$ rpki-client -vvf rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft File: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft (raw, json) Hash identifier: 6UO6M9VYHO4Zs/RN6owThK2cUEOzJuvTLfuO9Fz5k+o= Subject key identifier: A3:23:7D:3B:84:47:31:7A:6A:9E:6C:4B:43:59:AC:10:72:59:E5:91 Authority key identifier: 48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 Certificate issuer: /CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Certificate serial: 2184DAC39BD6EF80321464BA99784EC6FA70DD48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 22:11:59 +0000 Manifest this update: Thu 23 Jul 2026 22:06:59 +0000 Manifest next update: Fri 24 Jul 2026 23:50:59 +0000 Files and hashes: 1: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: 5QHnLxUj5ToZbDP+kG+27eOW/Apgnrnl+qyMt1ibRXw=) 2: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: gNsJ7E8Wxy2p/7sU5QpT/62BpjOz3T6D3tTX9O4/j10=) 3: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl (hash: 0b+a2TMVu8aFvuLgjzF9Z1MHFCkYsht5bUcweAYG+6Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:84:da:c3:9b:d6:ef:80:32:14:64:ba:99:78:4e:c6:fa:70:dd:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Validity Not Before: Jul 23 22:06:59 2026 GMT Not After : Jul 24 23:50:59 2026 GMT Subject: CN=A3237D3B8447317A6A9E6C4B4359AC107259E591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:64:3e:cf:4a:80:a6:79:68:5c:9a:e1:73: 3c:ed:9c:7f:e2:52:db:31:3b:d3:e5:c0:e8:b5:45: f5:32:60:07:ac:c7:5c:83:01:6c:8b:f8:29:67:fd: 37:8c:38:aa:bd:62:73:78:ea:6e:00:da:40:0e:0f: 1f:b3:fd:a9:c3:00:d4:17:b6:80:e6:b7:a7:ed:5d: 8b:64:65:99:b0:6a:f3:a4:be:da:8b:df:c4:ce:e5: 0f:53:07:80:e4:23:4d:26:29:3c:a9:ad:fa:d4:79: 21:98:b4:48:41:c7:b9:fa:f5:2f:a8:73:38:36:cb: f0:cf:26:6f:21:24:43:9b:ec:c0:df:2c:73:e5:76: 4e:1d:8b:84:2e:65:21:84:b0:6a:21:1f:3f:cb:19: cf:67:c0:af:44:21:18:88:47:07:1f:31:60:68:c4: 87:61:ca:b8:28:c4:7f:f0:ea:76:70:4d:53:14:87: 6d:c1:c2:9a:97:ed:c4:79:6d:5a:57:26:15:66:f9: cf:12:9a:6c:7e:1a:7f:86:3a:e4:4c:f3:7c:52:d8: ca:e5:20:91:ef:a1:6a:e1:46:86:40:1e:b8:ca:e9: 69:07:c2:1c:c0:54:83:f7:8c:77:e5:e9:d1:8a:1a: a6:11:59:42:37:f3:6b:eb:50:42:46:65:dc:ac:4b: 12:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:23:7D:3B:84:47:31:7A:6A:9E:6C:4B:43:59:AC:10:72:59:E5:91 X509v3 Authority Key Identifier: keyid:48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:8b:77:71:0f:1b:01:e5:a3:fb:cb:90:8f:01:b6:34:cf:4e: 1f:60:44:7b:18:38:a3:61:1a:2d:4f:fe:76:a9:50:38:35:3e: cf:8e:47:1e:34:86:25:0c:ed:e9:2f:17:db:8e:68:6d:0e:ec: 97:e8:fa:6c:82:9e:cb:01:ef:7b:13:6e:c7:f3:80:0f:1d:17: a0:fd:1e:b8:ce:2c:e9:c3:e4:40:61:41:0d:31:6c:70:51:a5: 82:cb:58:40:6a:8a:af:5d:8f:66:74:3b:ad:ed:12:ec:4c:c8: 43:f3:12:4f:ac:62:32:74:d3:70:60:68:95:d1:8a:7a:c7:51: d6:fa:28:33:13:11:93:95:da:4a:92:92:de:20:38:bf:75:17: 6e:d4:4a:40:02:da:66:3b:ac:a2:eb:7f:ae:4a:8a:19:05:d6: e6:e5:61:c3:2a:f1:53:7e:f8:1e:94:38:9a:c6:a2:c5:8c:a2: fb:f0:dd:f0:1e:a3:23:04:15:57:54:06:96:7e:6e:ea:a0:96: 55:5d:9a:1c:ce:5d:53:68:d2:eb:68:72:68:39:92:66:2f:49: 46:46:ee:a0:78:fb:9c:b3:aa:b1:43:06:54:d5:0e:4a:2a:ab: 1e:5e:da:a0:fa:a0:76:5f:cc:a2:6d:3a:89:1c:b8:59:0c:a1: 87:b3:da:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIYTaw5vW74AyFGS6mXhOxvpw3UgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4 QUY2ODdEMzAeFw0yNjA3MjMyMjA2NTlaFw0yNjA3MjQyMzUwNTlaMDMxMTAvBgNV BAMTKEEzMjM3RDNCODQ0NzMxN0E2QTlFNkM0QjQzNTlBQzEwNzI1OUU1OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BGQ+z0qApnloXJrhczztnH/i UtsxO9PlwOi1RfUyYAesx1yDAWyL+Cln/TeMOKq9YnN46m4A2kAODx+z/anDANQX toDmt6ftXYtkZZmwavOkvtqL38TO5Q9TB4DkI00mKTyprfrUeSGYtEhBx7n69S+o czg2y/DPJm8hJEOb7MDfLHPldk4di4QuZSGEsGohHz/LGc9nwK9EIRiIRwcfMWBo xIdhyrgoxH/w6nZwTVMUh23BwpqX7cR5bVpXJhVm+c8Smmx+Gn+GOuRM83xS2Mrl IJHvoWrhRoZAHrjK6WkHwhzAVIP3jHfl6dGKGqYRWUI382vrUEJGZdysSxLhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoyN9O4RHMXpqnmxLQ1msEHJZ5ZEwHwYDVR0j BBgwFoAUSIXnXWsKk49f7jX6uibeoIr2h9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZmN2VmMzQtNDk5MS00YmIxLTk2YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2 QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4QUY2ODdEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg1RTc1RDZCMEE5MzhGNUZFRTM1RkFCQTI2REVBMDhBRjY4 N0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZmN2VmMzQtNDk5MS00YmIxLTk2 YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRF QTA4QUY2ODdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACLd3EPGwHlo/vLkI8BtjTPTh9gRHsYOKNh Gi1P/napUDg1Ps+ORx40hiUM7ekvF9uOaG0O7Jfo+myCnssB73sTbsfzgA8dF6D9 HrjOLOnD5EBhQQ0xbHBRpYLLWEBqiq9dj2Z0O63tEuxMyEPzEk+sYjJ003BgaJXR inrHUdb6KDMTEZOV2kqSkt4gOL91F27USkAC2mY7rKLrf65KihkF1ublYcMq8VN+ +B6UOJrGosWMovvw3fAeoyMEFVdUBpZ+buqgllVdmhzOXVNo0utocmg5kmYvSUZG 7qB4+5yzqrFDBlTVDkoqqx5e2qD6oHZfzKJtOokcuFkMoYez2oY= -----END CERTIFICATE-----Generated at Fri Jul 24 02:42:39 2026 by rpki-client