$ rpki-client -vvf rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft File: 0453EE44B6298E574434A213BFD59854FBBC1AC9.mft (raw, json) Hash identifier: PI0orWjp9okZFxXzNGGNf0cJrLBxDc1fFeX62Wv5nvk= Subject key identifier: 3E:31:04:54:E3:76:E6:BC:03:BA:E8:C3:67:74:FB:32:90:D8:CB:31 Authority key identifier: 04:53:EE:44:B6:29:8E:57:44:34:A2:13:BF:D5:98:54:FB:BC:1A:C9 Certificate issuer: /CN=0453EE44B6298E574434A213BFD59854FBBC1AC9 Certificate serial: 5009E0DDEF80D6C4B186CC1FB21BAEEA0A3BE179 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0453EE44B6298E574434A213BFD59854FBBC1AC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 23:50:35 +0000 Manifest this update: Mon 20 Jul 2026 23:45:35 +0000 Manifest next update: Wed 22 Jul 2026 03:46:35 +0000 Files and hashes: 1: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: cIZPGEVWJFWOc4kuja4Zgt6H/ILhtTMjLdnFHfcUoyY=) 2: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: HWOy6TZ8QT68FcB2BCMFfmYX+XsnVwiXZ6wBXEIZ6YM=) 3: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: 7NlmtYXZ6oozA3ARYN5xU0ZSurydVsw5V4omrofalOI=) 4: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: 9cSUjwh9z6+6ZJ3LgshkbKPWLwwzg4ImlK/YQG0hafg=) 5: 0453EE44B6298E574434A213BFD59854FBBC1AC9.crl (hash: en5asnZJ4yZm1lzFYLPatkU+IFOV0I+OiXpsOCZS/v8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.crl rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0453EE44B6298E574434A213BFD59854FBBC1AC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:09:e0:dd:ef:80:d6:c4:b1:86:cc:1f:b2:1b:ae:ea:0a:3b:e1:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0453EE44B6298E574434A213BFD59854FBBC1AC9 Validity Not Before: Jul 20 23:45:35 2026 GMT Not After : Jul 22 03:46:35 2026 GMT Subject: CN=3E310454E376E6BC03BAE8C36774FB3290D8CB31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f4:54:d4:ae:ec:ab:bc:67:07:0d:32:f1:cb: a1:c5:1f:9a:b4:0f:2c:e1:1f:31:87:53:c1:a8:de: 81:bf:f6:b6:1c:df:f6:67:c0:e2:55:80:a6:a9:97: 8f:95:20:c2:d4:d2:59:da:ec:dd:81:22:8a:d7:6e: 45:85:6a:74:30:60:10:b9:ed:8d:ae:ed:fb:7e:08: 63:99:ca:3b:ae:8f:52:08:30:07:7c:ad:31:84:62: 84:85:40:8a:23:98:a1:a7:58:5f:46:14:43:68:5a: 0e:a2:6b:db:7c:53:c1:8e:b1:c9:c4:3d:31:31:70: 59:ef:97:d0:b0:fb:17:8d:f7:45:da:b6:23:40:61: 58:e5:c6:2c:da:bf:c9:cf:d6:a0:d7:3d:b2:dc:3e: 43:ec:ef:79:7f:57:2b:2f:f3:08:80:8a:00:9e:40: 03:da:d0:b7:3e:7d:45:b6:c1:27:b2:4d:d3:a6:2a: 0c:6a:19:4e:b9:bf:97:22:f2:ec:07:86:1e:30:96: 8a:5a:f1:bc:0a:fd:56:0f:bc:2d:15:d5:52:6a:29: d6:7e:52:21:bc:03:92:15:78:69:b5:66:29:3e:7c: 6b:8f:b8:60:ff:5f:d1:0d:b2:a0:0b:03:f6:c6:60: e2:a2:df:fb:46:ba:ad:08:85:07:d9:b5:89:29:7e: 31:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:31:04:54:E3:76:E6:BC:03:BA:E8:C3:67:74:FB:32:90:D8:CB:31 