$ rpki-client -vvf rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft File: 4DC2282186B6221A7A52575CE005F2B42354E4A6.mft (raw, json) Hash identifier: ecCiB45q/i8ECDSsdAWc9kUsXPz3mclOHTmDhtX3VwY= Subject key identifier: 07:DC:3E:1C:04:5D:B2:D4:3C:F1:C3:F2:E9:54:79:5C:25:A1:A9:A8 Authority key identifier: 4D:C2:28:21:86:B6:22:1A:7A:52:57:5C:E0:05:F2:B4:23:54:E4:A6 Certificate issuer: /CN=4DC2282186B6221A7A52575CE005F2B42354E4A6 Certificate serial: 396795A8CFA6538FA18A1D8A9C668E1237AC4A1A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 14:22:28 +0000 Manifest this update: Thu 23 Jul 2026 14:17:28 +0000 Manifest next update: Fri 24 Jul 2026 14:35:28 +0000 Files and hashes: 1: 4DC2282186B6221A7A52575CE005F2B42354E4A6.crl (hash: TgRE2FaCHzrWhNahq9xXy4fCZv995zRZLWq6s3OjEp4=) 2: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: Z0k2HMfcMKksaFrziJOtsyyQXBDq/OhSupVq38YlMrI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.crl rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:67:95:a8:cf:a6:53:8f:a1:8a:1d:8a:9c:66:8e:12:37:ac:4a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC2282186B6221A7A52575CE005F2B42354E4A6 Validity Not Before: Jul 23 14:17:28 2026 GMT Not After : Jul 24 14:35:28 2026 GMT Subject: CN=07DC3E1C045DB2D43CF1C3F2E954795C25A1A9A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cc:99:77:79:83:1a:ce:ad:8e:7d:09:b1:61: 6e:57:3d:16:a9:b6:ec:12:c6:a0:fb:fe:96:a9:ec: 43:83:dd:7d:7d:92:21:0c:e7:db:35:9d:a4:44:9e: ea:8a:37:d1:ed:c9:11:fa:11:ab:58:5d:e1:2d:7d: dc:65:af:38:61:d7:9a:d7:4e:e6:f1:0e:2a:c8:79: 66:d2:90:3b:b6:e4:48:37:13:ab:9d:87:5b:51:ae: d8:ad:ec:7a:60:2e:94:d7:99:4f:23:47:60:9d:63: ba:8d:8c:b6:0a:e3:ac:ea:6b:9b:f7:b5:cd:c6:72: b2:3e:fb:9d:72:5a:b7:76:a0:e6:46:c1:ee:7e:0a: bc:6e:5c:9d:db:d3:66:06:9e:d9:c3:bb:b1:c9:a4: ef:e0:2a:a7:c2:0b:99:f0:b3:04:14:c8:b3:8a:9a: 22:e7:b4:8e:ea:63:60:77:0a:57:fb:c5:22:43:b7: 34:2f:8a:7b:01:ee:af:07:58:8b:d0:d9:41:3b:b5: ea:ea:54:b0:57:e2:34:c4:48:d9:ce:1d:cb:2f:55: 3f:a5:af:8e:7f:9e:63:56:36:13:ce:3d:42:dd:99: 3b:b6:8a:0f:e5:f8:1d:52:99:21:27:db:8f:e4:5f: f5:a4:71:e0:2e:4b:90:3a:08:c0:43:ac:7f:40:27: e9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DC:3E:1C:04:5D:B2:D4:3C:F1:C3:F2:E9:54:79:5C:25:A1:A9:A8 X509v3 Authority Key Identifier: keyid:4D:C2:28:21:86:B6:22:1A:7A:52:57:5C:E0:05:F2:B4:23:54:E4:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:34:79:f3:3b:8b:fb:29:df:94:f6:35:f8:e4:ee:4a:0f:47: e1:d3:40:e6:76:16:d6:6f:0f:f7:1d:ed:17:e2:d0:e4:f6:b7: ae:13:ae:f3:5c:01:78:ac:d4:3a:59:88:4d:7a:43:df:95:b0: 7f:8a:45:51:0b:36:be:11:4a:d7:63:7f:99:78:db:c3:8a:61: ad:65:dc:57:f8:98:10:eb:71:65:4f:fd:05:79:11:5c:a6:a3: 66:46:6d:e6:1d:d9:8b:0c:e3:54:4e:d6:c2:c3:df:59:9b:16: 8f:f4:cc:d6:35:e0:ff:84:d6:a8:6b:50:1b:33:b0:30:91:44: 23:ff:a4:df:68:56:4c:a4:bf:37:a6:f1:8d:0f:20:8a:e1:8f: d1:08:14:c1:4e:25:90:3b:fd:aa:91:20:75:51:8f:bb:d0:16: 97:f5:e1:2c:6f:30:cc:36:13:31:50:49:43:7d:9f:c9:ac:97: 22:99:36:24:c0:10:09:42:a9:ff:a9:67:d7:86:f9:d6:6f:41: 52:3b:f2:8e:9a:42:50:28:24:9a:2d:c0:77:52:ec:11:2b:10: 7a:b3:3b:42:d2:c8:25:ed:1b:80:34:94:2f:0d:7c:27:b0:17: 2e:18:5d:d7:c8:27:3b:d1:47:26:b1:87:1b:97:51:7a:86:01: 3f:2d:89:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOWeVqM+mU4+hih2KnGaOEjesShowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDMjI4MjE4NkI2MjIxQTdBNTI1NzVDRTAwNUYyQjQy MzU0RTRBNjAeFw0yNjA3MjMxNDE3MjhaFw0yNjA3MjQxNDM1MjhaMDMxMTAvBgNV BAMTKDA3REMzRTFDMDQ1REIyRDQzQ0YxQzNGMkU5NTQ3OTVDMjVBMUE5QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbzJl3eYMazq2OfQmxYW5XPRap tuwSxqD7/pap7EOD3X19kiEM59s1naREnuqKN9HtyRH6EatYXeEtfdxlrzhh15rX TubxDirIeWbSkDu25Eg3E6udh1tRrtit7HpgLpTXmU8jR2CdY7qNjLYK46zqa5v3 tc3GcrI++51yWrd2oOZGwe5+CrxuXJ3b02YGntnDu7HJpO/gKqfCC5nwswQUyLOK miLntI7qY2B3Clf7xSJDtzQvinsB7q8HWIvQ2UE7terqVLBX4jTESNnOHcsvVT+l r45/nmNWNhPOPULdmTu2ig/l+B1SmSEn24/kX/WkceAuS5A6CMBDrH9AJ+l1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB9w+HARdstQ88cPy6VR5XCWhqagwHwYDVR0j BBgwFoAUTcIoIYa2Ihp6Uldc4AXytCNU5KYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmUxMWU5OGYtZjU0ZS00NjBiLTg4ZjMtYmY5MWUwNDQzZTkwLzAvNERDMjI4MjE4 NkI2MjIxQTdBNTI1NzVDRTAwNUYyQjQyMzU0RTRBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REMyMjgyMTg2QjYyMjFBN0E1MjU3NUNFMDA1RjJCNDIzNTRF NEE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvNERDMjI4MjE4NkI2MjIxQTdBNTI1NzVDRTAwNUYy QjQyMzU0RTRBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK00efM7i/sp35T2Nfjk7koPR+HTQOZ2FtZv D/cd7Rfi0OT2t64TrvNcAXis1DpZiE16Q9+VsH+KRVELNr4RStdjf5l428OKYa1l 3Ff4mBDrcWVP/QV5EVymo2ZGbeYd2YsM41RO1sLD31mbFo/0zNY14P+E1qhrUBsz sDCRRCP/pN9oVkykvzem8Y0PIIrhj9EIFMFOJZA7/aqRIHVRj7vQFpf14SxvMMw2 EzFQSUN9n8mslyKZNiTAEAlCqf+pZ9eG+dZvQVI78o6aQlAoJJotwHdS7BErEHqz O0LSyCXtG4A0lC8NfCewFy4YXdfIJzvRRyaxhxuXUXqGAT8tia8= -----END CERTIFICATE-----Generated at Fri Jul 24 04:51:44 2026 by rpki-client