$ rpki-client -vvf rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft File: 04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft (raw, json) Hash identifier: cBjO6pykhqmXL6NP0VVXJhnumugXpz1TszB/im4e+VI= Subject key identifier: 3A:A9:15:9E:94:85:50:D8:D5:75:DF:BA:39:35:2E:EE:E5:8C:DA:0B Authority key identifier: 04:52:2B:78:37:74:E8:96:9A:25:3B:79:C9:BD:8B:7A:F1:1E:0E:6E Certificate issuer: /CN=04522B783774E8969A253B79C9BD8B7AF11E0E6E Certificate serial: 6DFD7FB0F12B4316E03925C0F71F62D967869FEE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 23:53:56 +0000 Manifest this update: Thu 23 Jul 2026 23:48:56 +0000 Manifest next update: Sat 25 Jul 2026 03:38:56 +0000 Files and hashes: 1: 04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl (hash: 7MKWUFqqBf2sOh24DyoVvYXWtlpZVvzyhMnVL/+MNrY=) 2: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CZVghfd+RMSIYEhXYYQSwl8vEVYu7UKTsPMOPTno7kM=) 3: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: JGTo44TwhcX4ivQ52rHxAzJZareWjfxAS0kPXAmQ5EE=) 4: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: 40yX7GBS0nX6cgx29ls12Yp5h3Ba+XKjPu45g8FVQzo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:fd:7f:b0:f1:2b:43:16:e0:39:25:c0:f7:1f:62:d9:67:86:9f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04522B783774E8969A253B79C9BD8B7AF11E0E6E Validity Not Before: Jul 23 23:48:56 2026 GMT Not After : Jul 25 03:38:56 2026 GMT Subject: CN=3AA9159E948550D8D575DFBA39352EEEE58CDA0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9b:16:9b:84:92:a4:bd:32:c0:3f:64:b2:18: b0:c3:0b:f5:31:65:91:50:49:8a:0e:2b:6c:36:11: 06:54:d7:e1:c6:9b:3f:b6:bd:03:34:d4:f9:2e:2a: 69:13:d7:b6:c5:a4:02:e0:f8:5c:c0:f3:2e:5f:8c: 82:59:30:15:98:35:f5:97:30:17:7a:34:59:de:ce: 2e:14:94:42:4d:e3:1d:06:51:58:a3:39:16:94:31: bf:53:9c:a1:2e:8c:32:bb:48:52:9d:a7:9e:4f:75: 24:bd:82:7f:d7:f6:22:94:33:b5:4a:8f:f1:2f:24: 05:2c:6f:7f:c5:36:e7:26:33:05:f0:f5:5a:23:d5: e1:99:1d:72:59:d8:d8:42:12:3c:f8:a0:ac:25:0e: de:b1:f9:df:b4:fc:f8:ff:5a:f4:72:56:2a:92:1c: 16:23:50:5c:8a:c5:a5:5e:76:b5:ce:c6:77:75:10: 8a:62:c0:ab:97:93:1c:79:6e:15:ea:b2:4b:1a:e9: 5c:89:e6:6e:6e:0f:2d:19:8e:20:96:9b:7f:59:a6: 8f:13:04:26:c0:9e:d9:c6:df:a5:4c:0f:7f:98:6c: 2d:03:08:4d:30:39:e3:98:27:68:35:d9:c0:e9:3e: 71:77:b8:4c:7e:60:f8:9c:9e:79:87:01:00:30:e3: 17:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A9:15:9E:94:85:50:D8:D5:75:DF:BA:39:35:2E:EE:E5:8C:DA:0B X509v3 Authority Key Identifier: