$ rpki-client -vvf rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft File: 04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft (raw, json) Hash identifier: DDqyxO8rN+pYnvpn8RB+kfdhNwYPsFqSca94SCqEqGw= Subject key identifier: 7D:FD:88:D0:7B:E2:4C:87:B2:FE:8D:F3:25:F1:FD:D1:E9:50:7C:65 Authority key identifier: 04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4 Certificate issuer: /CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4 Certificate serial: 1C13A593CC3FB354A852EF7024B7DB1F97DECBFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:00:41 +0000 Manifest this update: Thu 23 Jul 2026 16:55:41 +0000 Manifest next update: Fri 24 Jul 2026 20:08:41 +0000 Files and hashes: 1: 323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa (hash: 6uG8JEAg5YXu68O6z0VK1/htvcExMqCS4aozBNgJO50=) 2: 3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa (hash: BrjeraCPyUffk29JD70GjyNah0k3nj4heiQybdMxnEQ=) 3: 04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl (hash: 1qkUCTHT4gekAnYhzd7kcEHcS72N85zP/53XmpY6VE0=) 4: 323430363a343563303a3a2f33322d3332203d3e203634333030.roa (hash: 1M4q1NFllsSsvSfNvwTitiKk8jnGm1cKfR4Eial5H4E=) 5: 323430363a343563303a3a2f33332d3438203d3e203634333030.roa (hash: 0XuhY+T94wXhxTCvmTzUJVF+dBVIx5FGQo4RfqmReyU=) 6: 3130332e3135332e3134392e302f32342d3234203d3e203634333030.roa (hash: 5vV5ZfJoSxF8YdCtjpH1p1DLAYvEvLGC91Wktf8Mw9c=) 7: 3130332e3135332e3134382e302f32342d3234203d3e203634333030.roa (hash: dl9xVM2rxfLjhJqwGW0G8h/VTUN1oUgBuq0Qw5n8Lwg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:13:a5:93:cc:3f:b3:54:a8:52:ef:70:24:b7:db:1f:97:de:cb:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4 Validity Not Before: Jul 23 16:55:41 2026 GMT Not After : Jul 24 20:08:41 2026 GMT Subject: CN=7DFD88D07BE24C87B2FE8DF325F1FDD1E9507C65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f6:d2:d5:66:16:c1:c9:5f:fc:94:95:bc:21: 4d:5b:63:82:d0:78:1f:f3:a1:9a:6f:1c:09:60:b2: 76:5b:f2:91:e6:06:57:99:24:f8:63:67:02:b3:ec: 0b:7a:d7:d8:2c:0d:d7:3a:90:7b:31:54:2b:08:77: ad:47:65:dd:01:b3:42:0e:58:0c:a5:25:b6:3d:f7: 10:37:e7:fa:d0:e2:81:01:e3:87:85:8b:39:5e:ee: ce:c7:9e:55:27:51:fa:db:92:38:3d:b2:87:ae:ce: d5:60:d3:18:ad:f3:45:4c:d4:52:2a:df:a9:af:f1: b8:da:49:05:2c:52:03:b0:c3:60:fe:21:bf:b5:93: f5:07:32:77:bf:e3:86:96:e1:d5:7c:be:07:dd:6b: 47:df:51:a4:dd:f4:09:5f:2e:d0:59:74:1d:e7:be: 6a:68:f2:0e:eb:07:94:a4:87:dc:e7:37:c2:2e:9a: 00:52:80:25:32:e9:13:26:e8:ed:19:da:8f:49:b8: 02:10:d5:77:ef:ca:28:07:9d:22:aa:f5:61:63:d5: ff:4e:73:0f:b4:a1:14:59:f0:5a:1f:b2:6d:42:ca: ff:53:e6:82:92:77:5c:8e:38:00:54:7c:bb:df:1d: a9:3b:91:10:41:88:4d:2f:93:09:55:25:06:62:76: c1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FD:88:D0:7B:E2:4C:87:B2:FE:8D:F3:25:F1:FD:D1:E9:50:7C:65 X509v3 Authority Key Identifier: keyid:04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:32:99:eb:4d:4f:5e:81:32:f3:6f:c1:5d:84:67:62:f1:14: 86:51:a5:c3:44:54:d2:b7:ab:28:29:b3:57:2b:36:6e:49:8e: 89:c6:d0:d9:c7:0e:d3:28:1d:09:d5:12:14:ef:4f:4e:0f:a3: 11:74:85:58:22:56:21:37:9b:c7:dc:aa:0c:b6:50:d0:d1:23: 2c:e9:4a:fc:6d:61:d1:7b:4c:3f:ae:0b:5c:31:c7:39:68:4c: fd:74:4e:f7:0e:12:2b:81:51:a9:59:6b:a5:f6:30:77:09:ab: 9b:ba:c7:51:1f:07:f4:8b:f8:9a:4c:93:e5:3e:29:55:54:59: a9:cd:ef:ff:3d:26:64:c8:ee:7e:c7:21:7a:22:36:01:2a:f5: 60:f0:86:e1:6a:2e:83:3a:94:49:24:41:b3:da:88:03:10:63: a6:6a:9e:19:16:98:3d:74:73:36:65:ba:17:36:ba:6b:2e:62: b3:12:e1:0e:bb:9f:f4:1a:b3:9d:5b:9c:5e:c3:8a:31:17:3a: 40:57:23:12:d2:61:84:bb:8c:4b:96:ec:05:ff:57:23:78:04: d7:ae:9b:2f:d3:67:f4:b3:51:48:fc:0a:9a:f3:b3:78:3b:33: 97:02:60:4b:19:50:81:15:0d:39:65:bc:1e:2b:89:a9:6b:27: d7:c1:b6:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHBOlk8w/s1SoUu9wJLfbH5fey/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREQjQ3NTVDNzVBODMxQ0Q5MTgxN0U2QTlCN0U0RTFF RDJERjJENDAeFw0yNjA3MjMxNjU1NDFaFw0yNjA3MjQyMDA4NDFaMDMxMTAvBgNV BAMTKDdERkQ4OEQwN0JFMjRDODdCMkZFOERGMzI1RjFGREQxRTk1MDdDNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd9tLVZhbByV/8lJW8IU1bY4LQ eB/zoZpvHAlgsnZb8pHmBleZJPhjZwKz7At619gsDdc6kHsxVCsId61HZd0Bs0IO WAylJbY99xA35/rQ4oEB44eFizle7s7HnlUnUfrbkjg9soeuztVg0xit80VM1FIq 36mv8bjaSQUsUgOww2D+Ib+1k/UHMne/44aW4dV8vgfda0ffUaTd9AlfLtBZdB3n vmpo8g7rB5Skh9znN8IumgBSgCUy6RMm6O0Z2o9JuAIQ1XfvyigHnSKq9WFj1f9O cw+0oRRZ8Fofsm1Cyv9T5oKSd1yOOABUfLvfHak7kRBBiE0vkwlVJQZidsFNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUff2I0HviTIey/o3zJfH90elQfGUwHwYDVR0j BBgwFoAUBNtHVcdagxzZGBfmqbfk4e0t8tQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTQzMDRiNjQtMjg5OS00ODMwLTljM2MtMzc1ODRhMzI3ZTFlLzAvMDREQjQ3NTVD NzVBODMxQ0Q5MTgxN0U2QTlCN0U0RTFFRDJERjJENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNERCNDc1NUM3NUE4MzFDRDkxODE3RTZBOUI3RTRFMUVEMkRG MkQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQzMDRiNjQtMjg5OS00ODMwLTlj M2MtMzc1ODRhMzI3ZTFlLzAvMDREQjQ3NTVDNzVBODMxQ0Q5MTgxN0U2QTlCN0U0 RTFFRDJERjJENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0ymetNT16BMvNvwV2EZ2LxFIZRpcNEVNK3 qygps1crNm5JjonG0NnHDtMoHQnVEhTvT04PoxF0hVgiViE3m8fcqgy2UNDRIyzp SvxtYdF7TD+uC1wxxzloTP10TvcOEiuBUalZa6X2MHcJq5u6x1EfB/SL+JpMk+U+ KVVUWanN7/89JmTI7n7HIXoiNgEq9WDwhuFqLoM6lEkkQbPaiAMQY6ZqnhkWmD10 czZluhc2umsuYrMS4Q67n/Qas51bnF7DijEXOkBXIxLSYYS7jEuW7AX/VyN4BNeu my/TZ/SzUUj8Cprzs3g7M5cCYEsZUIEVDTllvB4rialrJ9fBtiE= -----END CERTIFICATE-----Generated at Fri Jul 24 03:52:14 2026 by rpki-client