$ rpki-client -vvf rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft File: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft (raw, json) Hash identifier: 8e5xy2/ZwYpblluRRTbaqCLMedhDZNqcOL0SJjUJZVI= Subject key identifier: AD:F5:B5:0A:EA:60:3B:E7:0B:06:43:C4:9A:BC:3C:D9:55:0D:9A:5A Authority key identifier: 4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B Certificate issuer: /CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Certificate serial: 34C20BC578B02358023539AAA9E3430D56A15DF0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 01:38:03 +0000 Manifest this update: Wed 29 Jul 2026 01:33:03 +0000 Manifest next update: Thu 30 Jul 2026 03:49:03 +0000 Files and hashes: 1: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: RcYrOS6rHRHWdeyezVsL3GaabN57kfPwCIDe/5oYbMs=) 2: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: IlV0vgNjpTuApXjZnZRsOZX0dY/TDSqULrpC6FIi3II=) 3: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl (hash: WFDKYxTyIdE6UI682PG5WiT1ONabFiOF5SbwStwQP3g=) 4: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: 7ql88/IJdY/aWaZ2NP20wpbVy2vo7/DTiipCEcxNsYM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c2:0b:c5:78:b0:23:58:02:35:39:aa:a9:e3:43:0d:56:a1:5d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Validity Not Before: Jul 29 01:33:03 2026 GMT Not After : Jul 30 03:49:03 2026 GMT Subject: CN=ADF5B50AEA603BE70B0643C49ABC3CD9550D9A5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:77:a1:a8:0a:e0:f1:c7:d8:3c:35:24:12:23: f0:f0:3e:33:52:dd:53:97:33:54:38:43:a2:6e:2c: c1:9b:9f:90:2a:96:4c:2a:17:45:db:64:04:a1:20: 6f:64:43:5d:fe:01:1b:a6:f1:4a:e5:c9:2b:4b:58: 30:47:7d:e7:57:be:b7:f0:fe:84:d7:8c:53:61:d7: 18:f7:fc:55:5b:d7:8e:c6:bf:30:1c:f8:d7:c1:05: 82:c7:e2:91:6c:28:ab:84:fe:9a:4b:09:5f:25:0f: 96:1a:58:e5:15:4f:67:21:c2:bc:f1:0f:d9:21:5f: 12:1c:5b:b6:6d:4d:85:3b:55:18:68:60:40:f0:dc: 8c:c4:98:d9:a4:e7:c0:1e:81:56:0f:d4:5c:c6:0d: 08:31:91:73:4b:0e:20:73:6e:ba:35:12:44:6f:31: 49:b1:41:63:5a:b7:b8:fb:f3:a6:b9:73:8e:f2:fb: 12:6d:be:25:a9:ea:4a:ef:08:6d:11:57:3a:a1:04: 91:13:e7:fe:62:d1:2c:37:0d:7f:05:31:79:cf:43: a3:0e:e5:7e:16:87:6c:49:aa:57:dd:be:d5:e1:c4: 27:ab:0d:a4:ac:47:3e:d7:97:08:86:11:25:8e:84: 65:eb:dc:c0:7a:a9:0f:76:36:c6:08:ed:52:31:e7: 72:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F5:B5:0A:EA:60:3B:E7:0B:06:43:C4:9A:BC:3C:D9:55:0D:9A:5A X509v3 Authority Key Identifier: keyid:4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:25:a6:89:47:1b:bd:ac:4e:8b:e9:00:fe:c3:14:dc:ff:78: 10:95:c2:89:52:3a:4b:83:d2:9f:45:ac:7f:5c:f9:2d:93:4e: f6:14:ce:04:0d:62:24:29:37:80:05:f8:8f:9a:55:93:9e:e1: b4:cc:08:71:8f:bc:99:60:40:93:26:78:7b:10:80:dd:38:11: 4b:15:5c:8d:e4:e7:3c:ae:b4:6a:6d:b2:34:21:7e:33:42:58: e3:0d:ad:98:65:f7:ba:73:f1:a3:2f:80:07:4e:54:46:dc:c3: b7:24:e9:ef:41:47:6d:a6:6a:50:29:76:29:00:aa:9c:42:c0: 73:a2:a3:48:a9:e7:08:ea:bb:55:ef:2d:17:c5:59:fe:2c:bc: 4f:93:7c:0d:4e:32:05:df:ba:fc:20:8a:1e:31:bd:93:03:31: 7d:f6:16:5c:74:0c:fe:93:30:06:fb:1c:55:ce:fd:71:33:ba: 4e:ae:52:a4:18:30:84:6a:1d:b5:2e:87:f5:b4:18:15:30:94: 16:7d:cc:ec:a2:1f:a2:f2:f9:28:f8:01:61:45:3c:76:cc:c9: 5a:69:4a:91:a5:5e:02:1a:c3:14:3c:3d:2f:c5:26:f6:0e:44: 11:86:c6:e1:cf:0d:bf:6a:be:98:38:ea:97:fc:0f:60:2a:cc: 37:e2:64:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNMILxXiwI1gCNTmqqeNDDVahXfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQy NjA2OUMyQjAeFw0yNjA3MjkwMTMzMDNaFw0yNjA3MzAwMzQ5MDNaMDMxMTAvBgNV BAMTKEFERjVCNTBBRUE2MDNCRTcwQjA2NDNDNDlBQkMzQ0Q5NTUwRDlBNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrd6GoCuDxx9g8NSQSI/DwPjNS 3VOXM1Q4Q6JuLMGbn5AqlkwqF0XbZAShIG9kQ13+ARum8UrlyStLWDBHfedXvrfw /oTXjFNh1xj3/FVb147GvzAc+NfBBYLH4pFsKKuE/ppLCV8lD5YaWOUVT2chwrzx D9khXxIcW7ZtTYU7VRhoYEDw3IzEmNmk58AegVYP1FzGDQgxkXNLDiBzbro1EkRv MUmxQWNat7j786a5c47y+xJtviWp6krvCG0RVzqhBJET5/5i0Sw3DX8FMXnPQ6MO 5X4Wh2xJqlfdvtXhxCerDaSsRz7XlwiGESWOhGXr3MB6qQ92NsYI7VIx53JhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrfW1CupgO+cLBkPEmrw82VUNmlowHwYDVR0j BBgwFoAUSvelxvVMX9vYlXp/5bckJCYGnCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE1OWEzNjItOTUwYy00NWMyLWFlY2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZG NTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQyNjA2OUMyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QUY3QTVDNkY1NEM1RkRCRDg5NTdBN0ZFNUI3MjQyNDI2MDY5 QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0 MjQyNjA2OUMyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMlpolHG72sTovpAP7DFNz/eBCVwolSOkuD 0p9FrH9c+S2TTvYUzgQNYiQpN4AF+I+aVZOe4bTMCHGPvJlgQJMmeHsQgN04EUsV XI3k5zyutGptsjQhfjNCWOMNrZhl97pz8aMvgAdOVEbcw7ck6e9BR22malApdikA qpxCwHOio0ip5wjqu1XvLRfFWf4svE+TfA1OMgXfuvwgih4xvZMDMX32Flx0DP6T MAb7HFXO/XEzuk6uUqQYMIRqHbUuh/W0GBUwlBZ9zOyiH6Ly+Sj4AWFFPHbMyVpp SpGlXgIawxQ8PS/FJvYORBGGxuHPDb9qvpg46pf8D2AqzDfiZPk= -----END CERTIFICATE-----Generated at Wed Jul 29 20:02:19 2026 by rpki-client