$ rpki-client -vvf rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft File: 4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft (raw, json) Hash identifier: MGLcKtTzes6ToRTZDaA72bMibcrxkTwS5ItCtmEIfFk= Subject key identifier: 3A:D8:08:F6:C2:B0:D2:96:D1:D4:8D:82:7F:77:C3:15:0D:EC:43:41 Authority key identifier: 45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36 Certificate issuer: /CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36 Certificate serial: 0B5CE289260536BDDD95EA0B2B5CEF2371EF225E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 17:17:51 +0000 Manifest this update: Mon 20 Jul 2026 17:12:51 +0000 Manifest next update: Tue 21 Jul 2026 18:47:51 +0000 Files and hashes: 1: 3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa (hash: P9vNVfY/gnSAC1gUwy4cPedcB+rYejwkV7mz34Jb55c=) 2: 4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl (hash: qEsUf2gqn2zifNYWoBxvnkkxIQzdRusvfecnUDUvIAk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:5c:e2:89:26:05:36:bd:dd:95:ea:0b:2b:5c:ef:23:71:ef:22:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36 Validity Not Before: Jul 20 17:12:51 2026 GMT Not After : Jul 21 18:47:51 2026 GMT Subject: CN=3AD808F6C2B0D296D1D48D827F77C3150DEC4341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:05:1f:62:32:96:44:0f:a2:ef:95:68:19: ab:ff:e3:e4:7c:2c:3e:29:0a:67:17:c0:3d:d5:c7: c5:ff:cf:46:9f:52:ee:fe:62:7d:1e:a5:25:26:00: d8:c3:56:42:eb:96:e3:ef:14:65:9f:dd:ab:d2:62: 68:0f:ae:29:d0:a1:62:35:02:61:51:3f:cd:3c:5a: 1f:0d:5c:21:d1:15:d1:bf:a5:d4:ec:0d:8a:95:0a: 2a:42:7c:33:1e:ac:8d:3f:b0:7b:99:1b:80:da:51: f0:68:c4:0b:58:fb:3e:d8:91:d1:ed:6a:f2:f3:74: 9d:f2:2e:40:8b:1e:3f:72:5c:59:d3:44:4e:9b:b2: 41:c4:7e:94:47:a2:0d:cb:1e:89:b4:c9:27:a4:ea: 4e:b5:63:a1:a4:a2:10:b8:d6:28:dc:56:c8:98:fa: e7:c7:48:54:0d:ea:24:1a:99:ae:d5:a5:2e:ac:e8: 7c:f3:71:69:76:77:4f:3a:7c:82:06:5e:e7:2b:ca: 62:6c:cd:6f:b2:7c:a0:05:d8:ce:8a:a2:12:5e:31: a7:a8:88:13:9b:b9:2f:80:ce:75:40:73:85:8b:ee: 7e:91:bc:3c:74:2b:c4:4f:1d:36:80:00:25:8e:af: 83:ae:ae:4e:91:52:00:99:79:04:87:b5:df:0e:ee: 1b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D8:08:F6:C2:B0:D2:96:D1:D4:8D:82:7F:77:C3:15:0D:EC:43:41 X509v3 Authority Key Identifier: keyid:45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:70:38:e8:2d:7a:c7:3c:66:c1:dd:15:17:e0:1d:5b:f5:a2: 94:93:d2:aa:ba:23:3b:2c:02:08:db:83:e3:98:4c:d0:f6:f1: