$ rpki-client -vvf rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft File: 4FE0444622A2C111B372D11A38DAFE7648673D36.mft (raw, json) Hash identifier: LVBD2noi/11reNgXcQ7yAWsawUcj653o00+TY1SFLOA= Subject key identifier: 23:FA:AB:1A:6D:C7:17:DF:D5:7C:D6:62:51:40:EE:BD:08:E6:E0:9D Authority key identifier: 4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36 Certificate issuer: /CN=4FE0444622A2C111B372D11A38DAFE7648673D36 Certificate serial: 62D0E3201EBBD36C46EBFC05C7620FCCEB1391BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:16:12 +0000 Manifest this update: Thu 23 Jul 2026 13:11:12 +0000 Manifest next update: Fri 24 Jul 2026 13:20:12 +0000 Files and hashes: 1: 4FE0444622A2C111B372D11A38DAFE7648673D36.crl (hash: /53jDaNKTbeTExjMOBSjVGyM6bT6PSVAqiSX4gkyZmE=) 2: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: jwm0S2hFDX+dZX8vIrEhkY9/01RjPCQuv88vNZDWSb8=) 3: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: gRZjicumGEoblrElHZ58yAQf9cx0JwPN+oerGxN3DUY=) 4: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: KpYQSU+oal444FTCzAQqpO+RSPbHAZ+ta2JoMh51nbo=) 5: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: EeoonxSdNuxOduC2I/c7vz+iodDJX+FOusUJ8W+8sks=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.crl rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d0:e3:20:1e:bb:d3:6c:46:eb:fc:05:c7:62:0f:cc:eb:13:91:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FE0444622A2C111B372D11A38DAFE7648673D36 Validity Not Before: Jul 23 13:11:12 2026 GMT Not After : Jul 24 13:20:12 2026 GMT Subject: CN=23FAAB1A6DC717DFD57CD6625140EEBD08E6E09D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:10:70:60:0c:55:62:49:6f:e8:0f:37:27:8e: d8:50:12:6a:0b:fc:90:d4:9a:cf:90:3e:29:02:98: 05:96:7c:ac:d8:53:d5:a8:69:77:5a:a2:dd:5f:e4: 00:b4:49:ce:ef:7d:ce:4f:5e:54:dd:c6:9c:bf:3a: ce:06:91:44:9c:31:af:ec:9e:3f:be:c2:ce:c4:22: ac:44:08:62:bd:77:99:ee:62:75:36:22:65:51:bd: d5:21:ed:85:9a:e9:46:21:d9:d3:c4:47:5f:c7:9f: 65:44:96:8c:76:be:07:81:ed:a1:f9:aa:c4:48:b5: c9:c2:ca:dd:db:80:f3:90:a5:5a:07:fb:d2:d5:1f: 92:98:1e:4c:c5:45:1a:51:97:c1:94:3b:7a:e7:f0: ca:99:59:6c:1a:51:0c:80:58:a0:8a:57:60:69:0b: c7:78:5d:4b:fb:b0:1e:a0:da:77:4c:dc:35:78:2f: 9f:14:2a:af:4f:8e:c4:1a:9b:16:19:a6:37:90:0f: 52:c3:b5:fb:78:06:13:00:6c:a9:15:4c:8b:a7:28: 18:40:19:80:af:26:78:1e:eb:a3:74:e8:b5:2a:bc: a7:c2:a0:a7:70:3a:ae:28:fe:01:83:49:8d:8e:03: 3a:0a:36:0f:84:9c:17:aa:b5:08:73:23:0f:61:b2: 8b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FA:AB:1A:6D:C7:17:DF:D5:7C:D6:62:51:40:EE:BD:08:E6:E0:9D X509v3 