$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft File: A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft (raw, json) Hash identifier: PLucZ6M4Hf1ly3QE3a7381om7VUlyH/yqC5+a05/UF0= Subject key identifier: 45:B0:B4:81:75:1A:78:15:DE:7E:06:79:B0:91:12:51:28:DA:56:E2 Authority key identifier: A5:1F:08:82:DC:1B:DA:E2:BF:6D:C9:1D:3E:C6:EB:23:E5:69:AF:D6 Certificate issuer: /CN=A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6 Certificate serial: 4D386A740E242E7E799097EEF494F9F95291C332 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 23:23:26 +0000 Manifest this update: Thu 23 Jul 2026 23:18:26 +0000 Manifest next update: Sat 25 Jul 2026 03:14:26 +0000 Files and hashes: 1: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: Mtfzs1yZWVTcj+jwor1tUEKlyotPWoajpPtYoZFvsps=) 2: A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.crl (hash: OGLspdnG69hG+OOZ1lVnjXRcOFewVj/03h0KLK3F4gc=) 3: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: eVEWrgAX4ZnGtqRKMu7y1kldAhV5Bn5D8vbPp3E9838=) 4: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: dyba1Oz6Wp8hX68WIp/FlT5kkFNyYyRCOC354wRZyeE=) 5: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: bcrYp2H/z0S0hWGYzTC5YNTUZlTQYIqRD2WSLvGlQYs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.crl rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:38:6a:74:0e:24:2e:7e:79:90:97:ee:f4:94:f9:f9:52:91:c3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6 Validity Not Before: Jul 23 23:18:26 2026 GMT Not After : Jul 25 03:14:26 2026 GMT Subject: CN=45B0B481751A7815DE7E0679B091125128DA56E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:89:4e:23:ca:54:1b:ae:49:35:e1:65:0d:e3: b4:50:de:79:7c:8a:cd:90:11:63:6a:4e:f5:b9:8c: 25:b6:66:d2:75:df:28:0f:7b:b9:6b:5a:9b:b0:1c: e9:2e:33:7b:ab:e6:a5:f6:91:b0:8b:d5:7d:91:0f: 6e:69:2c:ba:1d:02:79:bd:1b:58:80:cc:71:4f:10: 24:b7:f0:43:8a:08:2e:39:27:9f:c2:82:a9:13:ef: 5c:90:3f:e5:9a:85:ec:de:95:c2:f7:3e:fd:64:3c: bf:b9:f4:0b:28:66:04:dd:34:b8:12:38:ab:99:09: c0:18:b8:2d:87:f9:e4:a8:09:1b:e2:fa:d3:1e:6a: 78:0d:34:2b:b8:33:ef:99:70:0c:36:2b:9a:42:01: 11:e1:78:12:67:fc:46:4f:8d:27:7b:b7:a1:c3:d1: 02:1b:dd:a5:2a:c2:28:da:9f:2d:c5:9a:bf:ca:18: 3d:20:4b:fe:ec:81:83:9f:2a:79:69:ea:d0:7d:30: ea:f3:cb:ea:2e:25:2c:63:f1:b3:ff:11:c7:cf:a8: bd:ae:71:6a:1c:65:4b:2a:dd:ec:53:d4:ff:b4:0b: fa:58:60:5f:e4:0e:3f:b6:90:48:85:8c:4e:fe:11: 26:2a:8c:b1:ad:0b:bb:18:be:c5:40:73:67:e4:26: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B0:B4:81:75:1A:78:15:DE:7E:06:79:B0:91:12:51:28:DA:56:E2 