$ rpki-client -vvf rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft File: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft (raw, json) Hash identifier: lB5WfADQvHhJ7YVUPuhgzA/MDvhnLbCgnKd5nF5l2PI= Subject key identifier: 74:AE:7A:5B:CD:4E:75:BE:C3:27:E6:2F:E2:81:8C:D9:46:3F:F9:3D Authority key identifier: 45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE Certificate issuer: /CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Certificate serial: 3DB7989C630CC16C011839E79E444CD35D7C711D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 22:27:16 +0000 Manifest this update: Thu 23 Jul 2026 22:22:16 +0000 Manifest next update: Sat 25 Jul 2026 01:05:16 +0000 Files and hashes: 1: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: r7ncZa1eZkhiGYQA3/lYzQqMG78T/tq+6oH0TDPdwqs=) 2: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: bwSnt66rSTzmcS7aGzehGu0uATTN++QNXtznU8fkMRw=) 3: 45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl (hash: KrK/Se/2O9VW3drDbKa2wka45etpWXGe6PVCD9VGihg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b7:98:9c:63:0c:c1:6c:01:18:39:e7:9e:44:4c:d3:5d:7c:71:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE Validity Not Before: Jul 23 22:22:16 2026 GMT Not After : Jul 25 01:05:16 2026 GMT Subject: CN=74AE7A5BCD4E75BEC327E62FE2818CD9463FF93D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:5a:3c:2d:9f:a4:d7:a5:ae:2c:b8:06:f4: 65:f9:7e:f3:9e:61:7a:6e:00:9c:21:cd:97:6a:bc: 32:b7:00:6e:43:ee:31:f3:fb:ce:9e:5e:cb:91:66: 36:f5:7f:7b:b8:a8:68:bc:2f:d5:01:6c:ce:82:1e: 9c:f4:7d:33:16:6a:b6:b4:61:6a:ac:5e:d1:0a:ef: 5c:17:88:25:9e:9c:d1:dd:5c:35:a6:61:96:e8:d1: 98:fc:b2:ba:07:a2:78:95:e6:60:80:4a:95:25:2b: c5:bb:c9:45:43:31:47:9a:be:80:3f:07:60:09:ef: 63:4c:88:bb:df:e1:88:57:63:91:d3:9c:7c:f5:56: 73:c9:d8:67:d3:ab:a7:38:b7:a6:84:b3:4e:05:bf: fa:81:2d:ed:3f:4d:47:4e:fd:d9:04:f1:0f:c2:b9: 54:af:b4:5e:0f:7b:85:ff:50:c6:b1:52:05:2d:2f: d3:9c:15:59:ea:62:d8:82:f9:46:a1:be:50:0b:81: 21:97:23:a0:84:5b:52:25:af:d7:67:26:1c:a6:27: f9:d8:da:70:97:5e:93:0e:34:69:1c:1e:3d:ca:33: ba:88:7f:58:f7:e4:04:de:2c:12:11:df:10:a9:69: d8:ea:08:3e:75:3f:1e:69:4e:41:fe:18:d3:d0:c5: e0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AE:7A:5B:CD:4E:75:BE:C3:27:E6:2F:E2:81:8C:D9:46:3F:F9:3D X509v3 Authority Key Identifier: keyid:45:BD:0D:0C:B5:A7:C4:C4:9B:FB:BA:34:A7:16:52:6C:47:0E:C0:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/45BD0D0CB5A7C4C49BFBBA34A716526C470EC0DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:3d:73:00:55:b9:bd:64:e6:f7:69:d7:e1:17:f8:1d:9c:54: f1:2c:7c:b9:a5:9e:bb:56:02:6b:16:3a:b9:82:4b:45:9b:40: 3e:85:d8:78:5a:b6:c9:2e:2e:bd:ee:2c:dd:5d:46:c1:36:49: fd:c2:40:e0:8a:e9:48:74:69:4b:91:8a:86:7e:fb:ad:77:ef: 8e:42:ee:dd:b1:03:2d:fb:66:32:b3:51:b0:15:89:b1:8b:92: 13:9d:03:1c:f5:55:fd:b8:df:c6:ce:54:ae:fb:e1:3c:4e:dc: 33:a9:ed:e0:d6:bf:74:ec:fe:d1:8d:a9:d3:d9:e0:08:dd:73: 54:65:7a:67:45:3d:5e:9f:46:bc:1c:7e:cc:5f:77:27:69:7b: f2:4f:be:b8:af:b8:ec:d7:cf:12:5a:98:20:3f:69:c2:2f:a3: 6d:c5:50:c7:97:6a:fa:9c:20:b6:5e:41:09:7c:21:51:10:3b: b6:2c:23:c4:03:fd:15:5f:2e:70:5e:af:09:ac:5d:34:69:94: 67:53:fa:3e:0f:b2:a6:b5:85:80:b3:97:68:cc:da:7a:07:da: a8:bf:47:4d:4a:eb:b4:9d:1b:3d:b6:80:7c:1e:68:e0:a3:ae: 2d:93:3a:a1:36:ca:23:f0:64:e6:73:47:ab:74:2d:ff:18:81: 43:94:9f:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPbeYnGMMwWwBGDnnnkRM0118cR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVCRDBEMENCNUE3QzRDNDlCRkJCQTM0QTcxNjUyNkM0 NzBFQzBERTAeFw0yNjA3MjMyMjIyMTZaFw0yNjA3MjUwMTA1MTZaMDMxMTAvBgNV BAMTKDc0QUU3QTVCQ0Q0RTc1QkVDMzI3RTYyRkUyODE4Q0Q5NDYzRkY5M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0Fo8LZ+k16WuLLgG9GX5fvOe YXpuAJwhzZdqvDK3AG5D7jHz+86eXsuRZjb1f3u4qGi8L9UBbM6CHpz0fTMWara0 YWqsXtEK71wXiCWenNHdXDWmYZbo0Zj8sroHoniV5mCASpUlK8W7yUVDMUeavoA/ B2AJ72NMiLvf4YhXY5HTnHz1VnPJ2GfTq6c4t6aEs04Fv/qBLe0/TUdO/dkE8Q/C uVSvtF4Pe4X/UMaxUgUtL9OcFVnqYtiC+UahvlALgSGXI6CEW1Ilr9dnJhymJ/nY 2nCXXpMONGkcHj3KM7qIf1j35ATeLBIR3xCpadjqCD51Px5pTkH+GNPQxeBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdK56W81Odb7DJ+Yv4oGM2UY/+T0wHwYDVR0j BBgwFoAURb0NDLWnxMSb+7o0pxZSbEcOwN4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjI5MzI5Y2YtMzEyMy00Y2UwLWE2ODctMGEwM2NkNzU4NzM4LzAvNDVCRDBEMENC NUE3QzRDNDlCRkJCQTM0QTcxNjUyNkM0NzBFQzBERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUJEMEQwQ0I1QTdDNEM0OUJGQkJBMzRBNzE2NTI2QzQ3MEVD MERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvNDVCRDBEMENCNUE3QzRDNDlCRkJCQTM0QTcxNjUy NkM0NzBFQzBERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAc9cwBVub1k5vdp1+EX+B2cVPEsfLmlnrtW AmsWOrmCS0WbQD6F2HhatskuLr3uLN1dRsE2Sf3CQOCK6Uh0aUuRioZ++613745C 7t2xAy37ZjKzUbAVibGLkhOdAxz1Vf2438bOVK774TxO3DOp7eDWv3Ts/tGNqdPZ 4Ajdc1RlemdFPV6fRrwcfsxfdydpe/JPvrivuOzXzxJamCA/acIvo23FUMeXavqc ILZeQQl8IVEQO7YsI8QD/RVfLnBerwmsXTRplGdT+j4Psqa1hYCzl2jM2noH2qi/ R01K67SdGz22gHweaOCjri2TOqE2yiPwZOZzR6t0Lf8YgUOUn4g= -----END CERTIFICATE-----Generated at Fri Jul 24 12:13:34 2026 by rpki-client