$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft File: 4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft (raw, json) Hash identifier: zX1c36jvsAIM+Sn3uOrZ/zRKtPvR4QGSnyb07f9dggQ= Subject key identifier: BB:92:DC:F2:00:F7:54:B1:86:BE:79:E1:8B:CC:FB:3D:7D:E7:2D:B2 Authority key identifier: 4A:B7:BD:8A:13:F8:8A:9A:CC:16:3E:CD:B0:8E:E4:9E:AB:29:00:E0 Certificate issuer: /CN=4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0 Certificate serial: 48FDD8D024B5F7A5991DD8FD6B4906D351CF2B42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 15:54:25 +0000 Manifest this update: Thu 23 Jul 2026 15:49:25 +0000 Manifest next update: Fri 24 Jul 2026 18:48:25 +0000 Files and hashes: 1: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 4GyYBNeN6eFsPcbI1361ngWI6JUq/EEA9jGEIXv0P9w=) 2: 4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl (hash: BKVE4hO91GbNXkS3khM4Rci3EkjLvdQen7glVoYvwLQ=) 3: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: U4x7nHOIPSopo3seWvdUR/rW9/Lem7oTQ8rb2DjIll4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:fd:d8:d0:24:b5:f7:a5:99:1d:d8:fd:6b:49:06:d3:51:cf:2b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0 Validity Not Before: Jul 23 15:49:25 2026 GMT Not After : Jul 24 18:48:25 2026 GMT Subject: CN=BB92DCF200F754B186BE79E18BCCFB3D7DE72DB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c4:e5:49:19:35:f2:3a:22:ed:d4:a2:28:b6: 40:f7:75:05:47:36:2a:cc:f5:66:3e:45:0d:40:aa: 29:40:7b:00:9f:ae:94:f0:1e:99:ba:3a:bb:f7:31: 10:3f:69:af:09:06:e3:50:ca:7e:b7:cd:1a:90:6b: fc:9f:e7:5b:ee:49:9e:23:b7:ac:db:e5:4d:5f:1d: fa:5b:9a:2f:ec:f3:2b:bc:7a:e2:2e:9f:67:55:d9: 17:f8:6a:10:42:c9:66:f8:81:98:60:5c:fb:2d:a1: 0b:2c:b8:a9:6e:3c:ef:19:fb:4a:85:65:86:0d:fa: d7:a7:7c:6b:ba:0e:30:d4:00:00:c3:42:94:78:f2: cd:19:48:33:e9:ea:f1:75:1a:30:e8:63:04:cb:a9: 15:94:ee:ef:b7:19:14:a3:1a:07:c1:36:a3:d1:b0: 1d:f9:13:d2:20:16:60:e5:bd:d3:b1:f1:66:41:f6: 76:77:fd:a3:fc:07:07:80:5b:69:e4:77:c1:d3:76: 26:a1:ba:0d:0e:fc:a7:82:20:ff:b5:54:7b:d3:0d: 46:8b:05:23:aa:66:02:3a:fa:fc:9f:4d:1a:68:39: d1:2c:4d:fe:58:4b:a9:15:2d:b4:c3:77:6a:3b:a8: 69:9c:a9:d4:fd:b0:d5:17:8c:5f:86:28:a6:99:d2: 4e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:92:DC:F2:00:F7:54:B1:86:BE:79:E1:8B:CC:FB:3D:7D:E7:2D:B2 X509v3 Authority Key Identifier: keyid:4A:B7:BD:8A:13:F8:8A:9A:CC:16:3E:CD:B0:8E:E4:9E:AB:29:00:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e8:e4:ce:57:3d:cf:d3:a4:e6:0c:3c:f1:18:a0:af:4c:e8: 