$ rpki-client -vvf rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft File: 7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft (raw, json) Hash identifier: 3cJO2Fv+Kass8x855qcBvsiQQ6CXSR5m04hE+pxQeyI= Subject key identifier: 45:CB:58:BB:A6:D7:B6:3F:A9:F5:7C:E7:01:8F:E8:8A:2E:08:CA:B4 Authority key identifier: 7D:45:B2:ED:A1:9A:FF:B2:D1:13:11:2B:95:07:29:83:11:C5:DB:85 Certificate issuer: /CN=7D45B2EDA19AFFB2D113112B9507298311C5DB85 Certificate serial: 592816404373A517F66A9FF2EB39670D1DD9C5BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 23:09:36 +0000 Manifest this update: Mon 20 Jul 2026 23:04:36 +0000 Manifest next update: Wed 22 Jul 2026 02:51:36 +0000 Files and hashes: 1: 7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl (hash: Of6RpAAG93zEQTJ2apZaf7ckJAoPJQ1MIsbgTuRKvbQ=) 2: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: MB43wivyVMcmejyDt+ILCLmOnQIliDhhXU3YyNcO9+8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:28:16:40:43:73:a5:17:f6:6a:9f:f2:eb:39:67:0d:1d:d9:c5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D45B2EDA19AFFB2D113112B9507298311C5DB85 Validity Not Before: Jul 20 23:04:36 2026 GMT Not After : Jul 22 02:51:36 2026 GMT Subject: CN=45CB58BBA6D7B63FA9F57CE7018FE88A2E08CAB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5f:d1:4f:f4:2e:aa:8d:ec:1b:79:a3:5b:72: b5:4d:9e:a6:9d:ad:56:a6:38:47:d3:38:07:da:75: 45:c2:8d:ea:f2:5d:3a:f9:2c:ad:23:41:63:bd:e0: 55:0d:40:7b:96:62:fd:f3:ff:16:e6:87:54:6d:e4: 2f:9e:3d:da:31:69:a1:5d:31:11:53:f8:49:2d:34: 72:47:08:65:02:e5:44:4e:1b:4d:2c:94:27:0c:a9: 35:0d:1f:5f:ca:32:ac:29:48:95:41:21:44:2e:63: aa:e6:0d:1e:6c:4b:85:89:e6:eb:d3:2f:98:ba:cd: 24:4f:dc:68:52:e6:df:bb:d0:07:82:08:0e:fb:af: 82:9a:e1:96:f4:73:e3:f7:d0:da:2a:9e:31:c9:11: 97:1f:cd:7a:a6:60:fa:64:dd:36:49:35:cc:e6:3e: 26:88:a8:fc:10:1f:ff:8b:d0:d8:c4:c1:e6:5a:36: 34:4d:ce:80:63:8a:51:06:a6:b6:65:d1:e0:f6:ce: fb:07:e0:81:27:d7:7d:b5:19:89:0f:0a:72:7f:f8: c2:98:ab:b3:ee:ed:5a:88:14:3a:7b:98:73:7b:32: 86:c9:9f:54:4b:5c:f9:56:11:0a:10:5e:a0:f2:06: b7:c2:18:92:4a:ee:4a:c6:3b:20:70:68:4e:4c:8d: 39:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CB:58:BB:A6:D7:B6:3F:A9:F5:7C:E7:01:8F:E8:8A:2E:08:CA:B4 X509v3 Authority Key Identifier: keyid:7D:45:B2:ED:A1:9A:FF:B2:D1:13:11:2B:95:07:29:83:11:C5:DB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:44:d0:a0:d0:32:f3:c9:31:77:12:81:c9:7b:56:8d:dd:1e: 