$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft File: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft (raw, json) Hash identifier: eMQZhCtfpPi8EK8ZINw+7pKXN3gsCbVYAlDsRnqzz68= Subject key identifier: 37:51:6B:52:70:8B:89:40:02:EC:EB:81:F5:C8:11:F6:B9:8F:B5:38 Authority key identifier: 4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2 Certificate issuer: /CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2 Certificate serial: 0509A8092B8FB28F257C73868213EA30ABFFDDED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 10:11:51 +0000 Manifest this update: Fri 24 Jul 2026 10:06:51 +0000 Manifest next update: Sat 25 Jul 2026 10:59:51 +0000 Files and hashes: 1: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: ry2+KDu888rhvRXyvEVBH/F8IFRWnEG2799s3X5mVKA=) 2: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl (hash: t75H/qMW7ELHRl9Bw4zuRXgz4+iSwk2GZ1KWuXVg9Qc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:09:a8:09:2b:8f:b2:8f:25:7c:73:86:82:13:ea:30:ab:ff:dd:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2 Validity Not Before: Jul 24 10:06:51 2026 GMT Not After : Jul 25 10:59:51 2026 GMT Subject: CN=37516B52708B894002ECEB81F5C811F6B98FB538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ec:a5:67:e4:78:6f:df:45:81:59:31:55:cd: 77:ae:85:11:33:93:f6:1f:95:06:5b:5b:d1:28:76: 49:c0:d0:44:8c:48:dc:16:96:a1:bf:a9:fe:3c:c8: 1a:8c:37:d3:09:ad:fc:ee:73:5a:70:8b:4e:a0:66: 62:49:06:ef:22:cb:c2:b0:7d:04:a4:6e:d0:6f:9a: 52:98:89:f1:41:5b:8e:31:97:e6:fc:5d:a8:a7:d1: 01:ab:d1:aa:64:97:8c:34:0f:1c:12:cf:1a:d7:98: cd:02:18:96:0a:84:27:08:53:c8:65:6a:40:86:dd: 57:1a:19:87:83:0c:21:a1:a2:7f:91:25:07:53:53: 3b:fd:87:ea:ac:1a:26:6a:3a:fc:fd:d8:53:ed:0f: 2e:8e:18:e5:23:e1:0b:5d:a0:25:04:9a:a8:b5:3a: 4c:31:5e:41:97:b9:5c:cc:04:f4:37:fe:c3:21:bf: cf:35:3c:fe:54:64:b3:99:dc:ef:54:21:14:20:b3: d1:ea:f3:9f:82:52:ba:ae:1a:62:e0:11:0e:35:32: 6a:60:ee:0d:cb:0b:f5:ed:e2:8d:30:06:b2:89:b1: 7a:6c:bf:05:da:57:37:de:be:07:c4:b7:d7:91:13: f2:26:65:08:2f:e7:9b:1a:bf:76:7e:95:65:91:91: 05:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:51:6B:52:70:8B:89:40:02:EC:EB:81:F5:C8:11:F6:B9:8F:B5:38 X509v3 Authority Key Identifier: keyid:4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:01:e3:7e:1f:e1:07:01:a8:55:69:9a:e6:8c:e9:18:46:2a: 83:15:bd:28:5a:c9:89:b4:af:e2:39:dd:a2:12:83:80:a3:aa: 