$ rpki-client -vvf rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft File: 485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft (raw, json) Hash identifier: 9CitaBkr7GkFqghOySeI9x35oTPNx6LoyrN8qs4VVoE= Subject key identifier: F1:DF:F5:41:31:DF:EF:F0:DC:C8:02:66:B3:D3:70:92:0F:77:42:51 Authority key identifier: 48:5C:95:EA:B9:69:D6:A4:8B:4E:07:9F:7E:AF:2F:1A:43:D5:76:E5 Certificate issuer: /CN=485C95EAB969D6A48B4E079F7EAF2F1A43D576E5 Certificate serial: 0C36CADC76CA7F57A0E8B6FE851719EAABD9EAB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 15:20:33 +0000 Manifest this update: Mon 20 Jul 2026 15:15:33 +0000 Manifest next update: Tue 21 Jul 2026 18:40:33 +0000 Files and hashes: 1: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: MWYhiIEDGx9DoNFz51QvtMWf3c6h+IW6waBKdCBpOXk=) 2: 485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl (hash: V5LJ99pi7kZRoUcuBVGUEos1gHX4eB8fUfPQTE5jua0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:36:ca:dc:76:ca:7f:57:a0:e8:b6:fe:85:17:19:ea:ab:d9:ea:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485C95EAB969D6A48B4E079F7EAF2F1A43D576E5 Validity Not Before: Jul 20 15:15:33 2026 GMT Not After : Jul 21 18:40:33 2026 GMT Subject: CN=F1DFF54131DFEFF0DCC80266B3D370920F774251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:05:3a:0c:6a:df:7f:0a:8f:88:4b:e4:b0: 79:6f:06:80:2e:87:4a:50:33:00:2a:a8:4b:2a:4f: a3:59:42:cc:40:df:fb:72:b0:db:19:08:04:1e:96: e3:c0:88:0e:b4:65:5c:cc:24:90:3e:2a:e7:62:6c: f5:18:09:fe:d9:ad:c0:37:14:87:fe:db:53:5d:1b: 54:6e:d6:10:03:67:8c:5f:86:f2:c5:bf:61:91:ee: a3:7d:72:d1:5b:f6:9b:b0:52:ff:8d:52:db:2c:b8: ce:71:66:11:d5:24:27:ae:b8:d3:6c:35:77:6b:d5: 94:10:d0:54:bd:b2:59:16:98:82:a7:e5:af:1e:5d: b6:41:46:9f:c4:e4:77:93:66:fd:e0:a6:86:f4:5e: b1:5b:3c:8e:17:09:ef:8f:75:90:7f:b9:c4:ff:61: dd:65:d8:52:b2:e7:f9:f9:67:37:6a:4b:8c:83:5c: f1:8c:50:0d:30:d6:87:fd:7d:cf:a8:04:e0:51:1b: 1c:04:13:9a:4d:ae:c5:59:cc:6b:8e:a2:04:06:33: b7:bc:c9:0d:2e:09:09:45:c2:cb:bc:39:62:82:9b: 75:0e:69:9b:bc:d9:4d:47:0c:1e:ff:69:8e:e1:ba: 0e:96:83:a7:c8:da:7d:4a:fb:88:d3:86:71:92:1e: f2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DF:F5:41:31:DF:EF:F0:DC:C8:02:66:B3:D3:70:92:0F:77:42:51 X509v3 Authority Key Identifier: keyid:48:5C:95:EA:B9:69:D6:A4:8B:4E:07:9F:7E:AF:2F:1A:43:D5:76:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:11:35:f2:79:fd:05:f1:b3:b0:28:9d:be:be:b6:8c:43:e5: 