$ rpki-client -vvf rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft File: 4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft (raw, json) Hash identifier: omI8stGmnD67UfdtyxDCsBxeEwrBE+kCWJ4unp4vEiE= Subject key identifier: 79:06:C4:49:86:5A:0C:56:99:F8:81:A1:90:36:ED:D9:4A:E7:68:73 Authority key identifier: 4B:B3:1C:C0:C0:64:3A:8E:F7:5F:54:B2:C3:50:B6:D9:E3:FD:4F:E4 Certificate issuer: /CN=4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4 Certificate serial: 69EA9493DDE8DC63AA2E2C69D8DADCED3030A110 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 16:45:26 +0000 Manifest this update: Thu 23 Jul 2026 16:40:26 +0000 Manifest next update: Fri 24 Jul 2026 19:03:26 +0000 Files and hashes: 1: 3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa (hash: epbts0iMFTrBEO83zvZ3MaXP2Z9y72tIdDCt87torNA=) 2: 4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl (hash: ap7M8SFBbnLMMI3xlfmFfLs4L2rFd8FIGStyG39PfjU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ea:94:93:dd:e8:dc:63:aa:2e:2c:69:d8:da:dc:ed:30:30:a1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4 Validity Not Before: Jul 23 16:40:26 2026 GMT Not After : Jul 24 19:03:26 2026 GMT Subject: CN=7906C449865A0C5699F881A19036EDD94AE76873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6f:e9:ae:de:0d:85:e9:2b:c5:9d:a9:f8:cd: 6f:f3:ef:78:81:3c:77:ff:81:60:f4:c6:13:59:25: 96:86:7a:ba:a4:de:13:ce:6c:ea:6d:f6:44:d9:9a: 65:36:bd:a2:4f:2d:63:57:40:f8:3e:15:77:ac:16: 17:a4:2f:78:cc:3f:ca:d9:44:75:01:f0:43:31:8e: a4:ac:ba:79:01:b4:36:b8:37:b6:4c:20:34:bd:23: e3:57:f6:0e:eb:c0:27:a7:45:26:66:12:ab:b6:12: ef:17:15:6f:60:e4:4e:6d:01:16:75:a8:79:9b:1a: 22:b1:14:4e:a1:72:76:bd:64:27:de:75:9e:62:7c: 89:9f:ca:65:15:5b:0a:e9:e2:3b:8f:0e:8f:f2:a5: 8b:84:43:29:87:fe:d9:8c:3b:54:ea:ee:ba:74:24: 65:ff:b2:81:69:72:d8:70:be:f6:ba:f6:45:78:f4: c6:54:6f:53:cd:03:12:13:ce:6e:1b:72:80:45:6f: 6d:de:5c:f9:41:9a:e1:9f:e2:10:2a:d8:ee:25:00: f3:6f:55:bb:9c:4b:d7:b6:97:76:87:67:83:aa:67: 22:18:b6:5f:16:a5:5c:84:3f:c2:3a:28:63:52:e5: 28:2b:63:06:9b:e2:27:63:9d:2f:54:76:56:58:e3: 45:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:06:C4:49:86:5A:0C:56:99:F8:81:A1:90:36:ED:D9:4A:E7:68:73 X509v3 Authority Key Identifier: keyid:4B:B3:1C:C0:C0:64:3A:8E:F7:5F:54:B2:C3:50:B6:D9:E3:FD:4F:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f0:97:35:e1:fb:40:67:82:cd:4d:a0:11:34:ba:ae:7d:8f: 06:18:99:70:44:95:f8:92:b4:45:3d:13:9b:42:99:6c:83:41: 