$ rpki-client -vvf rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft File: 4BCE188DE42B539EBB860A376D13FE292B001147.mft (raw, json) Hash identifier: +SF46BbRAmp+hu+UeC1/+W/QeNYLw29IobdlkbgJJxI= Subject key identifier: 1F:93:84:04:B7:57:37:4F:10:DD:0B:A1:86:08:8C:8C:A1:99:53:AE Authority key identifier: 4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47 Certificate issuer: /CN=4BCE188DE42B539EBB860A376D13FE292B001147 Certificate serial: 7FCE2D0492053CF6EB66DE39D2B13E1016D8324B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 17:23:09 +0000 Manifest this update: Tue 28 Jul 2026 17:18:09 +0000 Manifest next update: Wed 29 Jul 2026 18:11:09 +0000 Files and hashes: 1: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: u8jjg+GiS9S6r5A4phLntvppacWIJllmMAB+9fmlXA0=) 2: 4BCE188DE42B539EBB860A376D13FE292B001147.crl (hash: yj5ZbLvZufTcCG2h9zofvWExcFniPd9QyEw52J+Mac4=) 3: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: /L4LgvuxEYbH0dgsif++d85ZiL7YhQs+ni89j41DhXM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ce:2d:04:92:05:3c:f6:eb:66:de:39:d2:b1:3e:10:16:d8:32:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BCE188DE42B539EBB860A376D13FE292B001147 Validity Not Before: Jul 28 17:18:09 2026 GMT Not After : Jul 29 18:11:09 2026 GMT Subject: CN=1F938404B757374F10DD0BA186088C8CA19953AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9f:6c:18:59:9e:e7:98:91:1a:7b:33:09:24: 3d:68:ce:d5:05:0d:c7:0c:3b:7c:09:76:13:a7:5f: c3:e6:fb:76:fe:74:61:05:85:17:be:12:59:a3:9b: a4:4d:05:41:05:f5:23:c1:3c:63:2d:c4:0a:c9:4a: 42:48:06:80:85:54:5e:11:b8:3d:12:40:82:af:b5: e9:67:d5:2d:ef:ce:b2:80:38:02:c1:ae:fa:00:b1: ad:2e:72:cc:72:da:75:fe:56:66:d6:52:37:de:1d: a3:c9:d6:35:cd:a7:ec:18:eb:c8:3b:16:d1:b5:cd: aa:22:dd:4f:3f:cf:09:f5:64:33:cd:d9:5c:0d:e7: e3:a2:67:e7:1b:a4:6f:a4:20:cf:a2:06:ad:e1:5a: d0:aa:ad:c8:af:db:2c:88:80:7d:97:49:0b:eb:ea: bc:55:96:d9:7d:20:d0:a1:53:8c:f5:1a:3e:f6:6d: b1:8d:67:ff:1b:d4:21:d9:51:7e:34:e2:94:5c:38: 6c:e9:dd:52:8b:41:3d:e1:ea:78:44:e3:35:c5:8c: 01:aa:eb:8a:4d:e2:d5:ba:37:1f:43:97:72:16:80: d7:f9:7c:84:36:47:89:7e:22:94:97:93:04:05:25: 93:c7:71:e5:f3:91:63:3e:da:84:3a:06:fe:39:a4: 7f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:93:84:04:B7:57:37:4F:10:DD:0B:A1:86:08:8C:8C:A1:99:53:AE X509v3 Authority Key Identifier: keyid:4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:56:94:e8:68:1d:13:b1:22:8d:f4:5d:a1:27:45:fc:3e:e2: 