$ rpki-client -vvf rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft File: E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft (raw, json) Hash identifier: 2DZ/ig80FeN96lEIJhEskOH9X6VFZjZaaskiC61jMuE= Subject key identifier: 83:F4:B0:CA:BF:7C:DA:6D:97:1B:23:29:08:44:32:CD:EE:D7:05:C6 Authority key identifier: E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9 Certificate issuer: /CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9 Certificate serial: 3BE038C580C870E784CD323C69A38EEE598DB353 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 14:09:07 +0000 Manifest this update: Mon 20 Jul 2026 14:04:07 +0000 Manifest next update: Tue 21 Jul 2026 17:30:07 +0000 Files and hashes: 1: 3230332e38302e31302e302f32342d3234203d3e203234323034.roa (hash: 1WqLfIO26zKRMIVkfVN7TnPFzjNdo3+29X6uUFeeV7A=) 2: 3230332e38302e31332e302f32342d3234203d3e203234323034.roa (hash: v5fNxHZnP1wOLH3moKO1JSlLZXs/nZienvrRCarDRlk=) 3: 3230332e38302e31352e302f32342d3234203d3e203234323034.roa (hash: nN8alNrnuAC96uGmiPX7P2NYnsdlkO57xsP55iMfUwk=) 4: 3230332e38302e31342e302f32342d3234203d3e203234323034.roa (hash: 4fpWKKYBY0nnGQkJs0R+bmSKgdPRaMES9zE1728pF2E=) 5: 3230332e38302e382e302f32342d3234203d3e203234323034.roa (hash: 0Yyl1JFAblaXf8Yb0JCPy2SmOr5D/U6YS39l5rE81q0=) 6: E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl (hash: vVEcL4RxUTb90oxLbUssVD695lC6R5rNKDLxuxvj6H0=) 7: 323430353a386530303a3a2f33322d3332203d3e203234323034.roa (hash: sqWc0G+az7rG1OKeMlrjkBetXfc6E3+lsrE6DeDNqXY=) 8: 3230332e38302e31322e302f32342d3234203d3e203234323034.roa (hash: h2tT8uN39aiQAWcw3BdGn9c/xBwZZb5nFDTta01r+Os=) 9: 3230332e38302e31312e302f32342d3234203d3e203234323034.roa (hash: Z8294bGV1BqnPHshmggOhT7N0D0yzpQrvHBjc8hglpQ=) 10: 3230332e38302e392e302f32342d3234203d3e203234323034.roa (hash: ctsdmpn5r5VUvDq4FMqshtD+HVeYmHxVfhu5eYtcuDY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e0:38:c5:80:c8:70:e7:84:cd:32:3c:69:a3:8e:ee:59:8d:b3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9 Validity Not Before: Jul 20 14:04:07 2026 GMT Not After : Jul 21 17:30:07 2026 GMT Subject: CN=83F4B0CABF7CDA6D971B2329084432CDEED705C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:cb:4b:39:74:21:3f:94:41:c7:aa:f6:99: 17:26:3e:20:d0:5b:8a:7a:01:bb:a9:49:5e:18:f6: 68:da:a4:9e:93:8a:60:0e:3f:f8:c7:7d:70:f5:de: 5d:34:87:91:99:fe:9b:39:a6:63:e5:28:e4:be:a2: a5:4b:ea:a5:2d:bd:ca:40:c3:a0:db:a4:be:33:bb: 7b:7a:65:0e:ef:f9:c1:53:de:97:4d:9b:01:72:c0: 3a:b8:1b:96:87:86:56:01:f4:31:57:c3:f8:d0:74: ef:c9:0d:94:af:16:8a:ba:2c:ff:fa:24:5d:cc:66: d9:87:4b:f3:b2:3a:62:be:99:04:19:f9:45:4b:4f: af:b7:86:d9:af:0f:8e:57:43:f3:64:da:8a:96:cc: 30:4c:3e:77:a7:f2:d0:dd:61:4a:6f:84:f4:c8:cd: 94:24:f6:8a:5b:f4:63:07:92:32:e1:40:20:58:96: 2a:c9:73:90:24:e2:80:4d:24:f0:8c:44:a8:dd:d9: a9:c8:87:86:25:8c:4c:20:f9:cb:54:33:67:29:d7: 