$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft File: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft (raw, json) Hash identifier: 3pjMWUYUo+pIAHb4/vAxAgYOzzUqrbgLVqLocLZW5hU= Subject key identifier: 77:35:2E:F1:4B:45:2C:07:09:DB:C5:AB:8A:18:31:D2:31:DF:FC:A3 Authority key identifier: 64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 Certificate issuer: /CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Certificate serial: 44409C59B9A6E4AB6E4986C386F98EEED74E3B47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 18:29:39 +0000 Manifest this update: Tue 28 Jul 2026 18:24:39 +0000 Manifest next update: Wed 29 Jul 2026 22:02:39 +0000 Files and hashes: 1: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl (hash: vyjaR36OpZtJ7BHJIftoB6LvZfbiilP2A1WC01fC06A=) 2: 3130332e3136362e33362e302f32332d3234203d3e203137393935.roa (hash: lTZ01/fJUOFqaJRWKnNIALG7LB1k+HJpJA/DEXbiNSg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:40:9c:59:b9:a6:e4:ab:6e:49:86:c3:86:f9:8e:ee:d7:4e:3b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Validity Not Before: Jul 28 18:24:39 2026 GMT Not After : Jul 29 22:02:39 2026 GMT Subject: CN=77352EF14B452C0709DBC5AB8A1831D231DFFCA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6c:e6:d9:f6:11:fa:c2:7d:bb:e9:f8:ae:5c: 8c:45:1f:78:6e:2f:b2:18:06:7d:d2:3b:cb:8b:91: ae:3d:83:77:03:ff:3a:9f:55:e9:dc:63:c4:df:98: a6:79:29:49:2a:c7:95:91:bc:03:0f:45:40:1e:df: c7:fc:a7:8d:66:34:60:c9:d1:e4:02:05:82:de:c7: 38:03:73:a4:bf:48:90:b8:a5:87:bb:b5:7f:de:17: d6:f6:9a:b0:f7:91:12:fe:37:d3:39:be:c4:c7:5b: 2a:7c:13:9d:ee:de:ed:c9:33:81:f7:d4:80:e2:bf: 03:d7:69:19:63:85:7c:b6:87:c6:a6:1e:06:3b:79: 16:b5:dd:a9:86:ff:a6:1b:59:d5:d2:8a:33:1d:43: 7b:5a:ee:d0:d3:23:c8:ff:8d:ab:0c:71:be:15:2c: 38:cf:e5:4e:7f:51:a1:ed:92:43:96:a8:68:8c:38: ff:db:17:d4:f4:cb:db:83:2b:c5:15:b0:48:85:c3: 98:c2:06:cb:31:78:d2:db:50:16:c9:5a:76:98:bd: 0b:4b:d6:15:a3:d3:ef:28:88:e1:fa:a3:35:53:ab: d3:57:be:44:a8:f1:01:e4:40:2c:30:a0:35:ef:d5: 02:ff:2b:e6:3c:99:2c:36:6d:13:cf:cd:37:5d:ba: 43:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:35:2E:F1:4B:45:2C:07:09:DB:C5:AB:8A:18:31:D2:31:DF:FC:A3 X509v3 Authority Key Identifier: keyid:64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:0f:ad:46:18:90:66:c9:dc:13:16:9b:95:83:ca:2e:8e:6a: 53:54:44:0b:10:69:38:bf:fd:fd:e2:db:fc:ba:02:ed:02:3b: 