$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft File: 5645F0B82898A2A9A354AB086BC696E81297553D.mft (raw, json) Hash identifier: pzp7C9f8KCra963Z24vbZ5qtzlCa/p+M7tg7o/ovvY0= Subject key identifier: 59:52:F5:E6:EE:3F:B4:9F:13:DB:3F:D4:30:CA:82:83:AF:19:AE:EC Authority key identifier: 56:45:F0:B8:28:98:A2:A9:A3:54:AB:08:6B:C6:96:E8:12:97:55:3D Certificate issuer: /CN=5645F0B82898A2A9A354AB086BC696E81297553D Certificate serial: 470CB5984C93074FEF4E65BBDFD27E73AAFA13F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 04:00:53 +0000 Manifest this update: Tue 21 Jul 2026 03:55:53 +0000 Manifest next update: Wed 22 Jul 2026 07:17:53 +0000 Files and hashes: 1: 3130332e36372e36392e302f32342d3234203d3e20313531393938.roa (hash: qeHJ1PkAaAN+foqEt/Aw5gnh3414OQ8lq2kg+Oj23CQ=) 2: 5645F0B82898A2A9A354AB086BC696E81297553D.crl (hash: z1p8X9HhNWvCzAJfizCvTHHZqJTd1l3281jRkmb678M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.crl rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:0c:b5:98:4c:93:07:4f:ef:4e:65:bb:df:d2:7e:73:aa:fa:13:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5645F0B82898A2A9A354AB086BC696E81297553D Validity Not Before: Jul 21 03:55:53 2026 GMT Not After : Jul 22 07:17:53 2026 GMT Subject: CN=5952F5E6EE3FB49F13DB3FD430CA8283AF19AEEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:4d:23:fe:0e:7f:4d:e9:2f:1d:b9:ab:e1: b0:73:77:21:5d:b0:e6:ac:c3:e7:05:b3:be:1d:a6: 63:b6:73:85:8b:ca:a5:72:75:6d:0d:bf:9e:0a:96: ed:0c:99:1c:21:09:76:9e:c1:6a:ee:ef:44:76:c7: dc:ee:9a:1a:5d:0e:5d:d1:d5:aa:45:8c:57:97:7e: 0b:08:34:0f:22:31:28:7c:2a:b4:3a:81:8a:9c:5e: 49:2c:32:1f:f0:a1:33:24:19:6f:17:89:68:3b:99: b4:8c:14:30:d5:b1:78:5b:68:0b:b4:c2:5c:df:e3: ff:7f:ab:62:93:96:a3:65:ca:68:4c:97:d8:95:e2: 6f:04:a7:ed:e7:98:4b:fa:dc:fa:87:b3:47:f8:bf: 23:fc:4f:46:3c:21:6e:f4:3b:c6:d1:5d:b9:3b:7d: 89:4b:22:08:47:41:aa:e0:f6:eb:73:70:a1:4b:a8: a9:fb:6d:c9:15:d9:34:b7:d4:ff:27:4d:74:47:4e: 3f:5f:71:46:a0:52:3b:f9:98:69:42:b6:81:c9:f2: 7e:01:47:a3:87:5d:b7:1a:5b:a6:16:4b:7c:25:2e: 20:0f:88:98:25:a1:af:e0:92:b8:e6:f9:ba:8e:91: a9:53:1b:5b:d7:f2:04:c2:eb:21:3d:88:2d:43:19: fa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:52:F5:E6:EE:3F:B4:9F:13:DB:3F:D4:30:CA:82:83:AF:19:AE:EC X509v3 Authority Key Identifier: keyid:56:45:F0:B8:28:98:A2:A9:A3:54:AB:08:6B:C6:96:E8:12:97:55:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:05:6b:8f:9a:a6:10:6b:f8:84:82:44:e2:89:78:f9:01:ce: 