$ rpki-client -vvf rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft File: 485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft (raw, json) Hash identifier: 40rB7A1/SGdbbuzrS2EoXzlKShKnN1frvjsDSL3jm6o= Subject key identifier: BD:64:69:93:2E:D7:C0:08:D8:02:B4:BE:9B:2B:71:64:27:DC:1D:7B Authority key identifier: 48:5C:95:EA:B9:69:D6:A4:8B:4E:07:9F:7E:AF:2F:1A:43:D5:76:E5 Certificate issuer: /CN=485C95EAB969D6A48B4E079F7EAF2F1A43D576E5 Certificate serial: 668D305B7A30FFDFB72D996590FAED377C1105CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 07:38:50 +0000 Manifest this update: Fri 24 Jul 2026 07:33:50 +0000 Manifest next update: Sat 25 Jul 2026 09:51:50 +0000 Files and hashes: 1: 485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl (hash: DOTfrK/V314REEitWAwatVl1B+m90zhgbwdU4zSKe8U=) 2: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: MWYhiIEDGx9DoNFz51QvtMWf3c6h+IW6waBKdCBpOXk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:8d:30:5b:7a:30:ff:df:b7:2d:99:65:90:fa:ed:37:7c:11:05:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485C95EAB969D6A48B4E079F7EAF2F1A43D576E5 Validity Not Before: Jul 24 07:33:50 2026 GMT Not After : Jul 25 09:51:50 2026 GMT Subject: CN=BD6469932ED7C008D802B4BE9B2B716427DC1D7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3a:09:14:d7:6d:14:f8:a7:77:10:b0:35:e8: a6:a2:b5:15:12:42:a9:bc:cc:d5:81:09:83:3d:b5: 34:80:24:c7:17:ba:23:58:1c:c2:b3:f3:0a:00:7b: cc:27:de:ba:cf:0d:29:a9:41:ff:72:84:59:82:00: fa:14:21:bd:6d:9d:8e:e6:6e:27:e4:18:d2:b3:99: 9b:c1:bf:36:a4:d4:cd:a8:64:15:db:e9:2d:e4:90: 83:d8:7c:a8:72:b6:62:21:43:39:cc:e1:4c:99:32: dc:0c:3e:35:4b:bc:ee:aa:4c:ed:8d:dc:44:18:b6: 1a:a9:03:b9:9a:5b:3e:f9:ce:23:d1:78:9c:73:5c: c6:a9:50:64:83:2b:59:03:8e:df:ba:96:79:e9:4d: a0:5e:45:ff:d3:7f:7c:6c:76:4b:3a:f3:c1:ec:9a: f0:0a:6b:d6:84:f0:0a:ec:13:90:81:7a:17:65:5d: 97:1c:9d:0d:07:d0:87:64:5f:3c:60:bd:2c:98:ba: 56:10:1e:19:11:5a:b4:80:a3:3a:f9:d9:04:f9:58: a8:78:3b:10:e9:1d:0b:66:1a:1f:a7:5e:f2:c8:04: f3:da:cd:9e:05:a2:f4:66:5a:f9:b2:32:f5:b6:82: 9b:f9:c3:1a:d4:a1:75:7b:04:ec:12:4c:76:23:bb: 53:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:64:69:93:2E:D7:C0:08:D8:02:B4:BE:9B:2B:71:64:27:DC:1D:7B X509v3 Authority Key Identifier: keyid:48:5C:95:EA:B9:69:D6:A4:8B:4E:07:9F:7E:AF:2F:1A:43:D5:76:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b7:cb:b8:52:7c:78:3c:2c:42:c1:fa:7c:0c:58:64:49:25: 