94:c5:13:8d:d6:90:85:6e:45:1c:c8:9b:33:23:20:92:b1:78: 0a:a6:7d:aa:40:53:9e:96:08:84:3e:e7:c7:55:25:03:2b:a4: 71:0a:e8:4e:00:8f:8f:e8:82:92:1d:0b:e1:89:9c:22:dd:2c: 1a:bd:62:26:5d:69:23:bf:1f:c7:32:bc:9b:58:f1:3d:3c:9a: bc:81:4f:72:7b:e4:4b:2c:dd:b1:11:1f:5d:15:29:1b:ac:24: 50:88:10:e8:4e:a9:6e:2a:dd:a7:6a:8c:6b:11:15:af:91:aa: e8:d0:ee:40:d5:44:d9:c1:c3:db:61:d9:bc:33:a4:a1:a0:56: 96:1b:a6:cc:87:36:e5:13:9a:d0:39:b6:76:4e:e6:3e:19:67: 66:c7:03:4b:0f:4d:4a:f6:00:7d:b9:10:0f:f2:10:76:0a:c3: 30:78:1a:2f:81:75:4f:41:bf:1c:aa:37:40:11:ac:c6:9f:a4: d8:3e:ce:11:df:9f:ab:73:1a:88:0a:f9:f8:88:e2:ea:12:d2: 7c:90:b0:f9:1d:7f:66:0a:4e:da:7d:11:00:6f:c2:5a:e4:9e: 22:3f:80:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBQmoCSuPso8lfHOGghPqMKv/3e0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEwMTVCMEIwQTA4RDFCM0Y3RUEzNTQ5Qjk2OERERTc2 NjM4MDhEMjAeFw0yNjA3MjQxMDA2NTFaFw0yNjA3MjUxMDU5NTFaMDMxMTAvBgNV BAMTKDM3NTE2QjUyNzA4Qjg5NDAwMkVDRUI4MUY1QzgxMUY2Qjk4RkI1MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/7KVn5Hhv30WBWTFVzXeuhREz k/YflQZbW9EodknA0ESMSNwWlqG/qf48yBqMN9MJrfzuc1pwi06gZmJJBu8iy8Kw fQSkbtBvmlKYifFBW44xl+b8Xain0QGr0apkl4w0DxwSzxrXmM0CGJYKhCcIU8hl akCG3VcaGYeDDCGhon+RJQdTUzv9h+qsGiZqOvz92FPtDy6OGOUj4QtdoCUEmqi1 OkwxXkGXuVzMBPQ3/sMhv881PP5UZLOZ3O9UIRQgs9Hq85+CUrquGmLgEQ41Mmpg 7g3LC/Xt4o0wBrKJsXpsvwXaVzfevgfEt9eRE/ImZQgv55sav3Z+lWWRkQVrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN1FrUnCLiUAC7OuB9cgR9rmPtTgwHwYDVR0j BBgwFoAUSgFbCwoI0bP36jVJuWjd52Y4CNIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRjMWM0OWMtZDQwNC00NWExLTllN2QtODZmNWY4NTJlMjc2LzAvNEEwMTVCMEIw QTA4RDFCM0Y3RUEzNTQ5Qjk2OERERTc2NjM4MDhEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTAxNUIwQjBBMDhEMUIzRjdFQTM1NDlCOTY4RERFNzY2Mzgw OEQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll N2QtODZmNWY4NTJlMjc2LzAvNEEwMTVCMEIwQTA4RDFCM0Y3RUEzNTQ5Qjk2OERE RTc2NjM4MDhEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQB434f4QcBqFVpmuaM6RhGKoMVvShayYm0 r+I53aISg4CjqpTFE43WkIVuRRzImzMjIJKxeAqmfapAU56WCIQ+58dVJQMrpHEK 6E4Aj4/ogpIdC+GJnCLdLBq9YiZdaSO/H8cyvJtY8T08mryBT3J75Ess3bERH10V KRusJFCIEOhOqW4q3adqjGsRFa+RqujQ7kDVRNnBw9th2bwzpKGgVpYbpsyHNuUT mtA5tnZO5j4ZZ2bHA0sPTUr2AH25EA/yEHYKwzB4Gi+BdU9BvxyqN0ARrMafpNg+ zhHfn6tzGogK+fiI4uoS0nyQsPkdf2YKTtp9EQBvwlrkniI/gPk= -----END CERTIFICATE-----Generated at Fri Jul 24 12:43:02 2026 by rpki-client