$ rpki-client -vvf rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft File: E41C49050CBD3032F041D83A7A089A3E23CBE621.mft (raw, json) Hash identifier: D1z9MAmuSTpiBz9StRy3ECJSc3xceL0Wp4fcBXxOCYc= Subject key identifier: CC:C7:EB:64:B1:04:70:8E:12:E1:57:29:70:AA:FD:01:EA:91:9E:90 Authority key identifier: E4:1C:49:05:0C:BD:30:32:F0:41:D8:3A:7A:08:9A:3E:23:CB:E6:21 Certificate issuer: /CN=E41C49050CBD3032F041D83A7A089A3E23CBE621 Certificate serial: 0742DDD42D48BA467BF7B5107ECFBDEAEC623979 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E41C49050CBD3032F041D83A7A089A3E23CBE621.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 12:50:18 +0000 Manifest this update: Fri 24 Jul 2026 12:45:18 +0000 Manifest next update: Sat 25 Jul 2026 13:10:18 +0000 Files and hashes: 1: E41C49050CBD3032F041D83A7A089A3E23CBE621.crl (hash: fOiJAX17bGWWg4m6gGOHUHnKndS4ysOwQtmSxwuWhSs=) 2: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: Pn35/z/Opy4+bi+hOwdyJNg9JFN1Pwq8xx84oYEuYAc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.crl rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E41C49050CBD3032F041D83A7A089A3E23CBE621.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:42:dd:d4:2d:48:ba:46:7b:f7:b5:10:7e:cf:bd:ea:ec:62:39:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E41C49050CBD3032F041D83A7A089A3E23CBE621 Validity Not Before: Jul 24 12:45:18 2026 GMT Not After : Jul 25 13:10:18 2026 GMT Subject: CN=CCC7EB64B104708E12E1572970AAFD01EA919E90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:83:3a:27:b0:06:74:9c:d1:56:a5:e3:38: a2:2c:97:32:81:8a:ae:c1:e8:ce:c8:64:b9:f6:22: 50:5f:24:08:79:14:48:68:5e:07:bc:b5:ae:97:73: 3b:6e:cc:98:e9:2a:6c:4c:db:fd:12:49:83:df:65: bd:c5:15:e3:22:ea:88:fd:28:d4:65:d2:ee:b0:d9: ed:c1:fe:78:68:a1:eb:f1:fe:93:55:36:e5:8c:bb: 5d:a3:d4:39:5a:51:0e:c2:77:85:bc:d5:39:1b:7e: 77:29:53:ad:fb:7d:8b:31:57:9b:ac:37:87:ca:df: 1c:8d:e0:95:6e:f8:b8:cd:6d:29:fd:e7:0f:fa:8c: 2b:30:ce:7d:a9:e9:38:1e:ce:d9:e2:1e:07:74:b1: 55:b4:0e:a9:ae:27:1f:bc:87:45:cb:e3:76:db:e9: b0:0f:bf:ca:fb:87:bd:19:ca:9f:78:f6:e1:10:16: b1:9f:79:6d:f1:fb:19:e8:19:8e:cd:ab:08:f8:1c: f9:19:ff:4c:86:cc:69:3d:8f:4d:2e:e5:91:e3:16: 10:ef:43:04:5c:fb:09:52:bf:be:69:fb:6d:80:76: c1:f7:8d:66:99:1c:d9:d1:dc:8a:ad:ab:34:1f:a2: a1:c7:8c:bd:f8:56:be:4d:fa:f4:2e:bb:ac:63:24: 70:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C7:EB:64:B1:04:70:8E:12:E1:57:29:70:AA:FD:01:EA:91:9E:90 X509v3 Authority Key Identifier: keyid:E4:1C:49:05:0C:BD:30:32:F0:41:D8:3A:7A:08:9A:3E:23:CB:E6:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E41C49050CBD3032F041D83A7A089A3E23CBE621.