$ rpki-client -vvf rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft File: 4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft (raw, json) Hash identifier: +J2tQBsg/pYMt8RYllXvUcAvYYcXE4v6jhTlby/6BEE= Subject key identifier: BC:94:74:BE:A0:99:35:03:60:2C:87:BF:21:5A:2C:E4:74:66:1F:B3 Authority key identifier: 41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5 Certificate issuer: /CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5 Certificate serial: 33AA0D1581E14B887E0C747C02F9D2C049623D4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 11:49:35 +0000 Manifest this update: Thu 23 Jul 2026 11:44:35 +0000 Manifest next update: Fri 24 Jul 2026 14:20:35 +0000 Files and hashes: 1: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (hash: ATgc6Id4lihO/sLAGAO1j7xGe/4awMhi2w1w0ztaLuU=) 2: 3130332e3231342e3233362e302f32342d3234203d3e20313335343339.roa (hash: dMqa0oYO4c22L7uxBboRe6E/5z9CmS2c9aynUToZXQs=) 3: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (hash: chcA0La2Ovm9yQOvdpAAt2EqYZMflbdwEaNV+8DJqdc=) 4: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (hash: t4tJtjdDpsJpFR/xtJD4ECgHePAHDWhC6e/Cj+1efek=) 5: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (hash: MIfS/eHMskBKSqBbwRfOeUTCESkdJmMT09TJQUGAcLg=) 6: 4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl (hash: xP8l46eKaFM9ddPZfN3wCmtQxMNU6r8pmlxpD0fgJAk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:aa:0d:15:81:e1:4b:88:7e:0c:74:7c:02:f9:d2:c0:49:62:3d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5 Validity Not Before: Jul 23 11:44:35 2026 GMT Not After : Jul 24 14:20:35 2026 GMT Subject: CN=BC9474BEA0993503602C87BF215A2CE474661FB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:5c:c5:20:db:d6:60:15:ba:af:dd:0b:28: 22:d4:80:82:0c:08:50:42:a5:ce:2b:46:4a:d7:bd: 61:2a:4d:f0:c2:91:28:39:67:9f:8d:b7:23:66:6d: 80:87:fd:5a:b9:02:b8:d3:0a:cb:fb:47:c4:25:33: cf:64:5a:e0:09:8e:b6:41:a4:a1:af:a1:96:f6:c7: e4:2a:6a:d1:58:95:0f:6b:63:bd:37:a6:8f:bb:de: 0d:c8:23:0a:22:c1:69:66:55:63:c6:e4:93:d1:3e: 64:b3:98:c6:34:4b:bc:50:16:d6:e1:a4:d7:d8:79: 93:e4:85:5b:ba:10:37:ec:d8:ad:3a:e0:f0:ae:92: bc:17:9e:32:4e:75:31:64:0a:ce:7b:4e:79:71:2f: 20:2d:e0:8d:53:1f:2f:aa:d2:08:9c:8e:47:f5:a9: b0:e0:f9:be:43:71:08:90:51:b3:f3:b9:02:5b:0e: 49:f3:7f:9c:e4:52:c7:13:98:7e:a4:54:b7:ac:d8: a1:08:db:e1:3c:50:e0:53:bd:b9:d8:02:ad:76:25: 41:e3:f1:07:df:3b:a1:68:18:ed:0e:4d:39:13:2b: 9f:06:c4:25:2c:0d:02:2c:45:63:de:0f:74:3e:55: 2a:e7:d3:c1:37:de:2e:3c:a8:c4:6b:4c:9a:97:b2: d0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:94:74:BE:A0:99:35:03:60:2C:87:BF:21:5A:2C:E4:74:66:1F:B3 