85:d3:c1:3f:08:12:52:e2:51:fe:1d:17:12:a5:00:6a:f5:87: d2:a2:24:0a:b9:6c:70:6e:93:24:32:1f:b3:79:f7:f6:60:7c: 28:0f:89:7f:b0:6d:9d:ea:20:64:77:bc:05:54:44:a1:84:06: cd:58:3d:93:c2:07:5c:ba:1d:d6:7e:e2:93:4e:6b:96:d5:7a: c0:61:5e:27:ff:94:40:61:5b:f9:fc:ac:e1:80:26:61:74:5b: 33:cc:2a:90:91:1a:19:b7:bb:00:a7:d4:c0:42:64:6e:59:9e: 10:8e:55:2a:cf:06:5a:fb:a3:b4:83:ec:7c:d0:75:97:7b:a9: 31:45:49:26:38:e9:14:f3:a6:fb:b9:72:d1:f7:e2:ce:a3:17: 88:18:75:54:c6:a3:97:6a:2e:a1:de:f8:c6:a8:ed:6b:a7:e6: e5:fb:26:5e:60:18:67:41:4c:3d:cf:59:ca:d9:51:ac:67:c5: c3:5c:bd:15:40:c0:f4:79:d3:ac:c0:5f:af:8f:9b:c6:8f:15: cf:2b:db:5b:7f:34:4c:ab:25:ab:d4:95:f6:40:88:2c:68:a7: 3f:fe:dc:0e:85:5e:36:73:5b:40:d1:65:04:81:4a:a6:6f:d7: 7a:dc:4e:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURwy1mEyTB0/vTmW739J+c6r6E/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY0NUYwQjgyODk4QTJBOUEzNTRBQjA4NkJDNjk2RTgx Mjk3NTUzRDAeFw0yNjA3MjEwMzU1NTNaFw0yNjA3MjIwNzE3NTNaMDMxMTAvBgNV BAMTKDU5NTJGNUU2RUUzRkI0OUYxM0RCM0ZENDMwQ0E4MjgzQUYxOUFFRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9mk0j/g5/TekvHbmr4bBzdyFd sOasw+cFs74dpmO2c4WLyqVydW0Nv54Klu0MmRwhCXaewWru70R2x9zumhpdDl3R 1apFjFeXfgsINA8iMSh8KrQ6gYqcXkksMh/woTMkGW8XiWg7mbSMFDDVsXhbaAu0 wlzf4/9/q2KTlqNlymhMl9iV4m8Ep+3nmEv63PqHs0f4vyP8T0Y8IW70O8bRXbk7 fYlLIghHQarg9utzcKFLqKn7bckV2TS31P8nTXRHTj9fcUagUjv5mGlCtoHJ8n4B R6OHXbcaW6YWS3wlLiAPiJgloa/gkrjm+bqOkalTG1vX8gTC6yE9iC1DGfrPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWVL15u4/tJ8T2z/UMMqCg68ZruwwHwYDVR0j BBgwFoAUVkXwuCiYoqmjVKsIa8aW6BKXVT0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBkOGRhMmQtYTUwNi00NzYzLWJjM2MtZTI4MGJmNzUxN2E0LzAvNTY0NUYwQjgy ODk4QTJBOUEzNTRBQjA4NkJDNjk2RTgxMjk3NTUzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NjQ1RjBCODI4OThBMkE5QTM1NEFCMDg2QkM2OTZFODEyOTc1 NTNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBkOGRhMmQtYTUwNi00NzYzLWJj M2MtZTI4MGJmNzUxN2E0LzAvNTY0NUYwQjgyODk4QTJBOUEzNTRBQjA4NkJDNjk2 RTgxMjk3NTUzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8Fa4+aphBr+ISCROKJePkBzoXTwT8IElLi Uf4dFxKlAGr1h9KiJAq5bHBukyQyH7N59/ZgfCgPiX+wbZ3qIGR3vAVURKGEBs1Y PZPCB1y6HdZ+4pNOa5bVesBhXif/lEBhW/n8rOGAJmF0WzPMKpCRGhm3uwCn1MBC ZG5ZnhCOVSrPBlr7o7SD7HzQdZd7qTFFSSY46RTzpvu5ctH34s6jF4gYdVTGo5dq LqHe+Mao7Wun5uX7Jl5gGGdBTD3PWcrZUaxnxcNcvRVAwPR506zAX6+Pm8aPFc8r 21t/NEyrJavUlfZAiCxopz/+3A6FXjZzW0DRZQSBSqZv13rcTiQ= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:18 2026 by rpki-client