$ rpki-client -vvf rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft File: 4D687A8309B055D62F3035664A59E96297B81009.mft (raw, json) Hash identifier: r6Wm9wiLFETyqP93lAn6XsFXxIZSk1HO5spI7JUAr6U= Subject key identifier: B5:16:C5:31:B8:FC:F4:6A:8F:BC:BA:F8:B2:A3:A8:D3:49:62:81:7D Authority key identifier: 4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 Certificate issuer: /CN=4D687A8309B055D62F3035664A59E96297B81009 Certificate serial: 685CD80646BE8611F772BB81F9F81626BF8672EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 03:15:01 +0000 Manifest this update: Wed 29 Jul 2026 03:10:01 +0000 Manifest next update: Thu 30 Jul 2026 04:34:01 +0000 Files and hashes: 1: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: qwKrohM8yd0iJN/MCZ42zzEDzwWYAIoaAZk2ayeImcw=) 2: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: tjAZ37II5WIJfFalAyrLUGpbSIz9sgJWYsOEq442hNI=) 3: 4D687A8309B055D62F3035664A59E96297B81009.crl (hash: rHk9fTtJ9uSjL2sYCVMRhaZv5wSpEZ1ItZL0EauSQOw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:5c:d8:06:46:be:86:11:f7:72:bb:81:f9:f8:16:26:bf:86:72:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D687A8309B055D62F3035664A59E96297B81009 Validity Not Before: Jul 29 03:10:01 2026 GMT Not After : Jul 30 04:34:01 2026 GMT Subject: CN=B516C531B8FCF46A8FBCBAF8B2A3A8D34962817D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:30:e3:f3:d7:5b:93:c4:18:6b:7d:7a:57:f1: 70:ac:b9:7a:80:70:71:e4:8c:92:df:12:b2:56:d1: f7:00:6c:a8:17:86:14:dc:dd:e0:d1:05:a1:12:5f: 75:7c:6a:50:c5:86:86:4e:e2:17:97:7e:c7:76:02: 4b:d6:ec:f2:33:f9:ff:81:30:35:0b:76:f8:d3:bb: 02:7b:24:56:00:37:9e:86:f4:82:37:9d:ac:0e:61: 55:4d:59:e5:11:01:13:77:a3:ca:d4:c9:6a:83:58: e5:c3:d1:8d:4b:01:22:bb:c2:a6:3b:5e:80:ee:6a: 8a:e1:c7:62:a5:c9:9e:80:81:5c:3e:c0:cc:18:43: 92:af:7b:1d:eb:56:f7:70:b1:9d:9e:7d:d8:81:9a: 92:e5:fa:96:dd:22:fc:6a:74:b5:32:1b:89:cb:e6: 30:01:bc:13:3b:8c:e8:7d:f9:0f:df:0b:bd:48:2d: 5e:cb:9e:fd:ec:35:cd:a6:19:12:e4:1e:d4:42:25: 05:3a:f6:2b:b9:6a:31:a2:87:5f:98:ad:6c:77:99: 62:08:e1:2d:82:6a:bb:82:ed:e8:4e:b5:51:ee:a7: 0f:15:92:31:2c:ba:c0:f3:6a:12:c1:9a:a3:e1:85: e4:f0:08:14:b1:7a:33:49:72:9b:82:3f:db:e6:28: 6a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:16:C5:31:B8:FC:F4:6A:8F:BC:BA:F8:B2:A3:A8:D3:49:62:81:7D X509v3 Authority Key Identifier: keyid:4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ec:1f:ff:7d:2a:87:a2:b6:d6:aa:2c:3f:34:21:cf:45:62: 