$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft File: 4DD4106B03003D9C5B51BF893631C8E467E07F65.mft (raw, json) Hash identifier: zYrwlmjBIYPLksc2qmsOT9s8AQ73FKjKAsBFo4LwON0= Subject key identifier: EC:AB:81:2E:0B:81:A3:EF:50:D3:15:F0:9C:EA:2B:E2:97:57:3B:3A Authority key identifier: 4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65 Certificate issuer: /CN=4DD4106B03003D9C5B51BF893631C8E467E07F65 Certificate serial: 425141AF396849456CD0A3B878181012802354BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 16:25:43 +0000 Manifest this update: Wed 29 Jul 2026 16:20:43 +0000 Manifest next update: Thu 30 Jul 2026 18:00:43 +0000 Files and hashes: 1: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: vt8DYAXcs1pDLyawi9vIroRmMQYzGKkbfW81Knq/qWg=) 2: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: 1g+y0imkE46p3egXComeqIG0umuFfgQzJzzyy2lkq6g=) 3: 4DD4106B03003D9C5B51BF893631C8E467E07F65.crl (hash: 85onpPQ1SlCUSv9rHF5KHkSQdCaLJLP2ETjnO6hJMN4=) 4: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: 8wp+UX0eKC57lngDUIgSZuJvHJ5tDAZofYJHo8cFmpA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 14:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:51:41:af:39:68:49:45:6c:d0:a3:b8:78:18:10:12:80:23:54:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD4106B03003D9C5B51BF893631C8E467E07F65 Validity Not Before: Jul 29 16:20:43 2026 GMT Not After : Jul 30 18:00:43 2026 GMT Subject: CN=ECAB812E0B81A3EF50D315F09CEA2BE297573B3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:da:ad:0b:e7:55:a1:47:44:07:93:1c:89:bc: bb:fb:fe:b6:7e:b9:bc:cc:6f:71:a3:83:85:0d:86: a3:c5:f1:cc:c3:2e:19:a5:64:1e:18:65:46:80:0b: 4e:34:e8:42:46:d6:2b:a6:37:9c:7d:47:5c:2f:4a: 52:b1:53:f3:cb:84:02:a3:e3:27:f2:2b:bb:cd:79: 99:8f:5d:2b:77:f3:43:c6:9c:62:9d:ec:7f:02:6c: ec:fc:66:32:0b:42:6a:f5:8d:34:b3:a6:59:f9:ec: 28:26:a5:09:86:06:80:3e:91:99:4e:7e:5a:1c:dc: 22:e6:4c:1d:65:9d:f8:08:90:d8:78:84:40:71:66: 66:02:19:5c:b3:66:56:d6:ac:43:2b:72:dd:ac:f4: bf:1b:4e:1c:4b:57:c4:b3:25:d9:71:34:25:7a:c2: 6d:78:b0:66:f4:6b:0e:f0:5e:b3:74:e8:0f:4f:40: 06:e7:75:38:5e:32:1e:fa:85:6b:00:9c:cd:a0:40: da:71:76:1d:44:f9:d6:5b:11:4c:79:34:4f:a5:cc: d2:83:65:b6:58:57:83:65:ef:8f:19:30:5e:f9:cf: 72:00:57:ed:e3:4e:93:c2:95:57:ae:3c:8d:fc:56: db:21:6b:fa:cb:93:00:8e:1d:19:18:49:7b:97:ff: 0c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AB:81:2E:0B:81:A3:EF:50:D3:15:F0:9C:EA:2B:E2:97:57:3B:3A X509v3 Authority Key Identifier: keyid:4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4b:97:ae:cd:73:65:12:3b:67:48:0c:f9:5b:b5:dc:b3:ac: 73:71:d6:16:65:41:a0:01:74:a0:51:23:e7:7a:f8:0b:2b:c8: 77:0d:e5:50:26:77:23:20:00:55:99:f8:7a:cd:99:49:e3:31: a6:58:b6:46:4a:90:cf:87:4d:ab:e5:ab:92:4d:19:f3:5f:ae: 4b:d9:f0:bf:52:b7:7f:80:6c:9d:ad:ec:ad:53:f5:9d:b2:02: f6:c6:51:96:0f:9b:aa:63:e2:d5:be:3a:16:f8:5f:ec:59:05: 65:67:84:de:02:fc:08:5c:3a:f9:dc:99:05:9f:59:d9:bc:f6: 65:48:46:01:da:d0:cc:d6:83:72:3e:d3:89:d8:53:1a:83:b3: ae:de:5b:8c:6b:7e:96:c4:d0:81:4d:d7:11:4d:a3:98:05:ca: bf:61:9e:87:6c:ff:3d:40:0e:14:13:ad:0a:1b:68:be:30:ff: c6:65:94:91:f7:a9:17:bb:3e:93:21:41:f7:6d:f2:4d:40:3a: 24:ae:19:a1:80:10:36:7d:7a:07:ec:cf:b9:2c:ba:de:47:ee: b3:1d:6f:82:f6:3c:1d:c5:b3:2a:00:92:6d:3e:7a:50:aa:bf: 87:17:de:f4:5b:b7:ea:12:fa:ac:d4:f4:4d:8f:92:52:4b:fd: 07:9f:48:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQlFBrzloSUVs0KO4eBgQEoAjVL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERENDEwNkIwMzAwM0Q5QzVCNTFCRjg5MzYzMUM4RTQ2 N0UwN0Y2NTAeFw0yNjA3MjkxNjIwNDNaFw0yNjA3MzAxODAwNDNaMDMxMTAvBgNV BAMTKEVDQUI4MTJFMEI4MUEzRUY1MEQzMTVGMDlDRUEyQkUyOTc1NzNCM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn2q0L51WhR0QHkxyJvLv7/rZ+ ubzMb3Gjg4UNhqPF8czDLhmlZB4YZUaAC0406EJG1iumN5x9R1wvSlKxU/PLhAKj 4yfyK7vNeZmPXSt380PGnGKd7H8CbOz8ZjILQmr1jTSzpln57CgmpQmGBoA+kZlO floc3CLmTB1lnfgIkNh4hEBxZmYCGVyzZlbWrEMrct2s9L8bThxLV8SzJdlxNCV6 wm14sGb0aw7wXrN06A9PQAbndTheMh76hWsAnM2gQNpxdh1E+dZbEUx5NE+lzNKD ZbZYV4Nl748ZMF75z3IAV+3jTpPClVeuPI38Vtsha/rLkwCOHRkYSXuX/wz/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7KuBLguBo+9Q0xXwnOor4pdXOzowHwYDVR0j BBgwFoAUTdQQawMAPZxbUb+JNjHI5Gfgf2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkZTkzNmItNTNjZi00YjA4LWI1ZjctMmI5MGRlMjFmZTk0LzAvNERENDEwNkIw MzAwM0Q5QzVCNTFCRjg5MzYzMUM4RTQ2N0UwN0Y2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REQ0MTA2QjAzMDAzRDlDNUI1MUJGODkzNjMxQzhFNDY3RTA3 RjY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvNERENDEwNkIwMzAwM0Q5QzVCNTFCRjg5MzYzMUM4 RTQ2N0UwN0Y2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxLl67Nc2USO2dIDPlbtdyzrHNx1hZlQaAB dKBRI+d6+AsryHcN5VAmdyMgAFWZ+HrNmUnjMaZYtkZKkM+HTavlq5JNGfNfrkvZ 8L9St3+AbJ2t7K1T9Z2yAvbGUZYPm6pj4tW+Ohb4X+xZBWVnhN4C/AhcOvncmQWf Wdm89mVIRgHa0MzWg3I+04nYUxqDs67eW4xrfpbE0IFN1xFNo5gFyr9hnods/z1A DhQTrQobaL4w/8ZllJH3qRe7PpMhQfdt8k1AOiSuGaGAEDZ9egfsz7ksut5H7rMd b4L2PB3FsyoAkm0+elCqv4cX3vRbt+oS+qzU9E2PklJL/QefSL4= -----END CERTIFICATE-----Generated at Wed Jul 29 17:30:13 2026 by rpki-client