$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft File: CD845730E45E4D531071D97C1EDC23DA378D662F.mft (raw, json) Hash identifier: 59t3l0uTpXnM5HQPLZ7gTx/tur/pgcRP1YEE/WV9RJY= Subject key identifier: 81:0C:A5:39:47:E4:74:E7:D7:4C:54:B2:2A:B4:E6:14:09:0E:C7:26 Authority key identifier: CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F Certificate issuer: /CN=CD845730E45E4D531071D97C1EDC23DA378D662F Certificate serial: 07EBA4229802A51B9AF2E7B2837296BBE7085DDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 09:16:11 +0000 Manifest this update: Thu 23 Jul 2026 09:11:11 +0000 Manifest next update: Fri 24 Jul 2026 11:18:11 +0000 Files and hashes: 1: CD845730E45E4D531071D97C1EDC23DA378D662F.crl (hash: aHRejDP0AAr6nBLAetFzIVacaol+54AjmhcGxoFK3nk=) 2: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: lb4d9lrnmMWGai0ItqfgLnvKFt7iEuEC2HCE9pUg2nE=) 3: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: BgiKJc54U9vx0Bz6VAlgbJ7Gti2eL3QTE9xees67wzA=) 4: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: qBRAe7C40tWA04dsJPNXkwqtoGUaunwx7S+rfFhu9ho=) 5: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: ZyTKIgLUxCGhcIet/CFJoBSXRoiA7e9G+Kr6S5o0mEQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 11:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:eb:a4:22:98:02:a5:1b:9a:f2:e7:b2:83:72:96:bb:e7:08:5d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD845730E45E4D531071D97C1EDC23DA378D662F Validity Not Before: Jul 23 09:11:11 2026 GMT Not After : Jul 24 11:18:11 2026 GMT Subject: CN=810CA53947E474E7D74C54B22AB4E614090EC726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:bd:5f:c4:22:ff:76:eb:4e:ae:bc:c7:a5: 7a:d0:2c:f3:2a:ab:4f:92:61:e4:3e:58:ac:31:0b: 5f:b9:4f:35:71:f5:83:66:27:83:9a:bf:7d:8f:6e: 8b:69:25:e6:8f:8c:ba:d3:3d:d1:be:71:f3:0c:3d: 26:7d:80:59:76:56:b5:1b:9a:f9:b3:c5:cb:19:b6: 52:a6:4d:5b:12:d8:fd:8a:fe:b3:e1:ef:58:e1:52: b2:95:d4:5a:a5:b7:d2:3f:8a:f7:ae:af:4d:6a:6e: 47:a4:b4:22:66:1d:7c:2e:0c:2a:8b:20:4a:2f:9d: 57:c6:75:18:7a:eb:d5:0b:0f:67:d5:de:48:90:30: 44:3d:34:7e:8a:2d:3a:45:65:01:3f:51:56:88:51: 56:ba:d3:0a:44:4c:14:b3:9a:23:e8:86:32:e4:1c: 3a:8f:f4:4e:9c:97:9c:da:5d:d8:de:f3:9f:09:f8: 8e:87:40:e2:a5:70:db:ed:68:df:70:e8:be:69:7e: ce:29:2c:52:58:04:72:ff:c2:fe:88:77:63:90:8c: 4d:74:4f:61:a8:80:b9:13:7d:7a:e1:c2:87:56:d8: 03:91:61:87:f6:77:69:a8:ca:57:16:76:e8:04:d6: 2f:73:aa:13:b3:ef:bd:bb:66:97:19:45:c5:cb:0c: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0C:A5:39:47:E4:74:E7:D7:4C:54:B2:2A:B4:E6:14:09:0E:C7:26 X509v3 Authority Key Identifier: keyid:CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:99:b0:88:58:6b:69:5b:0d:3c:5b:f1:36:fb:0d:f9:84:6f: 2b:dd:be:6d:33:29:e1:f9:84:c5:bd:e2:cd:4b:bf:cf:05:bc: 65:c6:1b:6b:d3:fb:6d:68:c9:1b:a3:d6:b5:63:b7:15:a5:5f: 80:41:86:00:af:32:97:80:5d:61:65:03:92:8e:6d:84:33:5c: 69:b0:7f:9d:bb:50:5f:62:1a:64:fb:26:b7:5b:6e:bd:55:6d: b4:c7:59:be:7c:6e:3c:bc:c5:2a:f3:8b:ba:fd:be:f5:93:39: 04:11:e3:58:c1:4f:89:0c:9e:f2:66:8c:8d:72:36:b9:5d:3f: 4c:1d:ba:d7:da:d8:c3:2a:a0:d9:a1:cb:9b:f0:c0:86:ab:02: dc:9e:18:cb:58:a7:58:6b:59:a2:94:ce:e2:29:86:21:39:49: c7:24:75:1f:8e:94:c7:07:80:89:c3:69:53:bb:be:b7:4a:9e: a3:e8:fe:59:20:4b:41:06:d2:5d:61:aa:4e:52:ec:c4:15:e3: cb:9c:cb:6b:c3:8c:75:16:19:b9:38:41:bb:17:78:7b:a4:87: d7:7d:b0:17:3f:1c:d6:9f:57:31:c9:37:22:ac:6e:bc:64:ff: 64:f5:01:52:a7:b6:e1:49:a7:a7:47:d6:f7:2d:2c:bb:97:c0: 63:04:ac:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+ukIpgCpRua8ueyg3KWu+cIXdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEz NzhENjYyRjAeFw0yNjA3MjMwOTExMTFaFw0yNjA3MjQxMTE4MTFaMDMxMTAvBgNV BAMTKDgxMENBNTM5NDdFNDc0RTdENzRDNTRCMjJBQjRFNjE0MDkwRUM3MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3L1fxCL/dutOrrzHpXrQLPMq q0+SYeQ+WKwxC1+5TzVx9YNmJ4Oav32PbotpJeaPjLrTPdG+cfMMPSZ9gFl2VrUb mvmzxcsZtlKmTVsS2P2K/rPh71jhUrKV1Fqlt9I/iveur01qbkektCJmHXwuDCqL IEovnVfGdRh669ULD2fV3kiQMEQ9NH6KLTpFZQE/UVaIUVa60wpETBSzmiPohjLk HDqP9E6cl5zaXdje858J+I6HQOKlcNvtaN9w6L5pfs4pLFJYBHL/wv6Id2OQjE10 T2GogLkTfXrhwodW2AORYYf2d2moylcWdugE1i9zqhOz7727ZpcZRcXLDJ/dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgQylOUfkdOfXTFSyKrTmFAkOxyYwHwYDVR0j BBgwFoAUzYRXMOReTVMQcdl8Htwj2jeNZi8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA5NjJjNmUtNTk1YS00N2M0LWFhN2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBF NDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEzNzhENjYyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDg0NTczMEU0NUU0RDUzMTA3MUQ5N0MxRURDMjNEQTM3OEQ2 NjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA5NjJjNmUtNTk1YS00N2M0LWFh N2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIz REEzNzhENjYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2ZsIhYa2lbDTxb8Tb7DfmEbyvdvm0zKeH5 hMW94s1Lv88FvGXGG2vT+21oyRuj1rVjtxWlX4BBhgCvMpeAXWFlA5KObYQzXGmw f527UF9iGmT7Jrdbbr1VbbTHWb58bjy8xSrzi7r9vvWTOQQR41jBT4kMnvJmjI1y NrldP0wdutfa2MMqoNmhy5vwwIarAtyeGMtYp1hrWaKUzuIphiE5ScckdR+OlMcH gInDaVO7vrdKnqPo/lkgS0EG0l1hqk5S7MQV48ucy2vDjHUWGbk4QbsXeHukh9d9 sBc/HNafVzHJNyKsbrxk/2T1AVKntuFJp6dH1vctLLuXwGMErOQ= -----END CERTIFICATE-----Generated at Fri Jul 24 04:02:51 2026 by rpki-client