$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft File: CD845730E45E4D531071D97C1EDC23DA378D662F.mft (raw, json) Hash identifier: 8fiX55sgBLFZjwX95JDClw+XBCKOj2lU0Vjh5ud3BH4= Subject key identifier: 04:BA:C7:DF:37:BC:44:2E:1E:09:22:1D:ED:9A:82:13:5F:E7:6B:CE Authority key identifier: CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F Certificate issuer: /CN=CD845730E45E4D531071D97C1EDC23DA378D662F Certificate serial: 38734F297DC46D1F56B039CD563352FF22DAC6A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 12:27:47 +0000 Manifest this update: Sun 02 Aug 2026 12:22:47 +0000 Manifest next update: Mon 03 Aug 2026 16:08:47 +0000 Files and hashes: 1: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: qBRAe7C40tWA04dsJPNXkwqtoGUaunwx7S+rfFhu9ho=) 2: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: lb4d9lrnmMWGai0ItqfgLnvKFt7iEuEC2HCE9pUg2nE=) 3: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: BgiKJc54U9vx0Bz6VAlgbJ7Gti2eL3QTE9xees67wzA=) 4: CD845730E45E4D531071D97C1EDC23DA378D662F.crl (hash: o1ai64wrOcvXQ5T3e8nEbJnyWtcvZPRi/3InSBm4agU=) 5: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: ZyTKIgLUxCGhcIet/CFJoBSXRoiA7e9G+Kr6S5o0mEQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:73:4f:29:7d:c4:6d:1f:56:b0:39:cd:56:33:52:ff:22:da:c6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD845730E45E4D531071D97C1EDC23DA378D662F Validity Not Before: Aug 2 12:22:47 2026 GMT Not After : Aug 3 16:08:47 2026 GMT Subject: CN=04BAC7DF37BC442E1E09221DED9A82135FE76BCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1b:51:71:97:f9:a7:59:bc:f8:45:25:73:c9: 47:d7:dd:29:9e:97:53:7f:ad:4c:da:03:67:3a:aa: 27:ac:bf:84:dd:e6:db:fc:b0:12:83:92:dc:4f:37: ef:0d:a0:6b:90:4b:cd:27:93:96:a1:0e:fb:69:b7: 32:d4:54:20:b1:18:6b:12:cb:ed:3e:82:e8:5f:ea: 2e:fd:17:4f:b4:71:4e:e3:92:b9:ec:88:23:2d:81: f4:5e:69:3e:7c:10:f9:61:b9:0b:37:43:a6:85:50: e6:b6:94:40:55:ec:63:60:4a:e8:f2:da:d5:f6:6c: 0d:bc:f6:ae:d3:94:a3:80:86:a3:e6:5b:96:f6:b4: d7:a6:43:44:bb:36:39:0a:1e:d3:b2:d9:9e:d2:92: c9:5b:77:23:16:36:26:0b:a8:e4:e4:a9:a6:ec:b7: 7b:b8:d8:b7:82:62:3c:a9:51:ed:59:4a:76:95:de: a1:ea:e9:c4:95:00:28:f6:46:a5:08:78:b9:c5:82: 3b:b7:8a:80:36:98:ba:d0:c2:0b:7e:95:bc:c7:93: a8:51:8c:3d:69:6f:4e:46:bf:4a:3c:cf:52:e3:2e: ac:eb:0c:32:b8:e0:e1:b1:c2:21:c2:a2:9f:2a:16: 2a:37:c9:9a:2e:64:77:18:f1:f4:93:1b:0f:3d:54: ea:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BA:C7:DF:37:BC:44:2E:1E:09:22:1D:ED:9A:82:13:5F:E7:6B:CE X509v3 Authority Key Identifier: keyid:CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:28:a8:fa:cb:63:47:1d:19:a3:7d:66:c6:20:13:f7:f6:1e: c2:b3:ee:e1:70:56:5a:14:0b:d0:83:3c:2c:cb:a9:ed:df:7f: 13:7a:37:90:99:7b:69:18:30:97:47:5f:16:32:03:36:66:34: de:e1:38:d3:45:b5:c8:f2:b7:d9:f7:48:9a:38:f0:a8:95:70: ec:bf:5e:ca:4d:81:70:b9:d9:b3:36:60:b0:6f:58:03:52:2c: dc:18:2a:46:f6:d0:58:52:1a:00:47:51:0b:f1:07:ac:07:52: 1e:5f:b6:65:bd:5c:39:ef:46:71:47:a3:f2:fa:5b:62:39:c3: de:5e:d2:44:04:eb:80:3e:56:0c:39:6a:99:aa:7a:8b:2b:28: 07:a1:01:56:13:eb:4f:5e:c2:57:b6:4f:df:01:f6:e5:2a:67: 72:18:d9:b8:56:cc:68:e1:87:ad:bb:4f:55:7d:6e:d6:e7:be: 7b:5a:26:35:2a:f1:e4:b2:3b:04:b6:82:9b:91:1c:0a:77:87: 3c:26:c3:33:e0:9e:60:32:b0:5d:04:92:25:c6:0d:06:a9:91: b9:38:97:f2:66:ec:aa:eb:a8:7e:bc:25:5a:44:15:25:53:26: 66:e6:fc:cc:65:cc:24:6b:0b:8f:bd:c0:42:4d:e5:a9:7c:26: 04:b4:73:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOHNPKX3EbR9WsDnNVjNS/yLaxqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEz NzhENjYyRjAeFw0yNjA4MDIxMjIyNDdaFw0yNjA4MDMxNjA4NDdaMDMxMTAvBgNV BAMTKDA0QkFDN0RGMzdCQzQ0MkUxRTA5MjIxREVEOUE4MjEzNUZFNzZCQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvG1Fxl/mnWbz4RSVzyUfX3Sme l1N/rUzaA2c6qiesv4Td5tv8sBKDktxPN+8NoGuQS80nk5ahDvtptzLUVCCxGGsS y+0+guhf6i79F0+0cU7jkrnsiCMtgfReaT58EPlhuQs3Q6aFUOa2lEBV7GNgSujy 2tX2bA289q7TlKOAhqPmW5b2tNemQ0S7NjkKHtOy2Z7SkslbdyMWNiYLqOTkqabs t3u42LeCYjypUe1ZSnaV3qHq6cSVACj2RqUIeLnFgju3ioA2mLrQwgt+lbzHk6hR jD1pb05Gv0o8z1LjLqzrDDK44OGxwiHCop8qFio3yZouZHcY8fSTGw89VOpPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBLrH3ze8RC4eCSId7ZqCE1/na84wHwYDVR0j BBgwFoAUzYRXMOReTVMQcdl8Htwj2jeNZi8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA5NjJjNmUtNTk1YS00N2M0LWFhN2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBF NDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEzNzhENjYyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDg0NTczMEU0NUU0RDUzMTA3MUQ5N0MxRURDMjNEQTM3OEQ2 NjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA5NjJjNmUtNTk1YS00N2M0LWFh N2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIz REEzNzhENjYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgoqPrLY0cdGaN9ZsYgE/f2HsKz7uFwVloU C9CDPCzLqe3ffxN6N5CZe2kYMJdHXxYyAzZmNN7hONNFtcjyt9n3SJo48KiVcOy/ XspNgXC52bM2YLBvWANSLNwYKkb20FhSGgBHUQvxB6wHUh5ftmW9XDnvRnFHo/L6 W2I5w95e0kQE64A+Vgw5apmqeosrKAehAVYT609ewle2T98B9uUqZ3IY2bhWzGjh h627T1V9btbnvntaJjUq8eSyOwS2gpuRHAp3hzwmwzPgnmAysF0EkiXGDQapkbk4 l/Jm7KrrqH68JVpEFSVTJmbm/MxlzCRrC4+9wEJN5al8JgS0c30= -----END CERTIFICATE-----Generated at Sun Aug 2 23:18:53 2026 by rpki-client