$ rpki-client -vvf rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft File: 4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft (raw, json) Hash identifier: h8d2sV5f6gJEDCQjmDs+Eh0aqqmx70alfn2Q0BAshIs= Subject key identifier: EE:C0:77:A1:C7:18:5E:90:0B:59:A0:69:58:96:84:19:C3:96:1F:4A Authority key identifier: 4F:CC:5F:72:C8:4C:03:16:A4:33:3F:A5:DC:1D:8E:50:86:1D:CF:B4 Certificate issuer: /CN=4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4 Certificate serial: 3D6DD6D8E8526528347F2CCB1235804566339A11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 12:45:40 +0000 Manifest this update: Thu 23 Jul 2026 12:40:40 +0000 Manifest next update: Fri 24 Jul 2026 14:43:40 +0000 Files and hashes: 1: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: GvESsWLLWyGR/dTKAI2ZEQUDQyTILXzxCsEPsqKRlPc=) 2: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: k64Gbl+KVZNgSNBLh88ZvPWQiWwa2C0VFUdGvst00Zw=) 3: 4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl (hash: 4tRoIiHSUD6KHwd5QLYa8RmwZFesQtJRDlnYzyjBf0I=) 4: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: 6RDMlBYKz+7bJ5EOXVwDOVFpA9NmUujfNeaVaTSvntE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6d:d6:d8:e8:52:65:28:34:7f:2c:cb:12:35:80:45:66:33:9a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4 Validity Not Before: Jul 23 12:40:40 2026 GMT Not After : Jul 24 14:43:40 2026 GMT Subject: CN=EEC077A1C7185E900B59A06958968419C3961F4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:10:57:8b:6e:6f:fc:62:7a:fc:fa:0e:c0: 95:ef:00:f0:e5:2a:54:e8:98:2c:56:8d:fd:a4:cc: ab:33:87:bd:09:c9:b9:8a:a6:59:93:f5:c2:57:31: b8:f0:82:8c:c8:b5:12:b0:bb:cf:e9:c8:3a:e6:03: 32:84:a1:ab:ae:aa:66:21:d3:bb:a4:41:56:3c:34: 5f:e7:ab:98:b9:4e:38:59:c2:7c:53:d6:68:7a:b8: 4d:dd:70:91:97:c2:05:c8:60:8d:9c:21:12:d8:b9: 01:06:b3:07:13:04:40:f9:cc:40:b2:47:c0:94:55: 0b:70:ac:04:69:5f:91:96:10:09:55:69:96:26:ea: e5:46:41:4d:ec:ec:79:47:d6:00:60:98:6f:b0:28: 1b:06:14:3d:a4:aa:8c:6b:4d:cc:84:c8:f1:86:dc: fc:2a:6e:f7:a6:15:1b:68:a3:5e:92:c9:1a:40:ee: f9:59:dd:97:00:42:cd:04:f1:8f:33:d5:c4:51:4e: 92:c8:ce:78:53:81:31:3c:df:3c:3b:d1:13:5b:a9: 6a:00:b7:78:bd:bb:b5:05:89:b1:bd:73:78:24:41: 15:3c:23:0a:a1:14:6b:38:14:fd:fe:ad:90:e7:f5: 0f:5a:4a:ea:18:f5:86:78:50:b4:43:91:2f:8d:66: 02:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C0:77:A1:C7:18:5E:90:0B:59:A0:69:58:96:84:19:C3:96:1F:4A X509v3 Authority Key Identifier: