$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft File: 4E0311031DBA1471A97F3183416162430EA78405.mft (raw, json) Hash identifier: CoA06aovb2HhPYYKc2GN/JE9ICDM+pARc6smNtyn0xw= Subject key identifier: 81:77:DA:00:EE:CB:CA:F6:0B:25:B5:CA:60:E7:67:F5:A0:61:E8:8A Authority key identifier: 4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05 Certificate issuer: /CN=4E0311031DBA1471A97F3183416162430EA78405 Certificate serial: 3831B565C4B7EC47062E1FB9239BC2BCA6B94301 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:36:11 +0000 Manifest this update: Fri 24 Jul 2026 01:31:11 +0000 Manifest next update: Sat 25 Jul 2026 04:50:11 +0000 Files and hashes: 1: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: 45DsIwwkRRpg5bWvzaG3sx/NMYDeJXNq0PjvKzltS2I=) 2: 4E0311031DBA1471A97F3183416162430EA78405.crl (hash: AjVIYCW26xzTSAOR4V2ldZEreGk2D8B/6dJ2wsoVE1Y=) 3: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: kBF7Opi92U9hs5gCPj1VpLoXTbkOV0WaW1UNm3qxyr8=) 4: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: LCoG5MBtVr1gnp0Cb9QG4F/kZ9BcJIu/HLJgqKdyZtQ=) 5: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: EeoLX1eQr3kbHp2go87fzfWuIm2QGRQurIS8zg4rg8k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:31:b5:65:c4:b7:ec:47:06:2e:1f:b9:23:9b:c2:bc:a6:b9:43:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E0311031DBA1471A97F3183416162430EA78405 Validity Not Before: Jul 24 01:31:11 2026 GMT Not After : Jul 25 04:50:11 2026 GMT Subject: CN=8177DA00EECBCAF60B25B5CA60E767F5A061E88A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3c:85:4c:a0:3c:6f:c2:4c:c3:1c:70:42:9c: 53:b1:41:34:62:10:5c:8c:b2:eb:f2:2c:57:e3:f6: e6:f9:05:54:38:38:d2:94:b5:f9:78:d5:82:ce:67: a0:e7:1d:b4:11:ce:0d:28:ab:1b:6e:f0:9a:a9:29: 24:83:d4:54:a2:f4:2d:0b:d2:43:cc:32:59:a5:27: da:c7:40:43:d3:c1:68:00:74:77:be:c8:33:ba:de: 1e:75:0d:91:1b:61:e2:a9:01:6b:56:53:2a:48:e5: a6:c5:40:ec:5e:aa:ce:1f:57:65:d2:89:7e:a4:0b: b5:a4:42:c0:65:b9:0b:d9:0b:33:87:06:56:3c:a6: fd:9f:b5:6f:27:35:78:e6:41:a0:e7:a4:02:ba:f0: 79:36:26:37:a7:14:52:c4:c1:2f:2c:85:1a:5b:69: e2:95:f5:2e:07:1e:a9:6a:b5:56:b8:ba:69:d8:e1: 2d:33:12:22:59:ee:58:1a:39:19:18:5c:5f:cb:28: 54:6b:46:c6:5c:76:a8:38:83:75:a9:91:68:fe:7f: 98:0c:77:0a:5e:ee:73:c9:23:6b:cf:70:8a:72:0c: f7:04:b0:03:98:d3:8c:78:94:41:43:cb:8f:cc:84: e1:e6:12:c8:a5:2e:fe:31:37:be:08:78:36:2e:ae: 1c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:77:DA:00:EE:CB:CA:F6:0B:25:B5:CA:60:E7:67:F5:A0:61:E8:8A X509v3 Authority Key Identifier: