$ rpki-client -vvf rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft File: 7445E0A188A89312C5454C032583053AC7510B2E.mft (raw, json) Hash identifier: Tg54CsZ3MD3hghMLtVMMfBmMCzx/3hn0TtM2kLEdS6o= Subject key identifier: DE:3A:74:B8:FF:CE:7F:4A:25:27:A8:18:4D:B2:62:CB:BE:EF:3A:F8 Authority key identifier: 74:45:E0:A1:88:A8:93:12:C5:45:4C:03:25:83:05:3A:C7:51:0B:2E Certificate issuer: /CN=7445E0A188A89312C5454C032583053AC7510B2E Certificate serial: 4DFB452FC396D23966CC827AAAECC4C794F403CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7445E0A188A89312C5454C032583053AC7510B2E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 20:24:56 +0000 Manifest this update: Thu 23 Jul 2026 20:19:56 +0000 Manifest next update: Fri 24 Jul 2026 20:42:56 +0000 Files and hashes: 1: 3130332e3138392e3235302e302f32332d3234203d3e20313530323437.roa (hash: NNCIDLB8B5pgD36GvRtcI/+uQ+zL1+/NCHRLyabCKqA=) 2: 7445E0A188A89312C5454C032583053AC7510B2E.crl (hash: SCa07+a2FSy1VJilROkqnrhhoar3jx7rNeP4W6RBgOg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.crl rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7445E0A188A89312C5454C032583053AC7510B2E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:fb:45:2f:c3:96:d2:39:66:cc:82:7a:aa:ec:c4:c7:94:f4:03:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7445E0A188A89312C5454C032583053AC7510B2E Validity Not Before: Jul 23 20:19:56 2026 GMT Not After : Jul 24 20:42:56 2026 GMT Subject: CN=DE3A74B8FFCE7F4A2527A8184DB262CBBEEF3AF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d8:56:70:15:1a:99:44:26:f2:b9:a4:24:f8: 78:ab:f5:8f:25:56:c0:1e:c5:2a:ec:d5:ac:91:70: 58:67:fb:11:21:e8:67:fc:75:8a:72:4e:24:7d:89: 9c:30:ad:7d:79:bb:0a:fc:30:71:ee:a1:2c:08:d2: 49:f4:dd:e1:9e:5c:ee:b0:e4:b4:27:3f:b0:38:c3: 59:eb:91:e1:d4:ff:11:1d:47:0e:45:c3:ed:57:ff: 01:f5:f9:35:6e:1f:5c:dc:80:5b:52:e3:67:4c:54: c2:3a:3e:cc:63:de:57:53:c9:29:ec:fe:7d:6d:8b: 74:50:76:79:d5:28:93:a1:42:1a:c3:6c:70:eb:ce: d3:a3:bc:9d:65:46:37:58:80:fa:7a:39:6e:ba:39: 46:21:1b:41:2a:7b:d3:e3:5a:36:b7:e1:92:b8:8c: a9:b6:ab:3c:de:b2:2a:be:79:a2:38:dc:a3:86:af: 56:2b:92:16:2e:7f:29:87:5e:c4:9b:89:a4:65:45: b8:af:2d:61:04:15:9e:74:14:b8:48:7e:1b:a2:79: 6d:47:95:02:62:59:30:e2:0d:03:9e:2a:28:12:b2: 0e:64:f8:11:b2:6f:39:48:d9:97:83:af:0e:11:45: 78:9f:d0:d4:fc:d3:e7:d5:1f:b6:d0:45:37:65:b2: aa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3A:74:B8:FF:CE:7F:4A:25:27:A8:18:4D:B2:62:CB:BE:EF:3A:F8 X509v3 Authority Key Identifier: keyid:74:45:E0:A1:88:A8:93:12:C5:45:4C:03:25:83:05:3A:C7:51:0B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7445E0A188A89312C5454C032583053AC7510B2E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:17:f3:85:7e:51:b5:99:a8:42:a5:2b:a9:c6:d1:16:63:d1: c3:db:8b:83:86:62:5b:7f:e7:e6:4b:32:bd:6c:c7:48:c7:3e: 4f:95:d3:82:b2:10:53:89:96:68:5c:3f:0b:cd:dc:1e:1e:85: 20:f7:fc:16:6d:2b:6e:bf:c0:17:f8:79:ae:7e:dc:2c:c3:bf: 67:5f:60:c2:cf:86:d4:39:09:79:be:c9:e8:f2:22:26:38:e0: 4d:38:2d:9f:31:2c:49:28:d4:1d:23:fe:2e:3a:66:59:76:6a: dd:c8:7a:1a:d1:95:a4:b2:7f:16:08:1f:11:f4:aa:d6:d8:56: 43:0c:b0:af:0d:12:85:fe:71:c0:4e:04:5d:69:22:41:a2:0d: 8b:dc:e6:a6:62:21:79:ed:b3:44:89:7a:43:55:68:7e:0a:1f: 28:63:08:0b:40:8d:17:99:b2:0b:28:8d:44:3d:52:6f:3b:05: 06:a0:fb:c2:8d:73:07:1a:a8:b5:29:d0:15:b9:b9:8b:11:e2: 0d:99:ee:01:4b:b6:a8:24:c6:60:86:9b:8e:f4:0a:3e:10:5a: c2:d2:73:41:50:fe:a5:d5:33:d0:8c:fb:50:0b:d8:00:3f:b5: 57:d4:f2:b3:0b:9e:07:4a:c6:70:be:fb:9c:7f:86:82:46:a4: 05:b8:c6:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTftFL8OW0jlmzIJ6quzEx5T0A8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0NUUwQTE4OEE4OTMxMkM1NDU0QzAzMjU4MzA1M0FD NzUxMEIyRTAeFw0yNjA3MjMyMDE5NTZaFw0yNjA3MjQyMDQyNTZaMDMxMTAvBgNV BAMTKERFM0E3NEI4RkZDRTdGNEEyNTI3QTgxODREQjI2MkNCQkVFRjNBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv2FZwFRqZRCbyuaQk+Hir9Y8l VsAexSrs1ayRcFhn+xEh6Gf8dYpyTiR9iZwwrX15uwr8MHHuoSwI0kn03eGeXO6w 5LQnP7A4w1nrkeHU/xEdRw5Fw+1X/wH1+TVuH1zcgFtS42dMVMI6Psxj3ldTySns /n1ti3RQdnnVKJOhQhrDbHDrztOjvJ1lRjdYgPp6OW66OUYhG0Eqe9PjWja34ZK4 jKm2qzzesiq+eaI43KOGr1YrkhYufymHXsSbiaRlRbivLWEEFZ50FLhIfhuieW1H lQJiWTDiDQOeKigSsg5k+BGybzlI2ZeDrw4RRXif0NT80+fVH7bQRTdlsqq7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3jp0uP/Of0olJ6gYTbJiy77vOvgwHwYDVR0j BBgwFoAUdEXgoYiokxLFRUwDJYMFOsdRCy4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjIxMTI2ZDMtMTNiZS00NTA4LWI5N2QtMTNmZTY1YTViNGQ2LzAvNzQ0NUUwQTE4 OEE4OTMxMkM1NDU0QzAzMjU4MzA1M0FDNzUxMEIyRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NDQ1RTBBMTg4QTg5MzEyQzU0NTRDMDMyNTgzMDUzQUM3NTEw QjJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjIxMTI2ZDMtMTNiZS00NTA4LWI5 N2QtMTNmZTY1YTViNGQ2LzAvNzQ0NUUwQTE4OEE4OTMxMkM1NDU0QzAzMjU4MzA1 M0FDNzUxMEIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoX84V+UbWZqEKlK6nG0RZj0cPbi4OGYlt/ 5+ZLMr1sx0jHPk+V04KyEFOJlmhcPwvN3B4ehSD3/BZtK26/wBf4ea5+3CzDv2df YMLPhtQ5CXm+yejyIiY44E04LZ8xLEko1B0j/i46Zll2at3IehrRlaSyfxYIHxH0 qtbYVkMMsK8NEoX+ccBOBF1pIkGiDYvc5qZiIXnts0SJekNVaH4KHyhjCAtAjReZ sgsojUQ9Um87BQag+8KNcwcaqLUp0BW5uYsR4g2Z7gFLtqgkxmCGm470Cj4QWsLS c0FQ/qXVM9CM+1AL2AA/tVfU8rMLngdKxnC++5x/hoJGpAW4xtM= -----END CERTIFICATE-----Generated at Fri Jul 24 07:17:30 2026 by rpki-client