$ rpki-client -vvf rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft File: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft (raw, json) Hash identifier: +k+CFltEgK+fqBGGPLExFFiTDQl16Vzy0YuhtHTlzDw= Subject key identifier: 93:FC:DE:1C:26:A5:58:D1:B8:58:78:E1:99:ED:5F:37:23:EF:54:F4 Authority key identifier: 4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 Certificate issuer: /CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Certificate serial: 77EC7729407D24282EF724C6B3E39A3F9ADCA62D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 12:45:13 +0000 Manifest this update: Fri 24 Jul 2026 12:40:13 +0000 Manifest next update: Sat 25 Jul 2026 14:09:13 +0000 Files and hashes: 1: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: Nzw87BQmmq5JXKfqP++4H/0NcBCIzysxSEpNOfcwqIA=) 2: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl (hash: 7WbRlCf5upf+/QjnpebJ0jp0f+AgWLi+uyoJF7DBxcQ=) 3: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: 3V56nSlss2prGjnCh8yc0uAcD+eYYddXTnS1OxpPoV0=) 4: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: 2oQBF0OAu+x3jbAGDBl7jZuo1w7C20ONHzk/GqcpbO8=) 5: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: 3oF8VGb692CsHNpL5bkpsSKeUmhwgndjMYRrWhUNaPo=) 6: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: xFJ6YkI92aDNdIdb2cb47Lr1FqvCvQqQCoyTJtEq2Co=) 7: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ZDLtfAp4S3OvopOek/8l4bhhMLZjILy0rUvNj5yf6Os=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ec:77:29:40:7d:24:28:2e:f7:24:c6:b3:e3:9a:3f:9a:dc:a6:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Validity Not Before: Jul 24 12:40:13 2026 GMT Not After : Jul 25 14:09:13 2026 GMT Subject: CN=93FCDE1C26A558D1B85878E199ED5F3723EF54F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:14:94:8e:6d:f3:5d:67:a1:e9:01:d1:d1:30: 9b:16:9f:d0:05:d8:5a:ab:7d:a3:26:7a:bd:c7:3b: 49:bc:d3:48:85:e1:18:37:93:08:d4:2d:c1:14:04: 01:61:d7:e2:4e:14:eb:be:1f:74:dd:d3:9d:65:30: d7:df:e5:b6:67:47:0f:e4:dd:e5:b2:cd:65:2a:ca: 9f:04:c9:d7:27:01:96:21:ad:8e:fd:37:ea:95:cc: ba:01:aa:33:a8:52:50:8d:b5:df:ca:78:43:12:e8: 5c:75:f0:77:4a:7d:ed:fb:58:88:db:58:d5:bf:c6: 6b:44:f1:97:df:26:e6:b3:47:40:ce:1d:cb:1c:a4: 76:02:a6:b0:b0:cc:01:9b:82:78:f1:d4:1e:d3:27: 2f:e2:0d:11:18:0a:06:72:21:fe:05:98:a7:47:de: 98:20:78:7e:5e:46:12:84:ce:68:da:fe:4b:e8:99: 74:4d:bd:f7:bd:18:8d:45:f5:e0:b6:41:db:a3:bc: 03:26:cd:f0:82:02:5f:25:af:a5:19:19:e3:f5:fb: 06:c7:71:b8:46:23:cc:aa:55:a7:cc:7f:cb:cc:14: c9:8b:59:26:1a:f3:6c:64:08:21:5c:d5:95:a5:c9: 10:1d:58:10:8f:75:f4:e6:71:81:d8:f9:98:50:7d: e1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FC:DE:1C:26:A5:58:D1:B8:58:78:E1:99:ED:5F:37:23:EF:54:F4 