$ rpki-client -vvf rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft File: 4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft (raw, json) Hash identifier: PLvWcRfQywEpuTbCOxp01enEx/l4MLCsi7xWWHAC4uM= Subject key identifier: 3B:02:0A:27:50:37:46:D7:C3:55:C4:C0:F6:37:ED:2C:92:36:57:97 Authority key identifier: 4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2 Certificate issuer: /CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2 Certificate serial: 15AA3584004040A6C0A8F3EDADDC8DAB15892A54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:44:14 +0000 Manifest this update: Thu 23 Jul 2026 19:39:14 +0000 Manifest next update: Fri 24 Jul 2026 21:14:14 +0000 Files and hashes: 1: 4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl (hash: HT9Alpj8uqwR6iWU6gQMDAw0gNKXVuVOTdlqJvgv8wg=) 2: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (hash: Ud8zXVkaxOANWSpFsC422ZV+3rT9KJeF9ej6YaNldzs=) 3: 3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa (hash: IVSxWqHfsbpgTjNP8RzLROF59WJoZKS7+db35QQ4pHo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:aa:35:84:00:40:40:a6:c0:a8:f3:ed:ad:dc:8d:ab:15:89:2a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2 Validity Not Before: Jul 23 19:39:14 2026 GMT Not After : Jul 24 21:14:14 2026 GMT Subject: CN=3B020A27503746D7C355C4C0F637ED2C92365797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:fd:88:cb:40:28:90:ac:04:6c:b2:44:bd: 8e:bf:a4:43:55:bb:23:97:dc:6a:95:b0:68:91:99: 1f:dd:d0:79:f4:23:b8:3e:1d:47:d0:20:1a:8e:28: c4:0f:58:f9:d9:23:41:74:e9:03:bc:fc:c0:a7:4f: 33:b1:28:64:e4:c7:92:5f:7a:5f:d1:d8:0a:a4:2f: ce:c7:cc:64:c8:80:da:da:f4:d9:a1:44:f5:f1:d4: 13:70:3e:7e:08:c1:64:87:93:80:ae:51:9e:34:9d: 83:57:a2:b0:85:1d:ee:0a:5f:ae:2e:3a:98:43:5f: e2:f0:02:74:5a:c9:dd:8b:b6:3f:e7:85:24:23:b9: 4c:b8:60:54:0c:fa:ce:37:df:58:9a:a0:ae:9d:b8: f1:9f:63:69:38:72:e3:89:5f:4a:9e:74:33:fd:3d: f4:5d:4a:9f:ff:69:f6:75:37:62:12:10:f5:0b:64: 17:56:22:6b:15:3c:76:45:b2:5f:b3:92:12:af:28: fe:36:43:df:04:6f:5d:5d:06:f1:21:54:7d:9d:77: f1:c8:8e:a5:17:95:dc:df:a3:ca:f0:d1:eb:ee:61: d6:21:74:fb:f3:a6:17:2f:83:00:74:51:ee:81:dc: 97:78:de:c1:48:0b:c1:ff:47:90:35:3f:ba:bb:b5: fe:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:02:0A:27:50:37:46:D7:C3:55:C4:C0:F6:37:ED:2C:92:36:57:97 X509v3 Authority Key Identifier: keyid:4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:6b:c8:67:23:07:fd:12:a0:2b:77:e7:3c:81:55:74:2d:6a: 