1d:de:21:ca:79:31:d4:bf:50:50:da:33:99:8a:30:cf:28:a4: c8:67:22:55:f0:ca:a4:71:3d:33:bb:d8:34:01:58:3a:6b:e5: d2:46:1e:8f:28:30:18:6d:98:7c:64:d1:4a:c7:03:72:16:e6: 3e:1f:f8:0b:61:b6:48:a2:b4:03:9b:3b:39:e8:97:e7:ba:ac: ef:e7:57:81:49:26:88:99:10:43:fe:f0:26:9f:f8:3f:24:74: c8:c5:6f:85:1c:f7:05:f6:91:4c:60:40:81:85:5e:6e:64:ef: b8:23:56:ef:ef:71:ac:5b:f6:9c:91:18:a8:a9:54:0e:c6:96: cb:0b:3a:62:1e:fc:95:4b:9b:cf:f4:80:8a:95:cd:bf:a0:95: a3:b2:26:af:dd:86:1e:af:44:fb:4c:6b:14:dd:50:ca:4e:22: 0c:57:10:0e:8f:90:b3:db:5c:1d:ab:07:ab:46:62:8e:58:0d: 40:af:5d:75:a2:c4:fd:90:a2:26:89:35:11:0d:c9:15:f5:89: 6a:c0:bf:5f:b6:60:56:2f:33:47:9f:38:06:0f:c6:b3:05:e0: a6:82:ec:7c:11:e5:b1:4a:5f:20:ad:dd:27:13:1e:2a:c5:45: 5d:73:73:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDbK3HbKf1eg6Lb+hRcZ6qvZ6rcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1Qzk1RUFCOTY5RDZBNDhCNEUwNzlGN0VBRjJGMUE0 M0Q1NzZFNTAeFw0yNjA3MjAxNTE1MzNaFw0yNjA3MjExODQwMzNaMDMxMTAvBgNV BAMTKEYxREZGNTQxMzFERkVGRjBEQ0M4MDI2NkIzRDM3MDkyMEY3NzQyNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKQU6DGrffwqPiEvksHlvBoAu h0pQMwAqqEsqT6NZQsxA3/tysNsZCAQeluPAiA60ZVzMJJA+KudibPUYCf7ZrcA3 FIf+21NdG1Ru1hADZ4xfhvLFv2GR7qN9ctFb9puwUv+NUtssuM5xZhHVJCeuuNNs NXdr1ZQQ0FS9slkWmIKn5a8eXbZBRp/E5HeTZv3gpob0XrFbPI4XCe+PdZB/ucT/ Yd1l2FKy5/n5ZzdqS4yDXPGMUA0w1of9fc+oBOBRGxwEE5pNrsVZzGuOogQGM7e8 yQ0uCQlFwsu8OWKCm3UOaZu82U1HDB7/aY7hug6Wg6fI2n1K+4jThnGSHvJJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8d/1QTHf7/DcyAJms9Nwkg93QlEwHwYDVR0j BBgwFoAUSFyV6rlp1qSLTgeffq8vGkPVduUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjNiYTAyNGItODdmMi00ZWRkLTg5ZmYtYTRmY2E3MDA4YzM2LzAvNDg1Qzk1RUFC OTY5RDZBNDhCNEUwNzlGN0VBRjJGMUE0M0Q1NzZFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODVDOTVFQUI5NjlENkE0OEI0RTA3OUY3RUFGMkYxQTQzRDU3 NkU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5 ZmYtYTRmY2E3MDA4YzM2LzAvNDg1Qzk1RUFCOTY5RDZBNDhCNEUwNzlGN0VBRjJG MUE0M0Q1NzZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKARNfJ5/QXxs7Aonb6+toxD5R3eIcp5MdS/ UFDaM5mKMM8opMhnIlXwyqRxPTO72DQBWDpr5dJGHo8oMBhtmHxk0UrHA3IW5j4f +AthtkiitAObOznol+e6rO/nV4FJJoiZEEP+8Caf+D8kdMjFb4Uc9wX2kUxgQIGF Xm5k77gjVu/vcaxb9pyRGKipVA7GlssLOmIe/JVLm8/0gIqVzb+glaOyJq/dhh6v RPtMaxTdUMpOIgxXEA6PkLPbXB2rB6tGYo5YDUCvXXWixP2QoiaJNRENyRX1iWrA v1+2YFYvM0efOAYPxrMF4KaC7HwR5bFKXyCt3ScTHirFRV1zc/U= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:20 2026 by rpki-client