$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft File: 4E0311031DBA1471A97F3183416162430EA78405.mft (raw, json) Hash identifier: T203LnDwGRFoT3Xkd9N+ZGIN4L/8/Q0l0ixn75eT+hs= Subject key identifier: 31:4D:06:CD:04:53:68:2F:63:FF:D3:F8:8A:46:FD:D8:C0:8B:90:86 Authority key identifier: 4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05 Certificate issuer: /CN=4E0311031DBA1471A97F3183416162430EA78405 Certificate serial: 41C56DA20F6778D5D0E3F6D26376387DF1222FB4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 09:18:24 +0000 Manifest this update: Tue 28 Jul 2026 09:13:24 +0000 Manifest next update: Wed 29 Jul 2026 13:06:24 +0000 Files and hashes: 1: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: EeoLX1eQr3kbHp2go87fzfWuIm2QGRQurIS8zg4rg8k=) 2: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: LCoG5MBtVr1gnp0Cb9QG4F/kZ9BcJIu/HLJgqKdyZtQ=) 3: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: kBF7Opi92U9hs5gCPj1VpLoXTbkOV0WaW1UNm3qxyr8=) 4: 4E0311031DBA1471A97F3183416162430EA78405.crl (hash: MzW69DnSUpj9i4X5+jwor/g0doZbT49jxQXY4CSgTh0=) 5: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: 45DsIwwkRRpg5bWvzaG3sx/NMYDeJXNq0PjvKzltS2I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 13:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c5:6d:a2:0f:67:78:d5:d0:e3:f6:d2:63:76:38:7d:f1:22:2f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E0311031DBA1471A97F3183416162430EA78405 Validity Not Before: Jul 28 09:13:24 2026 GMT Not After : Jul 29 13:06:24 2026 GMT Subject: CN=314D06CD0453682F63FFD3F88A46FDD8C08B9086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a1:f6:85:75:68:da:c5:b3:74:74:e0:5b:82: 51:53:36:13:30:50:42:cf:a5:a9:31:dc:e0:50:24: 68:c2:4c:e5:2b:11:ab:47:8c:42:62:5e:cb:e3:0e: b1:39:13:a4:e8:f9:d4:60:08:9a:da:9d:04:fc:c7: 81:ff:f1:47:28:9b:72:82:dd:33:51:d0:7b:67:ad: b5:95:30:f1:9c:f5:b7:c1:e8:af:13:f5:4a:a9:81: 3d:9d:87:19:34:a3:6e:71:39:fe:af:1b:1d:6f:53: 56:95:88:0c:03:f6:85:68:54:d4:fd:a4:ab:e9:91: a8:f8:69:3d:49:62:e1:9a:5d:bf:4c:bf:b2:55:7a: 65:6e:ae:a1:27:d4:e9:6b:4a:9a:a1:df:6a:dd:51: ce:35:97:23:6c:b8:53:0a:81:16:58:ce:bb:3a:13: 77:a9:55:66:fc:10:e0:f4:0e:05:32:26:54:f7:80: 0d:63:0e:2b:8c:13:03:ab:4f:1d:e8:d4:7b:b9:64: e2:5c:aa:ff:ac:5d:79:4e:e2:16:d4:02:1f:a0:0f: a0:16:e0:6c:ec:7e:ff:7e:35:dc:95:51:a3:57:5b: a6:65:0d:f6:5f:46:b7:b2:26:59:1b:01:64:69:23: 12:d6:71:ac:7f:e3:7e:43:bf:97:98:4b:da:69:b9: af:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4D:06:CD:04:53:68:2F:63:FF:D3:F8:8A:46:FD:D8:C0:8B:90:86 X509v3 Authority