$ rpki-client -vvf rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft File: A4249B719E5F988286AD3B4164C4E77F434FF948.mft (raw, json) Hash identifier: 02tLJ+yQUs7181p/I539/UUQhlG7P7Wpqd9C28dmwGg= Subject key identifier: 16:9F:5B:E4:FC:F7:9C:20:B8:5E:AA:2A:0E:19:E2:6B:55:BE:A6:AE Authority key identifier: A4:24:9B:71:9E:5F:98:82:86:AD:3B:41:64:C4:E7:7F:43:4F:F9:48 Certificate issuer: /CN=A4249B719E5F988286AD3B4164C4E77F434FF948 Certificate serial: 3A0035428A566B4A314B212F0CC936D3828AE886 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:28:56 +0000 Manifest this update: Thu 23 Jul 2026 19:23:56 +0000 Manifest next update: Fri 24 Jul 2026 21:42:56 +0000 Files and hashes: 1: A4249B719E5F988286AD3B4164C4E77F434FF948.crl (hash: pyudr09yhlNGkQK1jp2j9WDJT4D7AXVwJPbMNakMtEs=) 2: 3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa (hash: /8ZMrBAQoa3qQ8hBZzRb+TXTbN8qY8Wvj8VBQo+giW0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.crl rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:00:35:42:8a:56:6b:4a:31:4b:21:2f:0c:c9:36:d3:82:8a:e8:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4249B719E5F988286AD3B4164C4E77F434FF948 Validity Not Before: Jul 23 19:23:56 2026 GMT Not After : Jul 24 21:42:56 2026 GMT Subject: CN=169F5BE4FCF79C20B85EAA2A0E19E26B55BEA6AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:42:f5:12:4e:d4:4f:dd:00:59:8d:a3:9d: ea:18:cd:86:e2:7b:38:ea:8d:c1:1c:25:21:2d:73: 80:fa:e7:98:d9:92:c2:21:c3:7d:31:bb:64:b8:1f: ec:df:ba:ca:c2:3a:c8:c5:ba:21:1c:e2:cf:89:6e: df:1a:dc:0c:ff:5d:4f:7e:9c:08:ee:f7:d1:5c:3e: 6d:2a:bc:15:33:dc:bf:46:a1:28:a2:b4:46:34:58: 0f:37:bd:82:7e:71:a8:df:07:84:d7:da:7a:b7:af: df:11:98:3d:e1:96:29:e1:51:79:fe:46:29:41:af: 76:62:1d:92:19:2a:a0:70:b3:e4:85:98:e3:52:60: 97:ab:99:33:16:7f:09:a1:14:e0:6e:e2:0c:a9:4b: e1:7c:83:69:d6:00:96:38:60:ee:10:52:6b:5e:97: 08:db:e6:e6:72:59:69:ad:62:5e:39:5c:b2:57:72: 48:2c:da:82:34:5f:04:56:5d:0b:85:f8:ba:7c:73: be:65:f3:2c:9a:ae:19:8a:5e:b5:54:3f:c3:28:3d: 71:7f:c7:88:5c:bb:c0:55:1c:8f:3d:40:9b:3d:c9: 18:b1:8e:1a:15:1f:f1:ac:de:ca:be:41:c9:89:19: 16:c4:22:80:6c:e7:fa:f2:73:4a:3b:f2:13:a9:b1: 2a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9F:5B:E4:FC:F7:9C:20:B8:5E:AA:2A:0E:19:E2:6B:55:BE:A6:AE X509v3 Authority Key Identifier: keyid:A4:24:9B:71:9E:5F:98:82:86:AD:3B:41:64:C4:E7:7F:43:4F:F9:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:6c:2d:b5:b2:46:bf:1c:bf:44:80:c2:4b:db:c0:3c:8c:1e: 