$ rpki-client -vvf rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft File: 45E5895753396A59380E8B15A613362BDD0B9399.mft (raw, json) Hash identifier: xqwegrA5boK+4ygc5NA9mYKByM7+/dmcGCMBiPTJH/0= Subject key identifier: 3E:63:C2:A0:35:36:92:49:A3:31:2E:01:38:19:B5:92:70:CC:6B:3D Authority key identifier: 45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99 Certificate issuer: /CN=45E5895753396A59380E8B15A613362BDD0B9399 Certificate serial: 1CCF19779FBAA238131ABDFD5D4E2B11EF02D4C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:19:49 +0000 Manifest this update: Fri 24 Jul 2026 04:14:49 +0000 Manifest next update: Sat 25 Jul 2026 07:00:49 +0000 Files and hashes: 1: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: apfoCrb1SRZGVQ94mZUP6Yq3PvFMs7dSvIUcNJlRoMg=) 2: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: 150lIPhgbdhzp4Y24XpmsufR4h1DDzZZlk0gSQD8XZc=) 3: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: 9vIrzXo0hOqXg/rk1f6nwh6INf+P7PQpW2N95A+iLj4=) 4: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: KhIaiPcjWv7aKSlHmjk0jk/GmZyLW5p+ewjbZDKYFRM=) 5: 45E5895753396A59380E8B15A613362BDD0B9399.crl (hash: AqChJyZqEwCX+pnIkUzH5/33EOWaOFwnJry9PbmTS3A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:cf:19:77:9f:ba:a2:38:13:1a:bd:fd:5d:4e:2b:11:ef:02:d4:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E5895753396A59380E8B15A613362BDD0B9399 Validity Not Before: Jul 24 04:14:49 2026 GMT Not After : Jul 25 07:00:49 2026 GMT Subject: CN=3E63C2A035369249A3312E013819B59270CC6B3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:10:59:19:00:3f:fb:a3:c9:4e:54:92:0c:ca: 43:e7:72:c8:d9:5b:4d:6b:09:9f:6d:db:a0:38:b6: bd:d8:72:67:97:e2:6e:eb:3a:7e:3d:26:3b:c7:54: 36:b9:ed:1c:36:e8:76:56:b4:84:5c:0e:ff:64:db: cc:1e:bd:af:6e:c5:21:d2:a8:c0:16:c9:8f:bc:a1: 55:f1:87:9c:8e:bc:16:cf:f3:b5:f1:d0:6c:eb:23: ab:3c:a5:69:33:7f:f0:67:59:4c:94:4b:cf:0c:e0: 40:1e:96:f2:bb:4a:0f:03:87:10:b2:8f:75:5f:f6: 15:0d:fa:91:e6:e0:22:a2:cb:49:51:71:4e:40:89: 06:a4:6c:dd:f5:09:8b:3e:00:6a:bc:ec:cc:8a:e9: b3:02:06:2a:ba:3a:f2:7b:5e:17:a3:31:22:1a:7d: 4d:33:d2:46:9c:70:b4:0d:59:5a:ae:dc:25:55:d9: 13:32:65:5c:bd:d0:5c:f6:0e:18:d0:64:ec:10:9a: 75:31:e2:d3:f6:8e:7b:fd:f4:ea:be:62:c7:a3:57: da:bb:9a:40:67:59:08:eb:7d:5c:4e:16:20:17:66: 37:c6:be:43:4b:fb:ec:b8:79:96:34:14:d6:fe:c2: 71:57:c2:8f:5f:42:a9:ea:17:10:20:82:1f:51:02: 89:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:63:C2:A0:35:36:92:49:A3:31:2E:01:38:19:B5:92:70:CC:6B:3D X509v3 Authority Key Identifier: keyid:45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:06:5e:32:40:14:be:16:71:fe:9e:b4:c4:57:79:07:24:42: 22:14:5b:02:33:5f:e5:37:b1:5b:5d:df:71:2a:dc:d1:6f:13: 4e:22:b3:0c:e0:46:20:84:2a:a0:06:84:dc:c4:57:ab:32:20: 34:bf:51:5f:be:d0:cb:5a:a7:36:23:db:52:22:de:ed:07:6d: 1c:7e:93:e5:cd:12:ea:fa:88:83:bf:58:dc:17:02:91:1e:5c: 6c:ea:8d:0b:0e:30:e5:ea:da:0a:e3:92:4c:4c:6f:99:bf:9e: 94:37:c4:6b:25:0b:85:34:52:0c:ee:e2:53:d9:7e:fa:7e:3d: 89:45:8c:4c:cd:5c:2a:d6:2b:65:95:5a:af:ae:a9:ca:2e:47: ba:47:35:06:c4:66:6a:1a:de:38:f6:49:32:46:1f:ed:74:c6: cd:96:fc:18:a0:f2:5a:f0:41:ac:43:9c:68:18:a9:aa:e1:0a: f8:24:f4:d0:fa:dd:2a:c9:11:82:34:05:48:c2:be:81:10:98: 46:8d:24:61:41:49:0d:fb:67:43:6e:d8:16:2d:4f:bb:db:59: ba:f5:ed:85:10:81:53:52:02:51:4a:8a:4a:4b:61:6e:70:42: 89:b3:96:4d:c6:db:13:4c:00:55:52:d0:7a:c7:cc:d0:9c:b4: 69:3f:a5:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHM8Zd5+6ojgTGr39XU4rEe8C1McwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFNTg5NTc1MzM5NkE1OTM4MEU4QjE1QTYxMzM2MkJE RDBCOTM5OTAeFw0yNjA3MjQwNDE0NDlaFw0yNjA3MjUwNzAwNDlaMDMxMTAvBgNV BAMTKDNFNjNDMkEwMzUzNjkyNDlBMzMxMkUwMTM4MTlCNTkyNzBDQzZCM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/EFkZAD/7o8lOVJIMykPncsjZ W01rCZ9t26A4tr3YcmeX4m7rOn49JjvHVDa57Rw26HZWtIRcDv9k28weva9uxSHS qMAWyY+8oVXxh5yOvBbP87Xx0GzrI6s8pWkzf/BnWUyUS88M4EAelvK7Sg8DhxCy j3Vf9hUN+pHm4CKiy0lRcU5AiQakbN31CYs+AGq87MyK6bMCBiq6OvJ7XhejMSIa fU0z0kaccLQNWVqu3CVV2RMyZVy90Fz2DhjQZOwQmnUx4tP2jnv99Oq+YsejV9q7 mkBnWQjrfVxOFiAXZjfGvkNL++y4eZY0FNb+wnFXwo9fQqnqFxAggh9RAon5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPmPCoDU2kkmjMS4BOBm1knDMaz0wHwYDVR0j BBgwFoAUReWJV1M5alk4DosVphM2K90Lk5kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZiODdmZWItMGZlMi00MThhLWEzN2EtYmUzZGQxZjBlNjNjLzAvNDVFNTg5NTc1 MzM5NkE1OTM4MEU4QjE1QTYxMzM2MkJERDBCOTM5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUU1ODk1NzUzMzk2QTU5MzgwRThCMTVBNjEzMzYyQkREMEI5 Mzk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZiODdmZWItMGZlMi00MThhLWEz N2EtYmUzZGQxZjBlNjNjLzAvNDVFNTg5NTc1MzM5NkE1OTM4MEU4QjE1QTYxMzM2 MkJERDBCOTM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkGXjJAFL4Wcf6etMRXeQckQiIUWwIzX+U3 sVtd33Eq3NFvE04iswzgRiCEKqAGhNzEV6syIDS/UV++0MtapzYj21Ii3u0HbRx+ k+XNEur6iIO/WNwXApEeXGzqjQsOMOXq2grjkkxMb5m/npQ3xGslC4U0Ugzu4lPZ fvp+PYlFjEzNXCrWK2WVWq+uqcouR7pHNQbEZmoa3jj2STJGH+10xs2W/Big8lrw QaxDnGgYqarhCvgk9ND63SrJEYI0BUjCvoEQmEaNJGFBSQ37Z0Nu2BYtT7vbWbr1 7YUQgVNSAlFKikpLYW5wQomzlk3G2xNMAFVS0HrHzNCctGk/pbk= -----END CERTIFICATE-----Generated at Fri Jul 24 18:02:52 2026 by rpki-client