$ rpki-client -vvf rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft File: 4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft (raw, json) Hash identifier: ec4RozXtkumCdUUQduhyaDiSoeL2zDUktUHQcEQutcY= Subject key identifier: 9F:4B:E6:0F:64:5A:A8:FD:45:BA:A8:65:87:37:BE:86:E4:1D:E6:BC Authority key identifier: 4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15 Certificate issuer: /CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515 Certificate serial: 5802CD37C2B561EE95D31286A353893F8A01160B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 07:54:32 +0000 Manifest this update: Thu 23 Jul 2026 07:49:32 +0000 Manifest next update: Fri 24 Jul 2026 09:06:32 +0000 Files and hashes: 1: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: xBC6wC0qaSZA17wYqb5z2deY4tddRBLazqglI6ol9r0=) 2: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: kEQuuE3MZPluiYnypOmYBPYLGkYCAstrSIg304qTUMU=) 3: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: NFMSe8jpXIOrJJynKVDw112aSae0hUPV8Ycnly1ty30=) 4: 4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl (hash: eYNKUglm1k/X3i73Bh37dtSRlWGkZr/frjJVAjraBfA=) 5: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: pqH7WpxtojGs6NyUT0vVoZIYUBKEAJzFb6PabPXpeUg=) 6: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: j4hOV3opgjAagd+hKmonrIvCvECab8tS3BbyVP+3UsM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 09:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:02:cd:37:c2:b5:61:ee:95:d3:12:86:a3:53:89:3f:8a:01:16:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515 Validity Not Before: Jul 23 07:49:32 2026 GMT Not After : Jul 24 09:06:32 2026 GMT Subject: CN=9F4BE60F645AA8FD45BAA8658737BE86E41DE6BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b1:75:e0:f4:0d:df:f8:3c:2c:57:ee:38:df: 83:c8:d0:b9:a8:c0:81:c4:67:83:5c:1f:1a:13:f9: 7d:46:57:67:89:7f:79:d9:fe:3a:20:47:af:c5:4b: 63:06:d5:3c:e5:fd:3e:56:9b:5f:2a:24:ad:b0:80: 28:3d:b1:d4:c3:aa:a7:23:97:40:c2:9c:57:65:81: ee:d9:ed:e7:78:d5:0b:9e:ab:c3:be:ef:f7:e9:6c: 46:f8:f7:0a:ab:7f:55:42:6b:8e:60:1e:30:81:c2: c9:6d:1e:d7:78:62:9c:1d:48:d7:c8:21:24:2c:1c: 0f:57:ac:e5:cb:c1:1b:63:79:7c:f8:a1:9f:5b:b7: 23:9c:bc:74:8e:2b:e9:c5:33:4e:f8:4d:6f:2e:d4: 6b:08:9e:0a:74:dc:56:c9:98:fc:a7:db:a2:98:6b: c0:ff:46:02:36:c0:f9:e3:16:2d:d4:2e:e4:56:86: dc:42:84:e9:2c:6b:63:95:4d:ad:65:ac:1f:81:91: ff:17:b3:84:73:7d:02:7f:7f:9a:00:b5:ac:c1:ee: c5:0a:24:2d:54:59:0d:8a:b6:c2:64:ff:40:50:1f: 8c:91:f4:08:42:c5:38:e8:a9:d7:18:68:94:24:be: d9:7b:16:d9:bd:94:4e:4b:55:19:0d:f0:e6:6f:1b: c8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4B:E6:0F:64:5A:A8:FD:45:BA:A8:65:87:37:BE:86:E4:1D:E6:BC