9b:7d:34:55:7f:21:f1:f0:e3:7e:27:c2:f0:2d:bd:9f:15:db: e0:da:b8:4e:30:63:44:92:16:7d:14:62:6d:c8:a9:a0:5c:68: 49:88:d2:55:dc:5a:95:7e:b2:6d:89:4d:13:13:22:6d:23:b2: 0f:38:db:8d:2e:19:d9:d0:b4:e3:53:31:5f:62:a4:3e:8b:24: f0:35:9a:81:47:f0:02:e7:83:94:78:cc:25:4c:af:f0:0e:2d: ac:e6:74:a6:e2:57:47:90:9f:b8:a5:ed:4c:3f:ce:25:03:00: d6:3c:b7:56:33:da:96:f8:c8:36:50:1b:8c:14:10:6b:16:2b: 82:a3:0d:77:21:ef:31:92:1f:7d:e4:64:f8:fa:04:e6:d4:5c: bf:10:61:88:36:71:33:fe:ed:d1:8e:69:3a:c8:35:f8:a9:3e: d5:dc:a5:28:18:66:a6:f2:fb:d2:b0:da:2b:81:d5:7b:d6:b4: 53:bf:94:b2:50:70:1a:66:01:6b:5e:6b:d9:2c:9f:37:30:9e: 9d:93:97:a4:70:cd:f1:5f:5f:5f:8a:62:49:c5:f0:cd:6f:cc: 7a:70:1e:cc:4f:79:04:5e:0c:fb:01:cc:52:e3:08:5a:ad:1d: b4:e4:cc:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOgA1QopWa0oxSyEvDMk204KK6IYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyNDlCNzE5RTVGOTg4Mjg2QUQzQjQxNjRDNEU3N0Y0 MzRGRjk0ODAeFw0yNjA3MjMxOTIzNTZaFw0yNjA3MjQyMTQyNTZaMDMxMTAvBgNV BAMTKDE2OUY1QkU0RkNGNzlDMjBCODVFQUEyQTBFMTlFMjZCNTVCRUE2QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFSEL1Ek7UT90AWY2jneoYzYbi ezjqjcEcJSEtc4D655jZksIhw30xu2S4H+zfusrCOsjFuiEc4s+Jbt8a3Az/XU9+ nAju99FcPm0qvBUz3L9GoSiitEY0WA83vYJ+cajfB4TX2nq3r98RmD3hlinhUXn+ RilBr3ZiHZIZKqBws+SFmONSYJermTMWfwmhFOBu4gypS+F8g2nWAJY4YO4QUmte lwjb5uZyWWmtYl45XLJXckgs2oI0XwRWXQuF+Lp8c75l8yyarhmKXrVUP8MoPXF/ x4hcu8BVHI89QJs9yRixjhoVH/Gs3sq+QcmJGRbEIoBs5/ryc0o78hOpsSrnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFp9b5Pz3nCC4XqoqDhnia1W+pq4wHwYDVR0j BBgwFoAUpCSbcZ5fmIKGrTtBZMTnf0NP+UgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWJjYzYyYWUtMjBjOC00OTc0LWFhZTktYjEwOGRmOGUyZjU5LzAvQTQyNDlCNzE5 RTVGOTg4Mjg2QUQzQjQxNjRDNEU3N0Y0MzRGRjk0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNDI0OUI3MTlFNUY5ODgyODZBRDNCNDE2NEM0RTc3RjQzNEZG OTQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWJjYzYyYWUtMjBjOC00OTc0LWFh ZTktYjEwOGRmOGUyZjU5LzAvQTQyNDlCNzE5RTVGOTg4Mjg2QUQzQjQxNjRDNEU3 N0Y0MzRGRjk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBsLbWyRr8cv0SAwkvbwDyMHpt9NFV/IfHw 434nwvAtvZ8V2+DauE4wY0SSFn0UYm3IqaBcaEmI0lXcWpV+sm2JTRMTIm0jsg84 240uGdnQtONTMV9ipD6LJPA1moFH8ALng5R4zCVMr/AOLazmdKbiV0eQn7il7Uw/ ziUDANY8t1Yz2pb4yDZQG4wUEGsWK4KjDXch7zGSH33kZPj6BObUXL8QYYg2cTP+ 7dGOaTrINfipPtXcpSgYZqby+9Kw2iuB1XvWtFO/lLJQcBpmAWtea9ksnzcwnp2T l6RwzfFfX1+KYknF8M1vzHpwHsxPeQReDPsBzFLjCFqtHbTkzNY= -----END CERTIFICATE-----Generated at Fri Jul 24 12:35:43 2026 by rpki-client