02:fc:39:59:5c:63:8c:71:20:06:7f:94:c3:e3:74:57:43:23: 58:f4:3a:d9:99:df:6a:29:8b:6c:dd:a9:82:d6:70:66:fd:f4: 6b:4f:f1:cd:a3:5e:b6:64:15:81:2e:0d:aa:49:20:82:dd:3f: f4:bd:c9:d5:25:82:38:35:0b:ea:c6:44:a4:dc:de:53:c7:e9: a8:81:97:7c:b5:42:4f:6a:15:fd:01:34:39:95:50:5d:8e:df: c8:0a:d7:e6:0f:7b:a0:03:a7:52:fa:fa:06:5c:00:e1:bd:90: 9f:23:38:59:eb:bf:e0:f7:1b:c1:08:1f:bb:9c:68:6a:19:2f: 8f:37:40:be:b8:41:5c:1a:29:09:bc:64:47:49:73:90:ff:95: 7e:94:0c:da:a5:61:01:f9:25:47:e0:88:69:a3:2e:a4:fd:72: 4a:1a:49:a3:8b:d1:13:0c:8d:93:d0:ce:3b:76:e5:f1:14:24: 99:89:08:63:db:90:87:3e:65:80:09:91:84:26:fa:d2:d4:8d: a4:37:8f:b0:29:a0:85:1c:77:c2:74:36:27:90:36:51:48:07: fc:98:e6:c8:4a:9c:ff:f0:6e:33:16:76:da:29:12:c1:06:51: 0c:5a:57:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf84tBJIFPPbrZt450rE+EBbYMkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDRTE4OERFNDJCNTM5RUJCODYwQTM3NkQxM0ZFMjky QjAwMTE0NzAeFw0yNjA3MjgxNzE4MDlaFw0yNjA3MjkxODExMDlaMDMxMTAvBgNV BAMTKDFGOTM4NDA0Qjc1NzM3NEYxMEREMEJBMTg2MDg4QzhDQTE5OTUzQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgn2wYWZ7nmJEaezMJJD1oztUF DccMO3wJdhOnX8Pm+3b+dGEFhRe+Elmjm6RNBUEF9SPBPGMtxArJSkJIBoCFVF4R uD0SQIKvteln1S3vzrKAOALBrvoAsa0ucsxy2nX+VmbWUjfeHaPJ1jXNp+wY68g7 FtG1zaoi3U8/zwn1ZDPN2VwN5+OiZ+cbpG+kIM+iBq3hWtCqrciv2yyIgH2XSQvr 6rxVltl9INChU4z1Gj72bbGNZ/8b1CHZUX404pRcOGzp3VKLQT3h6nhE4zXFjAGq 64pN4tW6Nx9Dl3IWgNf5fIQ2R4l+IpSXkwQFJZPHceXzkWM+2oQ6Bv45pH+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH5OEBLdXN08Q3QuhhgiMjKGZU64wHwYDVR0j BBgwFoAUS84YjeQrU567hgo3bRP+KSsAEUcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNjZDYwYjItMGY1Ny00ZmM1LWJjNjItMWQ5YjZjNDhmY2YwLzAvNEJDRTE4OERF NDJCNTM5RUJCODYwQTM3NkQxM0ZFMjkyQjAwMTE0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkNFMTg4REU0MkI1MzlFQkI4NjBBMzc2RDEzRkUyOTJCMDAx MTQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNjZDYwYjItMGY1Ny00ZmM1LWJj NjItMWQ5YjZjNDhmY2YwLzAvNEJDRTE4OERFNDJCNTM5RUJCODYwQTM3NkQxM0ZF MjkyQjAwMTE0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9WlOhoHROxIo30XaEnRfw+4gL8OVlcY4xx IAZ/lMPjdFdDI1j0OtmZ32opi2zdqYLWcGb99GtP8c2jXrZkFYEuDapJIILdP/S9 ydUlgjg1C+rGRKTc3lPH6aiBl3y1Qk9qFf0BNDmVUF2O38gK1+YPe6ADp1L6+gZc AOG9kJ8jOFnrv+D3G8EIH7ucaGoZL483QL64QVwaKQm8ZEdJc5D/lX6UDNqlYQH5 JUfgiGmjLqT9ckoaSaOL0RMMjZPQzjt25fEUJJmJCGPbkIc+ZYAJkYQm+tLUjaQ3 j7ApoIUcd8J0NieQNlFIB/yY5shKnP/wbjMWdtopEsEGUQxaV54= -----END CERTIFICATE-----Generated at Wed Jul 29 07:35:26 2026 by rpki-client