X509v3 Authority Key Identifier: keyid:4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:e4:5b:e2:ea:e5:05:5a:eb:02:25:bf:dd:3d:8a:fe:fe:ef: d6:15:23:41:90:79:9f:8c:f4:3a:07:57:61:76:e6:48:6a:ed: 09:84:03:b5:5a:e2:a9:31:7f:11:ef:6e:85:1c:49:74:c7:05: 57:c3:32:6f:37:1f:50:6f:ce:23:f5:b4:8b:37:7e:25:5b:50: 02:19:66:aa:cc:1c:d0:20:43:84:6b:f4:37:c8:e1:54:9d:86: d2:3a:3f:e4:0f:83:8a:4b:0c:ee:86:8b:d7:a3:69:bf:4b:f5: f7:2c:ce:e8:69:8f:b8:ec:c1:34:b7:32:69:97:70:83:17:a5: 28:d3:6d:5d:d9:42:7e:3f:60:47:68:d7:2c:48:3e:22:08:2d: bf:b6:d8:17:ca:0b:3a:36:4b:db:f7:ef:67:e2:94:16:54:bc: 2b:12:1a:f1:6e:ff:93:e2:1b:54:db:95:c9:24:5f:4a:56:94: 83:97:4f:ed:41:57:8c:27:a3:17:c1:8a:71:ac:f1:56:61:ba: 2b:4f:fa:64:7f:7a:27:3f:06:8e:87:9e:a4:1e:0b:9a:e7:32: cc:d7:45:77:8d:bd:f5:d8:5a:34:74:0f:c7:d4:83:14:6a:ae: 56:97:45:ab:07:d7:74:42:e1:20:e8:c8:17:ca:eb:e9:b4:c0: c2:6a:c4:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWALNN8K1Ye6V0xKGo1OJP4oBFgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0QkY4NEU3RDZGMzlENjI3QkU1QjUwQTkxNzMxNURG RUJGMTUxNTAeFw0yNjA3MjMwNzQ5MzJaFw0yNjA3MjQwOTA2MzJaMDMxMTAvBgNV BAMTKDlGNEJFNjBGNjQ1QUE4RkQ0NUJBQTg2NTg3MzdCRTg2RTQxREU2QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBsXXg9A3f+DwsV+4434PI0Lmo wIHEZ4NcHxoT+X1GV2eJf3nZ/jogR6/FS2MG1Tzl/T5Wm18qJK2wgCg9sdTDqqcj l0DCnFdlge7Z7ed41Queq8O+7/fpbEb49wqrf1VCa45gHjCBwsltHtd4YpwdSNfI ISQsHA9XrOXLwRtjeXz4oZ9btyOcvHSOK+nFM074TW8u1GsIngp03FbJmPyn26KY a8D/RgI2wPnjFi3ULuRWhtxChOksa2OVTa1lrB+Bkf8Xs4RzfQJ/f5oAtazB7sUK JC1UWQ2KtsJk/0BQH4yR9AhCxTjoqdcYaJQkvtl7Ftm9lE5LVRkN8OZvG8g5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn0vmD2RaqP1Fuqhlhze+huQd5rwwHwYDVR0j BBgwFoAUTUv4Tn1vOdYnvltQqRcxXf6/FRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0ZTZiMmQtM2RkYi00NmViLTgzZWYtYzk5YjIwMDM3ODNmLzAvNEQ0QkY4NEU3 RDZGMzlENjI3QkU1QjUwQTkxNzMxNURGRUJGMTUxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRCRjg0RTdENkYzOUQ2MjdCRTVCNTBBOTE3MzE1REZFQkYx NTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz ZWYtYzk5YjIwMDM3ODNmLzAvNEQ0QkY4NEU3RDZGMzlENjI3QkU1QjUwQTkxNzMx NURGRUJGMTUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPkW+Lq5QVa6wIlv909iv7+79YVI0GQeZ+M 9DoHV2F25khq7QmEA7Va4qkxfxHvboUcSXTHBVfDMm83H1BvziP1tIs3fiVbUAIZ ZqrMHNAgQ4Rr9DfI4VSdhtI6P+QPg4pLDO6Gi9ejab9L9fcszuhpj7jswTS3MmmX cIMXpSjTbV3ZQn4/YEdo1yxIPiIILb+22BfKCzo2S9v372filBZUvCsSGvFu/5Pi G1TblckkX0pWlIOXT+1BV4wnoxfBinGs8VZhuitP+mR/eic/Bo6HnqQeC5rnMszX RXeNvfXYWjR0D8fUgxRqrlaXRasH13RC4SDoyBfK6+m0wMJqxIg= -----END CERTIFICATE-----Generated at Fri Jul 24 01:32:23 2026 by rpki-client