$ rpki-client -vvf rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft File: 4958ACA345C7658A0DAF8E986F7577A772837161.mft (raw, json) Hash identifier: pzrhHVRzAqFL56HBSFPMJj6FbMweYKJWUT0cJTRF6CY= Subject key identifier: 39:4E:58:07:E6:FB:33:2A:8E:2B:56:D2:B6:39:B4:42:60:B2:18:70 Authority key identifier: 49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61 Certificate issuer: /CN=4958ACA345C7658A0DAF8E986F7577A772837161 Certificate serial: 6BDAF65CCB5458086A3DB2D1CA80413EAFE253AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:26:03 +0000 Manifest this update: Fri 24 Jul 2026 01:21:03 +0000 Manifest next update: Sat 25 Jul 2026 04:49:03 +0000 Files and hashes: 1: 3130332e3137392e36342e302f32342d3234203d3e20313439333335.roa (hash: ERSYk3hZf9PVzWt1WH0Bk7NUbuFdmrm4ZK2jNR3DM5g=) 2: 4958ACA345C7658A0DAF8E986F7577A772837161.crl (hash: nWvnelC6fA+jLOhZsWbwfy0B7fknGVmRgy3Mf3JRw44=) 3: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (hash: KtDrnG9lvgnRMSX5R+jeLWfcRpbu+ptwzkE+z8AdY3o=) 4: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (hash: HGbCMrvkn9HLdb/84AEUgwBryTJVzNaclVbYnTuUOj0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:da:f6:5c:cb:54:58:08:6a:3d:b2:d1:ca:80:41:3e:af:e2:53:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4958ACA345C7658A0DAF8E986F7577A772837161 Validity Not Before: Jul 24 01:21:03 2026 GMT Not After : Jul 25 04:49:03 2026 GMT Subject: CN=394E5807E6FB332A8E2B56D2B639B44260B21870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b6:c6:b5:c1:eb:de:b0:8b:68:62:25:17:cd: 18:4f:26:7d:5f:c7:2c:bc:3b:a3:d4:bb:5e:ff:ba: e8:2a:5f:c9:66:db:03:56:d4:b9:0c:a5:43:73:40: f0:06:a8:5b:07:9f:1c:e8:39:64:52:48:7c:d5:8e: 47:fe:3a:53:aa:05:da:04:c6:04:b8:58:1e:17:fd: 53:b4:a2:d5:9f:89:ae:36:59:e3:2c:e6:1e:b5:76: bc:f3:ae:21:ee:e2:07:d1:ec:f6:a1:11:51:0b:00: e5:32:62:79:d6:57:1f:bd:36:c9:f6:d7:22:7d:79: 0f:c7:7e:84:8e:c0:33:94:5f:fc:c5:93:dc:ce:9b: 5b:09:8c:ef:b5:8f:a3:a6:3a:d0:b2:06:0a:2b:af: 1a:4b:63:e0:34:e8:66:6a:16:79:2e:89:0d:76:32: 4b:c8:f7:a7:16:ff:e1:b7:7e:b4:b9:da:f9:40:81: 6b:70:c9:b4:7b:ff:82:24:6a:06:f5:86:8f:98:fa: 16:00:3f:96:97:01:14:d3:46:46:e9:91:f6:36:1f: b5:e9:d5:b2:8a:fc:5f:9d:61:f9:a6:5e:55:af:09: 89:b7:f0:d6:a6:81:7d:4b:06:ea:8b:4e:63:3d:64: 52:38:47:5b:ca:c4:9e:05:e5:ae:1d:ca:2e:de:c0: 1c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4E:58:07:E6:FB:33:2A:8E:2B:56:D2:B6:39:B4:42:60:B2:18:70 X509v3 Authority Key Identifier: keyid:49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:27:36:e0:e4:dc:86:47:85:b1:67:e6:2b:f6:dd:89:42:f3: 