$ rpki-client -vvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft File: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft (raw, json) Hash identifier: oEvZBzKlZuT6iMMWPs/ykQ2g0Kz8HmVeAutzB6GB7JI= Subject key identifier: E6:BD:CF:E0:DA:40:66:E5:C5:34:7A:21:DF:0D:56:4D:A5:7E:F7:26 Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 2D34EA1483B6C6E9BF90C2D546A8D7C832D421 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 17:33:27 +0000 Manifest this update: Tue 28 Jul 2026 17:28:27 +0000 Manifest next update: Wed 29 Jul 2026 20:06:27 +0000 Files and hashes: 1: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (hash: lcj9Lo8ozccThBUG7wqDK1apaR2k1E0ODhzzBgFVW1M=) 2: 323430313a626534303a3a2f33322d3438203d3e20313336383431.roa (hash: pUzTSX764GWtHHO9jcVOxnVCQQd9HOcC1kC/yiGkLr8=) 3: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl (hash: ksDtM+4KTuQAsISeG/9N8Q+SFEcvRPtPKq9DuC6txR4=) 4: 323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa (hash: Q+ngoFu885sNrsbrQRL3AeApBJ1Eb5cBUZ33V1u7hNU=) 5: 3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (hash: z5zbKQho3avhtYmaIotiPUiQQJ/mO8YtqexQXDW4gG0=) 6: 3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa (hash: 2ukK53+fe7S5M2zaDBH1WtDgIsIsj4+Dshs68GBh99o=) 7: 3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa (hash: 1SNuWHPKyjm9i33KVxLucA1qoW0DruITzpVEbkOYzp4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:34:ea:14:83:b6:c6:e9:bf:90:c2:d5:46:a8:d7:c8:32:d4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: Jul 28 17:28:27 2026 GMT Not After : Jul 29 20:06:27 2026 GMT Subject: CN=E6BDCFE0DA4066E5C5347A21DF0D564DA57EF726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d9:95:9b:4d:1a:b4:06:5b:6d:63:d2:18:6f: 5e:18:8e:71:bc:47:29:48:1d:99:05:07:0a:1a:28: 1f:36:ed:52:eb:90:44:d5:65:79:fb:c6:a8:b5:89: fe:c5:c8:7a:a2:47:e6:32:84:72:08:e1:8f:1a:a5: 5e:9b:01:25:70:16:5b:d4:88:f8:fb:28:f9:76:ce: e6:6f:7e:8a:fc:56:83:fb:00:8f:6a:8e:92:b6:04: 6f:3a:5a:57:e6:e5:d9:f7:d0:68:83:46:b1:ba:99: 95:18:84:65:13:a5:bb:a2:3f:6c:98:56:52:ff:14: 7a:7c:bb:82:fb:44:04:5a:f0:03:ac:9b:b1:e3:fe: 9e:4e:d3:05:ff:33:a2:be:4e:06:e6:73:10:49:3b: 0c:a6:2b:d1:c8:fd:0f:ac:52:0c:0d:6f:20:db:c7: 62:02:92:d8:4a:73:d3:64:c7:ce:2d:76:a7:5f:e3: fb:fb:d9:b9:87:43:ba:a1:b4:54:af:3a:73:37:d7: 54:08:63:3f:ea:34:90:c5:1e:9f:75:ea:84:ce:44: 8a:f8:52:e8:0d:e6:6a:0f:88:8e:b9:4b:9d:4b:ec: 68:cf:df:f3:50:80:93:f9:fe:2b:fe:5d:05:13:e7: 3b:c7:5e:63:c9:f1:15:b0:ac:b8:4c:6a:41:91:5c: 0d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BD:CF:E0:DA:40:66:E5:C5:34:7A:21:DF:0D:56:4D:A5:7E:F7:26 