$ rpki-client -vvf rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft File: 4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft (raw, json) Hash identifier: sXD9n+frHKpTJds0fksKRsKOIzRi6qyBjpqDKdcffEQ= Subject key identifier: CD:06:4A:30:6A:B5:10:74:8A:83:34:C2:11:DA:8C:29:AD:51:38:F2 Authority key identifier: 4C:3B:BD:86:83:DD:42:C4:70:F4:E3:F8:30:B1:FA:BF:89:F4:B5:F2 Certificate issuer: /CN=4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2 Certificate serial: 6D612DF82CB9E87F32E5E69483FB4F4D4B34BF18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 00:45:01 +0000 Manifest this update: Fri 24 Jul 2026 00:40:01 +0000 Manifest next update: Sat 25 Jul 2026 03:09:01 +0000 Files and hashes: 1: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: ic2hBdRaZAyBk1MlONf57Uzem8Aq/501RDCs5wnZzAc=) 2: 4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl (hash: Skgdi6r1ddLsC8MVSQweGoVVLj7d9d9hC/K9xUOBudk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:61:2d:f8:2c:b9:e8:7f:32:e5:e6:94:83:fb:4f:4d:4b:34:bf:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2 Validity Not Before: Jul 24 00:40:01 2026 GMT Not After : Jul 25 03:09:01 2026 GMT Subject: CN=CD064A306AB510748A8334C211DA8C29AD5138F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f3:8e:02:8e:fd:b1:7f:c8:31:c8:5c:1a:28: ca:aa:55:ea:ec:b9:6c:ad:cd:15:06:20:13:03:12: 0b:66:1e:dd:0b:d7:ea:60:66:43:89:cb:35:ab:2d: 7e:bd:68:20:e4:dc:69:e2:fd:18:49:cf:06:d2:c8: 59:95:b5:45:89:42:19:0a:be:2d:c7:53:95:6b:85: 46:84:54:84:41:43:91:4e:98:32:92:b7:fc:9b:fe: 49:d2:84:a5:a4:a2:ab:03:54:48:99:69:d8:b7:b9: 02:5e:c0:68:ea:d2:7d:50:10:21:e4:d0:a2:f0:3d: 1c:cf:0c:3f:98:ff:d1:53:76:42:a6:8f:6a:c3:ad: cf:d6:bf:80:4e:ae:38:91:fb:f8:16:fa:86:8b:14: 41:d3:3c:57:53:d8:08:1d:6b:be:f4:9b:a5:c4:17: 2e:c3:c3:5f:b7:88:25:7f:51:70:1c:bf:ad:4d:73: 85:41:a0:27:ef:42:8b:7e:cb:00:e5:85:7f:a4:18: 47:f2:5e:50:fe:48:04:44:e7:c9:b1:f1:ef:51:7b: fa:a8:dc:83:cd:bb:78:10:6c:bd:43:a1:cd:49:5c: 90:7b:23:ff:5a:0e:c8:6a:86:86:81:72:47:22:3c: ea:10:4c:88:fe:9b:01:7b:84:8d:30:38:57:99:86: 9d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:06:4A:30:6A:B5:10:74:8A:83:34:C2:11:DA:8C:29:AD:51:38:F2 X509v3 Authority Key Identifier: keyid:4C:3B:BD:86:83:DD:42:C4:70:F4:E3:F8:30:B1:FA:BF:89:F4:B5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:11:6c:67:be:73:92:ec:5c:24:5d:80:59:f4:ea:2a:18:5a: 