$ rpki-client -vvf rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft File: 4758527FF3B22322A18B7C6E96C4B735849522DD.mft (raw, json) Hash identifier: 5si5276Z1xboT5u9uHWbTdarGW+KtujTYVxDrRTFF3E= Subject key identifier: D9:23:BD:C0:CD:FA:C5:D8:AE:51:27:EB:5E:90:F7:F7:02:A2:AC:D8 Authority key identifier: 47:58:52:7F:F3:B2:23:22:A1:8B:7C:6E:96:C4:B7:35:84:95:22:DD Certificate issuer: /CN=4758527FF3B22322A18B7C6E96C4B735849522DD Certificate serial: 0AA6130110C0DB8E31759AB3CAC889300C0D80E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 19:44:16 +0000 Manifest this update: Thu 23 Jul 2026 19:39:16 +0000 Manifest next update: Fri 24 Jul 2026 19:52:16 +0000 Files and hashes: 1: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (hash: vc1a0hkgw07q2g/3N/OSu/ce4WygjulqelJe6kgXLWg=) 2: 4758527FF3B22322A18B7C6E96C4B735849522DD.crl (hash: Tktbo4o7JaTeWxBciAkGO2/DqjjCu7YI56JXBCIkRt8=) 3: 3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (hash: ylJge9zfunu5v1K50c60A5sirSQ6LDBHCjbwOHfjZrQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.crl rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a6:13:01:10:c0:db:8e:31:75:9a:b3:ca:c8:89:30:0c:0d:80:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4758527FF3B22322A18B7C6E96C4B735849522DD Validity Not Before: Jul 23 19:39:16 2026 GMT Not After : Jul 24 19:52:16 2026 GMT Subject: CN=D923BDC0CDFAC5D8AE5127EB5E90F7F702A2ACD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8e:bb:f8:3b:e2:fa:84:7b:3d:fd:ba:8c:9c: 45:f6:fe:71:ec:66:65:5a:5d:f2:2a:7e:40:c1:27: 42:42:4a:eb:ec:a2:0f:d3:2e:2c:32:0a:17:6c:05: 27:4d:e9:18:41:e4:a9:73:03:e7:77:a0:67:09:5b: d6:db:98:12:7a:ea:e5:2e:2a:de:a4:75:72:66:89: f4:66:62:ae:8b:ac:6c:4f:82:28:0a:ac:4a:c4:b3: 2b:42:93:66:92:f6:b5:26:36:5a:4d:a1:a4:d1:66: 31:fe:fd:aa:87:e2:f2:e4:e7:8a:0c:b9:05:cd:22: 0f:fd:e3:90:d2:fc:0e:48:a8:fe:89:20:cd:7d:77: 16:7e:bc:3e:5f:8b:87:5f:fa:a0:24:f5:0a:ff:78: e3:75:49:8c:e6:2a:39:1e:76:eb:2b:43:48:59:13: 0d:c1:d7:e5:69:94:b6:38:a3:67:1d:7d:af:1d:88: fe:65:1d:c7:5d:66:24:39:e0:27:58:62:42:fd:8b: 7a:45:1e:1b:2b:5d:1a:33:b5:2c:01:c7:ce:fb:68: bf:97:9f:ee:55:e4:d3:19:1c:99:8b:90:a1:ed:48: d9:48:86:ef:00:5a:90:de:71:11:e6:79:e5:cb:aa: bd:55:f7:29:a3:46:d6:f1:74:1d:97:f8:b6:7e:13: ae:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:23:BD:C0:CD:FA:C5:D8:AE:51:27:EB:5E:90:F7:F7:02:A2:AC:D8 X509v3 Authority Key Identifier: keyid:47:58:52:7F:F3:B2:23:22:A1:8B:7C:6E:96:C4:B7:35:84:95:22:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f4:a1:2b:e6:18:44:a9:cc:8b:e7:96:6f:46:d6:36:3f:3e: 