$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft File: 4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft (raw, json) Hash identifier: nxIRhKTHvP+lor6K9ipsowsWIZJ0467XnQHaxwuJwYg= Subject key identifier: 30:13:66:E2:13:48:23:C5:6C:73:AE:70:0A:5A:8C:96:12:3A:9D:45 Authority key identifier: 4F:C4:8D:D4:A0:4D:6F:39:93:1A:F1:E8:DE:E3:5A:BD:F9:C7:76:FA Certificate issuer: /CN=4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA Certificate serial: 56BBBD944BCCBF68F91395170623E880E3772BCF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 15:13:36 +0000 Manifest this update: Thu 23 Jul 2026 15:08:36 +0000 Manifest next update: Fri 24 Jul 2026 15:51:36 +0000 Files and hashes: 1: 4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl (hash: Y6FGkcPkylipT76wfTUj1ghehlTrOjSmeqrLWiRVTbQ=) 2: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (hash: H/rwQ/f8aUBtc58OK4kWZL1DduHZ4X5rHCUaLkdQAjM=) 3: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (hash: Y5XB9rqhcbsV9IQfUbYmWZisnqag3EEZWqXjsPcCSU4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:bb:bd:94:4b:cc:bf:68:f9:13:95:17:06:23:e8:80:e3:77:2b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA Validity Not Before: Jul 23 15:08:36 2026 GMT Not After : Jul 24 15:51:36 2026 GMT Subject: CN=301366E2134823C56C73AE700A5A8C96123A9D45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d9:84:23:e9:ff:14:33:a7:58:df:91:99:8e: 2f:12:5c:ee:dd:c2:ff:78:79:40:ef:58:5c:5d:d9: 7e:0a:46:52:4e:c9:41:c8:85:b9:f7:c1:54:93:bc: e0:ed:07:bf:5a:2d:a8:db:75:7a:bd:86:04:e6:ae: 5a:0a:75:6e:72:0b:cb:c8:e1:12:99:3c:5d:2e:89: f8:ee:32:e5:f8:1b:3e:54:7d:3b:b9:4d:e2:20:84: fe:3a:0e:f3:af:f6:d4:1a:5f:45:3c:2f:a8:5a:dc: 4c:88:30:84:cf:aa:de:8c:00:c5:22:47:b3:ad:fb: 33:13:14:27:d7:00:37:e2:aa:91:4b:5e:fd:16:9a: 93:76:b6:1d:4b:99:a9:aa:89:17:57:32:ea:e5:2e: a1:05:cb:e9:b8:c3:18:19:59:83:38:7d:9d:99:f0: aa:26:be:8a:dc:9e:67:4f:01:4c:b7:e6:4f:d8:bc: f7:18:58:9d:08:f2:cb:fa:0a:3c:18:35:8a:bb:96: b5:26:43:0d:97:4d:81:5f:e8:37:41:f4:eb:4f:ec: 72:b5:cd:e7:2f:e3:25:4d:c3:46:0d:79:ca:4e:2b: 94:f7:6c:16:0c:1f:a9:bd:2d:40:23:f2:c7:75:d5: e5:ae:b9:f3:85:43:a4:17:1d:a0:ce:6c:ae:f3:e4: 66:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:13:66:E2:13:48:23:C5:6C:73:AE:70:0A:5A:8C:96:12:3A:9D:45 X509v3 Authority Key Identifier: keyid:4F:C4:8D:D4:A0:4D:6F:39:93:1A:F1:E8:DE:E3:5A:BD:F9:C7:76:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e2:a6:ca:53:1f:25:19:6a:77:12:16:20:e8:48:f2:fb:48: d0:98:1d:20:e7:93:5d:4a:bd:15:99:ad:64:10:3a:34:be:12: ef:83:32:07:e3:8f:f7:a3:17:5a:60:30:35:9f:36:16:76:1f: 7e:27:16:09:c8:98:4b:fd:ef:2e:06:87:f2:19:b6:12:68:32: 18:0c:94:dc:1b:34:5a:08:b6:56:49:07:c2:9f:f4:6f:a8:4b: a9:6a:b1:67:31:e3:31:88:12:15:58:f3:da:74:22:05:ee:1d: 47:d3:76:0c:fa:ea:0b:d9:93:98:1a:6c:3b:b6:a2:be:ef:7a: 10:53:7f:c7:7a:97:cb:a0:bd:8c:bb:a9:de:22:6c:3f:6e:b9: 4e:d9:60:6c:16:b3:01:37:ff:5f:2c:61:fb:ce:09:81:0b:46: 6c:61:79:34:f2:c6:a1:6a:3c:94:00:41:b7:9c:a4:63:3e:24: 6b:ad:6f:5d:14:4f:bb:5f:08:52:07:2d:3a:4d:3d:f7:fb:4f: 72:05:e1:92:16:93:32:dc:ec:8d:ba:47:0b:42:39:52:62:6a: 1e:27:c3:ab:2a:7b:be:68:6e:ef:13:ab:5f:61:2f:b0:ff:83: 73:18:7a:10:86:35:f4:1b:9e:ba:d2:4a:1f:1f:1d:e5:ea:24: d1:e4:23:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVru9lEvMv2j5E5UXBiPogON3K88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDNDhERDRBMDRENkYzOTkzMUFGMUU4REVFMzVBQkRG OUM3NzZGQTAeFw0yNjA3MjMxNTA4MzZaFw0yNjA3MjQxNTUxMzZaMDMxMTAvBgNV BAMTKDMwMTM2NkUyMTM0ODIzQzU2QzczQUU3MDBBNUE4Qzk2MTIzQTlENDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb2YQj6f8UM6dY35GZji8SXO7d wv94eUDvWFxd2X4KRlJOyUHIhbn3wVSTvODtB79aLajbdXq9hgTmrloKdW5yC8vI 4RKZPF0uifjuMuX4Gz5UfTu5TeIghP46DvOv9tQaX0U8L6ha3EyIMITPqt6MAMUi R7Ot+zMTFCfXADfiqpFLXv0WmpN2th1LmamqiRdXMurlLqEFy+m4wxgZWYM4fZ2Z 8KomvorcnmdPAUy35k/YvPcYWJ0I8sv6CjwYNYq7lrUmQw2XTYFf6DdB9OtP7HK1 zecv4yVNw0YNecpOK5T3bBYMH6m9LUAj8sd11eWuufOFQ6QXHaDObK7z5GY9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMBNm4hNII8Vsc65wClqMlhI6nUUwHwYDVR0j BBgwFoAUT8SN1KBNbzmTGvHo3uNavfnHdvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2IwMWM5NjctOTlkMC00YzIxLTk2NDItODdhZGE2NzE1NWM4LzAvNEZDNDhERDRB MDRENkYzOTkzMUFGMUU4REVFMzVBQkRGOUM3NzZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkM0OERENEEwNEQ2RjM5OTMxQUYxRThERUUzNUFCREY5Qzc3 NkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2IwMWM5NjctOTlkMC00YzIxLTk2 NDItODdhZGE2NzE1NWM4LzAvNEZDNDhERDRBMDRENkYzOTkzMUFGMUU4REVFMzVB QkRGOUM3NzZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/ipspTHyUZancSFiDoSPL7SNCYHSDnk11K vRWZrWQQOjS+Eu+DMgfjj/ejF1pgMDWfNhZ2H34nFgnImEv97y4Gh/IZthJoMhgM lNwbNFoItlZJB8Kf9G+oS6lqsWcx4zGIEhVY89p0IgXuHUfTdgz66gvZk5gabDu2 or7vehBTf8d6l8ugvYy7qd4ibD9uuU7ZYGwWswE3/18sYfvOCYELRmxheTTyxqFq PJQAQbecpGM+JGutb10UT7tfCFIHLTpNPff7T3IF4ZIWkzLc7I26RwtCOVJiah4n w6sqe75obu8Tq19hL7D/g3MYehCGNfQbnrrSSh8fHeXqJNHkIyM= -----END CERTIFICATE-----Generated at Fri Jul 24 01:21:57 2026 by rpki-client