8c:67:dc:35:26:42:45:e5:cb:9d:eb:f3:3c:d3:91:27:6c:94: a9:e1:5d:04:33:5b:49:c8:76:21:fe:e5:dc:55:27:7c:36:37: f6:be:9f:19:69:cd:66:24:77:38:04:37:33:98:9c:f8:a2:76: 9e:db:44:58:d3:1b:3c:e4:d5:99:68:ef:c8:03:8b:3c:4a:53: 57:7d:fa:0e:ff:f5:dc:90:d6:eb:d3:83:0f:04:1f:f8:39:6d: a4:fb:1f:c0:53:49:20:85:d8:fb:52:1c:4b:71:86:ee:9e:c4: b2:7a:a0:e6:ea:d6:17:c1:e2:95:ab:2b:8b:16:c9:fe:cd:27: 01:43:71:a8:59:24:26:f3:c3:31:25:48:5b:bb:31:53:78:8c: 5a:f8:b1:b0:9c:89:8b:3a:5e:68:a3:ec:61:43:47:73:da:4f: 83:72:b8:e4:34:4a:b7:90:c2:31:77:b3:6c:ee:55:a0:ab:0c: 6b:ee:0a:94:7e:7c:70:7a:ff:2f:ca:e8:ec:7c:f7:7e:57:d6: 17:d2:fe:62:25:80:f1:60:ad:e9:6e:cd:6c:90:87:ec:18:60: d8:ea:cd:76:fb:36:40:29:3f:97:68:63:b6:a2:53:62:6c:8f: 60:10:b3:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbWEt+Cy56H8y5eaUg/tPTUs0vxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzQkJEODY4M0RENDJDNDcwRjRFM0Y4MzBCMUZBQkY4 OUY0QjVGMjAeFw0yNjA3MjQwMDQwMDFaFw0yNjA3MjUwMzA5MDFaMDMxMTAvBgNV BAMTKENEMDY0QTMwNkFCNTEwNzQ4QTgzMzRDMjExREE4QzI5QUQ1MTM4RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU844Cjv2xf8gxyFwaKMqqVers uWytzRUGIBMDEgtmHt0L1+pgZkOJyzWrLX69aCDk3Gni/RhJzwbSyFmVtUWJQhkK vi3HU5VrhUaEVIRBQ5FOmDKSt/yb/knShKWkoqsDVEiZadi3uQJewGjq0n1QECHk 0KLwPRzPDD+Y/9FTdkKmj2rDrc/Wv4BOrjiR+/gW+oaLFEHTPFdT2Agda770m6XE Fy7Dw1+3iCV/UXAcv61Nc4VBoCfvQot+ywDlhX+kGEfyXlD+SARE58mx8e9Re/qo 3IPNu3gQbL1Doc1JXJB7I/9aDshqhoaBckciPOoQTIj+mwF7hI0wOFeZhp3RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzQZKMGq1EHSKgzTCEdqMKa1ROPIwHwYDVR0j BBgwFoAUTDu9hoPdQsRw9OP4MLH6v4n0tfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA2NDljNDctZGZjMy00YTIwLWI1YjQtODc5Njc1ZTVkYjkyLzAvNEMzQkJEODY4 M0RENDJDNDcwRjRFM0Y4MzBCMUZBQkY4OUY0QjVGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzNCQkQ4NjgzREQ0MkM0NzBGNEUzRjgzMEIxRkFCRjg5RjRC NUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvNEMzQkJEODY4M0RENDJDNDcwRjRFM0Y4MzBCMUZB QkY4OUY0QjVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQRbGe+c5LsXCRdgFn06ioYWoxn3DUmQkXl y53r8zzTkSdslKnhXQQzW0nIdiH+5dxVJ3w2N/a+nxlpzWYkdzgENzOYnPiidp7b RFjTGzzk1Zlo78gDizxKU1d9+g7/9dyQ1uvTgw8EH/g5baT7H8BTSSCF2PtSHEtx hu6exLJ6oObq1hfB4pWrK4sWyf7NJwFDcahZJCbzwzElSFu7MVN4jFr4sbCciYs6 Xmij7GFDR3PaT4NyuOQ0SreQwjF3s2zuVaCrDGvuCpR+fHB6/y/K6Ox8935X1hfS /mIlgPFgreluzWyQh+wYYNjqzXb7NkApP5doY7aiU2Jsj2AQs9k= -----END CERTIFICATE-----Generated at Fri Jul 24 02:45:48 2026 by rpki-client