36:4f:12:22:ab:5d:bb:7c:fd:22:f7:bc:53:df:9e:46:d6:16: cb:02:f5:eb:f9:5b:a1:58:bb:98:01:d4:a0:aa:92:ae:81:e9: 50:cd:e2:7b:50:01:cc:7a:c9:1c:2c:38:42:4e:e8:31:7d:93: 4f:e5:a9:c4:ec:44:0d:26:b6:85:47:91:62:8b:f9:6f:76:98: 04:ba:a1:b4:ec:c0:cf:a5:cd:35:64:d8:8b:47:82:fd:93:49: a3:4f:0f:a2:74:5a:65:41:22:cb:36:ea:37:5c:53:c7:27:bd: 32:73:2f:ee:2e:43:d3:38:b9:62:52:d7:11:f8:83:4a:7a:64: 84:e2:06:5a:33:35:91:27:fd:20:b3:57:3f:7e:c6:ab:00:1b: c0:b4:7f:45:97:13:f8:8a:a2:f3:e9:9f:e7:20:ad:21:81:2a: 54:e6:0d:33:95:1d:74:1b:7c:78:97:c1:a5:19:7e:0a:f2:6a: df:85:d2:c6:52:00:47:c0:60:08:c1:6a:03:10:44:1c:01:94: 1b:ec:6b:97:d3:16:da:5e:35:2c:bb:d3:d9:e2:b0:90:ab:6e: 89:58:15:28:cb:01:a2:fd:cf:57:09:12:e8:ba:e9:11:92:d3: 03:04:44:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaFzYBka+hhH3cruB+fgWJr+Gcu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5 N0I4MTAwOTAeFw0yNjA3MjkwMzEwMDFaFw0yNjA3MzAwNDM0MDFaMDMxMTAvBgNV BAMTKEI1MTZDNTMxQjhGQ0Y0NkE4RkJDQkFGOEIyQTNBOEQzNDk2MjgxN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeMOPz11uTxBhrfXpX8XCsuXqA cHHkjJLfErJW0fcAbKgXhhTc3eDRBaESX3V8alDFhoZO4heXfsd2AkvW7PIz+f+B MDULdvjTuwJ7JFYAN56G9II3nawOYVVNWeURARN3o8rUyWqDWOXD0Y1LASK7wqY7 XoDuaorhx2KlyZ6AgVw+wMwYQ5Kvex3rVvdwsZ2efdiBmpLl+pbdIvxqdLUyG4nL 5jABvBM7jOh9+Q/fC71ILV7Lnv3sNc2mGRLkHtRCJQU69iu5ajGih1+YrWx3mWII 4S2CaruC7ehOtVHupw8VkjEsusDzahLBmqPhheTwCBSxejNJcpuCP9vmKGrtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtRbFMbj89GqPvLr4sqOo00ligX0wHwYDVR0j BBgwFoAUTWh6gwmwVdYvMDVmSlnpYpe4EAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg5MTM4OTMtNWY2NC00YTVlLWE4ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMw OUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5N0I4MTAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80RDY4N0E4MzA5QjA1NUQ2MkYzMDM1NjY0QTU5RTk2Mjk3Qjgx MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5 NjI5N0I4MTAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTsH/99KoeittaqLD80Ic9FYjZPEiKrXbt8 /SL3vFPfnkbWFssC9ev5W6FYu5gB1KCqkq6B6VDN4ntQAcx6yRwsOEJO6DF9k0/l qcTsRA0mtoVHkWKL+W92mAS6obTswM+lzTVk2ItHgv2TSaNPD6J0WmVBIss26jdc U8cnvTJzL+4uQ9M4uWJS1xH4g0p6ZITiBlozNZEn/SCzVz9+xqsAG8C0f0WXE/iK ovPpn+cgrSGBKlTmDTOVHXQbfHiXwaUZfgryat+F0sZSAEfAYAjBagMQRBwBlBvs a5fTFtpeNSy709nisJCrbolYFSjLAaL9z1cJEui66RGS0wMERIg= -----END CERTIFICATE-----Generated at Wed Jul 29 07:55:31 2026 by rpki-client