X509v3 Authority Key Identifier: keyid:04:53:EE:44:B6:29:8E:57:44:34:A2:13:BF:D5:98:54:FB:BC:1A:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0453EE44B6298E574434A213BFD59854FBBC1AC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e3:54:c1:31:64:20:e6:a3:b1:d9:6f:37:2f:fd:9d:e3:22: 07:12:d5:53:be:61:87:07:c0:58:60:89:1d:79:30:c0:6f:ce: e2:8c:8f:02:29:73:38:ab:92:a1:c2:b3:ef:03:f0:41:38:e5: c0:68:f6:4e:84:5d:bb:65:67:6e:9c:7d:64:91:06:e3:ea:8b: 55:8c:02:ad:e6:b3:2c:1d:fe:a3:54:ce:e2:4e:0d:6f:92:bd: 80:fa:7b:1d:e0:ac:38:9f:17:2e:b5:87:7f:30:5c:bd:04:7d: 8e:b3:97:e3:c8:14:de:56:ed:d5:32:8f:3d:d8:c5:63:8e:83: 79:52:7c:c5:b8:88:c5:b6:4e:32:ef:cb:de:d5:47:5f:49:ab: fb:9e:f7:b1:6b:05:0f:51:94:25:ec:62:5e:10:80:66:1e:a3: 21:72:a0:14:4a:a2:e9:f4:0e:42:6e:4d:4d:4f:43:b2:0a:90: 71:c6:45:cb:54:c9:7f:16:23:11:9c:38:38:8d:80:f1:db:f7: 36:15:40:87:a1:34:5b:c9:5a:ec:4d:ff:86:1c:a4:24:13:84: ec:04:44:6b:dd:45:f5:3e:3b:e3:4b:62:78:10:f8:20:13:0c: ae:b0:68:4d:03:91:67:87:bb:9f:22:9d:40:fd:07:fc:94:47: bc:d4:10:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUAng3e+A1sSxhswfshuu6go74XkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1M0VFNDRCNjI5OEU1NzQ0MzRBMjEzQkZENTk4NTRG QkJDMUFDOTAeFw0yNjA3MjAyMzQ1MzVaFw0yNjA3MjIwMzQ2MzVaMDMxMTAvBgNV BAMTKDNFMzEwNDU0RTM3NkU2QkMwM0JBRThDMzY3NzRGQjMyOTBEOENCMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD9FTUruyrvGcHDTLxy6HFH5q0 DyzhHzGHU8Go3oG/9rYc3/ZnwOJVgKapl4+VIMLU0lna7N2BIorXbkWFanQwYBC5 7Y2u7ft+CGOZyjuuj1IIMAd8rTGEYoSFQIojmKGnWF9GFENoWg6ia9t8U8GOscnE PTExcFnvl9Cw+xeN90XatiNAYVjlxizav8nP1qDXPbLcPkPs73l/Vysv8wiAigCe QAPa0Lc+fUW2wSeyTdOmKgxqGU65v5ci8uwHhh4wlopa8bwK/VYPvC0V1VJqKdZ+ UiG8A5IVeGm1Zik+fGuPuGD/X9ENsqALA/bGYOKi3/tGuq0IhQfZtYkpfjFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPjEEVON25rwDuujDZ3T7MpDYyzEwHwYDVR0j BBgwFoAUBFPuRLYpjldENKITv9WYVPu8GskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzU3YjkwY2ItOGViZC00YzdiLThjMzEtMTMzYThiNGVkNjljLzAvMDQ1M0VFNDRC NjI5OEU1NzQ0MzRBMjEzQkZENTk4NTRGQkJDMUFDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDUzRUU0NEI2Mjk4RTU3NDQzNEEyMTNCRkQ1OTg1NEZCQkMx QUM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvMDQ1M0VFNDRCNjI5OEU1NzQ0MzRBMjEzQkZENTk4 NTRGQkJDMUFDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfjVMExZCDmo7HZbzcv/Z3jIgcS1VO+YYcH wFhgiR15MMBvzuKMjwIpczirkqHCs+8D8EE45cBo9k6EXbtlZ26cfWSRBuPqi1WM Aq3msywd/qNUzuJODW+SvYD6ex3grDifFy61h38wXL0EfY6zl+PIFN5W7dUyjz3Y xWOOg3lSfMW4iMW2TjLvy97VR19Jq/ue97FrBQ9RlCXsYl4QgGYeoyFyoBRKoun0 DkJuTU1PQ7IKkHHGRctUyX8WIxGcODiNgPHb9zYVQIehNFvJWuxN/4YcpCQThOwE RGvdRfU+O+NLYngQ+CATDK6waE0DkWeHu58inUD9B/yUR7zUELY= -----END CERTIFICATE-----Generated at Tue Jul 21 06:11:43 2026 by rpki-client