9a:f8:a8:5b:5e:f0:fe:a2:76:52:9a:b4:3a:fd:69:74:ec:1b: 3d:f3:b2:fa:e6:84:56:e7:6f:be:3a:6a:e0:d5:47:37:43:53: b3:16:32:12:d8:41:0d:d4:75:b2:b9:a3:e0:71:94:98:dd:8b: 8d:41:0a:ce:85:da:48:0d:a9:45:6b:1b:c3:82:7a:36:ba:19: d2:98:a6:83:4b:00:d0:7c:37:a8:88:7e:5a:69:33:6f:07:25: 70:2c:77:5a:3b:90:a5:8d:df:72:9b:74:b8:59:55:e5:4a:5d: a1:52:08:7d:3b:c3:1d:46:96:0b:db:2b:29:90:08:13:4f:ba: f6:90:ab:f7:fc:2b:55:da:47:f2:29:e6:c4:94:a5:75:81:93: 79:3f:5d:c3:76:c5:41:97:db:bf:e1:c0:71:15:f2:95:c8:14: 35:22:05:1b:15:59:7e:19:86:50:c6:2b:29:3c:c4:f4:ad:ba: 3f:4f:28:7b:76:c1:27:1e:99:9c:32:b8:19:6d:44:12:7a:48: 1c:ce:33:43:a6:be:a3:f0:eb:6a:ec:eb:a8:d3:cb:c2:cd:5d: e1:05:6b:c0:a2:32:5c:05:c4:c9:b8:34:22:57:8f:7a:61:8e: 5a:bd:2b:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWSgWQENzpRf2ap/y6zlnDR3Zxb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q0NUIyRURBMTlBRkZCMkQxMTMxMTJCOTUwNzI5ODMx MUM1REI4NTAeFw0yNjA3MjAyMzA0MzZaFw0yNjA3MjIwMjUxMzZaMDMxMTAvBgNV BAMTKDQ1Q0I1OEJCQTZEN0I2M0ZBOUY1N0NFNzAxOEZFODhBMkUwOENBQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZX9FP9C6qjewbeaNbcrVNnqad rVamOEfTOAfadUXCjeryXTr5LK0jQWO94FUNQHuWYv3z/xbmh1Rt5C+ePdoxaaFd MRFT+EktNHJHCGUC5UROG00slCcMqTUNH1/KMqwpSJVBIUQuY6rmDR5sS4WJ5uvT L5i6zSRP3GhS5t+70AeCCA77r4Ka4Zb0c+P30NoqnjHJEZcfzXqmYPpk3TZJNczm PiaIqPwQH/+L0NjEweZaNjRNzoBjilEGprZl0eD2zvsH4IEn1321GYkPCnJ/+MKY q7Pu7VqIFDp7mHN7MobJn1RLXPlWEQoQXqDyBrfCGJJK7krGOyBwaE5MjTnZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURctYu6bXtj+p9XznAY/oii4IyrQwHwYDVR0j BBgwFoAUfUWy7aGa/7LRExErlQcpgxHF24UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJkNDM0MGItMjFjNC00ZmM3LWEyNTktZTIzNTRjNTNmZGQyLzAvN0Q0NUIyRURB MTlBRkZCMkQxMTMxMTJCOTUwNzI5ODMxMUM1REI4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDQ1QjJFREExOUFGRkIyRDExMzExMkI5NTA3Mjk4MzExQzVE Qjg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJkNDM0MGItMjFjNC00ZmM3LWEy NTktZTIzNTRjNTNmZGQyLzAvN0Q0NUIyRURBMTlBRkZCMkQxMTMxMTJCOTUwNzI5 ODMxMUM1REI4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMFE0KDQMvPJMXcSgcl7Vo3dHpr4qFte8P6i dlKatDr9aXTsGz3zsvrmhFbnb746auDVRzdDU7MWMhLYQQ3UdbK5o+BxlJjdi41B Cs6F2kgNqUVrG8OCeja6GdKYpoNLANB8N6iIflppM28HJXAsd1o7kKWN33KbdLhZ VeVKXaFSCH07wx1GlgvbKymQCBNPuvaQq/f8K1XaR/Ip5sSUpXWBk3k/XcN2xUGX 27/hwHEV8pXIFDUiBRsVWX4ZhlDGKyk8xPStuj9PKHt2wScemZwyuBltRBJ6SBzO M0OmvqPw62rs66jTy8LNXeEFa8CiMlwFxMm4NCJXj3phjlq9K8A= -----END CERTIFICATE-----Generated at Tue Jul 21 06:11:20 2026 by rpki-client