keyid:04:52:2B:78:37:74:E8:96:9A:25:3B:79:C9:BD:8B:7A:F1:1E:0E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:1d:15:80:fe:73:b5:82:2c:9a:d7:84:da:4f:cc:49:9f:29: f4:93:56:fd:7c:c4:ca:94:4d:6e:3a:cb:19:b4:ad:d5:e3:e3: 71:c2:01:72:62:86:96:cd:5f:48:98:f0:e6:a2:de:29:eb:6e: f1:02:01:38:7c:a8:1d:b6:01:a1:5a:48:4f:36:3c:b8:0a:82: 60:50:b9:9d:f4:db:a7:74:01:03:68:ee:50:d6:5b:3c:7b:fa: b3:fe:51:d2:91:0e:b4:0e:91:1d:29:e9:e3:83:0a:6b:aa:3c: 55:f3:e5:8d:f3:10:05:51:d1:82:6f:a9:26:81:df:b3:f2:16: f3:81:4e:ee:33:47:46:c1:15:5c:13:e3:73:bc:82:d0:47:30: 44:57:6b:e0:4a:8c:0d:62:bf:28:de:00:fa:a5:15:48:1a:74: 4f:55:64:6c:c1:bd:1e:fe:c0:97:37:34:da:a0:56:11:20:03: 58:b0:fa:3d:af:f0:d4:af:20:75:b2:66:10:68:c0:d6:6b:4b: 77:ee:af:f1:e4:1f:a1:69:16:26:6a:4d:ed:f8:41:38:f5:26: aa:28:58:9a:18:2f:35:dd:99:85:72:53:1b:c7:86:2b:b9:4c: aa:26:36:2b:8d:76:5d:17:97:2b:69:8c:9c:95:da:44:8b:67: a7:d4:a0:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbf1/sPErQxbgOSXA9x9i2WeGn+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1MjJCNzgzNzc0RTg5NjlBMjUzQjc5QzlCRDhCN0FG MTFFMEU2RTAeFw0yNjA3MjMyMzQ4NTZaFw0yNjA3MjUwMzM4NTZaMDMxMTAvBgNV BAMTKDNBQTkxNTlFOTQ4NTUwRDhENTc1REZCQTM5MzUyRUVFRTU4Q0RBMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfmxabhJKkvTLAP2SyGLDDC/Ux ZZFQSYoOK2w2EQZU1+HGmz+2vQM01PkuKmkT17bFpALg+FzA8y5fjIJZMBWYNfWX MBd6NFnezi4UlEJN4x0GUVijORaUMb9TnKEujDK7SFKdp55PdSS9gn/X9iKUM7VK j/EvJAUsb3/FNucmMwXw9Voj1eGZHXJZ2NhCEjz4oKwlDt6x+d+0/Pj/WvRyViqS HBYjUFyKxaVedrXOxnd1EIpiwKuXkxx5bhXqsksa6VyJ5m5uDy0ZjiCWm39Zpo8T BCbAntnG36VMD3+YbC0DCE0wOeOYJ2g12cDpPnF3uEx+YPicnnmHAQAw4xdVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOqkVnpSFUNjVdd+6OTUu7uWM2gswHwYDVR0j BBgwFoAUBFIreDd06JaaJTt5yb2LevEeDm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODliODYwNGYtMzk1YS00MmJlLWI5OTctZTgwZmMxZGY5MGY5LzAvMDQ1MjJCNzgz Nzc0RTg5NjlBMjUzQjc5QzlCRDhCN0FGMTFFMEU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDUyMkI3ODM3NzRFODk2OUEyNTNCNzlDOUJEOEI3QUYxMUUw RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMDQ1MjJCNzgzNzc0RTg5NjlBMjUzQjc5QzlCRDhC N0FGMTFFMEU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcdFYD+c7WCLJrXhNpPzEmfKfSTVv18xMqU TW46yxm0rdXj43HCAXJihpbNX0iY8Oai3inrbvECATh8qB22AaFaSE82PLgKgmBQ uZ3026d0AQNo7lDWWzx7+rP+UdKRDrQOkR0p6eODCmuqPFXz5Y3zEAVR0YJvqSaB 37PyFvOBTu4zR0bBFVwT43O8gtBHMERXa+BKjA1ivyjeAPqlFUgadE9VZGzBvR7+ wJc3NNqgVhEgA1iw+j2v8NSvIHWyZhBowNZrS3fur/HkH6FpFiZqTe34QTj1Jqoo WJoYLzXdmYVyUxvHhiu5TKomNiuNdl0XlytpjJyV2kSLZ6fUoCE= -----END CERTIFICATE-----Generated at Fri Jul 24 07:07:59 2026 by rpki-client