$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft File: 4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft (raw, json) Hash identifier: M0vWXzgzS3AjDi0Sy2Fak+r1vnsk4IL9rI98v10Xn8Q= Subject key identifier: 28:87:6B:E6:2E:1A:F4:06:64:88:EB:4C:A7:07:4F:66:1B:42:91:A8 Authority key identifier: 4B:3B:54:F4:A1:20:3D:9D:F5:E8:09:42:28:C9:1F:C2:1F:F2:C5:C4 Certificate issuer: /CN=4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4 Certificate serial: 73E480E11ABB8DA1E60F2D1A65A0F64AE1CA2C12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:46:50 +0000 Manifest this update: Thu 23 Jul 2026 17:41:50 +0000 Manifest next update: Fri 24 Jul 2026 21:24:50 +0000 Files and hashes: 1: 323030313a6466343a343938303a3a2f34382d3438203d3e20313430343633.roa (hash: rk63OWefzg4vng4Tc3mM68t8dHw3/EWO+Sh3DRDdtqA=) 2: 4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl (hash: 88KGDn74XlMzeVOl9wfUz61ZBV/N5oiXIMTR1YPceyo=) 3: 3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (hash: esc3McyAl6hUlG4d1U+cxH9phLSFNKnapu2B7Ix2aTI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e4:80:e1:1a:bb:8d:a1:e6:0f:2d:1a:65:a0:f6:4a:e1:ca:2c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4 Validity Not Before: Jul 23 17:41:50 2026 GMT Not After : Jul 24 21:24:50 2026 GMT Subject: CN=28876BE62E1AF4066488EB4CA7074F661B4291A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:e4:cf:1c:3b:5c:3a:4b:3a:07:a7:e2:cd: 86:75:d9:62:4e:e7:1e:72:c2:d7:3f:5a:3e:0b:9d: 23:4a:66:6d:f8:21:9c:7e:44:4f:e5:24:e7:3d:58: 4b:fc:98:87:fe:f3:5b:0b:a3:51:d8:ca:74:87:de: d6:ac:7e:81:25:01:fa:ba:b9:f8:44:cf:65:80:98: 16:c3:5a:e5:d0:77:d4:ae:65:e9:76:74:bc:1e:93: 86:54:a6:9e:bc:f5:5c:61:0a:ba:85:dd:88:d1:2f: 0c:0a:1e:cc:75:38:29:f5:fe:2b:ba:13:a3:bc:2c: 07:83:12:df:74:d4:ae:7e:c3:5e:bf:c8:43:e8:a9: ba:e0:9f:01:4a:b9:fb:9b:1c:b1:1f:14:44:97:2d: ce:8e:2f:83:0a:67:ef:ff:30:88:0e:58:c6:63:3d: cf:7c:18:87:b2:38:3e:4a:29:07:d0:7f:07:2c:25: 27:c5:f8:cd:e6:9b:bc:3c:5f:8c:45:85:d9:06:48: 19:de:1f:22:01:f9:51:78:92:c1:69:47:7b:d2:c9: 71:6e:74:2a:cf:53:65:2a:af:00:23:47:88:a3:34: 04:89:1c:68:12:3d:3d:38:2c:9c:a7:f1:dc:f7:f2: e8:ce:ec:84:26:49:f8:76:9e:71:68:c7:00:51:fb: 03:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:87:6B:E6:2E:1A:F4:06:64:88:EB:4C:A7:07:4F:66:1B:42:91:A8 X509v3 Authority Key Identifier: keyid:4B:3B:54:F4:A1:20:3D:9D:F5:E8:09:42:28:C9:1F:C2:1F:F2:C5:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:be:0f:46:62:42:81:e7:48:bf:84:a5:a1:83:44:99:63:36: