$ rpki-client -vvf rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft File: 4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft (raw, json) Hash identifier: 2KxMxUz+xJMfwMq+6A7nTSpu/rjt+tuAxN7PG9CvonU= Subject key identifier: AE:E0:AA:CA:CE:19:AB:FA:13:1E:B4:20:CD:AF:E3:C8:96:E7:DC:46 Authority key identifier: 4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15 Certificate issuer: /CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515 Certificate serial: 54B8020B193566A8289A4E48F68DAF732AE6074A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 16:01:23 +0000 Manifest this update: Tue 28 Jul 2026 15:56:23 +0000 Manifest next update: Wed 29 Jul 2026 19:12:23 +0000 Files and hashes: 1: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: NFMSe8jpXIOrJJynKVDw112aSae0hUPV8Ycnly1ty30=) 2: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: xBC6wC0qaSZA17wYqb5z2deY4tddRBLazqglI6ol9r0=) 3: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: j4hOV3opgjAagd+hKmonrIvCvECab8tS3BbyVP+3UsM=) 4: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: pqH7WpxtojGs6NyUT0vVoZIYUBKEAJzFb6PabPXpeUg=) 5: 4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl (hash: bsTkRdSXLkhpPhVQVz98rmWjJX5adzGOAa+2YgrARvo=) 6: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: kEQuuE3MZPluiYnypOmYBPYLGkYCAstrSIg304qTUMU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:b8:02:0b:19:35:66:a8:28:9a:4e:48:f6:8d:af:73:2a:e6:07:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515 Validity Not Before: Jul 28 15:56:23 2026 GMT Not After : Jul 29 19:12:23 2026 GMT Subject: CN=AEE0AACACE19ABFA131EB420CDAFE3C896E7DC46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:98:1a:b4:a4:96:11:08:a0:7e:50:04:17: 70:34:be:3c:d2:6d:20:12:f0:34:14:04:be:aa:36: e9:ea:11:cd:0c:2b:91:4a:4f:87:8a:3d:7c:51:5a: ad:23:7d:34:7c:f2:39:9e:39:86:b2:51:a0:b1:1c: 21:bb:b6:3c:ba:6e:ea:88:db:11:50:83:7a:47:26: 37:ab:40:b3:23:5b:a6:8b:f4:a3:12:ae:b4:b3:a4: 47:6c:bd:8d:89:5d:17:8e:13:62:35:28:1d:f0:78: 59:b0:0b:0f:74:84:11:62:a0:08:fc:28:01:e6:76: 75:3e:47:d3:c8:88:d5:02:cc:e0:fe:de:f6:7a:83: b5:9c:ef:f9:14:9c:bd:98:0e:02:8a:48:bf:a3:f3: a1:0a:a2:53:12:8b:f1:d2:e1:11:1e:ca:a6:f0:4d: 15:4f:40:d2:e4:e8:3d:d2:56:a6:e0:60:59:01:65: 5a:55:b6:1e:43:fe:91:bc:cf:86:f1:64:4e:ca:8c: db:73:2a:10:2c:0d:b8:b3:1d:1c:33:f5:3b:f6:01: c3:21:a2:ac:7b:87:8e:af:7c:a8:6f:19:67:98:59: c5:a5:2a:39:13:11:14:df:69:98:19:c3:f8:3a:27: d2:96:50:0d:37:10:a4:35:5e:79:b6:6f:cc:99:5a: 8a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E0:AA:CA:CE:19:AB:FA:13:1E:B4:20:CD:AF:E3:C8:96:E7:DC:46 