$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft File: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft (raw, json) Hash identifier: bzx+SSrHIbi3BZQqMogamsO0C1ma5hV3i0q6q58rXOM= Subject key identifier: 10:EE:48:15:C3:59:C8:3C:22:21:3E:3A:D5:A5:7E:93:BC:4D:4F:C3 Authority key identifier: 4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 Certificate issuer: /CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Certificate serial: 468A3D12A71B891E5194E49FFAC782B476411F4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 00:47:08 +0000 Manifest this update: Wed 29 Jul 2026 00:42:08 +0000 Manifest next update: Thu 30 Jul 2026 02:02:08 +0000 Files and hashes: 1: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: fT4vbblEyZhxJwWJVYRrx1888tV3IqafJdFzwCoLzIU=) 2: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: 6pyTfAlzYTBLrXJyXEzbPma6QqEhBhRMnugG93bjYxI=) 3: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl (hash: zcrlDOZ6ed5n6rTAMlKLmH6RtY9EBdAcWIrhPDg3VaA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:8a:3d:12:a7:1b:89:1e:51:94:e4:9f:fa:c7:82:b4:76:41:1f:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Validity Not Before: Jul 29 00:42:08 2026 GMT Not After : Jul 30 02:02:08 2026 GMT Subject: CN=10EE4815C359C83C22213E3AD5A57E93BC4D4FC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e4:2f:d2:4a:aa:36:72:71:18:c1:d8:ae:91: 99:f6:73:e3:07:d4:bd:8c:81:34:b4:cd:5c:7d:1d: 7e:3f:68:ba:9d:78:b1:52:ce:7f:ed:9d:8a:66:53: 85:33:4e:42:50:c3:ea:38:0d:a7:61:fe:5b:29:02: 2d:10:c4:10:1b:e9:74:ce:76:4b:42:d3:a4:41:56: 20:89:aa:cd:6f:62:fe:78:34:f9:5f:f5:2f:79:34: be:86:56:22:7a:e7:3a:9e:c4:dc:45:1e:56:50:6c: 49:18:be:ca:67:f6:4a:5a:d5:d9:da:b3:d7:31:64: ff:cd:a3:aa:ee:14:08:9f:10:25:2e:35:d3:aa:c2: c2:33:d2:d6:de:53:2c:02:5d:a2:a0:c4:27:78:4a: 4d:06:72:f0:bc:c5:36:86:bd:0b:ac:e4:86:3d:b1: 20:fb:83:0e:47:ab:a1:13:c0:31:c0:2f:90:58:6f: 09:ab:c2:31:39:a7:5e:35:be:ad:c8:a7:4f:f5:fd: d3:1b:89:56:58:6a:78:f6:4d:e6:a5:4e:cd:65:ac: 2c:97:af:5e:c1:f4:9a:97:a3:ae:a9:e5:96:fc:74: b3:96:14:45:c4:cb:b4:e1:51:6e:1c:32:86:24:d9: 41:37:cc:18:5d:9e:69:9d:a0:3f:e8:68:91:3f:3e: ca:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EE:48:15:C3:59:C8:3C:22:21:3E:3A:D5:A5:7E:93:BC:4D:4F:C3 X509v3 Authority Key Identifier: keyid:4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d4:a2:e7:08:50:60:98:7b:01:5c:f7:74:44:26:f5:0a:65: 89:b9:73:a9:08:37:ed:22:41:bd:7d:0b:23:76:73:2a:85:1e: c7:3e:6d:1a:9d:5f:da:d9:b5:23:81:6b:02:3f:a8:12:40:8b: 73:46:22:f9:55:6a:83:10:e3:3b:87:8d:0b:05:53:07:67:00: 46:87:71:bb:3e:a3:a6:6f:72:b0:22:30:14:81:7a:02:8d:73: 09:da:9d:fd:af:4c:2a:85:50:51:cd:92:bd:a8:f5:8c:de:b5: c2:2b:85:e9:b0:8d:25:d3:aa:4c:e4:64:aa:49:dc:6e:26:12: 9c:98:39:77:54:3b:b8:d8:ae:2e:a3:0a:74:73:26:35:1f:76: 08:46:4f:09:1f:e9:62:e9:45:74:45:19:59:c0:dc:36:07:d6: fd:02:fb:6d:36:d6:03:c6:9c:33:5d:fc:8f:13:86:81:77:56: b1:64:72:26:d6:ee:af:08:d1:4a:e9:29:cd:28:f9:fa:7e:3c: c4:c3:97:ba:95:cb:6a:34:a6:6f:f0:c7:77:90:a7:00:95:54: 71:e0:ad:56:a1:34:93:00:f4:2a:fe:3d:a0:92:b9:42:37:e9: 27:07:75:12:14:62:8b:09:3c:d5:c9:99:ba:3d:80:fb:aa:29: 86:99:b5:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURoo9EqcbiR5RlOSf+seCtHZBH0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JCRTJE MEUwRDM5MTAeFw0yNjA3MjkwMDQyMDhaFw0yNjA3MzAwMjAyMDhaMDMxMTAvBgNV BAMTKDEwRUU0ODE1QzM1OUM4M0MyMjIxM0UzQUQ1QTU3RTkzQkM0RDRGQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN5C/SSqo2cnEYwdiukZn2c+MH 1L2MgTS0zVx9HX4/aLqdeLFSzn/tnYpmU4UzTkJQw+o4Dadh/lspAi0QxBAb6XTO dktC06RBViCJqs1vYv54NPlf9S95NL6GViJ65zqexNxFHlZQbEkYvspn9kpa1dna s9cxZP/No6ruFAifECUuNdOqwsIz0tbeUywCXaKgxCd4Sk0GcvC8xTaGvQus5IY9 sSD7gw5Hq6ETwDHAL5BYbwmrwjE5p141vq3Ip0/1/dMbiVZYanj2TealTs1lrCyX r17B9JqXo66p5Zb8dLOWFEXEy7ThUW4cMoYk2UE3zBhdnmmdoD/oaJE/PsojAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEO5IFcNZyDwiIT461aV+k7xNT8MwHwYDVR0j BBgwFoAUTUy+ZRqiIPkIjk27vJe74tDg05EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwN2UzZDgtOWJmYy00NDgzLWEyZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUx QUEyMjBGOTA4OEU0REJCQkM5N0JCRTJEMEUwRDM5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRDQkU2NTFBQTIyMEY5MDg4RTREQkJCQzk3QkJFMkQwRTBE MzkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy ZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JC RTJEMEUwRDM5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTUoucIUGCYewFc93REJvUKZYm5c6kIN+0i Qb19CyN2cyqFHsc+bRqdX9rZtSOBawI/qBJAi3NGIvlVaoMQ4zuHjQsFUwdnAEaH cbs+o6ZvcrAiMBSBegKNcwnanf2vTCqFUFHNkr2o9YzetcIrhemwjSXTqkzkZKpJ 3G4mEpyYOXdUO7jYri6jCnRzJjUfdghGTwkf6WLpRXRFGVnA3DYH1v0C+2021gPG nDNd/I8ThoF3VrFkcibW7q8I0UrpKc0o+fp+PMTDl7qVy2o0pm/wx3eQpwCVVHHg rVahNJMA9Cr+PaCSuUI36ScHdRIUYosJPNXJmbo9gPuqKYaZta0= -----END CERTIFICATE-----Generated at Wed Jul 29 04:07:49 2026 by rpki-client