$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft File: 7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft (raw, json) Hash identifier: IdAjFu9cg14tqw54aJqrFx3I1vYZo4olPdfsO9U23Nw= Subject key identifier: 22:C5:68:42:59:1C:BF:CE:56:FC:E1:06:42:4F:DB:D1:92:48:37:3D Authority key identifier: 7D:45:B2:ED:A1:9A:FF:B2:D1:13:11:2B:95:07:29:83:11:C5:DB:85 Certificate issuer: /CN=7D45B2EDA19AFFB2D113112B9507298311C5DB85 Certificate serial: 260A91B18CD4F52E00A1394035CD6A6C2A0B0556 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 11:43:06 +0000 Manifest this update: Thu 17 Sep 2026 11:38:06 +0000 Manifest next update: Fri 18 Sep 2026 11:59:06 +0000 Files and hashes: 1: 7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl (hash: 0XqtBwYfIBOgeFlzHQDlyB6DNw4Yqhl+R9qRayGNsYs=) 2: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: MB43wivyVMcmejyDt+ILCLmOnQIliDhhXU3YyNcO9+8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:0a:91:b1:8c:d4:f5:2e:00:a1:39:40:35:cd:6a:6c:2a:0b:05:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D45B2EDA19AFFB2D113112B9507298311C5DB85 Validity Not Before: Sep 17 11:38:06 2026 GMT Not After : Sep 18 11:59:06 2026 GMT Subject: CN=22C56842591CBFCE56FCE106424FDBD19248373D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7b:73:10:05:61:bf:81:2e:22:b4:a2:2f:c7: 91:44:ad:5b:af:bd:82:3a:7e:fb:5e:d0:a4:bf:af: e5:43:ee:1e:fc:02:64:57:cb:f7:d1:33:67:90:5e: ca:94:11:42:2f:92:05:7e:ed:c7:56:1b:0a:9c:d9: 6d:f3:25:0e:e4:f5:6a:ff:9b:2c:fa:9f:7d:2c:bd: 72:3b:05:06:23:b9:e1:10:8c:e9:c4:ba:4b:d3:67: 72:de:bc:73:4c:67:2d:84:bd:a8:36:9a:3a:bc:28: a8:22:da:fb:b6:23:e4:ba:1f:cd:52:63:5a:c0:07: 2d:d4:41:e4:08:1e:55:8c:a1:b7:8c:db:eb:b9:0c: c4:a4:bb:94:9c:e6:b9:e9:95:cf:4c:c5:3c:8b:53: 93:c0:4f:e0:32:93:78:2d:f1:b2:f3:75:e4:03:44: 8f:90:e6:24:fa:10:9c:f5:e4:30:ed:58:e3:5c:72: 54:f7:80:b0:b2:5d:5e:c8:c9:c1:ef:36:db:61:83: 15:50:8b:12:4e:7c:b4:82:e3:9f:1c:a1:09:3c:0f: f7:bd:dc:d8:f0:03:10:6b:a1:61:b1:22:c3:cb:80: 0c:15:f3:68:92:66:4c:88:f5:fe:f0:00:b4:83:52: c0:d0:53:a7:bc:f9:fa:c1:ad:4b:c9:c1:9e:5b:3c: 41:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C5:68:42:59:1C:BF:CE:56:FC:E1:06:42:4F:DB:D1:92:48:37:3D X509v3 Authority Key Identifier: keyid:7D:45:B2:ED:A1:9A:FF:B2:D1:13:11:2B:95:07:29:83:11:C5:DB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:54:7b:c2:d5:ce:d5:a2:83:71:96:eb:07:df:f7:1c:c4:20: c1:ce:39:ac:b7:e0:4b:df:78:47:3e:76:bd:fb:fa:14:ab:96: 