$ rpki-client -vvf rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft File: B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft (raw, json) Hash identifier: gsZlfCNAuIOmUy+UnPU3IweQwSIh26FHl23NcXwruXI= Subject key identifier: A6:9E:B5:69:6A:B6:EF:E0:6E:65:1B:FF:FD:8F:0A:82:C2:D6:08:55 Authority key identifier: B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30 Certificate issuer: /CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230 Certificate serial: 3752A33185A3285F0E61D79B1C12ADD70DC450E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 01:48:22 +0000 Manifest this update: Wed 29 Jul 2026 01:43:22 +0000 Manifest next update: Thu 30 Jul 2026 03:27:22 +0000 Files and hashes: 1: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Gy6gsEzVMHwZHSwsQeHdnkzzEfB+MjqsZcuu2XFRbNQ=) 2: B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl (hash: mhy/mNcAtf3NkuQt/8r7kH+yIb5MFTRCzASJqCkHPTw=) 3: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: BKnEE3t5/yyaN3HJnwE9Dy+SO+1ms0WO08R6OxZOm7o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:52:a3:31:85:a3:28:5f:0e:61:d7:9b:1c:12:ad:d7:0d:c4:50:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230 Validity Not Before: Jul 29 01:43:22 2026 GMT Not After : Jul 30 03:27:22 2026 GMT Subject: CN=A69EB5696AB6EFE06E651BFFFD8F0A82C2D60855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0f:da:4e:ef:f8:ae:02:42:78:3c:c9:b4:6e: ca:1b:01:d7:e6:8e:96:a8:56:1b:73:e5:f8:3d:68: 33:63:e0:6e:4b:d1:39:bf:53:6f:0f:43:41:98:76: dc:ce:13:a4:38:46:bf:83:54:f7:0e:30:9b:2f:23: 31:b9:c2:b3:d1:ef:24:33:ec:f9:d8:55:5e:f1:35: 50:f3:92:18:70:dd:5d:f6:f8:c9:70:95:d7:d8:e6: da:98:44:82:55:78:bc:e9:8b:21:89:51:60:12:fa: aa:3b:5d:47:6f:e9:18:fd:04:e8:c6:6b:70:40:bb: 05:57:04:c9:6a:68:ef:54:70:0d:4e:77:82:96:22: 8c:5c:19:62:17:bc:c6:c4:70:c7:fe:37:76:1c:5c: 0b:70:17:ef:41:b0:14:66:9b:71:4b:89:bd:70:74: f6:2a:5b:2c:41:b7:7c:29:02:74:83:a1:0d:1f:b3: cc:55:58:50:f2:fb:e1:ea:fd:c3:e8:b5:6e:77:5d: 92:57:94:55:d8:bb:6e:15:32:0d:e6:dd:3f:2f:4e: e4:b4:a8:62:7f:b4:ef:42:c2:e6:16:a3:0b:1f:e0: 33:45:fa:31:1d:a7:b3:f5:b5:6e:20:88:22:3b:69: e4:6e:7b:db:d8:10:26:72:67:f7:e0:b3:b8:23:d0: f6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9E:B5:69:6A:B6:EF:E0:6E:65:1B:FF:FD:8F:0A:82:C2:D6:08:55 X509v3 Authority Key Identifier: keyid:B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:68:d8:a3:91:90:a4:40:7c:c3:71:ce:48:fb:80:ea:2f:b1: a8:99:55:b3:98:4b:88:79:2e:6d:e0:4b:d2:c0:84:50:1a:a1: 12:2f:b0:dc:80:91:0b:8f:1a:42:69:4b:f7:97:18:b3:92:84: 9b:e0:09:27:e6:13:da:8b:d4:f2:c3:bd:82:8a:33:bc:26:86: 36:41:33:ea:e6:17:c3:d8:44:33:e9:fb:be:20:e3:83:34:38: 77:dd:46:6f:e3:56:57:93:15:f0:fc:a0:8d:7e:47:95:5a:bf: d4:a0:7c:38:d6:dc:36:8d:be:2d:8e:03:3c:24:73:dd:5f:3e: 11:f3:73:28:9c:da:93:e8:ac:ab:95:07:b9:b8:28:4b:77:ac: 7b:13:6b:fa:0a:3e:27:06:ac:9b:56:0c:0f:b5:2c:9b:79:1d: db:44:5f:73:d9:0c:5b:b5:e9:4c:80:c8:49:72:7f:07:40:5e: 28:fa:87:3d:e4:fd:d4:6d:4d:55:a9:9d:0d:b9:62:54:a9:2d: 20:ea:71:a3:43:f0:14:73:b6:c4:87:fb:84:4a:d7:5e:7d:4c: 84:07:3d:aa:10:29:11:c1:b4:ac:ac:c0:2e:4d:ec:de:89:3a: d1:d0:9f:ca:df:52:16:cb:8d:5d:dc:c0:78:57:54:21:5b:d2: 3a:20:ea:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN1KjMYWjKF8OYdebHBKt1w3EUOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRDNkQwNjAzNzU4MkZEMEY3MjIzOUI3QUVEQ0JEMEYz MzQyRTIzMDAeFw0yNjA3MjkwMTQzMjJaFw0yNjA3MzAwMzI3MjJaMDMxMTAvBgNV BAMTKEE2OUVCNTY5NkFCNkVGRTA2RTY1MUJGRkZEOEYwQTgyQzJENjA4NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjD9pO7/iuAkJ4PMm0bsobAdfm jpaoVhtz5fg9aDNj4G5L0Tm/U28PQ0GYdtzOE6Q4Rr+DVPcOMJsvIzG5wrPR7yQz 7PnYVV7xNVDzkhhw3V32+MlwldfY5tqYRIJVeLzpiyGJUWAS+qo7XUdv6Rj9BOjG a3BAuwVXBMlqaO9UcA1Od4KWIoxcGWIXvMbEcMf+N3YcXAtwF+9BsBRmm3FLib1w dPYqWyxBt3wpAnSDoQ0fs8xVWFDy++Hq/cPotW53XZJXlFXYu24VMg3m3T8vTuS0 qGJ/tO9CwuYWowsf4DNF+jEdp7P1tW4giCI7aeRue9vYECZyZ/fgs7gj0Pb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpp61aWq27+BuZRv//Y8KgsLWCFUwHwYDVR0j BBgwFoAUtMbQYDdYL9D3Ijm3rty9DzNC4jAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzNjU1ZjEtMzhiNi00NDE1LThmYWYtMmI1YjkxNTNlNTJkLzAvQjRDNkQwNjAz NzU4MkZEMEY3MjIzOUI3QUVEQ0JEMEYzMzQyRTIzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNEM2RDA2MDM3NTgyRkQwRjcyMjM5QjdBRURDQkQwRjMzNDJF MjMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvQjRDNkQwNjAzNzU4MkZEMEY3MjIzOUI3QUVEQ0JE MEYzMzQyRTIzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJo2KORkKRAfMNxzkj7gOovsaiZVbOYS4h5 Lm3gS9LAhFAaoRIvsNyAkQuPGkJpS/eXGLOShJvgCSfmE9qL1PLDvYKKM7wmhjZB M+rmF8PYRDPp+74g44M0OHfdRm/jVleTFfD8oI1+R5Vav9SgfDjW3DaNvi2OAzwk c91fPhHzcyic2pPorKuVB7m4KEt3rHsTa/oKPicGrJtWDA+1LJt5HdtEX3PZDFu1 6UyAyElyfwdAXij6hz3k/dRtTVWpnQ25YlSpLSDqcaND8BRztsSH+4RK1159TIQH PaoQKRHBtKyswC5N7N6JOtHQn8rfUhbLjV3cwHhXVCFb0jog6nk= -----END CERTIFICATE-----Generated at Wed Jul 29 18:29:16 2026 by rpki-client