34:a2:fa:74:d5:f1:6e:7e:42:15:ac:2c:3b:a3:4a:c8:22:77: a2:a9:ee:13:49:49:10:93:97:f6:1e:48:47:f8:fc:47:7a:79: c2:22:99:b8:d2:0f:24:d5:0d:18:ed:f7:c6:0e:e5:c7:62:d0: 38:0f:c3:d5:34:49:1b:7a:40:6f:99:58:88:a5:63:b3:af:4b: 45:8c:de:f8:e8:c2:fe:41:06:75:78:5e:78:78:b1:79:cf:c2: f8:ad:ae:f4:f6:12:33:d2:63:a0:32:e1:20:8d:10:ae:1b:b0: d3:7e:88:ab:da:25:25:e6:c9:41:e9:c3:a3:2a:46:5c:83:89: aa:b7:3f:a8:82:ac:00:66:c1:b2:3c:4e:32:9b:f7:35:b5:b5: ad:10:24:60:2a:8b:02:c4:18:a0:44:f6:6b:8e:24:bb:a7:87: 52:e3:c0:72:04:bc:05:4c:e5:20:42:8b:09:51:b3:70:42:9f: dd:91:6d:69:77:0b:7f:01:aa:8b:e7:ff:e3:4d:71:e9:b6:8e: 68:a8:5b:1d:69:ac:87:e7:c0:71:88:d8:e7:fd:8f:06:b7:1e: a7:d9:ad:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURECcWbmm5KtuSYbDhvmO7tdOO0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0RUFCRERGNzdBQUJBN0U5RjhCMkZBMzgyQUM1NUU1 RUU3NUY0NjAeFw0yNjA3MjgxODI0MzlaFw0yNjA3MjkyMjAyMzlaMDMxMTAvBgNV BAMTKDc3MzUyRUYxNEI0NTJDMDcwOURCQzVBQjhBMTgzMUQyMzFERkZDQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbbObZ9hH6wn276fiuXIxFH3hu L7IYBn3SO8uLka49g3cD/zqfVencY8TfmKZ5KUkqx5WRvAMPRUAe38f8p41mNGDJ 0eQCBYLexzgDc6S/SJC4pYe7tX/eF9b2mrD3kRL+N9M5vsTHWyp8E53u3u3JM4H3 1IDivwPXaRljhXy2h8amHgY7eRa13amG/6YbWdXSijMdQ3ta7tDTI8j/jasMcb4V LDjP5U5/UaHtkkOWqGiMOP/bF9T0y9uDK8UVsEiFw5jCBssxeNLbUBbJWnaYvQtL 1hWj0+8oiOH6ozVTq9NXvkSo8QHkQCwwoDXv1QL/K+Y8mSw2bRPPzTddukMBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdzUu8UtFLAcJ28Wrihgx0jHf/KMwHwYDVR0j BBgwFoAUZE6r3fd6q6fp+LL6OCrFXl7nX0YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY3OWE0MDItZGU1Yi00OWU1LWE2ZjUtZWVhYmFjMDg0ZjQxLzAvNjQ0RUFCRERG NzdBQUJBN0U5RjhCMkZBMzgyQUM1NUU1RUU3NUY0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDRFQUJEREY3N0FBQkE3RTlGOEIyRkEzODJBQzU1RTVFRTc1 RjQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY3OWE0MDItZGU1Yi00OWU1LWE2 ZjUtZWVhYmFjMDg0ZjQxLzAvNjQ0RUFCRERGNzdBQUJBN0U5RjhCMkZBMzgyQUM1 NUU1RUU3NUY0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMYPrUYYkGbJ3BMWm5WDyi6OalNURAsQaTi/ /f3i2/y6Au0COzSi+nTV8W5+QhWsLDujSsgid6Kp7hNJSRCTl/YeSEf4/Ed6ecIi mbjSDyTVDRjt98YO5cdi0DgPw9U0SRt6QG+ZWIilY7OvS0WM3vjowv5BBnV4Xnh4 sXnPwvitrvT2EjPSY6Ay4SCNEK4bsNN+iKvaJSXmyUHpw6MqRlyDiaq3P6iCrABm wbI8TjKb9zW1ta0QJGAqiwLEGKBE9muOJLunh1LjwHIEvAVM5SBCiwlRs3BCn92R bWl3C38Bqovn/+NNcem2jmioWx1prIfnwHGI2Of9jwa3HqfZrUY= -----END CERTIFICATE-----Generated at Wed Jul 29 09:15:47 2026 by rpki-client