$ rpki-client -vvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft File: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft (raw, json) Hash identifier: Q/1pHKGUGnHgwWm3NCcbHR5SaK6ienpkZw7wV68CYW8= Subject key identifier: 58:62:83:2E:4F:5D:EB:84:08:6E:74:60:8F:AB:83:A9:D0:24:11:BC Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 Certificate issuer: /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Certificate serial: 1B04DD084437B1860D3969DD4C43EEF3D91AF6B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 12:01:38 +0000 Manifest this update: Tue 28 Jul 2026 11:56:38 +0000 Manifest next update: Wed 29 Jul 2026 14:51:38 +0000 Files and hashes: 1: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: FpwgktK1DQqLal+31qD50dL+9IE6iqH71YHo/zowge0=) 2: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: q58scCW7sBCYqA/7Gndz9LKwymI96P89Wvy+Agpx7Mc=) 3: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: G52CYZhUDrFCUCiXjLaytTYVhllqOW5hgj+MEiJQrDA=) 4: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: W25/R8+HpdSmi7KzPEgroFOQ480UBFrJ5yvQhWXeJXQ=) 5: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: F+gSAhyteOkmJD/CsnwawpfqMUKtHHVAzkHCqnUyAyI=) 6: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: g1I0bBx5cjAJOzumuYvYP7lbpo4MSyJWdm8CedSYPpI=) 7: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: 8L5+IN2jLctjeA6EMT3ij4Mxdk3Uel+Y6ekXcJbLdyM=) 8: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: IW6kFtW7lOTzfvLnRGitZxVOzbp+5ns5aGwVJLG1nQc=) 9: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: urgfoaYh1o6UsdX1mUmdbsm+CcX88/2KXBm9Z1HG15I=) 10: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: JSmaKD9Eb9InTbBwEjQnvpvNRxQcyoooyCEpIv/JUMs=) 11: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: 66aA75QUcB6PMDAVxPn0l4kedL6JSinUSrD/FjvLrOY=) 12: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: WalfT1mL5d9q2qz66c+NikOGnrlzK5PgkQomXo+2N10=) 13: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl (hash: gC08WVFJE9IMI27scIfq6WCmNscq2eyhgXIPRi3BhS8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:04:dd:08:44:37:b1:86:0d:39:69:dd:4c:43:ee:f3:d9:1a:f6:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Validity Not Before: Jul 28 11:56:38 2026 GMT Not After : Jul 29 14:51:38 2026 GMT Subject: CN=5862832E4F5DEB84086E74608FAB83A9D02411BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b1:5f:95:73:78:2e:61:2e:b3:0c:c9:6f:ba: 39:97:91:71:22:d7:ae:8b:95:64:52:d8:b3:58:18: c8:1a:74:78:98:fc:3b:3f:3f:0d:88:31:77:9f:68: c5:75:c0:c0:93:8a:fe:45:d3:86:7b:01:21:47:b9: ca:8c:e2:95:44:38:10:64:55:2d:a5:6a:e8:28:46: 60:bd:19:7a:3b:28:f7:e4:09:7c:aa:f5:d4:d4:07: 1c:96:9a:3b:0b:bf:93:a3:f3:ee:41:ce:40:53:14: ac:57:5f:0b:f6:6a:6d:90:3d:be:7b:33:19:dc:0a: a9:b6:c4:b1:75:4f:04:79:c5:31:cb:8e:6b:18:bd: 47:0e:a9:83:6f:5c:f8:99:04:91:49:3d:ef:2b:79: 27:b9:f5:f5:27:3d:0a:be:d4:f8:61:51:f8:8e:28: 9d:f5:cb:16:d5:f5:88:80:60:bf:07:86:52:df:5f: d5:ff:8d:ae:0a:58:ac:d9:b6:b0:6f:cc:ac:95:a5: 35:e5:0a:e1:9e:b6:9e:d9:8b:b9:f9:4f:3a:37:91: 3e:63:03:09:b8:4c:51:0a:f1:67:a8:71:3d:57:b3: b7:93:54:2b:e7:35:f9:0b:28:e2:61:52:51:c4:1a: 76:20:2e:ab:48:83:48:92:29:b1:ee:1a:20:59:a6: 8e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:62:83:2E:4F:5D:EB:84:08:6E:74:60:8F:AB:83:A9:D0:24:11:BC X509v3 Authority Key Identifier: keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:19:71:fa:02:73:c8:7c:f9:9e:d9:2f:46:9d:22:5a:53:02: a4:13:3e:48:c3:a9:84:34:73:82:6e:a9:47:ea:41:fe:6a:05: 09:61:23:6c:94:f4:86:77:8b:1f:ef:58:a9:6a:24:07:f9:9a: 2d:86:b3:11:83:bd:52:db:17:ca:c7:b9:d9:eb:2b:5d:ab:55: 46:26:e3:1f:12:d8:41:dd:45:4c:3a:66:ab:32:87:e0:5a:19: 16:29:77:77:b7:38:39:45:62:dc:87:17:7a:f2:62:f4:e3:64: 75:5c:03:ea:d6:06:e3:54:13:8a:b7:7f:dd:5e:9d:79:52:cd: ab:27:2f:79:e2:97:9b:4c:43:3f:86:3e:5a:4c:98:7f:6e:9e: 56:c5:a1:61:95:b0:74:91:58:8e:f5:7a:22:8e:3f:c6:16:4b: 2a:5e:92:30:5d:7e:09:83:5d:e2:c1:62:d8:cb:57:79:2a:b3: d7:b3:ff:4a:6b:19:b5:67:22:cc:11:df:79:0b:80:6e:d1:38: 0f:e5:06:8a:ac:b6:32:24:f8:b0:3d:13:72:55:bb:4e:e9:ae: 5b:71:82:22:47:f5:75:9f:01:2e:4e:55:26:00:77:16:9d:4a: a8:83:b1:7b:a4:c2:da:51:6f:19:48:82:93:09:8c:7f:1d:20: f3:22:5b:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGwTdCEQ3sYYNOWndTEPu89ka9rYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3 NDI4MjA5MzAeFw0yNjA3MjgxMTU2MzhaFw0yNjA3MjkxNDUxMzhaMDMxMTAvBgNV BAMTKDU4NjI4MzJFNEY1REVCODQwODZFNzQ2MDhGQUI4M0E5RDAyNDExQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDisV+Vc3guYS6zDMlvujmXkXEi 166LlWRS2LNYGMgadHiY/Ds/Pw2IMXefaMV1wMCTiv5F04Z7ASFHucqM4pVEOBBk VS2laugoRmC9GXo7KPfkCXyq9dTUBxyWmjsLv5Oj8+5BzkBTFKxXXwv2am2QPb57 MxncCqm2xLF1TwR5xTHLjmsYvUcOqYNvXPiZBJFJPe8reSe59fUnPQq+1PhhUfiO KJ31yxbV9YiAYL8HhlLfX9X/ja4KWKzZtrBvzKyVpTXlCuGetp7Zi7n5Tzo3kT5j Awm4TFEK8WeocT1Xs7eTVCvnNfkLKOJhUlHEGnYgLqtIg0iSKbHuGiBZpo6LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWGKDLk9d64QIbnRgj6uDqdAkEbwwHwYDVR0j BBgwFoAUTYyv7L8S73kvHv1yJ2fl/nQoIJMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU1NDAxNjQtM2Q0Ni00Nzk0LWJmNTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNC RjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3NDI4MjA5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDhDQUZFQ0JGMTJFRjc5MkYxRUZENzIyNzY3RTVGRTc0Mjgy MDkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU1NDAxNjQtM2Q0Ni00Nzk0LWJm NTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1 RkU3NDI4MjA5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkZcfoCc8h8+Z7ZL0adIlpTAqQTPkjDqYQ0 c4JuqUfqQf5qBQlhI2yU9IZ3ix/vWKlqJAf5mi2GsxGDvVLbF8rHudnrK12rVUYm 4x8S2EHdRUw6Zqsyh+BaGRYpd3e3ODlFYtyHF3ryYvTjZHVcA+rWBuNUE4q3f91e nXlSzasnL3nil5tMQz+GPlpMmH9unlbFoWGVsHSRWI71eiKOP8YWSypekjBdfgmD XeLBYtjLV3kqs9ez/0prGbVnIswR33kLgG7ROA/lBoqstjIk+LA9E3JVu07prltx giJH9XWfAS5OVSYAdxadSqiDsXukwtpRbxlIgpMJjH8dIPMiW/Y= -----END CERTIFICATE-----Generated at Tue Jul 28 20:38:00 2026 by rpki-client