$ rpki-client -vvf rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft File: 100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft (raw, json) Hash identifier: XLFslFwVMxwQ4WmIe51cUuYiNEJhySvG973+f5Mo+CU= Subject key identifier: 33:A5:A0:6F:F8:57:C5:09:ED:15:46:B6:5E:AD:A8:04:BB:E9:3E:19 Authority key identifier: 10:0E:5A:40:86:58:41:D5:6C:5A:B9:D0:CE:E7:21:88:07:7E:FA:A3 Certificate issuer: /CN=100E5A40865841D56C5AB9D0CEE72188077EFAA3 Certificate serial: 45D934682CD4772DB83B6F9624E4B141EDB55B95 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 17:13:08 +0000 Manifest this update: Sun 02 Aug 2026 17:08:08 +0000 Manifest next update: Mon 03 Aug 2026 20:05:08 +0000 Files and hashes: 1: 100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl (hash: xhaSWwCJ9+OBT5PwuwjjZSdLdT12hKf0sXObRbAApMQ=) 2: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: qQsYjjc0UOS4U0mqMilyLxWp2Jg/oy/EO/6yTd0J1SE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d9:34:68:2c:d4:77:2d:b8:3b:6f:96:24:e4:b1:41:ed:b5:5b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=100E5A40865841D56C5AB9D0CEE72188077EFAA3 Validity Not Before: Aug 2 17:08:08 2026 GMT Not After : Aug 3 20:05:08 2026 GMT Subject: CN=33A5A06FF857C509ED1546B65EADA804BBE93E19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:06:e9:d2:78:4c:50:4a:11:a7:de:2d:25:15: 89:51:af:13:5f:1e:52:44:fb:91:99:98:1a:82:c9: 9b:ae:a6:ca:f9:ab:83:6e:fd:84:5c:bb:f0:1d:33: 3f:e8:ee:7c:dc:66:9c:fd:e3:6d:77:ab:63:04:f2: 6b:8a:85:ba:05:12:21:a8:1e:1f:c8:a1:ac:ab:f4: c2:05:1d:ce:36:47:b1:13:a9:18:6e:be:80:5d:63: bc:b2:07:66:9b:2a:d3:15:c4:fb:06:53:3f:cb:48: 86:ee:f3:13:2f:b9:26:73:9d:5c:dd:c8:cb:8f:0c: d8:83:fc:bb:ab:dc:5f:a5:9b:75:b2:6e:f9:85:7e: f4:c9:6e:7b:c5:5d:76:61:83:77:e5:94:f4:be:5c: d6:fd:3f:26:92:72:13:91:dc:3a:88:14:6e:f2:d7: ad:57:b7:94:62:07:79:e0:1f:6d:e5:55:15:8f:42: be:dc:d9:ab:57:bb:1b:2f:47:42:7a:62:1b:c3:d8: c9:b7:9e:e5:68:f3:d3:60:8a:9f:37:cc:64:d4:a1: 25:cc:3a:36:11:de:28:21:e8:bb:2b:a8:f4:f4:ee: 94:39:4a:ac:0c:6c:9b:11:7c:ca:b1:a9:dc:31:19: 98:a3:e3:7d:08:f0:c7:61:8e:54:71:ec:ab:1d:58: 52:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A5:A0:6F:F8:57:C5:09:ED:15:46:B6:5E:AD:A8:04:BB:E9:3E:19 X509v3 Authority Key Identifier: keyid:10:0E:5A:40:86:58:41:D5:6C:5A:B9:D0:CE:E7:21:88:07:7E:FA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:e5:aa:c5:1b:15:82:f9:1b:f3:6b:56:e6:34:bc:b1:5a:46: d7:02:47:fd:c4:e1:fe:7e:84:b1:49:7b:c9:74:ee:7d:1d:94: d1:7b:0b:4e:4f:21:f7:f3:f6:80:0b:1c:f4:9a:f6:0a:02:96: fb:52:6f:82:1e:9a:75:20:1c:bf:e7:fb:8d:d3:24:96:00:9c: ca:ff:9d:d8:72:c2:6a:27:25:40:3f:34:ca:33:00:2b:ce:ac: 45:e0:ff:81:bd:85:da:c5:86:89:6e:d1:ee:d3:6d:e8:3f:af: 89:95:36:58:64:ea:bc:b1:4b:cd:72:1d:b6:1d:8d:31:d5:0b: 78:3f:f3:ea:fe:9e:08:9e:bd:09:86:19:16:3f:57:33:d7:85: f1:b7:5d:ca:1c:fc:7a:0b:7e:dd:c3:e0:cc:d5:d7:6d:34:1d: b5:79:d0:f1:08:bc:ab:fd:c5:b7:ea:db:2f:e7:fe:b1:30:5b: ef:ca:7e:35:e9:fa:27:a4:b4:e8:c0:ea:c1:19:e2:e9:a4:2a: 4d:ec:91:bd:f3:fe:45:e6:06:b1:29:bc:1b:80:e0:be:e5:47: 84:29:ba:1c:d1:46:09:3b:dd:de:aa:28:bf:cc:9a:0a:42:47: 34:43:2a:d7:dd:4c:52:d4:bb:94:6a:7b:38:2b:4c:90:5e:7d: b6:00:7c:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURdk0aCzUdy24O2+WJOSxQe21W5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwRTVBNDA4NjU4NDFENTZDNUFCOUQwQ0VFNzIxODgw NzdFRkFBMzAeFw0yNjA4MDIxNzA4MDhaFw0yNjA4MDMyMDA1MDhaMDMxMTAvBgNV BAMTKDMzQTVBMDZGRjg1N0M1MDlFRDE1NDZCNjVFQURBODA0QkJFOTNFMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcBunSeExQShGn3i0lFYlRrxNf HlJE+5GZmBqCyZuupsr5q4Nu/YRcu/AdMz/o7nzcZpz94213q2ME8muKhboFEiGo Hh/Ioayr9MIFHc42R7ETqRhuvoBdY7yyB2abKtMVxPsGUz/LSIbu8xMvuSZznVzd yMuPDNiD/Lur3F+lm3WybvmFfvTJbnvFXXZhg3fllPS+XNb9PyaSchOR3DqIFG7y 161Xt5RiB3ngH23lVRWPQr7c2atXuxsvR0J6YhvD2Mm3nuVo89Ngip83zGTUoSXM OjYR3igh6LsrqPT07pQ5SqwMbJsRfMqxqdwxGZij430I8MdhjlRx7KsdWFIdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM6Wgb/hXxQntFUa2Xq2oBLvpPhkwHwYDVR0j BBgwFoAUEA5aQIZYQdVsWrnQzuchiAd++qMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM2NTYxZDQtMjNjOC00YzliLTg5MGUtNGYyNjMyZTUyYzk3LzEvMTAwRTVBNDA4 NjU4NDFENTZDNUFCOUQwQ0VFNzIxODgwNzdFRkFBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDBFNUE0MDg2NTg0MUQ1NkM1QUI5RDBDRUU3MjE4ODA3N0VG QUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzEvMTAwRTVBNDA4NjU4NDFENTZDNUFCOUQwQ0VFNzIx ODgwNzdFRkFBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjlqsUbFYL5G/NrVuY0vLFaRtcCR/3E4f5+ hLFJe8l07n0dlNF7C05PIffz9oALHPSa9goClvtSb4IemnUgHL/n+43TJJYAnMr/ ndhywmonJUA/NMozACvOrEXg/4G9hdrFholu0e7Tbeg/r4mVNlhk6ryxS81yHbYd jTHVC3g/8+r+ngievQmGGRY/VzPXhfG3Xcoc/HoLft3D4MzV1200HbV50PEIvKv9 xbfq2y/n/rEwW+/KfjXp+iektOjA6sEZ4umkKk3skb3z/kXmBrEpvBuA4L7lR4Qp uhzRRgk73d6qKL/MmgpCRzRDKtfdTFLUu5RqezgrTJBefbYAfNM= -----END CERTIFICATE-----Generated at Mon Aug 3 01:47:31 2026 by rpki-client