97:a2:eb:16:11:ee:3f:97:b4:a2:c6:0d:96:73:a1:32:a5:0f: 16:c7:b8:60:21:ec:4f:54:90:e8:e9:24:78:f2:4a:17:fa:59: ea:8f:77:11:4f:8b:74:65:7d:0c:bd:69:7a:5e:5f:02:75:2e: 71:dd:7c:35:68:62:76:d1:7b:eb:e6:21:3c:47:75:a2:f0:64: 5e:3a:8d:fb:ed:55:bd:ba:ff:4a:1b:b8:2c:47:2f:12:37:70: 23:4b:5c:70:41:29:a2:6d:cd:5e:4e:ff:25:32:14:31:7e:bc: 4d:11:1c:97:86:a1:c3:cf:77:ce:33:aa:02:99:c8:fe:ff:7b: 9b:d0:0b:1e:d3:64:1d:28:c1:f3:f9:3a:38:7d:98:be:52:ef: 7e:ae:08:9a:1d:4b:bb:9d:20:71:e4:a3:55:b7:b4:2c:b2:8b: 9a:9e:ad:2a:0a:37:94:9c:a0:1e:51:8f:be:f2:28:ac:36:a8: f9:a5:89:27:47:8c:42:be:68:c8:0b:2a:43:df:b5:c0:16:13: 3f:a2:9d:c7:64:c6:d3:8e:2c:a9:49:36:98:a1:77:01:d3:c7: 01:e3:81:ff:0a:18:e3:44:5f:c4:1d:bd:c0:a0:3a:94:db:d4: 4d:1a:d3:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZo0wW3ow/9+3LZllkPrtN3wRBc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1Qzk1RUFCOTY5RDZBNDhCNEUwNzlGN0VBRjJGMUE0 M0Q1NzZFNTAeFw0yNjA3MjQwNzMzNTBaFw0yNjA3MjUwOTUxNTBaMDMxMTAvBgNV BAMTKEJENjQ2OTkzMkVEN0MwMDhEODAyQjRCRTlCMkI3MTY0MjdEQzFEN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjOgkU120U+Kd3ELA16KaitRUS Qqm8zNWBCYM9tTSAJMcXuiNYHMKz8woAe8wn3rrPDSmpQf9yhFmCAPoUIb1tnY7m bifkGNKzmZvBvzak1M2oZBXb6S3kkIPYfKhytmIhQznM4UyZMtwMPjVLvO6qTO2N 3EQYthqpA7maWz75ziPReJxzXMapUGSDK1kDjt+6lnnpTaBeRf/Tf3xsdks688Hs mvAKa9aE8ArsE5CBehdlXZccnQ0H0IdkXzxgvSyYulYQHhkRWrSAozr52QT5WKh4 OxDpHQtmGh+nXvLIBPPazZ4FovRmWvmyMvW2gpv5wxrUoXV7BOwSTHYju1MrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvWRpky7XwAjYArS+mytxZCfcHXswHwYDVR0j BBgwFoAUSFyV6rlp1qSLTgeffq8vGkPVduUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjNiYTAyNGItODdmMi00ZWRkLTg5ZmYtYTRmY2E3MDA4YzM2LzAvNDg1Qzk1RUFC OTY5RDZBNDhCNEUwNzlGN0VBRjJGMUE0M0Q1NzZFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODVDOTVFQUI5NjlENkE0OEI0RTA3OUY3RUFGMkYxQTQzRDU3 NkU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5 ZmYtYTRmY2E3MDA4YzM2LzAvNDg1Qzk1RUFCOTY5RDZBNDhCNEUwNzlGN0VBRjJG MUE0M0Q1NzZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHe3y7hSfHg8LELB+nwMWGRJJZei6xYR7j+X tKLGDZZzoTKlDxbHuGAh7E9UkOjpJHjyShf6WeqPdxFPi3RlfQy9aXpeXwJ1LnHd fDVoYnbRe+vmITxHdaLwZF46jfvtVb26/0obuCxHLxI3cCNLXHBBKaJtzV5O/yUy FDF+vE0RHJeGocPPd84zqgKZyP7/e5vQCx7TZB0owfP5Ojh9mL5S736uCJodS7ud IHHko1W3tCyyi5qerSoKN5ScoB5Rj77yKKw2qPmliSdHjEK+aMgLKkPftcAWEz+i ncdkxtOOLKlJNpihdwHTxwHjgf8KGONEX8QdvcCgOpTb1E0a01M= -----END CERTIFICATE-----Generated at Fri Jul 24 12:35:56 2026 by rpki-client