9b:68:17:08:46:46:5b:69:0b:79:88:ea:e7:42:e3:7e:9e:78: 3b:ba:07:33:6f:ec:7e:6f:76:68:1d:9a:95:61:77:0b:df:a4: bc:ac:17:c7:15:b8:25:f9:e4:11:4e:24:1a:a2:17:62:50:ff: d4:1d:e0:cc:9d:d4:32:86:c2:6a:57:25:ba:c7:5b:1c:c0:61: a1:50:5e:c6:59:76:70:52:f5:fc:da:ac:7b:d0:5b:d4:5a:66: d3:80:ec:77:04:93:9e:b3:58:6d:be:f7:33:6e:6d:9d:cd:3b: f5:48:62:ca:bd:a2:ac:0a:80:ca:68:8f:5d:ee:48:96:ae:1f: 1f:25:a2:75:3b:62:02:85:57:d8:47:65:5b:f7:4f:bf:bc:0c: 90:a2:8e:c8:f8:dc:24:f5:83:ed:cb:5b:39:6b:14:79:cb:76: 14:e1:61:4c:ab:24:cb:ed:37:a6:84:99:fb:c4:f6:4c:97:16: 3a:87:db:ca:3c:4b:02:e8:d5:b1:3c:5b:9e:a7:90:43:f9:b5: 68:48:a7:58:05:df:89:02:3b:26:f7:7b:2b:d6:ac:b5:66:70: 00:66:e5:b3:28:22:55:75:58:df:07:87:10:d1:7b:b5:ad:0a: c6:bc:c7:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSP3Y0CS196WZHdj9a0kG01HPK0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFCN0JEOEExM0Y4OEE5QUNDMTYzRUNEQjA4RUU0OUVB QjI5MDBFMDAeFw0yNjA3MjMxNTQ5MjVaFw0yNjA3MjQxODQ4MjVaMDMxMTAvBgNV BAMTKEJCOTJEQ0YyMDBGNzU0QjE4NkJFNzlFMThCQ0NGQjNEN0RFNzJEQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVxOVJGTXyOiLt1KIotkD3dQVH NirM9WY+RQ1AqilAewCfrpTwHpm6Orv3MRA/aa8JBuNQyn63zRqQa/yf51vuSZ4j t6zb5U1fHfpbmi/s8yu8euIun2dV2Rf4ahBCyWb4gZhgXPstoQssuKluPO8Z+0qF ZYYN+tenfGu6DjDUAADDQpR48s0ZSDPp6vF1GjDoYwTLqRWU7u+3GRSjGgfBNqPR sB35E9IgFmDlvdOx8WZB9nZ3/aP8BweAW2nkd8HTdiahug0O/KeCIP+1VHvTDUaL BSOqZgI6+vyfTRpoOdEsTf5YS6kVLbTDd2o7qGmcqdT9sNUXjF+GKKaZ0k4jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu5Lc8gD3VLGGvnnhi8z7PX3nLbIwHwYDVR0j BBgwFoAUSre9ihP4iprMFj7NsI7knqspAOAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ3NTA4OGUtNDlhZi00NzJiLTliNjItODFlNzNkYWFmMWQ2LzAvNEFCN0JEOEEx M0Y4OEE5QUNDMTYzRUNEQjA4RUU0OUVBQjI5MDBFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUI3QkQ4QTEzRjg4QTlBQ0MxNjNFQ0RCMDhFRTQ5RUFCMjkw MEUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvNEFCN0JEOEExM0Y4OEE5QUNDMTYzRUNEQjA4RUU0 OUVBQjI5MDBFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFro5M5XPc/TpOYMPPEYoK9M6JtoFwhGRltp C3mI6udC436eeDu6BzNv7H5vdmgdmpVhdwvfpLysF8cVuCX55BFOJBqiF2JQ/9Qd 4Myd1DKGwmpXJbrHWxzAYaFQXsZZdnBS9fzarHvQW9RaZtOA7HcEk56zWG2+9zNu bZ3NO/VIYsq9oqwKgMpoj13uSJauHx8lonU7YgKFV9hHZVv3T7+8DJCijsj43CT1 g+3LWzlrFHnLdhThYUyrJMvtN6aEmfvE9kyXFjqH28o8SwLo1bE8W56nkEP5tWhI p1gF34kCOyb3eyvWrLVmcABm5bMoIlV1WN8HhxDRe7WtCsa8xwY= -----END CERTIFICATE-----Generated at Fri Jul 24 02:50:09 2026 by rpki-client