62:7a:65:d4:42:37:44: c8:f9:2c:f4:39:eb:a6:f8:e9:17:f4:4a:00:f1:1a:4f:d2:22: a1:75:bb:8c:68:eb:af:eb:aa:52:8f:14:9f:7a:57:30:82:82: bc:64:0c:5c:e5:94:73:37:3e:0b:c0:dd:21:2a:be:67:67:63: c8:2f:de:72:fd:de:61:6f:0d:29:37:d7:b9:12:bb:77:0a:de: e7:39:ae:65:cc:1a:1a:fd:8a:43:8d:eb:d7:f0:72:41:19:af: 3d:a2:70:d8:32:6d:19:af:2f:d1:c0:7f:1c:1b:1a:d0:87:a5: 3e:18:d8:17:21:f1:a6:e2:2a:e3:89:b8:a3:ae:54:2f:17:84: cf:18:56:d2:26:64:fc:b7:53:1a:0c:1c:df:15:eb:84:69:b0: 1c:ee:df:f0:a3:67:89:5d:95:89:b8:8c:27:e2:03:95:ab:1d: 6d:38:5f:fe:07:33:24:eb:19:5c:44:7a:e9:fe:0f:b8:b5:40: 68:04:90:66:c8:cd:83:ac:bb:53:f6:d5:fb:d6:80:f9:e9:bf: 45:ac:12:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPz3Q3snRRJfY0+jkpfBGuoq16eQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5 N0I4MTAwOTAeFw0yNjA3MjMxNjQwMjNaFw0yNjA3MjQyMDE4MjNaMDMxMTAvBgNV BAMTKDBGNThCRTFCNjY0QTAyQTA0NDNDQkJCQTA4REU3ODc2OTBDQjcyOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh8pju5Jn6C+qfTRqlMbOAQ8KE f1f7+vC19iCpu6nZwmELjMEAZeAqtsCkPdoEFlYASO8433r5Q/Bj31rLTcxmkbOu g/929r4JabE8EqAiLuZD3WpLl9nNFLbZqORigP9YBqF4OtRA/udqWuCezSFAZu/H 4x93ebcGAl/rzxn8gOlXB+7qFvu+adUSqCRd6nv5kdOx2x7oM9RgpOV4TNkga/rB Zvh5Na81jFNflpnjIbg/ROl9bVPaoB8di2/J3Q56g+K9B0pkyD81tJk21upAgsoO LsuunrFhhgyBXF6iknaiEmXHRVIGmc3TkAFmmsG0hSqo9nUofZzC8h0L06KpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD1i+G2ZKAqBEPLu6CN54dpDLco0wHwYDVR0j BBgwFoAUTWh6gwmwVdYvMDVmSlnpYpe4EAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg5MTM4OTMtNWY2NC00YTVlLWE4ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMw OUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5N0I4MTAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80RDY4N0E4MzA5QjA1NUQ2MkYzMDM1NjY0QTU5RTk2Mjk3Qjgx MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5 NjI5N0I4MTAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkO6TF/HMjvtAap2GR5f0xOSq7Lm5kAhG4B TohFwu0dWkW8unMD13HsjZ2GyeRoYnpl1EI3RMj5LPQ566b46Rf0SgDxGk/SIqF1 u4xo66/rqlKPFJ96VzCCgrxkDFzllHM3PgvA3SEqvmdnY8gv3nL93mFvDSk317kS u3cK3uc5rmXMGhr9ikON69fwckEZrz2icNgybRmvL9HAfxwbGtCHpT4Y2Bch8abi KuOJuKOuVC8XhM8YVtImZPy3UxoMHN8V64RpsBzu3/CjZ4ldlYm4jCfiA5WrHW04 X/4HMyTrGVxEeun+D7i1QGgEkGbIzYOsu1P21fvWgPnpv0WsEn4= -----END CERTIFICATE-----Generated at Fri Jul 24 12:45:45 2026 by rpki-client