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:48:1a:05:34:c5:03:93:44:75:66:58:8a:b1:e4:a3:55:5f: ad:4d:36:bc:45:d1:77:ef:e5:a9:17:23:e2:34:13:ff:5e:12: d1:9b:e0:0c:05:be:4e:88:ac:d8:72:27:07:48:ed:7b:79:40: 5d:6e:04:4b:07:1b:5c:54:e3:50:a3:a8:3c:fc:e7:56:ec:98: cb:fd:4e:f2:9c:33:14:ed:fc:ec:3c:10:8d:93:ee:55:0f:68: f2:ad:9e:07:ed:3c:fe:7c:6a:e0:76:6e:09:f1:25:29:37:92: e9:66:4a:5c:f6:d1:14:98:e8:f1:aa:34:a8:a8:f3:1f:9c:e1: fb:8d:0e:54:29:ec:b4:1c:7a:29:e9:f7:c0:88:cc:0d:5c:a6: d6:72:ca:35:2c:66:67:38:da:65:bd:8d:94:a6:3a:63:fb:14: d6:86:33:06:f7:3a:54:ef:5b:79:22:a1:8e:6e:4b:a9:60:ea: d9:6f:ea:94:3e:f8:1d:fe:ea:c6:9e:d2:40:dc:3a:6c:1f:fa: ba:67:14:f2:ce:b4:29:0e:b0:82:70:9b:1a:17:03:92:d5:5e: 03:47:0b:bb:d2:0a:23:a6:ef:07:db:0a:e0:71:a5:ba:73:eb: 6b:2e:f1:0c:59:bd:38:79:8c:61:48:f0:d6:91:16:05:ed:5f: d2:12:05:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB0Ld1C1IukZ797UQfs+96uxiOXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQxQzQ5MDUwQ0JEMzAzMkYwNDFEODNBN0EwODlBM0Uy M0NCRTYyMTAeFw0yNjA3MjQxMjQ1MThaFw0yNjA3MjUxMzEwMThaMDMxMTAvBgNV BAMTKENDQzdFQjY0QjEwNDcwOEUxMkUxNTcyOTcwQUFGRDAxRUE5MTlFOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7OoM6J7AGdJzRVqXjOKIslzKB iq7B6M7IZLn2IlBfJAh5FEhoXge8ta6XcztuzJjpKmxM2/0SSYPfZb3FFeMi6oj9 KNRl0u6w2e3B/nhooevx/pNVNuWMu12j1DlaUQ7Cd4W81TkbfncpU637fYsxV5us N4fK3xyN4JVu+LjNbSn95w/6jCswzn2p6TgeztniHgd0sVW0DqmuJx+8h0XL43bb 6bAPv8r7h70Zyp949uEQFrGfeW3x+xnoGY7Nqwj4HPkZ/0yGzGk9j00u5ZHjFhDv QwRc+wlSv75p+22AdsH3jWaZHNnR3IqtqzQfoqHHjL34Vr5N+vQuu6xjJHA5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzMfrZLEEcI4S4VcpcKr9AeqRnpAwHwYDVR0j BBgwFoAU5BxJBQy9MDLwQdg6egiaPiPL5iEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTc0ZDBiZjktY2M5YS00MmEzLTgzMGEtNzZmNmQzMmIyZjQ1LzAvRTQxQzQ5MDUw Q0JEMzAzMkYwNDFEODNBN0EwODlBM0UyM0NCRTYyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDFDNDkwNTBDQkQzMDMyRjA0MUQ4M0E3QTA4OUEzRTIzQ0JF NjIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvRTQxQzQ5MDUwQ0JEMzAzMkYwNDFEODNBN0EwODlB M0UyM0NCRTYyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtIGgU0xQOTRHVmWIqx5KNVX61NNrxF0Xfv 5akXI+I0E/9eEtGb4AwFvk6IrNhyJwdI7Xt5QF1uBEsHG1xU41CjqDz851bsmMv9 TvKcMxTt/Ow8EI2T7lUPaPKtngftPP58auB2bgnxJSk3kulmSlz20RSY6PGqNKio 8x+c4fuNDlQp7LQceinp98CIzA1cptZyyjUsZmc42mW9jZSmOmP7FNaGMwb3OlTv W3kioY5uS6lg6tlv6pQ++B3+6sae0kDcOmwf+rpnFPLOtCkOsIJwmxoXA5LVXgNH C7vSCiOm7wfbCuBxpbpz62su8QxZvTh5jGFI8NaRFgXtX9ISBdQ= -----END CERTIFICATE-----Generated at Fri Jul 24 15:08:14 2026 by rpki-client