8c:15:5c:98:5b:3b:2f:9d:ff:97:54:4b:ac:06:6c:4f:03:43: 00:de:5e:29:b2:bd:4d:4a:1b:3e:f0:4c:3e:08:22:a2:b0:cf: 16:d6:00:5c:36:46:09:1f:70:a4:80:26:4e:6d:01:ab:bf:ae: 55:46:f6:57:9b:4b:9e:f4:11:dc:86:30:fc:fb:6b:96:69:60: 16:87:5f:ff:98:4a:9e:46:32:5a:17:db:38:e8:55:6f:79:1b: 1f:10:84:45:0f:4c:2f:2e:75:97:1a:43:22:32:76:4f:39:52: 8e:7b:87:05:ce:e1:a2:8f:0f:92:49:61:c1:6d:bc:06:76:8a: bd:0d:e1:93:ee:37:04:70:f1:93:70:fe:fb:41:62:27:a0:51: 5e:c3:c1:84:05:88:52:82:6a:65:02:7e:90:9b:74:6a:97:e4: 01:9c:76:06:27:16:b4:96:2d:c6:3a:d3:13:b7:c3:29:98:55: 5f:6f:79:95:c6:24:df:4f:48:7c:aa:f7:57:67:60:b6:1b:47: d7:54:1c:13:7b:1e:6a:8a:aa:93:ea:43:b4:96:1e:7c:e3:4c: 6e:fd:c2:e0:e3:89:a8:1a:63:ae:bd:8c:74:23:0f:0f:00:7d: d4:4a:3d:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFao1hABAQKbAqPPtrdyNqxWJKlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3MTVERTZFMjVCNzRCM0E2NzdCQUVEN0NFODFFMzEx OTAwNzFGMjAeFw0yNjA3MjMxOTM5MTRaFw0yNjA3MjQyMTE0MTRaMDMxMTAvBgNV BAMTKDNCMDIwQTI3NTAzNzQ2RDdDMzU1QzRDMEY2MzdFRDJDOTIzNjU3OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvgv2Iy0AokKwEbLJEvY6/pENV uyOX3GqVsGiRmR/d0Hn0I7g+HUfQIBqOKMQPWPnZI0F06QO8/MCnTzOxKGTkx5Jf el/R2AqkL87HzGTIgNra9NmhRPXx1BNwPn4IwWSHk4CuUZ40nYNXorCFHe4KX64u OphDX+LwAnRayd2Ltj/nhSQjuUy4YFQM+s4331iaoK6duPGfY2k4cuOJX0qedDP9 PfRdSp//afZ1N2ISEPULZBdWImsVPHZFsl+zkhKvKP42Q98Eb11dBvEhVH2dd/HI jqUXldzfo8rw0evuYdYhdPvzphcvgwB0Ue6B3Jd43sFIC8H/R5A1P7q7tf5LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOwIKJ1A3RtfDVcTA9jftLJI2V5cwHwYDVR0j BBgwFoAUTXFd5uJbdLOmd7rtfOgeMRkAcfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzRhYWEyZjEtNjNhOS00MjgxLTg5NDItZmI1ZDgyNDExOWE0LzAvNEQ3MTVERTZF MjVCNzRCM0E2NzdCQUVEN0NFODFFMzExOTAwNzFGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDcxNURFNkUyNUI3NEIzQTY3N0JBRUQ3Q0U4MUUzMTE5MDA3 MUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzRhYWEyZjEtNjNhOS00MjgxLTg5 NDItZmI1ZDgyNDExOWE0LzAvNEQ3MTVERTZFMjVCNzRCM0E2NzdCQUVEN0NFODFF MzExOTAwNzFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFryGcjB/0SoCt35zyBVXQtaowVXJhbOy+d /5dUS6wGbE8DQwDeXimyvU1KGz7wTD4IIqKwzxbWAFw2RgkfcKSAJk5tAau/rlVG 9lebS570EdyGMPz7a5ZpYBaHX/+YSp5GMloX2zjoVW95Gx8QhEUPTC8udZcaQyIy dk85Uo57hwXO4aKPD5JJYcFtvAZ2ir0N4ZPuNwRw8ZNw/vtBYiegUV7DwYQFiFKC amUCfpCbdGqX5AGcdgYnFrSWLcY60xO3wymYVV9veZXGJN9PSHyq91dnYLYbR9dU HBN7HmqKqpPqQ7SWHnzjTG79wuDjiagaY669jHQjDw8AfdRKPfE= -----END CERTIFICATE-----Generated at Fri Jul 24 02:38:22 2026 by rpki-client