keyid:4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:2a:a8:2d:6d:95:7e:0b:14:6f:1c:f1:7a:57:f1:00:5b:c3: 90:98:24:28:3d:ab:fe:57:79:cc:7c:0d:ac:a8:8e:d3:eb:1c: 82:f3:e5:f0:91:53:7d:c5:d3:dd:04:9f:55:cb:35:b9:cb:0e: f5:b0:3f:df:99:e3:61:1e:8e:a6:3c:47:0f:ce:1b:fc:43:4f: c3:a5:a3:5f:f3:9e:c2:90:fb:34:ec:a8:49:8a:94:5d:65:fb: f6:f1:23:e0:05:3c:78:98:e2:11:eb:86:11:16:47:5f:c9:bc: 63:95:00:f3:a1:31:b8:cb:41:fa:90:d6:c3:55:b1:eb:40:8a: df:53:3a:41:35:26:c6:f7:2d:68:4a:11:35:49:7e:58:db:d0: 4d:ba:c7:1e:62:b2:0e:fc:82:0c:2b:d7:f5:64:12:5f:f7:16: fd:54:c0:41:f0:e9:4e:ce:4f:ad:64:c2:af:03:e6:f8:8b:63: a9:57:58:44:d2:ca:49:28:d7:1b:65:bb:f4:90:ff:f2:6d:c8: d1:10:97:90:6b:83:97:8c:07:da:2b:2b:b2:0a:7b:b1:2f:3b: 3e:6c:67:82:e2:2b:b5:fa:c5:ec:0a:9d:ac:eb:04:4e:d5:e1: 1a:05:ff:50:73:b5:68:2f:b4:1f:fc:61:64:09:4f:9f:61:f5: c6:a9:a2:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUODG1ZcS37EcGLh+5I5vCvKa5QwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMzExMDMxREJBMTQ3MUE5N0YzMTgzNDE2MTYyNDMw RUE3ODQwNTAeFw0yNjA3MjQwMTMxMTFaFw0yNjA3MjUwNDUwMTFaMDMxMTAvBgNV BAMTKDgxNzdEQTAwRUVDQkNBRjYwQjI1QjVDQTYwRTc2N0Y1QTA2MUU4OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUPIVMoDxvwkzDHHBCnFOxQTRi EFyMsuvyLFfj9ub5BVQ4ONKUtfl41YLOZ6DnHbQRzg0oqxtu8JqpKSSD1FSi9C0L 0kPMMlmlJ9rHQEPTwWgAdHe+yDO63h51DZEbYeKpAWtWUypI5abFQOxeqs4fV2XS iX6kC7WkQsBluQvZCzOHBlY8pv2ftW8nNXjmQaDnpAK68Hk2JjenFFLEwS8shRpb aeKV9S4HHqlqtVa4umnY4S0zEiJZ7lgaORkYXF/LKFRrRsZcdqg4g3WpkWj+f5gM dwpe7nPJI2vPcIpyDPcEsAOY04x4lEFDy4/MhOHmEsilLv4xN74IeDYurhy7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgXfaAO7LyvYLJbXKYOdn9aBh6IowHwYDVR0j BBgwFoAUTgMRAx26FHGpfzGDQWFiQw6nhAUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E4YjU0ZTYtMTAxNS00OGViLTliYmQtNTFjMTZjZDQ1NDQ1LzAvNEUwMzExMDMx REJBMTQ3MUE5N0YzMTgzNDE2MTYyNDMwRUE3ODQwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTAzMTEwMzFEQkExNDcxQTk3RjMxODM0MTYxNjI0MzBFQTc4 NDA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvNEUwMzExMDMxREJBMTQ3MUE5N0YzMTgzNDE2MTYy NDMwRUE3ODQwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYqqC1tlX4LFG8c8XpX8QBbw5CYJCg9q/5X ecx8DayojtPrHILz5fCRU33F090En1XLNbnLDvWwP9+Z42EejqY8Rw/OG/xDT8Ol o1/znsKQ+zTsqEmKlF1l+/bxI+AFPHiY4hHrhhEWR1/JvGOVAPOhMbjLQfqQ1sNV setAit9TOkE1Jsb3LWhKETVJfljb0E26xx5isg78ggwr1/VkEl/3Fv1UwEHw6U7O T61kwq8D5viLY6lXWETSykko1xtlu/SQ//JtyNEQl5Brg5eMB9orK7IKe7EvOz5s Z4LiK7X6xewKnazrBE7V4RoF/1BztWgvtB/8YWQJT59h9capoms= -----END CERTIFICATE-----Generated at Fri Jul 24 08:27:56 2026 by rpki-client