$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft File: 4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft (raw, json) Hash identifier: nBb3sADWHzu8MLWD0u7deiaXgqXALW2vlKNqpQxgTMg= Subject key identifier: 94:80:67:C7:0F:BA:5F:18:6C:39:9D:AD:F1:3D:04:78:1E:07:F5:46 Authority key identifier: 4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE Certificate issuer: /CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Certificate serial: 5E585FA351BFDC1B6A46FE91934391CBC39D69D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 05:05:41 +0000 Manifest this update: Fri 24 Jul 2026 05:00:41 +0000 Manifest next update: Sat 25 Jul 2026 06:46:41 +0000 Files and hashes: 1: 4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl (hash: 4uUc59sxiaX2EGynSi0Osr2kuQ1/TSTEnp+K1kvXvus=) 2: 3130332e3232342e36362e302f32342d3234203d3e203539313538.roa (hash: CaktXeTtnkylUI+n1xZGKMIR5SWqXLjJULrGhcPeRfc=) 3: 3130332e3232342e36342e302f32342d3234203d3e203539313538.roa (hash: vQnWFglYbzJwVQsCkKEdFaQ62I0WzkhSOu2hoX2jL1c=) 4: 3130332e3232342e36372e302f32342d3234203d3e203539313538.roa (hash: Aw8k55kVz/A5ACNLxhHkCsixHFEWcXHRzRLrIEuRqgk=) 5: 3130332e3232342e36352e302f32342d3234203d3e203539313538.roa (hash: h0Ywdp2xV/0uaBG2V+ZPA5ElWunEb3BnR0JL9D5MtcM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:58:5f:a3:51:bf:dc:1b:6a:46:fe:91:93:43:91:cb:c3:9d:69:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Validity Not Before: Jul 24 05:00:41 2026 GMT Not After : Jul 25 06:46:41 2026 GMT Subject: CN=948067C70FBA5F186C399DADF13D04781E07F546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:d4:27:70:53:07:d2:64:00:c9:de:7f:37: 27:36:bc:5a:48:fe:5b:59:20:c1:6b:03:d2:80:af: e3:bb:69:71:95:cf:d0:66:36:cd:06:2c:25:33:f7: de:ca:6f:48:8b:1c:03:f8:30:74:47:d5:45:45:57: 0b:55:ce:1a:0c:b2:67:40:0d:07:0a:3c:02:89:99: ca:b1:3c:ac:b3:07:9e:1e:9e:6b:b7:d2:d5:11:39: e1:98:ce:1b:4b:80:5b:78:4f:2a:91:7e:9a:3e:c9: 8d:ee:e4:f7:b7:36:4b:24:9f:52:30:64:0b:97:94: 01:74:d2:fc:08:cb:3b:9b:96:69:57:4a:b8:b7:97: 1d:db:44:e8:30:01:ad:9c:12:a8:8a:b5:a7:d0:71: 81:07:a8:b6:45:f1:be:57:33:48:bc:1d:38:4c:03: 5d:1d:9f:a1:6b:33:fc:06:4e:3b:65:34:c5:6c:e8: b9:5e:b1:28:ff:33:29:1c:85:79:53:74:05:31:ad: c8:05:96:69:c1:8b:87:0a:8e:16:b4:b5:24:28:8d: aa:5a:c8:dd:a9:d1:20:1c:0e:53:2b:b6:fc:13:6a: 5f:93:f0:9b:b7:ab:12:81:ab:d6:1a:50:fb:f8:85: 51:e8:26:8c:31:80:b5:60:6b:f1:e0:00:81:7f:47: 13:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:80:67:C7:0F:BA:5F:18:6C:39:9D:AD:F1:3D:04:78:1E:07:F5:46 X509v3 Authority Key Identifier: keyid:4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:11:bb:64:02:fa:2b:c3:68:6d:07:41:97:28:e3:43:f6:81: 7e:76:27:65:f9:76:8f:96:3e:52:80:c0:d6:ae:aa:32:ac:e3: a6:30:76:d4:90:c2:f3:7f:f4:27:a3:9a:db:af:d2:df:55:45: 21:b8:a0:5d:12:c8:0d:bc:cd:74:a5:e2:04:99:04:a2:80:c2: 8c:cf:df:95:36:bc:a1:49:ed:89:aa:eb:92:41:e4:dd:56:38: ec:1c:98:82:88:78:96:bc:1b:ee:40:b0:1d:2b:bd:15:41:96: 95:96:67:c7:00:96:89:b3:a0:36:a2:8b:7a:8a:3d:5f:36:a8: 62:a8:d2:9d:d2:0a:57:88:82:48:16:25:a2:b7:3a:86:61:3e: 30:17:ec:16:73:8d:6c:0d:a8:e1:5e:ec:44:2d:60:ac:93:bb: 5f:dd:dd:37:fe:6a:3e:3f:2c:c0:9f:93:1f:13:e0:ed:95:af: 36:2e:f9:17:69:42:49:90:cb:79:41:52:1b:f2:9a:31:f5:39: d3:97:a7:83:f4:59:0b:f5:92:9b:17:2e:bd:2f:53:28:f0:f1: 48:9c:d9:cb:8b:91:29:49:f5:69:51:49:15:91:34:9a:29:30: 45:2c:77:55:7d:6a:13:2d:c1:3d:cb:54:bf:e8:10:34:bc:1d: 15:ea:2f:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXlhfo1G/3BtqRv6Rk0ORy8OdadIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNG Q0Q5QThBRTAeFw0yNjA3MjQwNTAwNDFaFw0yNjA3MjUwNjQ2NDFaMDMxMTAvBgNV BAMTKDk0ODA2N0M3MEZCQTVGMTg2QzM5OURBREYxM0QwNDc4MUUwN0Y1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNtQncFMH0mQAyd5/Nyc2vFpI /ltZIMFrA9KAr+O7aXGVz9BmNs0GLCUz997Kb0iLHAP4MHRH1UVFVwtVzhoMsmdA DQcKPAKJmcqxPKyzB54enmu30tUROeGYzhtLgFt4TyqRfpo+yY3u5Pe3Nkskn1Iw ZAuXlAF00vwIyzublmlXSri3lx3bROgwAa2cEqiKtafQcYEHqLZF8b5XM0i8HThM A10dn6FrM/wGTjtlNMVs6LlesSj/MykchXlTdAUxrcgFlmnBi4cKjha0tSQojapa yN2p0SAcDlMrtvwTal+T8Ju3qxKBq9YaUPv4hVHoJowxgLVga/HgAIF/RxNPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlIBnxw+6XxhsOZ2t8T0EeB4H9UYwHwYDVR0j BBgwFoAUTL6OBwyTDnsCvlZXxVKObPzZqK4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4ZDU0YWUtODcwZC00MzQ4LWFiNTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcw QzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNGQ0Q5QThBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0JFOEUwNzBDOTMwRTdCMDJCRTU2NTdDNTUyOEU2Q0ZDRDlB OEFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE4ZDU0YWUtODcwZC00MzQ4LWFi NTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhF NkNGQ0Q5QThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsRu2QC+ivDaG0HQZco40P2gX52J2X5do+W PlKAwNauqjKs46YwdtSQwvN/9Cejmtuv0t9VRSG4oF0SyA28zXSl4gSZBKKAwozP 35U2vKFJ7Ymq65JB5N1WOOwcmIKIeJa8G+5AsB0rvRVBlpWWZ8cAlomzoDaii3qK PV82qGKo0p3SCleIgkgWJaK3OoZhPjAX7BZzjWwNqOFe7EQtYKyTu1/d3Tf+aj4/ LMCfkx8T4O2VrzYu+RdpQkmQy3lBUhvymjH1OdOXp4P0WQv1kpsXLr0vUyjw8Uic 2cuLkSlJ9WlRSRWRNJopMEUsd1V9ahMtwT3LVL/oEDS8HRXqL80= -----END CERTIFICATE-----Generated at Fri Jul 24 09:30:25 2026 by rpki-client