$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft File: 14649B106FA0C411D7FCD73A4B0147226E8A8454.mft (raw, json) Hash identifier: r+r+Vmrw4cJSVTZ+CLjUfQsZoCT1QilI+sUcl7E2q0w= Subject key identifier: D9:BF:63:44:EE:6E:94:FB:0D:B9:88:44:E3:B5:54:14:46:DB:AE:32 Authority key identifier: 14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54 Certificate issuer: /CN=14649B106FA0C411D7FCD73A4B0147226E8A8454 Certificate serial: 1B77D293963B620C8F8C71F22C74FC1B2784F91A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft Manifest number: 77 Signing time: Wed 29 Jul 2026 07:29:55 +0000 Manifest this update: Wed 29 Jul 2026 07:24:55 +0000 Manifest next update: Thu 30 Jul 2026 10:10:55 +0000 Files and hashes: 1: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (hash: O5MLHMcohhvApO1/L1RvpM2jYbsZVQ8eLBzNQkddTHQ=) 2: 14649B106FA0C411D7FCD73A4B0147226E8A8454.crl (hash: vMfwiB5G8E5R3Ys1P43+3+GCBXSAiUZoDtc9CZfMp70=) 3: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (hash: j+ssfk4JgFO6Pb/CGHEOZfos8czQhoSwZB6YERcUzUI=) 4: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (hash: HpCznd8LAemIm49TlwLV1GhAVKIU4sZ5BY+7TeR1EA4=) 5: 3130332e38392e3136342e302f32342d3234203d3e20313333383030.roa (hash: eR7s3iDJUbgwn7vG0iEll3YQrHiAYjHNsvD28zhjxXY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:77:d2:93:96:3b:62:0c:8f:8c:71:f2:2c:74:fc:1b:27:84:f9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14649B106FA0C411D7FCD73A4B0147226E8A8454 Validity Not Before: Jul 29 07:24:55 2026 GMT Not After : Jul 30 10:10:55 2026 GMT Subject: CN=D9BF6344EE6E94FB0DB98844E3B5541446DBAE32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2f:a8:f6:84:d3:a4:a5:46:3c:5f:99:a7:a2: 22:11:df:b1:bd:a9:99:99:82:e8:95:58:85:60:f5: ce:65:6a:9c:a7:2e:83:5d:f2:96:df:d2:a5:e8:77: d9:12:ca:01:16:fa:5d:77:22:97:eb:3a:93:60:c3: 04:78:d6:39:43:85:d1:d0:3a:53:40:67:56:42:1d: 1e:b0:ae:fe:3c:b5:3d:81:ce:52:9d:e8:e3:ed:b5: 5e:c4:9b:88:1c:22:d0:95:0b:24:50:43:8b:32:9f: a6:f6:09:31:ed:c6:30:e6:cb:b7:41:76:d7:01:34: ea:52:c7:53:a9:33:0c:38:d9:49:45:bc:87:47:56: 33:bc:aa:b9:33:fc:b7:15:25:85:45:0a:c9:66:fa: 1b:4f:24:71:90:da:e4:a1:68:a8:41:93:fa:5b:44: 71:d1:a8:ef:7e:ac:a1:05:71:40:a7:f6:9a:f6:75: b7:15:f2:17:86:47:58:c2:a0:7e:6a:63:c4:e7:fc: 85:7d:f2:27:39:a9:0a:05:1e:aa:2f:cf:84:d1:e3: ef:b6:87:47:6c:21:60:a1:9b:f6:17:64:b0:15:22: f3:46:49:2a:77:ed:de:00:5e:3d:5f:bc:6c:ad:f0: fc:ec:df:6d:cd:04:a5:f7:46:84:8a:d3:4f:99:38: 85:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BF:63:44:EE:6E:94:FB:0D:B9:88:44:E3:B5:54:14:46:DB:AE:32 X509v3 Authority Key Identifier: keyid:14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:78:b2:33:ea:35:6b:7b:2d:88:22:87:a6:48:80:a6:d3:c6: 81:fa:8a:18:6b:f5:ef:c8:84:3e:72:e9:f3:ae:08:92:90:89: a6:3b:02:3c:24:b7:34:f0:10:95:3b:ad:ee:f7:30:27:98:3a: 24:06:60:57:1a:a3:a0:bb:ec:b3:bc:e9:54:cb:3c:c8:c9:1d: b5:7f:77:71:35:49:44:42:ee:62:cd:1f:45:c4:9a:64:ce:36: 6f:aa:a8:48:8f:4d:13:f7:16:64:f7:27:13:56:39:99:22:94: ff:1f:25:e7:67:28:37:50:9a:6c:74:9b:e9:74:67:12:ff:56: 07:0f:18:14:76:a7:9c:59:df:6d:27:2a:3f:7d:cb:f0:ca:e0: 1c:25:ea:4c:a0:af:a3:12:bf:30:a7:50:8b:70:ba:ae:18:90: 34:fc:d9:eb:b7:64:d0:96:b3:5b:bf:68:61:af:70:51:32:b3: 83:28:59:f7:28:dc:ba:ad:89:28:5c:2a:b7:d4:bf:ca:ac:b7: d8:96:fd:1c:13:c8:82:2f:e7:05:8c:49:2f:4e:5c:83:e4:1a: ff:30:f1:12:72:3f:dc:5f:b7:16:96:6d:90:39:25:cf:e0:cf: f0:51:b0:77:82:50:f3:b0:17:b0:e1:01:1c:96:d3:3e:02:5e: 67:3c:46:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG3fSk5Y7YgyPjHHyLHT8GyeE+RowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2NDlCMTA2RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2 RThBODQ1NDAeFw0yNjA3MjkwNzI0NTVaFw0yNjA3MzAxMDEwNTVaMDMxMTAvBgNV BAMTKEQ5QkY2MzQ0RUU2RTk0RkIwREI5ODg0NEUzQjU1NDE0NDZEQkFFMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsL6j2hNOkpUY8X5mnoiIR37G9 qZmZguiVWIVg9c5lapynLoNd8pbf0qXod9kSygEW+l13IpfrOpNgwwR41jlDhdHQ OlNAZ1ZCHR6wrv48tT2BzlKd6OPttV7Em4gcItCVCyRQQ4syn6b2CTHtxjDmy7dB dtcBNOpSx1OpMww42UlFvIdHVjO8qrkz/LcVJYVFCslm+htPJHGQ2uShaKhBk/pb RHHRqO9+rKEFcUCn9pr2dbcV8heGR1jCoH5qY8Tn/IV98ic5qQoFHqovz4TR4++2 h0dsIWChm/YXZLAVIvNGSSp37d4AXj1fvGyt8Pzs323NBKX3RoSK00+ZOIX5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2b9jRO5ulPsNuYhE47VUFEbbrjIwHwYDVR0j BBgwFoAUFGSbEG+gxBHX/Nc6SwFHIm6KhFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQxNzZkZGQtYTk4MC00M2Q2LTk0YTctOTVlZWRhNTM5NjY1LzAvMTQ2NDlCMTA2 RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2RThBODQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDY0OUIxMDZGQTBDNDExRDdGQ0Q3M0E0QjAxNDcyMjZFOEE4 NDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQxNzZkZGQtYTk4MC00M2Q2LTk0 YTctOTVlZWRhNTM5NjY1LzAvMTQ2NDlCMTA2RkEwQzQxMUQ3RkNENzNBNEIwMTQ3 MjI2RThBODQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFd4sjPqNWt7LYgih6ZIgKbTxoH6ihhr9e/I hD5y6fOuCJKQiaY7AjwktzTwEJU7re73MCeYOiQGYFcao6C77LO86VTLPMjJHbV/ d3E1SURC7mLNH0XEmmTONm+qqEiPTRP3FmT3JxNWOZkilP8fJednKDdQmmx0m+l0 ZxL/VgcPGBR2p5xZ320nKj99y/DK4Bwl6kygr6MSvzCnUItwuq4YkDT82eu3ZNCW s1u/aGGvcFEys4MoWfco3LqtiShcKrfUv8qst9iW/RwTyIIv5wWMSS9OXIPkGv8w 8RJyP9xftxaWbZA5Jc/gz/BRsHeCUPOwF7DhARyW0z4CXmc8RrE= -----END CERTIFICATE-----Generated at Wed Jul 29 19:22:25 2026 by rpki-client