X509v3 Authority Key Identifier: keyid:41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d7:00:d0:30:73:c4:1d:e5:e0:4d:5f:5d:b0:7a:ff:ea:b0: 9c:bc:20:a7:35:09:9c:10:03:a0:72:55:85:5e:17:4a:92:c3: 97:a7:c5:02:9e:e2:c1:b1:24:80:bb:df:5f:b7:20:c6:f3:7b: b7:98:de:04:c7:04:82:75:68:25:31:77:81:41:80:b3:4c:85: cc:1a:eb:05:78:2f:c5:35:a2:e7:cb:41:2f:b9:da:70:b2:1a: e2:68:f4:6f:bc:9c:2d:3c:ad:87:07:e9:da:8a:e5:76:1e:73: 0d:0a:bd:43:b7:77:5a:71:1a:67:dd:c9:1a:68:c9:cf:09:78: d1:9c:1f:83:a5:5b:59:af:e8:9b:48:88:8d:a6:d4:d0:d7:22: 8a:78:3a:15:1a:69:91:cf:81:c2:74:bd:88:44:2f:a7:58:5c: ea:27:f5:2d:50:9a:36:0e:c1:45:99:ee:fa:5d:9e:e9:2a:95: 43:bd:53:80:4e:53:63:e1:bf:93:a2:0f:12:52:08:76:56:4d: d1:fb:9b:8f:a9:c8:98:7f:26:42:ac:c9:91:51:bc:dc:56:0a: 4f:97:38:69:db:8b:d5:ee:ce:d3:33:66:97:a7:c7:35:e8:ce: 4a:e2:d1:68:35:c1:be:be:0e:71:f4:20:46:11:31:35:0f:27: 1c:ea:8c:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6oNFYHhS4h+DHR8AvnSwEliPU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEzOEUwQUQ0NjQ2RDhCNUIxOTE2NDgxMzEwNUUyRUM3 QzVBQzRBNTAeFw0yNjA3MjMxMTQ0MzVaFw0yNjA3MjQxNDIwMzVaMDMxMTAvBgNV BAMTKEJDOTQ3NEJFQTA5OTM1MDM2MDJDODdCRjIxNUEyQ0U0NzQ2NjFGQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hFzFINvWYBW6r90LKCLUgIIM CFBCpc4rRkrXvWEqTfDCkSg5Z5+NtyNmbYCH/Vq5ArjTCsv7R8QlM89kWuAJjrZB pKGvoZb2x+QqatFYlQ9rY703po+73g3IIwoiwWlmVWPG5JPRPmSzmMY0S7xQFtbh pNfYeZPkhVu6EDfs2K064PCukrwXnjJOdTFkCs57TnlxLyAt4I1THy+q0gicjkf1 qbDg+b5DcQiQUbPzuQJbDknzf5zkUscTmH6kVLes2KEI2+E8UOBTvbnYAq12JUHj 8QffO6FoGO0OTTkTK58GxCUsDQIsRWPeD3Q+VSrn08E33i48qMRrTJqXstCfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvJR0vqCZNQNgLIe/IVos5HRmH7MwHwYDVR0j BBgwFoAUQTjgrUZG2LWxkWSBMQXi7HxaxKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2RlNzE0MzctODVmYy00N2FmLTk2ODctOTAzYmFmYjJjMTYxLzAvNDEzOEUwQUQ0 NjQ2RDhCNUIxOTE2NDgxMzEwNUUyRUM3QzVBQzRBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTM4RTBBRDQ2NDZEOEI1QjE5MTY0ODEzMTA1RTJFQzdDNUFD NEE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2RlNzE0MzctODVmYy00N2FmLTk2 ODctOTAzYmFmYjJjMTYxLzAvNDEzOEUwQUQ0NjQ2RDhCNUIxOTE2NDgxMzEwNUUy RUM3QzVBQzRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfXANAwc8Qd5eBNX12wev/qsJy8IKc1CZwQ A6ByVYVeF0qSw5enxQKe4sGxJIC731+3IMbze7eY3gTHBIJ1aCUxd4FBgLNMhcwa 6wV4L8U1oufLQS+52nCyGuJo9G+8nC08rYcH6dqK5XYecw0KvUO3d1pxGmfdyRpo yc8JeNGcH4OlW1mv6JtIiI2m1NDXIop4OhUaaZHPgcJ0vYhEL6dYXOon9S1QmjYO wUWZ7vpdnukqlUO9U4BOU2Phv5OiDxJSCHZWTdH7m4+pyJh/JkKsyZFRvNxWCk+X OGnbi9XuztMzZpenxzXozkri0Wg1wb6+DnH0IEYRMTUPJxzqjC4= -----END CERTIFICATE-----Generated at Fri Jul 24 02:49:22 2026 by rpki-client