$ rpki-client -vvf rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft File: 4BD77983D98742985400276FF0F5959696EA7807.mft (raw, json) Hash identifier: ja62J1akOcRSwB7KTzPyqvjfgtkFA3Uo3a3UQ3ZgnLk= Subject key identifier: CB:17:8D:F9:6F:A7:31:99:22:5A:48:84:AC:7B:4F:F6:60:02:8E:AC Authority key identifier: 4B:D7:79:83:D9:87:42:98:54:00:27:6F:F0:F5:95:96:96:EA:78:07 Certificate issuer: /CN=4BD77983D98742985400276FF0F5959696EA7807 Certificate serial: 15140C4A800D7E2F1ABBA1FEFAF7D62E1B5FC026 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 12:27:00 +0000 Manifest this update: Tue 28 Jul 2026 12:22:00 +0000 Manifest next update: Wed 29 Jul 2026 14:22:00 +0000 Files and hashes: 1: 4BD77983D98742985400276FF0F5959696EA7807.crl (hash: NkJ8uk/qXFTcCLWOMH6lVz3cwLbJYshHA1nrsb8VrUI=) 2: 3130332e35382e3130342e302f32322d3234203d3e20313333383334.roa (hash: 2ktJ+LGrBdyxqO+5Ni21bj0NM08xpyYMFhaaSWYusJY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.crl rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:14:0c:4a:80:0d:7e:2f:1a:bb:a1:fe:fa:f7:d6:2e:1b:5f:c0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD77983D98742985400276FF0F5959696EA7807 Validity Not Before: Jul 28 12:22:00 2026 GMT Not After : Jul 29 14:22:00 2026 GMT Subject: CN=CB178DF96FA73199225A4884AC7B4FF660028EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:75:03:ef:92:db:86:68:17:85:4b:f4:f4:d2: 9d:c7:7f:ee:f6:67:59:b9:26:8b:5a:be:79:4f:7f: c0:46:f2:1d:b0:09:7d:42:22:43:92:48:c7:f8:39: 2f:ea:c2:0b:cb:4a:53:24:23:3a:b8:5a:08:db:bf: 0f:4b:92:d2:bd:8c:c7:8a:e8:69:92:cf:26:25:dd: d0:ed:aa:b6:3b:75:94:4b:f4:a1:a7:b9:7d:32:7c: ab:a4:93:c9:0e:a5:f3:47:0c:60:87:53:7b:c2:00: 18:a5:72:8c:aa:ae:4c:74:1c:2e:e3:5a:c7:23:1a: ad:23:39:5d:ba:bd:83:40:ac:62:ca:0d:23:8f:d4: 2a:fb:99:a9:6a:c9:f3:9a:a9:71:d8:b9:e5:b7:c9: 9a:a4:f1:ed:01:fa:04:71:7a:66:14:6b:c8:3a:ab: a9:79:ae:00:a8:ba:a9:cf:f1:9a:bb:f0:b1:bb:9f: 10:a1:02:0b:ea:5f:03:af:9a:e7:8b:72:75:72:9a: 0c:81:5f:c9:5b:07:9b:c4:49:79:1b:6d:28:2c:d0: 37:69:dd:bb:d4:0f:11:b2:8d:64:c0:f7:2e:42:75: fa:91:3b:c9:bf:2a:40:cd:82:90:4b:e6:96:a4:f5: 17:cd:48:23:03:ad:23:5e:24:8c:9b:22:5b:9f:9d: eb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:17:8D:F9:6F:A7:31:99:22:5A:48:84:AC:7B:4F:F6:60:02:8E:AC X509v3 Authority Key Identifier: keyid:4B:D7:79:83:D9:87:42:98:54:00:27:6F:F0:F5:95:96:96:EA:78:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:85:9d:42:f5:e2:21:1e:71:59:5f:0e:b0:35:9c:db:8e:e9: 