76:1c:b9:e4:e2:a4:e9:fc:9c:4d:7b:7b:ad:10:58:4c:37:b0: c6:44:cd:53:9a:b7:4f:e5:6e:c3:e1:92:08:48:26:5f:d4:42: 74:5b:19:50:32:92:41:a4:b5:a7:82:43:5c:90:24:ac:4d:9c: a9:f1:e1:3c:d9:95:49:5a:cf:a3:a5:a3:2a:20:f5:a2:11:56: 23:f8:1f:9c:0d:4d:71:ce:50:8b:ac:a4:79:e4:f3:f6:4d:7a: cf:73:c6:a9:df:ef:66:f9:de:e1:59:43:48:02:41:18:6c:0e: f8:2d:26:5d:01:55:72:c7:ca:a9:4b:0f:d3:7f:41:61:f1:0a: 02:26:2e:c0:38:3c:14:08:b3:6e:c8:3f:16:95:6d:fd:35:5f: 1e:1d:28:65:c2:c1:44:8b:e7:01:04:ab:ff:d7:5c:ba:20:2c: cf:a9:54:2f:94:78:f8:64:de:7d:51:e6:9c:31:28:da:09:f3: 2a:66:3d:4c:0e:0a:3b:84:86:2a:47:be:94:d0:94:42:70:f7: b9:52:c6:bb:bf:82:9f:d4:ff:4c:5b:09:89:ae:52:62:ef:d4: ef:80:17:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaeqUk93o3GOqLixp2Nrc7TAwoRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJCMzFDQzBDMDY0M0E4RUY3NUY1NEIyQzM1MEI2RDlF M0ZENEZFNDAeFw0yNjA3MjMxNjQwMjZaFw0yNjA3MjQxOTAzMjZaMDMxMTAvBgNV BAMTKDc5MDZDNDQ5ODY1QTBDNTY5OUY4ODFBMTkwMzZFREQ5NEFFNzY4NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSb+mu3g2F6SvFnan4zW/z73iB PHf/gWD0xhNZJZaGerqk3hPObOpt9kTZmmU2vaJPLWNXQPg+FXesFhekL3jMP8rZ RHUB8EMxjqSsunkBtDa4N7ZMIDS9I+NX9g7rwCenRSZmEqu2Eu8XFW9g5E5tARZ1 qHmbGiKxFE6hcna9ZCfedZ5ifImfymUVWwrp4juPDo/ypYuEQymH/tmMO1Tq7rp0 JGX/soFpcthwvva69kV49MZUb1PNAxITzm4bcoBFb23eXPlBmuGf4hAq2O4lAPNv VbucS9e2l3aHZ4OqZyIYtl8WpVyEP8I6KGNS5SgrYwab4idjnS9UdlZY40UXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeQbESYZaDFaZ+IGhkDbt2UrnaHMwHwYDVR0j BBgwFoAUS7McwMBkOo73X1Syw1C22eP9T+QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTExYTNkNTYtYWM3NS00OTgxLTk3MjYtYzQ0MDIxNGM4MWVkLzAvNEJCMzFDQzBD MDY0M0E4RUY3NUY1NEIyQzM1MEI2RDlFM0ZENEZFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkIzMUNDMEMwNjQzQThFRjc1RjU0QjJDMzUwQjZEOUUzRkQ0 RkU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTExYTNkNTYtYWM3NS00OTgxLTk3 MjYtYzQ0MDIxNGM4MWVkLzAvNEJCMzFDQzBDMDY0M0E4RUY3NUY1NEIyQzM1MEI2 RDlFM0ZENEZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7wlzXh+0Bngs1NoBE0uq59jwYYmXBElfiS tEU9E5tCmWyDQXYcueTipOn8nE17e60QWEw3sMZEzVOat0/lbsPhkghIJl/UQnRb GVAykkGktaeCQ1yQJKxNnKnx4TzZlUlaz6Oloyog9aIRViP4H5wNTXHOUIuspHnk 8/ZNes9zxqnf72b53uFZQ0gCQRhsDvgtJl0BVXLHyqlLD9N/QWHxCgImLsA4PBQI s27IPxaVbf01Xx4dKGXCwUSL5wEEq//XXLogLM+pVC+UePhk3n1R5pwxKNoJ8ypm PUwOCjuEhipHvpTQlEJw97lSxru/gp/U/0xbCYmuUmLv1O+AF4I= -----END CERTIFICATE-----Generated at Fri Jul 24 06:31:09 2026 by rpki-client