f9:ed:6f:0c:4e:ed:b2:f4:78:58:cf:7d:a8:2d:c4:cd:46:14: 08:95:b4:32:57:ba:e5:3d:4e:b2:50:fd:b7:de:af:f8:5d:c3: 1c:cf:1e:76:ae:f8:50:60:85:3b:22:83:47:44:37:0d:54:f2: 2a:00:a2:e0:17:73:50:21:1b:f8:fd:f0:5c:28:b9:88:40:fb: 43:c9:6f:da:78:58:6a:20:ce:91:c6:3a:9a:4a:f2:19:50:8b: bb:06:4c:8f:6d:e0:95:83:e2:ed:af:2d:18:f4:ba:25:c5:62: e7:c6:59:66:90:a4:fd:a4:06:b8:13:56:6c:d9:43:b4:75:0f: 71:a8:56:a6:63:df:92:21:c9:79:36:46:2b:18:5c:84:97:99: ec:7f:db:36:51:9f:9d:2e:dd:5d:af:36:22:31:9f:3a:22:c3: 0e:13:cb:0b:a9:af:4e:94:ae:d1:93:9e:d2:3c:fa:ea:ff:44: 87:bf:09:36:98:6d:22:6c:5f:b7:97:5e:17:91:e9:72:b4:fc: b5:46:35:fc:1a:86:9a:3c:e4:a8:54:51:8c:3d:4d:1d:2a:a0: a7:8b:cc:c2:dc:38:2c:59:e6:84:99:24:51:60:9d:8c:1e:99: 99:4a:b8:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+SA4Rq7jaHmDy0aZaD2SuHKLBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzQjU0RjRBMTIwM0Q5REY1RTgwOTQyMjhDOTFGQzIx RkYyQzVDNDAeFw0yNjA3MjMxNzQxNTBaFw0yNjA3MjQyMTI0NTBaMDMxMTAvBgNV BAMTKDI4ODc2QkU2MkUxQUY0MDY2NDg4RUI0Q0E3MDc0RjY2MUI0MjkxQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC97+TPHDtcOks6B6fizYZ12WJO 5x5ywtc/Wj4LnSNKZm34IZx+RE/lJOc9WEv8mIf+81sLo1HYynSH3tasfoElAfq6 ufhEz2WAmBbDWuXQd9SuZel2dLwek4ZUpp689VxhCrqF3YjRLwwKHsx1OCn1/iu6 E6O8LAeDEt901K5+w16/yEPoqbrgnwFKufubHLEfFESXLc6OL4MKZ+//MIgOWMZj Pc98GIeyOD5KKQfQfwcsJSfF+M3mm7w8X4xFhdkGSBneHyIB+VF4ksFpR3vSyXFu dCrPU2UqrwAjR4ijNASJHGgSPT04LJyn8dz38ujO7IQmSfh2nnFoxwBR+wPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKIdr5i4a9AZkiOtMpwdPZhtCkagwHwYDVR0j BBgwFoAUSztU9KEgPZ316AlCKMkfwh/yxcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWExZTBiZDctMjgxYS00ZWJhLWI5OGMtODI5MzkzMjdkZGQ3LzAvNEIzQjU0RjRB MTIwM0Q5REY1RTgwOTQyMjhDOTFGQzIxRkYyQzVDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QjNCNTRGNEExMjAzRDlERjVFODA5NDIyOEM5MUZDMjFGRjJD NUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWExZTBiZDctMjgxYS00ZWJhLWI5 OGMtODI5MzkzMjdkZGQ3LzAvNEIzQjU0RjRBMTIwM0Q5REY1RTgwOTQyMjhDOTFG QzIxRkYyQzVDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADG+D0ZiQoHnSL+EpaGDRJljNvntbwxO7bL0 eFjPfagtxM1GFAiVtDJXuuU9TrJQ/bfer/hdwxzPHnau+FBghTsig0dENw1U8ioA ouAXc1AhG/j98FwouYhA+0PJb9p4WGogzpHGOppK8hlQi7sGTI9t4JWD4u2vLRj0 uiXFYufGWWaQpP2kBrgTVmzZQ7R1D3GoVqZj35IhyXk2RisYXISXmex/2zZRn50u 3V2vNiIxnzoiww4Tywupr06UrtGTntI8+ur/RIe/CTaYbSJsX7eXXheR6XK0/LVG Nfwahpo85KhUUYw9TR0qoKeLzMLcOCxZ5oSZJFFgnYwemZlKuPU= -----END CERTIFICATE-----Generated at Fri Jul 24 13:20:28 2026 by rpki-client