X509v3 Authority Key Identifier: keyid:4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:82:53:c5:a6:86:1c:eb:1c:34:53:40:59:06:9b:a4:37:f9: 1c:d5:63:ec:05:5b:2e:4c:cf:33:dc:b9:4d:48:63:24:00:36: b5:bb:e6:fb:57:10:63:74:78:95:f3:23:c0:e0:7f:e1:28:01: b0:34:03:1b:72:a1:85:de:fa:d4:0e:c3:19:84:3e:b5:16:1f: ea:53:bd:f5:9d:e8:bd:3a:ae:c9:3b:40:04:22:70:3c:13:fb: 69:2a:20:95:3c:6d:62:36:d8:1e:1a:e5:ca:a5:e2:ef:38:e6: ae:e8:9b:19:78:a3:0e:67:bf:ae:22:8d:31:6e:e9:da:7b:25: 1a:70:d2:96:a3:86:20:c4:99:4b:ad:cc:03:c6:9d:83:c9:e0: 41:19:a6:eb:69:e8:20:e9:ec:bb:bc:20:5c:bf:78:39:43:c9: b9:63:58:c8:8e:86:81:39:9b:02:a5:6c:a6:81:06:91:2d:d0: 76:cc:e4:bd:d0:7e:6b:92:8c:91:cb:ee:0e:14:22:21:f0:7c: 9a:74:31:f2:36:cc:3c:91:40:0d:38:20:29:ef:61:5a:6f:f2: d8:e4:10:fc:1e:0e:4b:92:1f:5a:79:b6:cc:a5:f4:5a:50:9b: a7:05:10:d5:12:f2:0f:85:82:e1:31:02:53:74:0e:00:fb:9b: 11:d1:86:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVLgCCxk1Zqgomk5I9o2vcyrmB0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0QkY4NEU3RDZGMzlENjI3QkU1QjUwQTkxNzMxNURG RUJGMTUxNTAeFw0yNjA3MjgxNTU2MjNaFw0yNjA3MjkxOTEyMjNaMDMxMTAvBgNV BAMTKEFFRTBBQUNBQ0UxOUFCRkExMzFFQjQyMENEQUZFM0M4OTZFN0RDNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5fJgatKSWEQigflAEF3A0vjzS bSAS8DQUBL6qNunqEc0MK5FKT4eKPXxRWq0jfTR88jmeOYayUaCxHCG7tjy6buqI 2xFQg3pHJjerQLMjW6aL9KMSrrSzpEdsvY2JXReOE2I1KB3weFmwCw90hBFioAj8 KAHmdnU+R9PIiNUCzOD+3vZ6g7Wc7/kUnL2YDgKKSL+j86EKolMSi/HS4REeyqbw TRVPQNLk6D3SVqbgYFkBZVpVth5D/pG8z4bxZE7KjNtzKhAsDbizHRwz9Tv2AcMh oqx7h46vfKhvGWeYWcWlKjkTERTfaZgZw/g6J9KWUA03EKQ1Xnm2b8yZWopdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUruCqys4Zq/oTHrQgza/jyJbn3EYwHwYDVR0j BBgwFoAUTUv4Tn1vOdYnvltQqRcxXf6/FRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0ZTZiMmQtM2RkYi00NmViLTgzZWYtYzk5YjIwMDM3ODNmLzAvNEQ0QkY4NEU3 RDZGMzlENjI3QkU1QjUwQTkxNzMxNURGRUJGMTUxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRCRjg0RTdENkYzOUQ2MjdCRTVCNTBBOTE3MzE1REZFQkYx NTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz ZWYtYzk5YjIwMDM3ODNmLzAvNEQ0QkY4NEU3RDZGMzlENjI3QkU1QjUwQTkxNzMx NURGRUJGMTUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSCU8WmhhzrHDRTQFkGm6Q3+RzVY+wFWy5M zzPcuU1IYyQANrW75vtXEGN0eJXzI8Dgf+EoAbA0AxtyoYXe+tQOwxmEPrUWH+pT vfWd6L06rsk7QAQicDwT+2kqIJU8bWI22B4a5cql4u845q7omxl4ow5nv64ijTFu 6dp7JRpw0pajhiDEmUutzAPGnYPJ4EEZputp6CDp7Lu8IFy/eDlDybljWMiOhoE5 mwKlbKaBBpEt0HbM5L3QfmuSjJHL7g4UIiHwfJp0MfI2zDyRQA04ICnvYVpv8tjk EPweDkuSH1p5tsyl9FpQm6cFENUS8g+FguExAlN0DgD7mxHRhkY= -----END CERTIFICATE-----Generated at Wed Jul 29 07:19:25 2026 by rpki-client