75:54:c1:67:d1:5f:61:70:9d:6b:be:64:e5:a9:9f:d6:f1:b0: dc:b7:9c:8e:e2:9f:4a:02:1f:50:07:b3:0a:aa:c5:9c:c8:44: b8:55:bb:f8:3f:4f:a0:48:03:5d:c6:bc:af:2b:d4:f9:ec:5b: bc:98:86:84:42:6c:0e:41:93:9f:5e:95:41:8c:64:be:cd:ce: a1:c5:1f:f9:77:ef:51:61:5c:c5:a6:44:f8:61:e2:d2:4f:e5: 9a:1b:2c:39:57:2d:13:f0:25:55:97:1a:71:51:90:43:56:4f: 26:d9:f7:0e:22:78:59:d8:c5:a1:9d:c8:ad:8c:3a:1a:2e:75: af:34:e9:2b:74:bc:8b:45:29:db:c0:ac:8b:d7:d3:7f:38:05: 40:a6:42:9e:2a:f8:0b:39:17:cc:9d:4d:a8:aa:03:a4:de:f3: dd:9b:11:fd:96:ea:32:97:4b:66:ce:b9:f4:50:7b:3c:84:ac: 93:85:fa:5d:31:ab:75:eb:a7:53:56:b7:5c:8e:8d:29:62:de: 91:4f:47:4f:d8:aa:cb:d6:bf:ea:98:7e:74:be:f2:b9:cc:65: 09:a6:f2:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJgqRsYzU9S4AoTlANc1qbCoLBVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q0NUIyRURBMTlBRkZCMkQxMTMxMTJCOTUwNzI5ODMx MUM1REI4NTAeFw0yNjA5MTcxMTM4MDZaFw0yNjA5MTgxMTU5MDZaMDMxMTAvBgNV BAMTKDIyQzU2ODQyNTkxQ0JGQ0U1NkZDRTEwNjQyNEZEQkQxOTI0ODM3M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9e3MQBWG/gS4itKIvx5FErVuv vYI6fvte0KS/r+VD7h78AmRXy/fRM2eQXsqUEUIvkgV+7cdWGwqc2W3zJQ7k9Wr/ myz6n30svXI7BQYjueEQjOnEukvTZ3LevHNMZy2Evag2mjq8KKgi2vu2I+S6H81S Y1rABy3UQeQIHlWMobeM2+u5DMSku5Sc5rnplc9MxTyLU5PAT+Ayk3gt8bLzdeQD RI+Q5iT6EJz15DDtWONcclT3gLCyXV7IycHvNtthgxVQixJOfLSC458coQk8D/e9 3NjwAxBroWGxIsPLgAwV82iSZkyI9f7wALSDUsDQU6e8+frBrUvJwZ5bPEEhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIsVoQlkcv85W/OEGQk/b0ZJINz0wHwYDVR0j BBgwFoAUfUWy7aGa/7LRExErlQcpgxHF24UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJkNDM0MGItMjFjNC00ZmM3LWEyNTktZTIzNTRjNTNmZGQyLzAvN0Q0NUIyRURB MTlBRkZCMkQxMTMxMTJCOTUwNzI5ODMxMUM1REI4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDQ1QjJFREExOUFGRkIyRDExMzExMkI5NTA3Mjk4MzExQzVE Qjg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJkNDM0MGItMjFjNC00ZmM3LWEy NTktZTIzNTRjNTNmZGQyLzAvN0Q0NUIyRURBMTlBRkZCMkQxMTMxMTJCOTUwNzI5 ODMxMUM1REI4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANBUe8LVztWig3GW6wff9xzEIMHOOay34Evf eEc+dr37+hSrlnVUwWfRX2FwnWu+ZOWpn9bxsNy3nI7in0oCH1AHswqqxZzIRLhV u/g/T6BIA13GvK8r1PnsW7yYhoRCbA5Bk59elUGMZL7NzqHFH/l371FhXMWmRPhh 4tJP5ZobLDlXLRPwJVWXGnFRkENWTybZ9w4ieFnYxaGdyK2MOhouda806St0vItF KdvArIvX0384BUCmQp4q+As5F8ydTaiqA6Te892bEf2W6jKXS2bOufRQezyErJOF +l0xq3Xrp1NWt1yOjSli3pFPR0/YqsvWv+qYfnS+8rnMZQmm8gM= -----END CERTIFICATE-----Generated at Thu Sep 17 14:22:21 2026 by rpki-client