$ rpki-client -vvf rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft File: 04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft (raw, json) Hash identifier: RPHTkW4z9k+NEOdoZvZzsekViiT2apxWm4Jm2ydwVyE= Subject key identifier: 60:03:EB:28:BD:69:3D:03:84:82:45:68:92:B1:B5:BF:32:0D:C5:7C Authority key identifier: 04:52:2B:78:37:74:E8:96:9A:25:3B:79:C9:BD:8B:7A:F1:1E:0E:6E Certificate issuer: /CN=04522B783774E8969A253B79C9BD8B7AF11E0E6E Certificate serial: 4B42B9E787F7BD787B7F1BFAA9038DFA8F3DC5CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 19:55:53 +0000 Manifest this update: Mon 20 Jul 2026 19:50:53 +0000 Manifest next update: Tue 21 Jul 2026 20:54:53 +0000 Files and hashes: 1: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: 40yX7GBS0nX6cgx29ls12Yp5h3Ba+XKjPu45g8FVQzo=) 2: 04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl (hash: XeEOzlxytjW6GIiD1AGbCV6GNgIRJf1bfG0JpMH+EAo=) 3: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: JGTo44TwhcX4ivQ52rHxAzJZareWjfxAS0kPXAmQ5EE=) 4: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CZVghfd+RMSIYEhXYYQSwl8vEVYu7UKTsPMOPTno7kM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:42:b9:e7:87:f7:bd:78:7b:7f:1b:fa:a9:03:8d:fa:8f:3d:c5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04522B783774E8969A253B79C9BD8B7AF11E0E6E Validity Not Before: Jul 20 19:50:53 2026 GMT Not After : Jul 21 20:54:53 2026 GMT Subject: CN=6003EB28BD693D038482456892B1B5BF320DC57C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:d0:90:b4:4d:88:01:6e:5a:a3:16:1a:c0: 36:9f:d4:b9:69:21:19:df:dd:3e:41:46:9d:7f:1f: 10:66:d2:e6:5b:ee:83:37:82:7d:55:c0:8b:ec:0a: db:06:cd:7f:01:2e:b8:50:8f:96:20:84:83:05:67: 7a:e1:da:f6:4b:5f:1f:cd:3c:0f:e4:83:58:ed:b0: 45:1f:b0:57:af:2c:60:f6:3b:27:d9:93:fb:10:ff: 3b:30:91:26:ff:36:bb:91:27:1f:ba:af:91:31:03: 4b:aa:a3:2b:8d:e3:04:91:61:7b:57:b9:4d:1d:ba: 30:19:2b:d7:b2:65:7e:18:ba:67:d5:26:76:9d:0c: bb:bd:75:e1:09:23:43:60:a2:ad:45:0e:42:ff:90: 92:26:be:12:4a:34:23:7f:29:fa:9c:71:2d:b5:57: 0a:7d:a4:40:82:03:db:f1:a2:bc:8d:c9:c2:23:c9: bb:a7:f4:d0:70:43:d9:a9:58:d9:0d:4d:24:83:9d: 8f:fa:9e:81:54:a0:a5:34:62:d9:79:78:80:15:8d: 32:5c:ff:90:57:f5:91:2f:3e:67:63:b1:2a:0d:32: 87:fa:80:4b:56:1f:0c:5a:61:fc:56:2b:44:5b:b1: d0:9d:2f:51:08:c3:e2:82:f3:60:03:a6:06:78:e0: 7c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:03:EB:28:BD:69:3D:03:84:82:45:68:92:B1:B5:BF:32:0D:C5:7C X509v3 Authority Key Identifier: keyid:04:52:2B:78:37:74:E8:96:9A:25:3B:79:C9:BD:8B:7A:F1:1E:0E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:20:68:7c:35:1b:ca:1d:cb:80:ef:21:75:d2:29:ea:e0:aa: a3:a7:c7:d6:2e:9f:ca:9b:36:52:b1:a7:6a:53:78:c9:ca:99: e4:58:78:38:32:41:6d:6b:60:ac:90:9f:b8:75:1f:f2:3d:a4: dd:46:73:26:e8:f2:7e:6f:67:4e:20:85:0f:5c:c0:b2:68:2f: 60:e8:2d:59:50:c9:e8:0c:09:33:cb:3a:bf:e7:51:15:69:95: 5e:99:b4:00:2b:75:cb:73:7b:5d:fb:6a:da:dc:f8:b3:11:da: c9:40:6a:d3:ee:5b:2b:c9:51:58:00:52:a6:cf:02:14:b4:fc: f3:04:af:29:82:dc:02:d1:52:ad:ea:c8:d9:99:ad:e8:ba:5f: 4c:d8:82:d1:8e:e3:3e:7e:82:57:07:05:1d:4b:6d:22:d5:df: 35:a4:85:2b:36:5c:c0:dd:54:c5:55:ba:b5:04:36:79:54:9b: 0c:5c:fa:42:cc:d6:32:56:f8:02:55:09:57:99:68:95:c8:c8: 69:cd:30:6c:3e:8a:ba:ba:ba:98:b3:92:06:06:78:58:af:64: 5f:b5:ad:99:fc:7a:5f:39:71:54:66:74:ec:7c:ed:d6:68:24: e4:b5:3e:8b:b2:6c:7b:6e:4f:43:09:89:0e:75:7b:f0:fc:d7: 2f:a8:4c:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS0K554f3vXh7fxv6qQON+o89xc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1MjJCNzgzNzc0RTg5NjlBMjUzQjc5QzlCRDhCN0FG MTFFMEU2RTAeFw0yNjA3MjAxOTUwNTNaFw0yNjA3MjEyMDU0NTNaMDMxMTAvBgNV BAMTKDYwMDNFQjI4QkQ2OTNEMDM4NDgyNDU2ODkyQjFCNUJGMzIwREM1N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXNCQtE2IAW5aoxYawDaf1Llp IRnf3T5BRp1/HxBm0uZb7oM3gn1VwIvsCtsGzX8BLrhQj5YghIMFZ3rh2vZLXx/N PA/kg1jtsEUfsFevLGD2OyfZk/sQ/zswkSb/NruRJx+6r5ExA0uqoyuN4wSRYXtX uU0dujAZK9eyZX4YumfVJnadDLu9deEJI0Ngoq1FDkL/kJImvhJKNCN/KfqccS21 Vwp9pECCA9vxoryNycIjybun9NBwQ9mpWNkNTSSDnY/6noFUoKU0Ytl5eIAVjTJc /5BX9ZEvPmdjsSoNMof6gEtWHwxaYfxWK0RbsdCdL1EIw+KC82ADpgZ44HzrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYAPrKL1pPQOEgkVokrG1vzINxXwwHwYDVR0j BBgwFoAUBFIreDd06JaaJTt5yb2LevEeDm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODliODYwNGYtMzk1YS00MmJlLWI5OTctZTgwZmMxZGY5MGY5LzAvMDQ1MjJCNzgz Nzc0RTg5NjlBMjUzQjc5QzlCRDhCN0FGMTFFMEU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDUyMkI3ODM3NzRFODk2OUEyNTNCNzlDOUJEOEI3QUYxMUUw RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMDQ1MjJCNzgzNzc0RTg5NjlBMjUzQjc5QzlCRDhC N0FGMTFFMEU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8gaHw1G8ody4DvIXXSKergqqOnx9Yun8qb NlKxp2pTeMnKmeRYeDgyQW1rYKyQn7h1H/I9pN1Gcybo8n5vZ04ghQ9cwLJoL2Do LVlQyegMCTPLOr/nURVplV6ZtAArdctze137atrc+LMR2slAatPuWyvJUVgAUqbP AhS0/PMErymC3ALRUq3qyNmZrei6X0zYgtGO4z5+glcHBR1LbSLV3zWkhSs2XMDd VMVVurUENnlUmwxc+kLM1jJW+AJVCVeZaJXIyGnNMGw+irq6upizkgYGeFivZF+1 rZn8el85cVRmdOx87dZoJOS1PouybHtuT0MJiQ51e/D81y+oTG4= -----END CERTIFICATE-----Generated at Tue Jul 21 06:53:12 2026 by rpki-client