$ rpki-client -vvf rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft File: 853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft (raw, json) Hash identifier: 5n4t5TrKE/5HVXVO2C1G/hiddDRvxIFcyJV49V2uFis= Subject key identifier: B4:8B:08:84:01:83:4B:C2:14:94:F6:47:19:8D:0B:78:55:1C:BD:50 Authority key identifier: 85:3E:DD:7A:B3:EF:9A:13:A0:77:9F:26:12:78:6F:6D:2D:7C:08:BE Certificate issuer: /CN=853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE Certificate serial: 5CB45360C243A9476EE596ADD4CDE7E983A741C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 22:57:52 +0000 Manifest this update: Thu 23 Jul 2026 22:52:52 +0000 Manifest next update: Fri 24 Jul 2026 23:43:52 +0000 Files and hashes: 1: 323430333a653434303a3a2f33322d3332203d3e20313338303936.roa (hash: VwsatNn5AXuJ/LUW+n8JXwWEwiaViEVC741lbFCSMBE=) 2: 3130332e3132342e3139382e302f32342d3234203d3e20313338303936.roa (hash: 07pLPD2WlKL+vB7ypQ2CjBacLrYgbCjaYdQZk1Lj438=) 3: 853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl (hash: 3FCt1Al/rX5pF2Xutx50XqRKZ7ufVCukWeUb087SmL0=) 4: 3130332e3132342e3139372e302f32342d3234203d3e20313338303936.roa (hash: nJl837iJi/5SwBSDbdYVongO7p9uzBZcmTZb0XAZTJk=) 5: 3130332e3132342e3139392e302f32342d3234203d3e20313338303936.roa (hash: fxSYsouQPJ65g7CwW1EnalKBkWjJiK50KJBFUAXhZzA=) 6: 3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa (hash: fgQOQ1ZPs6+mRIJ9mhffQJjtFV+ZjnGnsOoWLbAN6Mo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b4:53:60:c2:43:a9:47:6e:e5:96:ad:d4:cd:e7:e9:83:a7:41:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE Validity Not Before: Jul 23 22:52:52 2026 GMT Not After : Jul 24 23:43:52 2026 GMT Subject: CN=B48B088401834BC21494F647198D0B78551CBD50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:45:cc:d1:47:e8:83:4f:9b:08:a1:47:f6:ac: 65:02:25:f8:c2:01:72:41:48:d0:e5:c7:36:13:fa: 90:fe:f8:fb:f2:db:9b:0c:ec:e1:72:b1:1a:42:8c: dd:75:17:75:b5:ef:53:04:f1:37:5e:cf:9c:6a:0a: 44:1a:09:6c:d3:0b:65:30:a3:11:cb:3b:9a:c1:70: 1f:d3:b3:aa:0b:ad:2c:f6:5a:83:b1:9e:70:fd:56: 59:1f:90:d1:7b:38:c8:62:86:0c:88:a2:7b:8b:10: 0d:6b:f3:48:51:40:a3:d5:26:5e:32:40:b7:0c:f4: f3:75:e0:65:6d:78:aa:20:97:0d:e4:d1:e5:89:61: 5f:5f:44:e3:51:f3:2f:4f:79:a6:6f:26:dc:64:13: d1:2f:91:f2:da:0f:6f:d5:e1:50:81:43:ba:f2:8d: 78:21:79:56:45:b3:ee:ee:61:a2:22:5e:08:74:e7: 57:b5:41:dd:30:f7:9c:66:f1:d3:56:21:0e:07:10: 98:68:68:e3:37:dc:71:d5:46:5f:d7:d0:36:e9:14: 64:5b:23:d2:26:03:ac:11:af:c2:30:db:2a:6d:a2: 7d:f0:70:e0:75:dd:8e:07:ce:8e:8c:57:30:bc:05: bc:b4:b9:87:f0:eb:53:dd:02:f1:5d:9c:21:a0:da: da:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8B:08:84:01:83:4B:C2:14:94:F6:47:19:8D:0B:78:55:1C:BD:50 