41:a2:5a:60:9a:f8:7a:ac:7c:06:96:57:22:d3:e0: 0a:15:44:79:82:88:7e:94:7c:8d:34:7a:d1:7a:3b: 9e:03:39:d7:57:4a:c0:cd:f0:04:6d:17:7a:13:ea: 6f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F4:B0:CA:BF:7C:DA:6D:97:1B:23:29:08:44:32:CD:EE:D7:05:C6 X509v3 Authority Key Identifier: keyid:E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:9c:28:35:83:c4:4f:aa:9c:63:28:53:88:8f:9a:1f:31:71: 9a:6f:a8:ac:ef:fa:82:47:d7:e6:40:2d:19:bf:97:a7:ba:1c: b9:80:8c:0e:70:0b:b6:3d:48:0e:ec:d7:f2:fb:54:4d:e3:0a: 2d:6f:61:d5:ad:a2:bf:6a:0d:f7:6b:d5:e7:0d:ea:27:c4:1d: 97:99:6d:e6:62:09:cc:73:17:22:bf:e3:d2:f3:0c:2d:ca:ca: 5e:89:ce:70:bb:fd:66:3f:49:04:45:80:87:19:d3:f3:ab:3b: b1:a4:1e:ac:16:71:98:a4:44:4b:d0:5b:6a:e3:43:79:77:15: 51:c2:a1:5f:07:8d:be:f7:7b:8e:a7:a1:bf:c5:96:d6:d9:f6: 6c:21:67:20:04:82:7b:b0:e1:94:d9:76:5e:b9:17:e9:ad:df: 0e:be:2b:0f:f7:01:cb:77:cc:dc:d8:4c:6d:9a:f7:dd:57:a8: 61:d3:64:b6:16:c2:13:11:aa:98:a6:4d:3f:65:89:36:75:9c: 25:f9:ac:bf:76:ff:9e:1c:ef:0c:6f:ae:db:3f:3f:63:05:0e: 02:2a:9c:8a:ed:45:13:8a:b9:2e:34:ed:8f:05:ab:99:8e:35: 35:9e:8e:f8:eb:fd:2d:e9:29:50:f6:b3:c3:b8:e5:9b:e5:1a: 65:a4:1f:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO+A4xYDIcOeEzTI8aaOO7lmNs1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZCRDNC MTMyNEFCOTAeFw0yNjA3MjAxNDA0MDdaFw0yNjA3MjExNzMwMDdaMDMxMTAvBgNV BAMTKDgzRjRCMENBQkY3Q0RBNkQ5NzFCMjMyOTA4NDQzMkNERUVENzA1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc6stLOXQhP5RBx6r2mRcmPiDQ W4p6AbupSV4Y9mjapJ6TimAOP/jHfXD13l00h5GZ/ps5pmPlKOS+oqVL6qUtvcpA w6DbpL4zu3t6ZQ7v+cFT3pdNmwFywDq4G5aHhlYB9DFXw/jQdO/JDZSvFoq6LP/6 JF3MZtmHS/OyOmK+mQQZ+UVLT6+3htmvD45XQ/Nk2oqWzDBMPnen8tDdYUpvhPTI zZQk9opb9GMHkjLhQCBYlirJc5Ak4oBNJPCMRKjd2anIh4YljEwg+ctUM2cp10Gi WmCa+HqsfAaWVyLT4AoVRHmCiH6UfI00etF6O54DOddXSsDN8ARtF3oT6m9/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg/Swyr982m2XGyMpCEQyze7XBcYwHwYDVR0j BBgwFoAU5FAef9vFcWDG2vDTvpL707EySrkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI0YTkxMDUtOGQyYS00YjM4LWE2YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZE QkM1NzE2MEM2REFGMEQzQkU5MkZCRDNCMTMyNEFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDUwMUU3RkRCQzU3MTYwQzZEQUYwRDNCRTkyRkJEM0IxMzI0 QUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI0YTkxMDUtOGQyYS00YjM4LWE2 YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZC RDNCMTMyNEFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGScKDWDxE+qnGMoU4iPmh8xcZpvqKzv+oJH 1+ZALRm/l6e6HLmAjA5wC7Y9SA7s1/L7VE3jCi1vYdWtor9qDfdr1ecN6ifEHZeZ beZiCcxzFyK/49LzDC3Kyl6JznC7/WY/SQRFgIcZ0/OrO7GkHqwWcZikREvQW2rj Q3l3FVHCoV8Hjb73e46nob/FltbZ9mwhZyAEgnuw4ZTZdl65F+mt3w6+Kw/3Act3 zNzYTG2a991XqGHTZLYWwhMRqpimTT9liTZ1nCX5rL92/54c7wxvrts/P2MFDgIq nIrtRROKuS407Y8Fq5mONTWejvjr/S3pKVD2s8O45ZvlGmWkHyY= -----END CERTIFICATE-----Generated at Tue Jul 21 06:39:36 2026 by rpki-client