$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft File: 4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft (raw, json) Hash identifier: i0cQ0upv102uh2NINi6dYt6zMZiXBD7E8yMTiaIc6dc= Subject key identifier: 0F:5D:68:C7:F8:C6:72:39:2C:30:A2:48:7B:52:2A:1D:5F:7B:59:2E Authority key identifier: 4A:E1:58:1E:C7:DF:E6:5F:5E:99:AA:61:34:75:D8:54:28:08:C4:6A Certificate issuer: /CN=4AE1581EC7DFE65F5E99AA613475D8542808C46A Certificate serial: 2D37F160466493BF162B06DAF9909451FD566F23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 23:28:28 +0000 Manifest this update: Thu 23 Jul 2026 23:23:28 +0000 Manifest next update: Sat 25 Jul 2026 01:25:28 +0000 Files and hashes: 1: 3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa (hash: Tkh0+XsPVTypniidThAuJHBFvt6qbkv8XEWtO3EZhzc=) 2: 4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl (hash: hHvlspHg7GbbUrhePYgA09G7nnTCqNb1RYPHtjcq3Go=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:37:f1:60:46:64:93:bf:16:2b:06:da:f9:90:94:51:fd:56:6f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AE1581EC7DFE65F5E99AA613475D8542808C46A Validity Not Before: Jul 23 23:23:28 2026 GMT Not After : Jul 25 01:25:28 2026 GMT Subject: CN=0F5D68C7F8C672392C30A2487B522A1D5F7B592E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:9d:21:6d:9f:7a:ac:11:67:7a:32:f1:29: 02:a2:f8:58:4f:a8:8f:ce:87:57:e7:e4:54:50:37: 7e:bf:d0:36:45:d7:d4:a1:ca:ca:7a:4f:80:2f:d1: 33:86:c7:fe:e6:3c:f7:b2:e2:02:b2:ff:f0:a4:6f: ac:59:14:8b:b2:9e:de:8a:18:1a:32:14:0f:dc:81: 73:e5:88:54:5e:65:90:5b:5f:d8:50:da:19:7a:5b: 48:00:2d:36:1d:57:59:4d:92:cc:47:d5:48:3e:2e: f6:f8:5a:bf:23:61:98:8a:32:f5:54:f3:c9:9b:51: cc:3c:54:66:21:d2:ca:88:ec:b1:3d:2b:3b:a5:dc: 27:d6:63:43:4b:43:f0:e0:70:3c:25:59:36:39:12: b8:0b:b7:25:60:5b:59:67:01:ab:17:31:d1:e6:2b: 2e:8b:b1:ad:f3:c8:01:8f:59:b1:71:a2:4e:c4:5c: d9:64:f8:8a:2f:f8:bb:3c:f2:52:c4:cd:50:df:37: 83:19:45:55:e2:0c:8e:ec:1a:54:fd:de:ad:b4:3d: e3:a4:ae:61:37:1e:42:37:50:e3:1c:6b:09:0f:28: f5:90:60:ec:f0:2f:5d:25:43:d1:c4:8d:56:19:5b: c7:07:81:a0:8c:dd:d1:03:84:4d:da:b7:8f:6a:dd: 6e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5D:68:C7:F8:C6:72:39:2C:30:A2:48:7B:52:2A:1D:5F:7B:59:2E X509v3 Authority Key Identifier: keyid:4A:E1:58:1E:C7:DF:E6:5F:5E:99:AA:61:34:75:D8:54:28:08:C4:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:e4:86:63:79:07:90:e5:bb:f0:cd:9e:07:00:e7:fc:28:ad: 92:37:d3:00:30:20:10:ed:81:36:3e:f0:95:64:7c:82:b7:81: e3:9d:1e:cb:c8:da:c5:f3:bf:95:cd:af:eb:47:9c:ff:69:d2: a9:27:49:09:1d:25:fa:5a:d3:cd:ac:8f:5e:a4:bc:98:14:e8: c0:3d:07:99:31:3d:e4:50:12:66:d9:d6:b7:74:96:77:a1:45: 45:6b:8c:15:f9:b1:30:12:49:4f:4b:7d:1e:6c:ac:d0:93:d6: c6:73:5a:3c:97:dd:3d:d3:ae:c0:5e:3b:f7:76:00:74:d8:0d: 7d:e8:28:d3:16:9a:3a:ef:05:75:e0:c8:c6:99:14:59:0d:02: 4e:6f:57:44:66:9b:6f:12:34:e2:96:ee:98:06:55:dd:49:cd: 86:c2:24:02:cc:79:f4:7a:88:bd:44:71:5c:df:fc:30:2d:ff: 84:34:7f:63:f7:49:4e:f1:8e:79:05:85:82:ba:da:da:6f:b7: f3:18:64:29:82:fb:44:2a:f2:65:35:3d:b6:55:5f:ad:4d:63: 3a:40:eb:0e:f2:1a:c8:10:1f:19:22:ce:d6:60:a3:bf:a6:c3: d5:34:23:10:e7:f9:2a:9a:e1:12:9c:66:59:ab:e6:38:93:89: e3:3f:fb:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULTfxYEZkk78WKwba+ZCUUf1WbyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFFMTU4MUVDN0RGRTY1RjVFOTlBQTYxMzQ3NUQ4NTQy ODA4QzQ2QTAeFw0yNjA3MjMyMzIzMjhaFw0yNjA3MjUwMTI1MjhaMDMxMTAvBgNV BAMTKDBGNUQ2OEM3RjhDNjcyMzkyQzMwQTI0ODdCNTIyQTFENUY3QjU5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs7Z0hbZ96rBFnejLxKQKi+FhP qI/Oh1fn5FRQN36/0DZF19Shysp6T4Av0TOGx/7mPPey4gKy//Ckb6xZFIuynt6K GBoyFA/cgXPliFReZZBbX9hQ2hl6W0gALTYdV1lNksxH1Ug+Lvb4Wr8jYZiKMvVU 88mbUcw8VGYh0sqI7LE9Kzul3CfWY0NLQ/DgcDwlWTY5ErgLtyVgW1lnAasXMdHm Ky6Lsa3zyAGPWbFxok7EXNlk+Iov+Ls88lLEzVDfN4MZRVXiDI7sGlT93q20PeOk rmE3HkI3UOMcawkPKPWQYOzwL10lQ9HEjVYZW8cHgaCM3dEDhE3at49q3W6zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD11ox/jGcjksMKJIe1IqHV97WS4wHwYDVR0j BBgwFoAUSuFYHsff5l9emaphNHXYVCgIxGowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThjZWQxOGQtYTdjYy00YjQ0LWFmNGEtODVmMzA0ZjllYjZjLzAvNEFFMTU4MUVD N0RGRTY1RjVFOTlBQTYxMzQ3NUQ4NTQyODA4QzQ2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QUUxNTgxRUM3REZFNjVGNUU5OUFBNjEzNDc1RDg1NDI4MDhD NDZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThjZWQxOGQtYTdjYy00YjQ0LWFm NGEtODVmMzA0ZjllYjZjLzAvNEFFMTU4MUVDN0RGRTY1RjVFOTlBQTYxMzQ3NUQ4 NTQyODA4QzQ2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXkhmN5B5Dlu/DNngcA5/worZI30wAwIBDt gTY+8JVkfIK3geOdHsvI2sXzv5XNr+tHnP9p0qknSQkdJfpa082sj16kvJgU6MA9 B5kxPeRQEmbZ1rd0lnehRUVrjBX5sTASSU9LfR5srNCT1sZzWjyX3T3TrsBeO/d2 AHTYDX3oKNMWmjrvBXXgyMaZFFkNAk5vV0Rmm28SNOKW7pgGVd1JzYbCJALMefR6 iL1EcVzf/DAt/4Q0f2P3SU7xjnkFhYK62tpvt/MYZCmC+0Qq8mU1PbZVX61NYzpA 6w7yGsgQHxkiztZgo7+mw9U0IxDn+Sqa4RKcZlmr5jiTieM/+0I= -----END CERTIFICATE-----Generated at Fri Jul 24 05:13:54 2026 by rpki-client