$ rpki-client -vvf rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft File: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft (raw, json) Hash identifier: ltKVQw5/fuGfY8ovrya+WZBrEBGsQPANaUNGJAofQzw= Subject key identifier: D2:4D:30:2E:20:49:20:AD:9D:CF:68:86:98:7F:E9:18:41:A2:1E:1B Authority key identifier: 4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 Certificate issuer: /CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Certificate serial: 02DCC78F0C940B27A1436F93968DE988958F4D72 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 13:52:34 +0000 Manifest this update: Wed 29 Jul 2026 13:47:34 +0000 Manifest next update: Thu 30 Jul 2026 16:16:34 +0000 Files and hashes: 1: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: 2oQBF0OAu+x3jbAGDBl7jZuo1w7C20ONHzk/GqcpbO8=) 2: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl (hash: AwSsKLNemT8TBjQiatb9Lat5uowD2f40iD488QZxFlU=) 3: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ZDLtfAp4S3OvopOek/8l4bhhMLZjILy0rUvNj5yf6Os=) 4: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: xFJ6YkI92aDNdIdb2cb47Lr1FqvCvQqQCoyTJtEq2Co=) 5: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: 3V56nSlss2prGjnCh8yc0uAcD+eYYddXTnS1OxpPoV0=) 6: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: 3oF8VGb692CsHNpL5bkpsSKeUmhwgndjMYRrWhUNaPo=) 7: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: Nzw87BQmmq5JXKfqP++4H/0NcBCIzysxSEpNOfcwqIA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 14:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:dc:c7:8f:0c:94:0b:27:a1:43:6f:93:96:8d:e9:88:95:8f:4d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Validity Not Before: Jul 29 13:47:34 2026 GMT Not After : Jul 30 16:16:34 2026 GMT Subject: CN=D24D302E204920AD9DCF6886987FE91841A21E1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:21:c8:11:10:75:9f:ed:63:61:62:0f:22:11: 9b:99:61:f8:ec:65:e3:f3:17:bd:cf:e7:f5:12:d6: fe:03:b4:85:6f:b5:25:8a:11:5c:4f:26:43:04:1f: ab:a1:32:5b:b0:36:27:af:3f:5d:db:8a:fd:e2:73: 0c:0f:cb:92:02:c3:0a:e0:99:ab:10:36:88:4c:4e: 7f:c6:a6:5d:cf:73:cb:2b:99:f8:cc:a6:07:9a:1a: 02:e0:d1:27:84:4f:ec:5b:6c:21:8a:b5:a2:bb:4e: b9:32:0b:31:68:64:26:2a:76:c2:51:27:b9:d0:ea: 28:67:e2:c6:31:32:91:c8:02:37:c1:e8:1a:66:d3: e2:09:1c:d4:1f:25:6b:e5:6e:3b:1d:2d:a8:5d:cc: 11:4e:0a:e4:d7:9b:40:45:12:0b:9e:c6:b5:d2:a2: b1:55:4e:e9:9e:a8:df:17:02:dd:6a:f5:94:37:cb: c6:78:bc:4a:46:3b:19:e5:06:59:ed:b9:95:18:e7: be:e6:1c:e1:81:d8:16:e0:3c:be:78:9f:bb:b7:dc: e5:e3:8d:3b:96:55:6c:55:f7:47:50:79:e7:6f:12: 89:72:dc:6c:69:0b:3a:22:47:2a:54:e0:51:4d:30: 23:ae:51:83:1c:34:b7:89:b4:4e:ec:05:22:55:9e: 