79:ee:e0:f5:3c:00:25:2e:d9:d2:43:39:81:16:68:09:d8:bf: 1c:3c:c0:33:de:96:b2:b5:e5:d9:0c:be:06:53:a4:88:2c:c9: 83:2f:09:c8:29:9b:de:71:49:81:b8:ec:e3:61:92:3f:3e:0a: 03:75:3b:84:b3:7d:ff:47:90:81:da:3d:04:b8:1e:6c:6e:5a: fd:57:65:86:25:f4:68:c8:e1:c0:0f:4d:15:50:d0:05:75:09: 39:f8:61:9d:61:d2:86:42:8e:b3:ee:4e:5f:cd:01:65:55:36: 67:b2:90:05:2e:a2:31:9f:3e:5a:95:a5:00:0d:68:85:6e:a3: 3c:6c:fc:65:02:c8:bb:4c:ff:42:fb:32:36:3a:ed:e5:f8:23: 06:a4:8a:d3:66:9d:af:28:77:e4:68:47:97:c1:e2:2e:69:44: 2e:d0:e9:36:fb:a9:36:78:7e:30:b8:10:fd:42:68:6d:be:20: 26:a9:83:42:55:98:c4:54:77:2a:c9:5a:bc:12:b3:a6:9b:fc: 8f:ef:7c:43:24:de:24:b9:08:b6:c1:a6:2a:2d:40:34:9b:36: 02:29:7e:6a:cc:8c:10:4a:97:8f:e3:fb:d0:2c:be:4c:6f:21: d5:77:3c:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqYTARDA244xdZqzysiJMAwNgOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1ODUyN0ZGM0IyMjMyMkExOEI3QzZFOTZDNEI3MzU4 NDk1MjJERDAeFw0yNjA3MjMxOTM5MTZaFw0yNjA3MjQxOTUyMTZaMDMxMTAvBgNV BAMTKEQ5MjNCREMwQ0RGQUM1RDhBRTUxMjdFQjVFOTBGN0Y3MDJBMkFDRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2jrv4O+L6hHs9/bqMnEX2/nHs ZmVaXfIqfkDBJ0JCSuvsog/TLiwyChdsBSdN6RhB5KlzA+d3oGcJW9bbmBJ66uUu Kt6kdXJmifRmYq6LrGxPgigKrErEsytCk2aS9rUmNlpNoaTRZjH+/aqH4vLk54oM uQXNIg/945DS/A5IqP6JIM19dxZ+vD5fi4df+qAk9Qr/eON1SYzmKjkedusrQ0hZ Ew3B1+VplLY4o2cdfa8diP5lHcddZiQ54CdYYkL9i3pFHhsrXRoztSwBx877aL+X n+5V5NMZHJmLkKHtSNlIhu8AWpDecRHmeeXLqr1V9ymjRtbxdB2X+LZ+E66DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2SO9wM36xdiuUSfrXpD39wKirNgwHwYDVR0j BBgwFoAUR1hSf/OyIyKhi3xulsS3NYSVIt0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk1ZWU4ZmMtNmVmZS00MTVkLWI2YzEtMGYwY2NjZjI2MTQ0LzAvNDc1ODUyN0ZG M0IyMjMyMkExOEI3QzZFOTZDNEI3MzU4NDk1MjJERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzU4NTI3RkYzQjIyMzIyQTE4QjdDNkU5NkM0QjczNTg0OTUy MkRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk1ZWU4ZmMtNmVmZS00MTVkLWI2 YzEtMGYwY2NjZjI2MTQ0LzAvNDc1ODUyN0ZGM0IyMjMyMkExOEI3QzZFOTZDNEI3 MzU4NDk1MjJERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEP0oSvmGESpzIvnlm9G1jY/Pnnu4PU8ACUu 2dJDOYEWaAnYvxw8wDPelrK15dkMvgZTpIgsyYMvCcgpm95xSYG47ONhkj8+CgN1 O4Szff9HkIHaPQS4HmxuWv1XZYYl9GjI4cAPTRVQ0AV1CTn4YZ1h0oZCjrPuTl/N AWVVNmeykAUuojGfPlqVpQANaIVuozxs/GUCyLtM/0L7MjY67eX4IwakitNmna8o d+RoR5fB4i5pRC7Q6Tb7qTZ4fjC4EP1CaG2+ICapg0JVmMRUdyrJWrwSs6ab/I/v fEMk3iS5CLbBpiotQDSbNgIpfmrMjBBKl4/j+9AsvkxvIdV3PNw= -----END CERTIFICATE-----Generated at Fri Jul 24 07:17:39 2026 by rpki-client