X509v3 Authority Key Identifier: keyid:4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a2:8b:07:95:56:de:b6:95:40:fb:4e:ed:ce:b4:37:20:0c: 22:38:e4:5d:08:a7:a3:7f:f2:02:fa:37:51:9a:61:a6:bd:ab: b1:ae:42:22:dc:ca:c5:c7:72:72:03:37:4b:92:0b:7e:5b:51: 47:4b:eb:84:9f:ef:ea:ae:c2:f2:25:b9:e9:37:7a:80:8a:6f: 98:a5:f2:59:36:4e:13:fe:ec:95:2c:5d:04:66:55:69:64:88: 18:b6:c4:2e:67:3f:56:6f:52:40:09:f5:f3:39:ca:6c:a9:11: f4:8c:48:e8:4c:93:55:4d:5e:4f:c2:2b:f7:70:bf:09:55:4e: cc:c8:0b:a7:2c:e0:61:16:2d:5d:1c:9a:51:b0:bb:6f:f4:06: 36:ec:b5:8e:f8:0b:d0:83:60:35:a3:0e:c2:d0:f3:99:02:e3: bc:26:fb:da:a7:93:f8:c0:ec:f7:86:8f:5e:38:60:dc:4b:a0: b9:d2:fa:c6:c2:b6:ac:04:a6:0a:86:89:8d:5e:95:7b:8f:51: 85:dd:b9:b0:bb:1f:dd:47:ab:ee:ab:d0:6b:63:dd:a1:1a:93: 48:ea:0d:87:da:b7:04:b5:28:89:19:bd:f9:f2:54:e0:4e:08: b9:63:21:ad:54:ad:18:b7:d3:d2:75:bd:c1:12:bb:fc:6a:f4: f7:74:fd:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd+x3KUB9JCgu9yTGs+OaP5rcpi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMx RjI3RTU4NDAeFw0yNjA3MjQxMjQwMTNaFw0yNjA3MjUxNDA5MTNaMDMxMTAvBgNV BAMTKDkzRkNERTFDMjZBNTU4RDFCODU4NzhFMTk5RUQ1RjM3MjNFRjU0RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGFJSObfNdZ6HpAdHRMJsWn9AF 2FqrfaMmer3HO0m800iF4Rg3kwjULcEUBAFh1+JOFOu+H3Td051lMNff5bZnRw/k 3eWyzWUqyp8EydcnAZYhrY79N+qVzLoBqjOoUlCNtd/KeEMS6Fx18HdKfe37WIjb WNW/xmtE8ZffJuazR0DOHcscpHYCprCwzAGbgnjx1B7TJy/iDREYCgZyIf4FmKdH 3pggeH5eRhKEzmja/kvomXRNvfe9GI1F9eC2QdujvAMmzfCCAl8lr6UZGeP1+wbH cbhGI8yqVafMf8vMFMmLWSYa82xkCCFc1ZWlyRAdWBCPdfTmcYHY+ZhQfeF/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk/zeHCalWNG4WHjhme1fNyPvVPQwHwYDVR0j BBgwFoAUSsXcQXKq9DGWIvThwD/+Qx8n5YQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQwMTQzNmItMDI2Ny00NjZiLWEzNDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3 MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMxRjI3RTU4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUM1REM0MTcyQUFGNDMxOTYyMkY0RTFDMDNGRkU0MzFGMjdF NTg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQwMTQzNmItMDI2Ny00NjZiLWEz NDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZF NDMxRjI3RTU4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGiiweVVt62lUD7Tu3OtDcgDCI45F0Ip6N/ 8gL6N1GaYaa9q7GuQiLcysXHcnIDN0uSC35bUUdL64Sf7+quwvIluek3eoCKb5il 8lk2ThP+7JUsXQRmVWlkiBi2xC5nP1ZvUkAJ9fM5ymypEfSMSOhMk1VNXk/CK/dw vwlVTszIC6cs4GEWLV0cmlGwu2/0BjbstY74C9CDYDWjDsLQ85kC47wm+9qnk/jA 7PeGj144YNxLoLnS+sbCtqwEpgqGiY1elXuPUYXdubC7H91Hq+6r0Gtj3aEak0jq DYfatwS1KIkZvfnyVOBOCLljIa1UrRi309J1vcESu/xq9Pd0/fM= -----END CERTIFICATE-----Generated at Fri Jul 24 15:05:32 2026 by rpki-client