X509v3 Authority Key Identifier: keyid:85:3E:DD:7A:B3:EF:9A:13:A0:77:9F:26:12:78:6F:6D:2D:7C:08:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5d:7b:7e:33:3f:57:59:67:0a:4a:ae:1c:53:c9:8c:12:4f: 1b:68:74:5d:99:1b:4d:2c:23:1f:c1:04:d9:88:29:6d:b7:97: 08:58:bb:ca:23:ed:b0:fd:68:21:0a:c8:e2:ed:62:16:90:cb: 3d:53:88:30:d1:5f:ac:e1:52:e5:de:31:97:da:18:5c:18:b8: 64:52:9d:7a:64:67:42:51:8f:c6:13:08:5d:2e:a3:60:1d:80: c9:cf:87:e8:d0:5c:5b:80:d3:4b:2f:5e:1d:88:27:d3:05:c1: 1a:04:e3:df:53:d3:22:8c:35:5b:12:29:09:0f:e7:33:f4:9c: 38:8c:71:b2:34:f3:9c:b1:f9:53:4b:5d:9e:ac:13:15:70:4f: 21:f8:14:c0:dd:40:ec:6d:e6:6a:c6:1e:6f:a4:22:bd:1d:dd: d6:77:14:c5:c4:e8:d3:bc:f4:74:8c:da:12:5c:2b:14:8a:f0: 33:74:df:c7:9e:b8:03:ec:11:13:c9:81:f0:36:53:a3:e0:3d: 5f:b6:79:6b:61:df:f3:9e:22:62:e9:cf:a9:a0:7b:bf:01:ac: 5f:81:67:65:cc:43:ee:e6:e9:ab:59:52:c6:c0:96:7d:12:bf: 19:fb:a0:d7:a0:ec:de:b4:bd:49:a5:45:53:54:98:69:44:07: 13:b7:22:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLRTYMJDqUdu5Zat1M3n6YOnQccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzRUREN0FCM0VGOUExM0EwNzc5RjI2MTI3ODZGNkQy RDdDMDhCRTAeFw0yNjA3MjMyMjUyNTJaFw0yNjA3MjQyMzQzNTJaMDMxMTAvBgNV BAMTKEI0OEIwODg0MDE4MzRCQzIxNDk0RjY0NzE5OEQwQjc4NTUxQ0JENTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhRczRR+iDT5sIoUf2rGUCJfjC AXJBSNDlxzYT+pD++Pvy25sM7OFysRpCjN11F3W171ME8Tdez5xqCkQaCWzTC2Uw oxHLO5rBcB/Ts6oLrSz2WoOxnnD9VlkfkNF7OMhihgyIonuLEA1r80hRQKPVJl4y QLcM9PN14GVteKoglw3k0eWJYV9fRONR8y9PeaZvJtxkE9EvkfLaD2/V4VCBQ7ry jXgheVZFs+7uYaIiXgh051e1Qd0w95xm8dNWIQ4HEJhoaOM33HHVRl/X0DbpFGRb I9ImA6wRr8Iw2ypton3wcOB13Y4Hzo6MVzC8Bby0uYfw61PdAvFdnCGg2tp5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtIsIhAGDS8IUlPZHGY0LeFUcvVAwHwYDVR0j BBgwFoAUhT7derPvmhOgd58mEnhvbS18CL4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDVkZmY5YjMtOTA0MS00ZGQ2LWI3YWItMDIwNjBkNjVkMDlhLzAvODUzRUREN0FC M0VGOUExM0EwNzc5RjI2MTI3ODZGNkQyRDdDMDhCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTNFREQ3QUIzRUY5QTEzQTA3NzlGMjYxMjc4NkY2RDJEN0Mw OEJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDVkZmY5YjMtOTA0MS00ZGQ2LWI3 YWItMDIwNjBkNjVkMDlhLzAvODUzRUREN0FCM0VGOUExM0EwNzc5RjI2MTI3ODZG NkQyRDdDMDhCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5de34zP1dZZwpKrhxTyYwSTxtodF2ZG00s Ix/BBNmIKW23lwhYu8oj7bD9aCEKyOLtYhaQyz1TiDDRX6zhUuXeMZfaGFwYuGRS nXpkZ0JRj8YTCF0uo2AdgMnPh+jQXFuA00svXh2IJ9MFwRoE499T0yKMNVsSKQkP 5zP0nDiMcbI085yx+VNLXZ6sExVwTyH4FMDdQOxt5mrGHm+kIr0d3dZ3FMXE6NO8 9HSM2hJcKxSK8DN038eeuAPsERPJgfA2U6PgPV+2eWth3/OeImLpz6mge78BrF+B Z2XMQ+7m6atZUsbAln0Svxn7oNeg7N60vUmlRVNUmGlEBxO3Itc= -----END CERTIFICATE-----Generated at Fri Jul 24 02:44:55 2026 by rpki-client