$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft File: 4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft (raw, json) Hash identifier: Cbzxxo56KS2E0/s9tyWrBrYh4F2yIPEWS5USVa5CHNY= Subject key identifier: E0:C2:40:46:49:04:13:7F:A0:8D:B2:D8:18:C2:CC:E1:2A:47:54:4D Authority key identifier: 4A:CA:AD:0A:28:A6:50:A9:BD:65:B0:A6:E1:90:57:F4:7B:DB:94:2F Certificate issuer: /CN=4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F Certificate serial: 31F3AF0D8A4BC2E92DCA7460760A3DB20FB30BCE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 09:20:52 +0000 Manifest this update: Fri 24 Jul 2026 09:15:52 +0000 Manifest next update: Sat 25 Jul 2026 13:15:52 +0000 Files and hashes: 1: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (hash: 7y1kc2AMpxx6evn2aDQV63VxhXeky0gM842l022bSD4=) 2: 4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl (hash: V9ErYHr9EFgBwW15YROqLpGLXMNL60L3IrlqZzFMlWQ=) 3: 3130332e3136332e3234302e302f32342d3234203d3e20313431383837.roa (hash: 5Ssmm5grz5Tl3MtkZw82jMEzuLc9usDz6SBlVHYxN7U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:f3:af:0d:8a:4b:c2:e9:2d:ca:74:60:76:0a:3d:b2:0f:b3:0b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F Validity Not Before: Jul 24 09:15:52 2026 GMT Not After : Jul 25 13:15:52 2026 GMT Subject: CN=E0C240464904137FA08DB2D818C2CCE12A47544D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fa:82:8d:57:1e:6a:48:cc:5b:83:93:b8:18: 3b:c6:77:c0:96:6a:19:b4:a9:69:d0:a7:2c:0b:f3: e6:78:8c:a8:bb:8a:9e:2c:ae:f4:6f:5c:31:68:3f: 9a:72:72:90:57:47:a9:fc:03:8b:8b:a5:d3:26:e6: b0:70:94:e6:9e:8c:3b:58:a5:2a:e6:5b:32:72:70: b5:39:2b:34:6c:d8:78:2c:50:41:4f:6c:4e:b6:7a: a7:35:bc:c3:b8:46:87:da:07:99:ad:8e:62:41:c8: 2c:7d:21:a5:a1:ff:58:aa:8c:98:3b:dc:d9:0e:af: 46:41:05:bb:0c:f6:52:8b:bc:a0:94:77:ce:ff:89: 6f:3e:bd:3c:ac:55:90:15:aa:32:50:23:1f:b4:90: ef:f8:d7:5b:37:1e:22:a7:5d:be:5e:ed:af:5e:79: 58:b0:30:a7:72:97:7b:d6:f1:27:ef:b6:71:0c:23: c2:d5:54:f8:1f:4a:cc:7b:0d:5f:63:99:50:b0:56: b1:5c:d3:34:c0:39:60:3a:4b:41:bd:24:92:56:83: 86:d7:13:d2:04:90:4a:33:6a:7e:e6:bc:d5:84:bd: ef:61:2b:7a:37:54:57:13:10:f5:d2:9a:1d:d5:d9: a8:74:45:da:5b:e2:1f:66:f9:5a:a7:89:f5:de:2c: c6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C2:40:46:49:04:13:7F:A0:8D:B2:D8:18:C2:CC:E1:2A:47:54:4D X509v3 Authority Key Identifier: keyid:4A:CA:AD:0A:28:A6:50:A9:BD:65:B0:A6:E1:90:57:F4:7B:DB:94:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:5b:97:62:98:cd:04:f6:48:28:6c:ad:65:71:41:1f:5c:41: b2:7a:1d:78:a1:7c:4f:e2:84:fe:2c:7d:2c:52:d3:00:18:82: ff:38:72:2c:f7:3b:d8:df:77:f9:f0:98:a7:20:6b:c3:9d:98: e5:62:a5:4a:7a:a2:9d:43:e3:a3:93:f5:0f:6d:a9:29:dc:3e: eb:33:5f:98:a2:30:eb:be:a9:74:e5:a2:39:b8:cc:cc:4d:8e: 12:ce:35:ea:2e:6c:fb:36:2e:fc:05:b4:06:25:42:99:c7:b4: 11:63:19:0a:fa:4a:a6:63:ab:e8:f6:d8:e4:fe:74:d0:74:c8: a4:6c:1a:87:37:ac:6a:c6:6d:23:b2:25:57:68:a3:1c:03:08: b5:8c:55:b4:e5:bc:8f:38:cb:47:d5:e7:d6:ce:61:51:8e:4e: bd:8e:b8:e8:7b:5f:a9:c5:ba:5c:56:6f:aa:97:24:ff:e6:ee: a4:ff:55:21:31:72:14:3a:eb:12:98:73:0b:7e:2b:d9:b8:84: 31:27:b8:34:9c:77:37:4e:b9:82:c3:71:1b:01:4c:d5:9e:80: b3:c3:a4:9e:2b:e1:05:b5:a1:03:5b:8c:4d:4e:7f:9f:b9:60: c0:ce:39:2b:e4:49:dd:e1:68:e9:cd:f3:a0:ac:cd:e4:f4:bb: 35:16:03:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMfOvDYpLwuktynRgdgo9sg+zC84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDQUFEMEEyOEE2NTBBOUJENjVCMEE2RTE5MDU3RjQ3 QkRCOTQyRjAeFw0yNjA3MjQwOTE1NTJaFw0yNjA3MjUxMzE1NTJaMDMxMTAvBgNV BAMTKEUwQzI0MDQ2NDkwNDEzN0ZBMDhEQjJEODE4QzJDQ0UxMkE0NzU0NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc+oKNVx5qSMxbg5O4GDvGd8CW ahm0qWnQpywL8+Z4jKi7ip4srvRvXDFoP5pycpBXR6n8A4uLpdMm5rBwlOaejDtY pSrmWzJycLU5KzRs2HgsUEFPbE62eqc1vMO4RofaB5mtjmJByCx9IaWh/1iqjJg7 3NkOr0ZBBbsM9lKLvKCUd87/iW8+vTysVZAVqjJQIx+0kO/411s3HiKnXb5e7a9e eViwMKdyl3vW8SfvtnEMI8LVVPgfSsx7DV9jmVCwVrFc0zTAOWA6S0G9JJJWg4bX E9IEkEozan7mvNWEve9hK3o3VFcTEPXSmh3V2ah0Rdpb4h9m+VqnifXeLMZrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4MJARkkEE3+gjbLYGMLM4SpHVE0wHwYDVR0j BBgwFoAUSsqtCiimUKm9ZbCm4ZBX9HvblC8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M1Yjc4NWQtODMwMy00NWM1LTlhNTgtZWMxMjg4NzQwODY2LzAvNEFDQUFEMEEy OEE2NTBBOUJENjVCMEE2RTE5MDU3RjQ3QkRCOTQyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUNBQUQwQTI4QTY1MEE5QkQ2NUIwQTZFMTkwNTdGNDdCREI5 NDJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvNEFDQUFEMEEyOEE2NTBBOUJENjVCMEE2RTE5MDU3 RjQ3QkRCOTQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMhbl2KYzQT2SChsrWVxQR9cQbJ6HXihfE/i hP4sfSxS0wAYgv84ciz3O9jfd/nwmKcga8OdmOVipUp6op1D46OT9Q9tqSncPusz X5iiMOu+qXTlojm4zMxNjhLONeoubPs2LvwFtAYlQpnHtBFjGQr6SqZjq+j22OT+ dNB0yKRsGoc3rGrGbSOyJVdooxwDCLWMVbTlvI84y0fV59bOYVGOTr2OuOh7X6nF ulxWb6qXJP/m7qT/VSExchQ66xKYcwt+K9m4hDEnuDScdzdOuYLDcRsBTNWegLPD pJ4r4QW1oQNbjE1Of5+5YMDOOSvkSd3haOnN86CszeT0uzUWA/w= -----END CERTIFICATE-----Generated at Fri Jul 24 11:34:48 2026 by rpki-client