$ rpki-client -vvf rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft File: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft (raw, json) Hash identifier: ZwQ6kAr2UFz1x1G59fr5aM4juA7WhrLp0Ymav/Ur0Bw= Subject key identifier: F0:F8:22:B2:69:D6:80:68:5E:C6:37:BB:3F:C5:08:30:54:26:94:49 Authority key identifier: 1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA Certificate issuer: /CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Certificate serial: 4996F7F76249EE39E6557950C9DC4D88ADC483F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:57:55 +0000 Manifest this update: Fri 24 Jul 2026 02:52:55 +0000 Manifest next update: Sat 25 Jul 2026 03:07:55 +0000 Files and hashes: 1: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: nSsVilLmRiJa0+a7BBDxlGj708JBl0xDsJ3rq/l4Ock=) 2: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl (hash: paA3kNnt9GxJ8MNiWiaFQepG6A3nVriAfrtceVMsihs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:96:f7:f7:62:49:ee:39:e6:55:79:50:c9:dc:4d:88:ad:c4:83:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Validity Not Before: Jul 24 02:52:55 2026 GMT Not After : Jul 25 03:07:55 2026 GMT Subject: CN=F0F822B269D680685EC637BB3FC5083054269449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:26:0b:55:00:88:e1:92:b2:c8:59:97:cb: a4:26:18:92:fb:4e:70:93:86:95:28:84:1b:1e:a2: 93:73:47:66:82:f9:38:dd:69:72:29:e8:db:be:36: a9:97:1a:d3:39:93:c2:f0:00:41:29:bb:10:37:ba: 19:a7:07:59:03:57:48:d6:b4:c5:ff:a9:dc:ea:ab: ed:4e:0a:f9:af:65:ca:14:0f:13:f0:36:23:b8:75: 06:6e:98:ed:7b:ac:35:fe:d4:18:21:d1:79:08:42: 5b:a9:21:b5:a4:dc:92:7a:ab:4b:b8:43:34:5b:86: 04:24:c2:3d:3d:a6:68:f1:14:ce:bc:bf:bb:e1:a5: 75:48:10:4f:73:ca:0b:3c:79:86:f5:08:e1:58:50: 53:3f:da:34:9b:73:49:21:ea:39:3a:42:ce:85:ba: e3:e8:e1:2f:8c:e9:7f:66:f4:d1:25:e1:4d:10:c9: 12:c7:87:06:31:d3:dd:af:ae:65:97:9f:d0:66:8e: 4b:6a:31:38:6e:d2:a8:fe:60:cd:1b:27:79:e3:cb: 3c:b1:c4:93:d0:91:88:e8:1a:37:45:de:ae:a6:31: 64:82:c9:48:cd:da:3d:36:5a:76:03:05:d2:40:c9: 0a:a5:49:9b:bd:2e:43:e3:9f:04:c4:be:c4:14:20: c5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F8:22:B2:69:D6:80:68:5E:C6:37:BB:3F:C5:08:30:54:26:94:49 X509v3 Authority Key Identifier: keyid:1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:bf:ea:b1:56:cc:54:de:d6:ce:20:fd:2d:a9:bf:24:66:aa: fa:c3:7b:f0:a5:6c:64:aa:ac:b0:e4:d1:2e:fe:28:1b:ba:bf: 12:d1:8e:9a:fa:2d:2b:a9:5f:08:c4:2a:91:2c:05:16:93:00: 5d:06:b1:58:f7:b0:93:9a:0a:35:f8:1b:1b:d3:2c:72:16:28: 36:d6:16:98:32:49:4f:67:ae:92:e8:28:bf:40:e2:6b:b3:4f: 76:6e:0a:3d:e0:35:0d:2a:9e:78:7d:56:d9:29:a5:72:a2:4e: 4c:e0:ff:71:22:f1:68:0e:5e:24:10:02:a5:94:7a:25:60:e4: 26:99:e8:04:97:92:50:ba:1d:0c:39:1a:cb:44:5d:da:d0:11: c5:d8:3a:ac:40:6a:5a:2f:b3:62:ee:a7:5e:4b:61:78:e9:ef: 6b:e9:c9:2b:f6:1b:e5:16:df:b3:ca:52:fb:db:99:a9:d3:f1: ec:8a:67:52:dd:91:55:cb:fd:ab:b4:76:78:93:04:38:34:95: 8e:9c:d9:25:ca:2a:c8:0a:20:e5:91:fe:78:8b:fe:d1:fd:24: d4:7f:eb:d5:e1:35:65:68:84:e2:75:de:d8:03:1e:0a:22:6f: 73:49:74:2d:cc:91:1e:2d:6e:06:06:18:f6:ba:f0:09:58:e3: fe:ec:29:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSZb392JJ7jnmVXlQydxNiK3Eg/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0NTczMjVDODVGM0ZFRTJERTU3RkQzRUQyNTI2RDhD MTA0NTFGQTAeFw0yNjA3MjQwMjUyNTVaFw0yNjA3MjUwMzA3NTVaMDMxMTAvBgNV BAMTKEYwRjgyMkIyNjlENjgwNjg1RUM2MzdCQjNGQzUwODMwNTQyNjk0NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPbSYLVQCI4ZKyyFmXy6QmGJL7 TnCThpUohBseopNzR2aC+TjdaXIp6Nu+NqmXGtM5k8LwAEEpuxA3uhmnB1kDV0jW tMX/qdzqq+1OCvmvZcoUDxPwNiO4dQZumO17rDX+1Bgh0XkIQlupIbWk3JJ6q0u4 QzRbhgQkwj09pmjxFM68v7vhpXVIEE9zygs8eYb1COFYUFM/2jSbc0kh6jk6Qs6F uuPo4S+M6X9m9NEl4U0QyRLHhwYx092vrmWXn9BmjktqMThu0qj+YM0bJ3njyzyx xJPQkYjoGjdF3q6mMWSCyUjN2j02WnYDBdJAyQqlSZu9LkPjnwTEvsQUIMWpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8PgismnWgGhexje7P8UIMFQmlEkwHwYDVR0j BBgwFoAUHUVzJchfP+4t5X/T7SUm2MEEUfowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQwMWIyZDEtMDFjYS00MGU4LWJmNzctOTg2MTU5ODY3YTA0LzAvMUQ0NTczMjVD ODVGM0ZFRTJERTU3RkQzRUQyNTI2RDhDMTA0NTFGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDQ1NzMyNUM4NUYzRkVFMkRFNTdGRDNFRDI1MjZEOEMxMDQ1 MUZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvMUQ0NTczMjVDODVGM0ZFRTJERTU3RkQzRUQyNTI2 RDhDMTA0NTFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMS/6rFWzFTe1s4g/S2pvyRmqvrDe/ClbGSq rLDk0S7+KBu6vxLRjpr6LSupXwjEKpEsBRaTAF0GsVj3sJOaCjX4GxvTLHIWKDbW FpgySU9nrpLoKL9A4muzT3ZuCj3gNQ0qnnh9VtkppXKiTkzg/3Ei8WgOXiQQAqWU eiVg5CaZ6ASXklC6HQw5GstEXdrQEcXYOqxAalovs2Lup15LYXjp72vpySv2G+UW 37PKUvvbmanT8eyKZ1LdkVXL/au0dniTBDg0lY6c2SXKKsgKIOWR/niL/tH9JNR/ 69XhNWVohOJ13tgDHgoib3NJdC3MkR4tbgYGGPa68AlY4/7sKUA= -----END CERTIFICATE-----Generated at Fri Jul 24 06:22:55 2026 by rpki-client