keyid:4F:CC:5F:72:C8:4C:03:16:A4:33:3F:A5:DC:1D:8E:50:86:1D:CF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5f:91:7b:ae:0f:f3:cc:7b:e9:af:6e:56:24:81:bb:0c:b0: c9:6b:02:c9:44:fe:40:2c:9b:0a:68:67:ca:4d:b6:af:ed:44: 08:17:fd:f7:14:58:84:f6:36:be:be:05:8a:ed:9f:b3:78:d1: 20:db:21:4a:c5:97:ad:4b:b8:d9:8f:6f:1d:88:e2:ed:9f:3c: b5:af:6c:90:aa:fc:34:d7:d3:da:25:b9:a5:7f:e0:fc:ff:e7: 06:09:6d:94:04:36:55:d2:b1:67:b4:b3:aa:7c:5f:7a:f8:0f: da:49:80:a7:d5:9c:d4:3e:f2:27:32:58:75:e6:90:98:ff:b8: 76:0b:f4:d8:25:0c:59:dd:28:9a:6e:2a:02:6c:f9:e7:17:85: 92:9c:36:d1:c3:a8:88:f4:c7:8b:d7:00:9f:54:37:64:a8:d2: 0f:23:44:90:54:b5:89:0b:5a:81:63:1e:e1:3c:54:57:cd:6d: 92:e1:d2:21:2b:ba:94:a2:ca:87:1f:d2:96:a5:f9:eb:20:85: c6:65:c4:0b:88:7b:e8:3b:54:1c:06:1f:d2:82:e8:eb:ab:c0: f8:4b:c8:25:6d:c0:55:a6:26:c2:fd:89:4d:d9:b5:f5:33:3f: 24:b8:1f:52:a9:1e:a1:dd:1e:d6:5d:b4:39:28:4e:93:32:a4: 29:f2:fa:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPW3W2OhSZSg0fyzLEjWARWYzmhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDQzVGNzJDODRDMDMxNkE0MzMzRkE1REMxRDhFNTA4 NjFEQ0ZCNDAeFw0yNjA3MjMxMjQwNDBaFw0yNjA3MjQxNDQzNDBaMDMxMTAvBgNV BAMTKEVFQzA3N0ExQzcxODVFOTAwQjU5QTA2OTU4OTY4NDE5QzM5NjFGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGjBBXi25v/GJ6/PoOwJXvAPDl KlTomCxWjf2kzKszh70JybmKplmT9cJXMbjwgozItRKwu8/pyDrmAzKEoauuqmYh 07ukQVY8NF/nq5i5TjhZwnxT1mh6uE3dcJGXwgXIYI2cIRLYuQEGswcTBED5zECy R8CUVQtwrARpX5GWEAlVaZYm6uVGQU3s7HlH1gBgmG+wKBsGFD2kqoxrTcyEyPGG 3PwqbvemFRtoo16SyRpA7vlZ3ZcAQs0E8Y8z1cRRTpLIznhTgTE83zw70RNbqWoA t3i9u7UFibG9c3gkQRU8IwqhFGs4FP3+rZDn9Q9aSuoY9YZ4ULRDkS+NZgJ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7sB3occYXpALWaBpWJaEGcOWH0owHwYDVR0j BBgwFoAUT8xfcshMAxakMz+l3B2OUIYdz7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk4YjM1NDktZTI1My00ZmQ5LWE3MDQtMjk2OTQ0ZTVhMDYzLzAvNEZDQzVGNzJD ODRDMDMxNkE0MzMzRkE1REMxRDhFNTA4NjFEQ0ZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkNDNUY3MkM4NEMwMzE2QTQzMzNGQTVEQzFEOEU1MDg2MURD RkI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvNEZDQzVGNzJDODRDMDMxNkE0MzMzRkE1REMxRDhF NTA4NjFEQ0ZCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1fkXuuD/PMe+mvblYkgbsMsMlrAslE/kAs mwpoZ8pNtq/tRAgX/fcUWIT2Nr6+BYrtn7N40SDbIUrFl61LuNmPbx2I4u2fPLWv bJCq/DTX09oluaV/4Pz/5wYJbZQENlXSsWe0s6p8X3r4D9pJgKfVnNQ+8icyWHXm kJj/uHYL9NglDFndKJpuKgJs+ecXhZKcNtHDqIj0x4vXAJ9UN2So0g8jRJBUtYkL WoFjHuE8VFfNbZLh0iErupSiyocf0pal+esghcZlxAuIe+g7VBwGH9KC6OurwPhL yCVtwFWmJsL9iU3ZtfUzPyS4H1KpHqHdHtZdtDkoTpMypCny+vA= -----END CERTIFICATE-----Generated at Fri Jul 24 02:38:05 2026 by rpki-client