9c:8a:7a:04:ca:db:2c:d5:bb:e3:bb:ab:5d:1f:76:c6:dc:33: 15:d8:10:b5:d3:1d:cd:61:53:44:21:81:32:d3:0a:3b:57:7b: a9:34:3e:d2:ea:46:94:76:dd:0e:49:c5:2c:bb:27:ed:7e:74: f3:57:05:8a:9e:23:ec:aa:91:84:af:76:1c:94:42:87:d5:4a: 90:08:21:37:21:db:7b:2f:6f:3b:01:44:4d:60:f8:1e:65:a7: 46:c9:51:32:4c:f6:8a:cf:cc:ac:4f:52:20:6f:18:75:55:20: 60:59:bc:37:41:b4:8b:d6:bb:4c:57:a3:04:a4:38:50:5e:57: 80:3a:83:f1:3d:40:ac:e9:0d:85:bf:3b:55:bf:0b:57:a4:62: 4b:64:72:e1:08:23:70:17:bd:c7:9d:9f:93:38:ed:db:28:5a: 28:c7:53:3f:10:7f:e4:88:8e:39:39:d5:5c:c5:05:ef:db:ac: 97:fa:f0:75:55:66:8a:78:bb:f5:ad:b8:50:d3:2e:00:e7:7b: 2a:1d:f6:06:71:46:ff:b2:01:bd:b8:b0:e5:4a:80:39:5c:4d: 9e:94:cd:3a:b3:2a:25:45:6f:24:52:93:88:7a:e1:db:70:77: ea:f4:5a:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa9r2XMtUWAhqPbLRyoBBPq/iU6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1OEFDQTM0NUM3NjU4QTBEQUY4RTk4NkY3NTc3QTc3 MjgzNzE2MTAeFw0yNjA3MjQwMTIxMDNaFw0yNjA3MjUwNDQ5MDNaMDMxMTAvBgNV BAMTKDM5NEU1ODA3RTZGQjMzMkE4RTJCNTZEMkI2MzlCNDQyNjBCMjE4NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCItsa1wevesItoYiUXzRhPJn1f xyy8O6PUu17/uugqX8lm2wNW1LkMpUNzQPAGqFsHnxzoOWRSSHzVjkf+OlOqBdoE xgS4WB4X/VO0otWfia42WeMs5h61drzzriHu4gfR7PahEVELAOUyYnnWVx+9Nsn2 1yJ9eQ/HfoSOwDOUX/zFk9zOm1sJjO+1j6OmOtCyBgorrxpLY+A06GZqFnkuiQ12 MkvI96cW/+G3frS52vlAgWtwybR7/4Ikagb1ho+Y+hYAP5aXARTTRkbpkfY2H7Xp 1bKK/F+dYfmmXlWvCYm38NamgX1LBuqLTmM9ZFI4R1vKxJ4F5a4dyi7ewBwvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOU5YB+b7MyqOK1bStjm0QmCyGHAwHwYDVR0j BBgwFoAUSViso0XHZYoNr46Yb3V3p3KDcWEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc3ZGUwMTMtOWI1Ni00OWZmLThiNzktMzY2N2EzNDVjYjhkLzAvNDk1OEFDQTM0 NUM3NjU4QTBEQUY4RTk4NkY3NTc3QTc3MjgzNzE2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTU4QUNBMzQ1Qzc2NThBMERBRjhFOTg2Rjc1NzdBNzcyODM3 MTYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc3ZGUwMTMtOWI1Ni00OWZmLThi NzktMzY2N2EzNDVjYjhkLzAvNDk1OEFDQTM0NUM3NjU4QTBEQUY4RTk4NkY3NTc3 QTc3MjgzNzE2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4nNuDk3IZHhbFn5iv23YlC85yKegTK2yzV u+O7q10fdsbcMxXYELXTHc1hU0QhgTLTCjtXe6k0PtLqRpR23Q5JxSy7J+1+dPNX BYqeI+yqkYSvdhyUQofVSpAIITch23svbzsBRE1g+B5lp0bJUTJM9orPzKxPUiBv GHVVIGBZvDdBtIvWu0xXowSkOFBeV4A6g/E9QKzpDYW/O1W/C1ekYktkcuEII3AX vcedn5M47dsoWijHUz8Qf+SIjjk51VzFBe/brJf68HVVZop4u/WtuFDTLgDneyod 9gZxRv+yAb24sOVKgDlcTZ6UzTqzKiVFbyRSk4h64dtwd+r0WpQ= -----END CERTIFICATE-----Generated at Fri Jul 24 05:17:08 2026 by rpki-client