9c:a2:92:75:10:99:bd:6a:e6:ee:a4:ba:2f:ca:0a:d4:76:cf: 64:6b:a6:65:57:43:22:9a:69:78:da:1b:ed:25:af:f9:c9:4e: bf:5d:61:f1:30:42:fa:8c:fa:28:ac:01:5e:91:17:dd:96:c3: ac:b3:f2:cc:b4:56:35:d3:a4:c8:02:29:c9:5b:76:bf:9b:7d: 4c:1d:3e:e3:37:2e:ae:a4:1c:3b:ed:da:9d:ee:75:21:1e:41: a9:6a:99:91:bb:ea:3c:9f:52:ce:42:c2:72:26:82:db:aa:fd: 3a:10:ac:bf:bc:09:d3:ab:91:3b:6f:af:a0:da:6b:17:e9:a1: b8:83:75:18:e7:2c:ef:c3:01:2f:cb:13:90:bf:f7:26:fc:a0: b9:77:e9:b6:00:47:77:9c:9b:41:d2:76:c1:e0:d2:37:16:be: 43:4e:bd:5f:4a:d2:25:11:66:68:9c:d7:c7:60:17:16:1b:46: 8d:88:d8:fe:f3:a8:1c:b1:20:fb:b8:44:66:d8:e4:35:b7:07: 6c:20:fb:64:cf:b8:22:62:dc:ad:0e:d1:b4:1f:12:47:eb:d6: d8:95:86:01:70:fa:ea:0d:c7:e5:5a:bf:c7:8d:2d:a8:7b:27: 33:ae:a3:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFRQMSoANfi8au6H++vfWLhtfwCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJENzc5ODNEOTg3NDI5ODU0MDAyNzZGRjBGNTk1OTY5 NkVBNzgwNzAeFw0yNjA3MjgxMjIyMDBaFw0yNjA3MjkxNDIyMDBaMDMxMTAvBgNV BAMTKENCMTc4REY5NkZBNzMxOTkyMjVBNDg4NEFDN0I0RkY2NjAwMjhFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLdQPvktuGaBeFS/T00p3Hf+72 Z1m5JotavnlPf8BG8h2wCX1CIkOSSMf4OS/qwgvLSlMkIzq4Wgjbvw9LktK9jMeK 6GmSzyYl3dDtqrY7dZRL9KGnuX0yfKukk8kOpfNHDGCHU3vCABilcoyqrkx0HC7j WscjGq0jOV26vYNArGLKDSOP1Cr7malqyfOaqXHYueW3yZqk8e0B+gRxemYUa8g6 q6l5rgCouqnP8Zq78LG7nxChAgvqXwOvmueLcnVymgyBX8lbB5vESXkbbSgs0Ddp 3bvUDxGyjWTA9y5CdfqRO8m/KkDNgpBL5pak9RfNSCMDrSNeJIybIlufnetpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyxeN+W+nMZkiWkiErHtP9mACjqwwHwYDVR0j BBgwFoAUS9d5g9mHQphUACdv8PWVlpbqeAcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODcxYWRhOWUtZTJhOS00MDBlLThkZmYtOWJlNDgxYWJhNTgzLzAvNEJENzc5ODNE OTg3NDI5ODU0MDAyNzZGRjBGNTk1OTY5NkVBNzgwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkQ3Nzk4M0Q5ODc0Mjk4NTQwMDI3NkZGMEY1OTU5Njk2RUE3 ODA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODcxYWRhOWUtZTJhOS00MDBlLThk ZmYtOWJlNDgxYWJhNTgzLzAvNEJENzc5ODNEOTg3NDI5ODU0MDAyNzZGRjBGNTk1 OTY5NkVBNzgwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6FnUL14iEecVlfDrA1nNuO6ZyiknUQmb1q 5u6kui/KCtR2z2RrpmVXQyKaaXjaG+0lr/nJTr9dYfEwQvqM+iisAV6RF92Ww6yz 8sy0VjXTpMgCKclbdr+bfUwdPuM3Lq6kHDvt2p3udSEeQalqmZG76jyfUs5CwnIm gtuq/ToQrL+8CdOrkTtvr6DaaxfpobiDdRjnLO/DAS/LE5C/9yb8oLl36bYAR3ec m0HSdsHg0jcWvkNOvV9K0iURZmic18dgFxYbRo2I2P7zqByxIPu4RGbY5DW3B2wg +2TPuCJi3K0O0bQfEkfr1tiVhgFw+uoNx+Vav8eNLah7JzOuo0E= -----END CERTIFICATE-----Generated at Wed Jul 29 00:43:40 2026 by rpki-client