Key Identifier: keyid:4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:dc:2b:7f:b3:4a:ef:6b:51:d1:91:a8:dd:53:3d:eb:ed:a5: 65:b7:8b:e9:fc:c5:bf:38:90:1e:28:56:51:69:3f:1e:9b:e4: e7:3b:53:a3:fd:4c:de:2e:af:41:b7:1c:af:c4:d2:2d:56:a2: ff:0a:28:ac:ef:78:b5:7d:e0:af:db:4e:ab:ec:e4:72:0f:95: df:ec:32:4b:30:68:b3:d9:04:36:bf:33:ec:14:09:0e:33:22: cd:e5:41:09:9e:c9:4f:f6:bf:0d:62:c0:ea:b8:4a:b0:65:9e: ad:83:9e:cc:d2:ff:13:24:8f:7b:4e:f1:d2:15:9f:03:e0:05: 76:dd:74:b5:f8:9e:07:0e:42:fc:79:0e:6d:eb:64:63:dc:fb: e0:15:8b:8c:ec:e2:78:07:f7:49:53:ad:64:79:67:7a:da:f8: 0e:28:ac:be:75:e7:bf:2e:5a:77:e0:b2:d2:fc:a6:c4:8e:84: 6f:35:27:85:c7:4f:6c:bb:58:42:e4:20:9a:3f:b7:31:07:f5: 21:98:01:72:b1:f1:11:b7:9e:85:99:c8:d6:0e:3e:59:d5:e8: 6a:d1:1c:b7:97:02:9a:ce:5e:46:48:9b:29:33:d2:9c:b3:d6: c5:1d:4e:cf:12:21:45:d3:25:cd:4e:4a:36:bf:04:e7:8b:0a: 13:39:f5:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQcVtog9neNXQ4/bSY3Y4ffEiL7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMzExMDMxREJBMTQ3MUE5N0YzMTgzNDE2MTYyNDMw RUE3ODQwNTAeFw0yNjA3MjgwOTEzMjRaFw0yNjA3MjkxMzA2MjRaMDMxMTAvBgNV BAMTKDMxNEQwNkNEMDQ1MzY4MkY2M0ZGRDNGODhBNDZGREQ4QzA4QjkwODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgofaFdWjaxbN0dOBbglFTNhMw UELPpakx3OBQJGjCTOUrEatHjEJiXsvjDrE5E6To+dRgCJranQT8x4H/8Ucom3KC 3TNR0HtnrbWVMPGc9bfB6K8T9UqpgT2dhxk0o25xOf6vGx1vU1aViAwD9oVoVNT9 pKvpkaj4aT1JYuGaXb9Mv7JVemVurqEn1OlrSpqh32rdUc41lyNsuFMKgRZYzrs6 E3epVWb8EOD0DgUyJlT3gA1jDiuMEwOrTx3o1Hu5ZOJcqv+sXXlO4hbUAh+gD6AW 4Gzsfv9+NdyVUaNXW6ZlDfZfRreyJlkbAWRpIxLWcax/435Dv5eYS9ppua+xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMU0GzQRTaC9j/9P4ikb92MCLkIYwHwYDVR0j BBgwFoAUTgMRAx26FHGpfzGDQWFiQw6nhAUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E4YjU0ZTYtMTAxNS00OGViLTliYmQtNTFjMTZjZDQ1NDQ1LzAvNEUwMzExMDMx REJBMTQ3MUE5N0YzMTgzNDE2MTYyNDMwRUE3ODQwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTAzMTEwMzFEQkExNDcxQTk3RjMxODM0MTYxNjI0MzBFQTc4 NDA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvNEUwMzExMDMxREJBMTQ3MUE5N0YzMTgzNDE2MTYy NDMwRUE3ODQwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLcK3+zSu9rUdGRqN1TPevtpWW3i+n8xb84 kB4oVlFpPx6b5Oc7U6P9TN4ur0G3HK/E0i1Wov8KKKzveLV94K/bTqvs5HIPld/s MkswaLPZBDa/M+wUCQ4zIs3lQQmeyU/2vw1iwOq4SrBlnq2DnszS/xMkj3tO8dIV nwPgBXbddLX4ngcOQvx5Dm3rZGPc++AVi4zs4ngH90lTrWR5Z3ra+A4orL51578u WnfgstL8psSOhG81J4XHT2y7WELkIJo/tzEH9SGYAXKx8RG3noWZyNYOPlnV6GrR HLeXAprOXkZImykz0pyz1sUdTs8SIUXTJc1OSja/BOeLChM59fg= -----END CERTIFICATE-----Generated at Wed Jul 29 05:11:10 2026 by rpki-client