9c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4D:30:2E:20:49:20:AD:9D:CF:68:86:98:7F:E9:18:41:A2:1E:1B X509v3 Authority Key Identifier: keyid:4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:14:bb:0f:df:58:90:39:b2:51:5f:2b:21:cb:c8:cb:56:31: 66:3a:23:6c:ed:22:47:4d:3f:0d:f2:82:b7:83:2e:9a:ef:ed: 32:34:84:39:1b:d6:44:07:9d:bf:98:ef:b9:f7:f6:1b:f4:5b: ac:0c:92:54:6b:ae:c3:f2:1b:b4:88:0c:d9:59:4d:b9:79:af: 60:87:57:19:4d:53:6b:cd:45:b1:d5:cd:b7:78:d4:c8:19:7c: b8:ba:59:85:51:e0:1f:a2:33:30:35:b2:58:ae:4c:19:44:90: 2e:4d:9e:d7:82:2d:aa:be:c6:d9:f3:9a:25:23:df:04:f9:8a: 37:58:6b:7f:28:0e:d0:95:44:0b:c5:dc:31:dc:3d:96:53:8b: 2c:91:0e:10:3b:ac:f1:e8:4e:ad:11:fc:32:e6:64:67:1c:60: 42:bd:43:31:cd:be:b5:9b:0f:61:e1:c3:7a:56:d2:31:21:76: 10:77:73:23:47:b1:be:d3:cc:c3:8a:35:93:89:6f:75:57:5c: 69:e1:fe:27:61:88:c2:66:e2:2c:d4:64:c7:6c:1c:ac:ed:21: f5:db:26:80:17:dd:5d:6e:03:48:98:1c:3d:ae:ab:e2:89:e4: f3:16:b0:09:e8:27:1d:52:9a:ad:df:69:80:be:03:90:09:4a: 32:26:f1:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAtzHjwyUCyehQ2+Tlo3piJWPTXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMx RjI3RTU4NDAeFw0yNjA3MjkxMzQ3MzRaFw0yNjA3MzAxNjE2MzRaMDMxMTAvBgNV BAMTKEQyNEQzMDJFMjA0OTIwQUQ5RENGNjg4Njk4N0ZFOTE4NDFBMjFFMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfIcgREHWf7WNhYg8iEZuZYfjs ZePzF73P5/US1v4DtIVvtSWKEVxPJkMEH6uhMluwNievP13biv3icwwPy5ICwwrg masQNohMTn/Gpl3Pc8srmfjMpgeaGgLg0SeET+xbbCGKtaK7TrkyCzFoZCYqdsJR J7nQ6ihn4sYxMpHIAjfB6Bpm0+IJHNQfJWvlbjsdLahdzBFOCuTXm0BFEguexrXS orFVTumeqN8XAt1q9ZQ3y8Z4vEpGOxnlBlntuZUY577mHOGB2BbgPL54n7u33OXj jTuWVWxV90dQeedvEoly3GxpCzoiRypU4FFNMCOuUYMcNLeJtE7sBSJVnpwBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0k0wLiBJIK2dz2iGmH/pGEGiHhswHwYDVR0j BBgwFoAUSsXcQXKq9DGWIvThwD/+Qx8n5YQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQwMTQzNmItMDI2Ny00NjZiLWEzNDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3 MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMxRjI3RTU4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUM1REM0MTcyQUFGNDMxOTYyMkY0RTFDMDNGRkU0MzFGMjdF NTg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQwMTQzNmItMDI2Ny00NjZiLWEz NDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZF NDMxRjI3RTU4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAUuw/fWJA5slFfKyHLyMtWMWY6I2ztIkdN Pw3ygreDLprv7TI0hDkb1kQHnb+Y77n39hv0W6wMklRrrsPyG7SIDNlZTbl5r2CH VxlNU2vNRbHVzbd41MgZfLi6WYVR4B+iMzA1sliuTBlEkC5NnteCLaq+xtnzmiUj 3wT5ijdYa38oDtCVRAvF3DHcPZZTiyyRDhA7rPHoTq0R/DLmZGccYEK9QzHNvrWb D2Hhw3pW0jEhdhB3cyNHsb7TzMOKNZOJb3VXXGnh/idhiMJm4izUZMdsHKztIfXb JoAX3V1uA0iYHD2uq+KJ5PMWsAnoJx1Smq3faYC+A5AJSjIm8Sk= -----END CERTIFICATE-----Generated at Wed Jul 29 15:46:01 2026 by rpki-client