Authority Key Identifier: keyid:4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:3c:2c:76:5c:91:98:3f:44:39:69:c7:3f:ae:54:c6:71:0b: fd:14:b8:b0:20:90:52:b7:fa:4b:bf:02:9c:10:d2:39:7e:5b: ff:a0:78:81:95:3a:8c:4a:d9:d4:f2:34:ae:23:43:b2:05:e5: 6b:7e:10:22:9d:de:28:06:72:57:33:2e:49:8a:be:98:5e:28: 75:70:57:3d:9c:f0:8d:83:99:27:c3:d4:7e:59:fb:51:7a:f1: 3a:9e:9e:07:d3:76:2b:a7:21:af:d0:0c:2f:c9:65:a6:fb:7d: 04:63:ad:99:57:0d:bf:ec:35:70:c8:51:7d:61:50:b3:8c:d8: 79:61:2f:37:70:62:0d:84:24:95:f0:9e:80:26:15:f5:c8:68: 4e:38:2f:06:c1:6e:03:96:cd:96:93:83:c4:9b:37:44:14:29: bc:33:e7:36:ec:16:9a:5a:25:f7:cc:74:59:af:7b:40:30:ae: db:9b:61:15:3a:35:26:73:b7:b9:1a:ba:59:aa:49:d1:03:68: 2f:4a:b3:3e:b1:8b:f6:a0:70:0d:6e:51:f2:ee:ca:f2:4c:65: 08:53:36:1f:f6:e1:f8:07:55:4a:d7:bc:c5:f8:10:7a:22:56: 52:80:88:bd:e0:18:d4:a6:14:33:cd:c2:be:96:e7:8e:c4:a4: c6:d2:44:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYtDjIB6702xG6/wFx2IPzOsTkbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZFMDQ0NDYyMkEyQzExMUIzNzJEMTFBMzhEQUZFNzY0 ODY3M0QzNjAeFw0yNjA3MjMxMzExMTJaFw0yNjA3MjQxMzIwMTJaMDMxMTAvBgNV BAMTKDIzRkFBQjFBNkRDNzE3REZENTdDRDY2MjUxNDBFRUJEMDhFNkUwOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5EHBgDFViSW/oDzcnjthQEmoL /JDUms+QPikCmAWWfKzYU9WoaXdaot1f5AC0Sc7vfc5PXlTdxpy/Os4GkUScMa/s nj++ws7EIqxECGK9d5nuYnU2ImVRvdUh7YWa6UYh2dPER1/Hn2VElox2vgeB7aH5 qsRItcnCyt3bgPOQpVoH+9LVH5KYHkzFRRpRl8GUO3rn8MqZWWwaUQyAWKCKV2Bp C8d4XUv7sB6g2ndM3DV4L58UKq9PjsQamxYZpjeQD1LDtft4BhMAbKkVTIunKBhA GYCvJnge66N06LUqvKfCoKdwOq4o/gGDSY2OAzoKNg+EnBeqtQhzIw9hsosHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI/qrGm3HF9/VfNZiUUDuvQjm4J0wHwYDVR0j BBgwFoAUT+BERiKiwRGzctEaONr+dkhnPTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTFmZDM1MWUtMmJkNy00MTkxLTkxMDYtNTNmODc1MDE2ZjBlLzAvNEZFMDQ0NDYy MkEyQzExMUIzNzJEMTFBMzhEQUZFNzY0ODY3M0QzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkUwNDQ0NjIyQTJDMTExQjM3MkQxMUEzOERBRkU3NjQ4Njcz RDM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvNEZFMDQ0NDYyMkEyQzExMUIzNzJEMTFBMzhEQUZF NzY0ODY3M0QzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIM8LHZckZg/RDlpxz+uVMZxC/0UuLAgkFK3 +ku/ApwQ0jl+W/+geIGVOoxK2dTyNK4jQ7IF5Wt+ECKd3igGclczLkmKvpheKHVw Vz2c8I2DmSfD1H5Z+1F68TqengfTdiunIa/QDC/JZab7fQRjrZlXDb/sNXDIUX1h ULOM2HlhLzdwYg2EJJXwnoAmFfXIaE44LwbBbgOWzZaTg8SbN0QUKbwz5zbsFppa JffMdFmve0AwrtubYRU6NSZzt7kaulmqSdEDaC9Ksz6xi/agcA1uUfLuyvJMZQhT Nh/24fgHVUrXvMX4EHoiVlKAiL3gGNSmFDPNwr6W547EpMbSRIs= -----END CERTIFICATE-----Generated at Fri Jul 24 02:37:54 2026 by rpki-client