a2:a1:d0:2d:46:09:93:7b:8a:ad:b0:ee:96:6f:de:35:f4:a3: 72:10:67:ba:98:5f:60:4e:ab:c0:68:61:0b:42:99:97:e9:2f: 2f:09:22:2e:22:08:8d:d5:8e:29:0a:dd:37:01:1d:69:51:3a: 1c:e9:bd:e6:48:4d:1c:87:52:45:a2:b4:da:29:99:3a:d6:97: 46:4d:b3:80:95:3b:2c:ab:a0:b7:a0:0f:0e:cb:82:7f:8e:1e: 5f:04:db:28:2d:72:c3:d6:b4:fa:b4:96:33:3a:1f:a8:c0:76: b5:d6:93:7a:b8:cd:7c:a1:b1:c0:13:06:11:d7:ba:63:87:14: 66:31:55:ca:c1:42:8c:ab:b2:d4:25:b4:b5:57:e1:65:a1:91: 2e:9e:8d:97:63:cb:67:25:58:ad:e1:49:ac:ec:f1:85:e8:d8: 3a:7c:74:80:9c:cf:3d:97:1a:cb:06:c5:03:e0:0b:1f:0f:5b: db:b0:b6:04:a3:47:25:08:de:79:b7:1c:af:77:a1:3b:3c:e9: 79:a3:37:cc:01:b6:54:80:9e:6f:e7:bb:7b:fd:74:97:36:25: 9d:d7:ad:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC1ziiSYFNr3dleoLK1zvI3HvIl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzMkY4MDBBN0VCNUJDQjVEQjA1Njk5QzZEREFBN0Y5 NUZBRUMzNjAeFw0yNjA3MjAxNzEyNTFaFw0yNjA3MjExODQ3NTFaMDMxMTAvBgNV BAMTKDNBRDgwOEY2QzJCMEQyOTZEMUQ0OEQ4MjdGNzdDMzE1MERFQzQzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClEwUfYjKWRA+i75VoGav/4+R8 LD4pCmcXwD3Vx8X/z0afUu7+Yn0epSUmANjDVkLrluPvFGWf3avSYmgPrinQoWI1 AmFRP808Wh8NXCHRFdG/pdTsDYqVCipCfDMerI0/sHuZG4DaUfBoxAtY+z7YkdHt avLzdJ3yLkCLHj9yXFnTRE6bskHEfpRHog3LHom0ySek6k61Y6GkohC41ijcVsiY +ufHSFQN6iQama7VpS6s6HzzcWl2d086fIIGXucrymJszW+yfKAF2M6KohJeMaeo iBObuS+AznVAc4WL7n6RvDx0K8RPHTaAACWOr4Ourk6RUgCZeQSHtd8O7htxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOtgI9sKw0pbR1I2Cf3fDFQ3sQ0EwHwYDVR0j BBgwFoAURTL4AKfrW8tdsFaZxt2qf5X67DYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg0MjNiOGEtZmUyMi00M2FkLTk1MDctMWE5OWFiYmE3ZDk0LzAvNDUzMkY4MDBB N0VCNUJDQjVEQjA1Njk5QzZEREFBN0Y5NUZBRUMzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NTMyRjgwMEE3RUI1QkNCNURCMDU2OTlDNkREQUE3Rjk1RkFF QzM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg0MjNiOGEtZmUyMi00M2FkLTk1 MDctMWE5OWFiYmE3ZDk0LzAvNDUzMkY4MDBBN0VCNUJDQjVEQjA1Njk5QzZEREFB N0Y5NUZBRUMzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM5wOOgtesc8ZsHdFRfgHVv1opST0qq6Izss Agjbg+OYTND28aKh0C1GCZN7iq2w7pZv3jX0o3IQZ7qYX2BOq8BoYQtCmZfpLy8J Ii4iCI3VjikK3TcBHWlROhzpveZITRyHUkWitNopmTrWl0ZNs4CVOyyroLegDw7L gn+OHl8E2ygtcsPWtPq0ljM6H6jAdrXWk3q4zXyhscATBhHXumOHFGYxVcrBQoyr stQltLVX4WWhkS6ejZdjy2clWK3hSazs8YXo2Dp8dICczz2XGssGxQPgCx8PW9uw tgSjRyUI3nm3HK93oTs86XmjN8wBtlSAnm/nu3v9dJc2JZ3XrVM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:30 2026 by rpki-client