$ rpki-client -vvf rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft File: C4E9D4469828724936CAE63A417C0DE2014F205A.mft (raw, json) Hash identifier: GxlBqo8I2bevLIe+4OQA0e0sArnX6zEzNDfC/7nbtyo= Subject key identifier: E5:6A:41:C4:F8:40:9F:10:12:29:48:5D:56:B8:C9:3D:40:96:FE:9D Authority key identifier: C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A Certificate issuer: /CN=C4E9D4469828724936CAE63A417C0DE2014F205A Certificate serial: 1BF02390458C6E011D3604C7F75BAE1DCDD08A47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:12:20 +0000 Manifest this update: Thu 23 Jul 2026 18:07:20 +0000 Manifest next update: Fri 24 Jul 2026 20:57:20 +0000 Files and hashes: 1: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: n2rjzJ/zLgB675Rxossmph/fEyHX/dgt2ieO+QslQMw=) 2: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: O5O73bIVgP3Ny3ggR2VTr1FgLepLoRHQrtRQ7caTd/s=) 3: C4E9D4469828724936CAE63A417C0DE2014F205A.crl (hash: lqNCQeyciSOS9IQdPP9lvtvOzr8DATiNYMaDaW6DGwI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f0:23:90:45:8c:6e:01:1d:36:04:c7:f7:5b:ae:1d:cd:d0:8a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4E9D4469828724936CAE63A417C0DE2014F205A Validity Not Before: Jul 23 18:07:20 2026 GMT Not After : Jul 24 20:57:20 2026 GMT Subject: CN=E56A41C4F8409F101229485D56B8C93D4096FE9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c4:72:6a:a2:6f:ca:a2:3f:36:16:27:71:ce: fb:52:f2:b8:83:2c:cd:98:9b:f5:bf:78:ca:a3:54: 86:89:86:d5:2f:81:1f:6d:71:1f:56:9e:45:e9:90: 92:43:aa:3b:84:fc:e9:26:e4:6d:a5:6b:1a:9d:f4: 0a:1a:00:92:ee:52:a3:0b:af:ed:89:c6:f9:2f:7b: d3:bf:24:ea:e8:d5:34:67:48:f5:50:d1:3e:67:26: f4:cc:4f:c1:8a:24:b2:ac:72:5a:95:b0:bd:0e:de: 6d:11:49:21:67:b9:20:d5:34:91:5c:ff:90:ba:30: 6f:9d:17:89:df:7f:5d:cb:40:17:a1:88:64:36:29: 67:8e:5f:c6:cf:65:67:18:dd:11:e1:e0:f9:74:fb: da:a8:30:40:a9:0f:89:f7:8b:64:7b:2b:da:d9:96: 2b:21:51:71:7e:d6:95:3a:35:df:b2:25:77:ac:7c: 3f:f8:bf:81:8c:49:ce:0d:da:01:a9:90:b8:d1:09: b1:ab:34:c0:00:76:e2:16:7d:58:8b:1c:8c:71:dc: 0d:f7:a4:d4:6b:79:3c:32:4e:38:4b:91:65:0b:43: 21:06:aa:92:c7:5c:79:fa:65:4f:01:41:b3:88:9c: 26:af:32:95:a0:52:4c:38:77:ac:bb:4a:45:25:a3: bb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6A:41:C4:F8:40:9F:10:12:29:48:5D:56:B8:C9:3D:40:96:FE:9D X509v3 Authority Key Identifier: keyid:C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:08:9e:67:a5:49:bf:0c:63:d2:fd:ad:bc:0d:5c:67:87:35: d4:c2:84:e5:85:d5:e0:c5:0e:a0:6a:7c:15:57:af:e0:34:00: 34:c1:7b:31:5c:e3:04:78:bf:14:98:ba:5a:94:b3:72:ef:a8: 65:c3:9e:65:5f:55:6d:86:39:0c:d4:8b:92:7a:8c:25:0d:a2: 7a:80:e1:c1:4b:0b:19:2b:60:94:5e:1d:29:07:c4:f6:a3:15: 11:d6:1c:c7:29:cc:3e:e5:f3:5d:aa:c8:e3:dc:67:e4:19:41: 2f:9c:90:21:25:01:7e:12:39:e1:11:37:2d:f2:7f:5c:44:cc: a4:42:76:22:5c:99:5a:c0:fd:32:59:8b:0f:61:8b:76:d2:be: 5e:e2:95:71:3f:cd:bf:1c:ad:3f:ae:8e:97:c6:d0:26:d2:ec: a2:e3:6a:8d:46:51:5e:3c:f3:2d:93:bd:8d:8a:25:cf:c4:83: 18:78:2d:94:e8:4a:a1:4f:bb:bc:42:f0:f7:50:a4:9c:d3:db: a9:11:cf:88:d1:83:06:da:d4:50:70:d2:d3:16:f8:b0:19:70: 5d:8a:6c:d0:cd:a7:f9:55:7a:3e:54:12:1b:69:50:f7:24:8b: 8a:1e:26:b8:d6:26:ff:94:99:5e:10:90:14:b0:90:d2:c6:e6: 2d:a1:ba:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/AjkEWMbgEdNgTH91uuHc3QikcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRFOUQ0NDY5ODI4NzI0OTM2Q0FFNjNBNDE3QzBERTIw MTRGMjA1QTAeFw0yNjA3MjMxODA3MjBaFw0yNjA3MjQyMDU3MjBaMDMxMTAvBgNV BAMTKEU1NkE0MUM0Rjg0MDlGMTAxMjI5NDg1RDU2QjhDOTNENDA5NkZFOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJxHJqom/Koj82FidxzvtS8riD LM2Ym/W/eMqjVIaJhtUvgR9tcR9WnkXpkJJDqjuE/Okm5G2laxqd9AoaAJLuUqML r+2Jxvkve9O/JOro1TRnSPVQ0T5nJvTMT8GKJLKsclqVsL0O3m0RSSFnuSDVNJFc /5C6MG+dF4nff13LQBehiGQ2KWeOX8bPZWcY3RHh4Pl0+9qoMECpD4n3i2R7K9rZ lishUXF+1pU6Nd+yJXesfD/4v4GMSc4N2gGpkLjRCbGrNMAAduIWfViLHIxx3A33 pNRreTwyTjhLkWULQyEGqpLHXHn6ZU8BQbOInCavMpWgUkw4d6y7SkUlo7vPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5WpBxPhAnxASKUhdVrjJPUCW/p0wHwYDVR0j BBgwFoAUxOnURpgockk2yuY6QXwN4gFPIFowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTU4MmZjYTktMzIyMi00NWI2LWI0MjItZmYyYzZhOWZkMjQ3LzAvQzRFOUQ0NDY5 ODI4NzI0OTM2Q0FFNjNBNDE3QzBERTIwMTRGMjA1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DNEU5RDQ0Njk4Mjg3MjQ5MzZDQUU2M0E0MTdDMERFMjAxNEYy MDVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvQzRFOUQ0NDY5ODI4NzI0OTM2Q0FFNjNBNDE3QzBE RTIwMTRGMjA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIInmelSb8MY9L9rbwNXGeHNdTChOWF1eDF DqBqfBVXr+A0ADTBezFc4wR4vxSYulqUs3LvqGXDnmVfVW2GOQzUi5J6jCUNonqA 4cFLCxkrYJReHSkHxPajFRHWHMcpzD7l812qyOPcZ+QZQS+ckCElAX4SOeERNy3y f1xEzKRCdiJcmVrA/TJZiw9hi3bSvl7ilXE/zb8crT+ujpfG0CbS7KLjao1GUV48 8y2TvY2KJc/Egxh4LZToSqFPu7xC8PdQpJzT26kRz4jRgwba1FBw0tMW+LAZcF2K bNDNp/lVej5UEhtpUPcki4oeJrjWJv+UmV4QkBSwkNLG5i2hui8= -----END CERTIFICATE-----Generated at Fri Jul 24 03:12:14 2026 by rpki-client