X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:46:be:36:10:24:3d:26:5b:68:f7:4c:da:9f:23:e0:39:45: 8c:ac:c5:73:3f:08:d6:a9:92:2a:e9:62:e4:8f:ae:d0:1c:25: de:b0:c4:00:65:64:bf:7d:98:0f:17:d6:1c:e0:05:6e:c2:71: d2:48:ef:12:b8:55:da:57:b8:8d:0b:40:00:d8:e1:bf:57:53: d4:39:b0:1a:22:3c:2c:69:92:3e:7e:4b:f1:3f:7c:ee:ca:37: 23:0f:a7:7a:86:9c:90:10:60:7b:75:ae:51:a8:26:8d:1b:17: 7a:94:6d:cb:9b:8f:96:2a:1d:c6:23:b2:52:7e:4c:8a:81:56: 74:4e:02:8a:b5:88:6a:a3:99:cb:06:d9:82:af:f7:8c:c6:8d: 51:50:a4:05:20:01:f9:b7:17:10:14:26:82:20:e3:a1:fc:ab: 84:02:e1:3f:f0:94:f7:f5:99:74:25:5e:df:24:ef:03:af:07: 20:6e:21:2f:ed:43:35:23:ff:89:99:c9:87:36:84:03:a7:0d: 9a:66:15:41:87:2d:07:65:c4:ca:fa:db:32:56:ec:ec:9b:52: a4:4a:6a:89:b8:ff:2b:a6:e8:a4:54:c6:09:92:b2:a8:b1:d9: a0:05:d8:75:95:14:f8:91:01:9a:30:ac:41:8c:70:91:c3:d2: 1c:46:be:33 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITLTTqFIO2xum/kMLVRqjXyDLUITANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg0REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1 N0Q1MjQ0MB4XDTI2MDcyODE3MjgyN1oXDTI2MDcyOTIwMDYyN1owMzExMC8GA1UE AxMoRTZCRENGRTBEQTQwNjZFNUM1MzQ3QTIxREYwRDU2NERBNTdFRjcyNjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMjZlZtNGrQGW21j0hhvXhiOcbxH KUgdmQUHChooHzbtUuuQRNVlefvGqLWJ/sXIeqJH5jKEcgjhjxqlXpsBJXAWW9SI +Pso+XbO5m9+ivxWg/sAj2qOkrYEbzpaV+bl2ffQaINGsbqZlRiEZROlu6I/bJhW Uv8Ueny7gvtEBFrwA6ybseP+nk7TBf8zor5OBuZzEEk7DKYr0cj9D6xSDA1vINvH YgKS2Epz02THzi12p1/j+/vZuYdDuqG0VK86czfXVAhjP+o0kMUen3XqhM5EivhS 6A3mag+IjrlLnUvsaM/f81CAk/n+K/5dBRPnO8deY8nxFbCsuExqQZFcDXkCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTmvc/g2kBm5cU0eiHfDVZNpX73JjAfBgNVHSME GDAWgBRNoR1a9fF65xZRn4SiY+Gl5X1SRDAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8w NzMwNGI4My0zMGFhLTRiYmYtOWZkNy0yZmNlYWRiZjAwMzAvMC80REExMUQ1QUY1 RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1MjQ0LmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzREQTExRDVBRjVGMTdBRTcxNjUxOUY4NEEyNjNFMUE1RTU3RDUy NDQuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wNzMwNGI4My0zMGFhLTRiYmYtOWZk Ny0yZmNlYWRiZjAwMzAvMC80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFB NUU1N0Q1MjQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAo0a+NhAkPSZbaPdM2p8j4DlFjKzFcz8I1qmS Kuli5I+u0Bwl3rDEAGVkv32YDxfWHOAFbsJx0kjvErhV2le4jQtAANjhv1dT1Dmw GiI8LGmSPn5L8T987so3Iw+neoackBBge3WuUagmjRsXepRty5uPliodxiOyUn5M ioFWdE4CirWIaqOZywbZgq/3jMaNUVCkBSAB+bcXEBQmgiDjofyrhALhP/CU9/WZ dCVe3yTvA68HIG4hL+1DNSP/iZnJhzaEA6cNmmYVQYctB2XEyvrbMlbs7JtSpEpq ibj/K6bopFTGCZKyqLHZoAXYdZUU+JEBmjCsQYxwkcPSHEa+Mw== -----END CERTIFICATE-----Generated at Wed Jul 29 11:12:29 2026 by rpki-client