X509v3 Authority Key Identifier: keyid:A5:1F:08:82:DC:1B:DA:E2:BF:6D:C9:1D:3E:C6:EB:23:E5:69:AF:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b0:6b:dc:13:83:6e:c4:da:49:ed:6b:ac:1e:f6:6f:f8:28: eb:38:53:b7:ac:3d:ee:c3:80:39:9f:b9:ba:26:1e:65:9a:42: 77:84:31:54:e0:d7:64:b1:2c:e7:af:6a:3b:da:83:65:cd:36: 1d:74:18:29:d0:db:00:3c:f3:74:e0:05:03:44:34:50:de:45: 8e:af:95:92:c4:04:e2:c5:7b:b0:c2:03:a4:37:84:c2:6a:2c: 73:af:03:05:7d:3e:06:d1:20:9c:80:f1:7a:85:b5:76:b8:d9: cf:a9:e7:67:76:5f:a8:b5:37:34:6c:bc:e2:f1:43:82:b3:f1: 56:fb:4a:aa:89:3c:77:e2:c9:d7:fb:45:54:13:70:50:d5:92: 85:5c:b1:5a:49:4a:fd:c0:b1:9a:6e:22:74:4b:c5:96:78:b5: f1:ff:74:c8:04:3e:5f:c8:99:99:c7:53:0e:36:7a:b0:39:92: 96:2d:f3:48:0b:c2:63:e2:05:8f:db:3d:86:c7:19:26:8c:3c: fa:4c:15:e3:58:94:86:80:5a:1e:d8:e3:47:24:6c:05:06:0a: fc:b0:05:fc:36:5c:7e:3f:3c:19:14:24:7a:5f:07:8a:cb:3e: 18:56:fb:68:70:2f:8c:06:8b:63:83:17:0f:79:5a:1c:fd:d1: 14:33:02:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTThqdA4kLn55kJfu9JT5+VKRwzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRjA4ODJEQzFCREFFMkJGNkRDOTFEM0VDNkVCMjNF NTY5QUZENjAeFw0yNjA3MjMyMzE4MjZaFw0yNjA3MjUwMzE0MjZaMDMxMTAvBgNV BAMTKDQ1QjBCNDgxNzUxQTc4MTVERTdFMDY3OUIwOTExMjUxMjhEQTU2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYiU4jylQbrkk14WUN47RQ3nl8 is2QEWNqTvW5jCW2ZtJ13ygPe7lrWpuwHOkuM3ur5qX2kbCL1X2RD25pLLodAnm9 G1iAzHFPECS38EOKCC45J5/CgqkT71yQP+WahezelcL3Pv1kPL+59AsoZgTdNLgS OKuZCcAYuC2H+eSoCRvi+tMeangNNCu4M++ZcAw2K5pCARHheBJn/EZPjSd7t6HD 0QIb3aUqwijany3Fmr/KGD0gS/7sgYOfKnlp6tB9MOrzy+ouJSxj8bP/EcfPqL2u cWocZUsq3exT1P+0C/pYYF/kDj+2kEiFjE7+ESYqjLGtC7sYvsVAc2fkJiP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURbC0gXUaeBXefgZ5sJESUSjaVuIwHwYDVR0j BBgwFoAUpR8Igtwb2uK/bckdPsbrI+Vpr9YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjljZTBjOTQtMGQ2Yy00NWIzLWFhYzYtMzRkMGNlOWIxZjA4LzAvQTUxRjA4ODJE QzFCREFFMkJGNkRDOTFEM0VDNkVCMjNFNTY5QUZENi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTFGMDg4MkRDMUJEQUUyQkY2REM5MUQzRUM2RUIyM0U1NjlB RkQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUxRjA4ODJEQzFCREFFMkJGNkRDOTFEM0VDNkVC MjNFNTY5QUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqwa9wTg27E2knta6we9m/4KOs4U7esPe7D gDmfubomHmWaQneEMVTg12SxLOevajvag2XNNh10GCnQ2wA883TgBQNENFDeRY6v lZLEBOLFe7DCA6Q3hMJqLHOvAwV9PgbRIJyA8XqFtXa42c+p52d2X6i1NzRsvOLx Q4Kz8Vb7SqqJPHfiydf7RVQTcFDVkoVcsVpJSv3AsZpuInRLxZZ4tfH/dMgEPl/I mZnHUw42erA5kpYt80gLwmPiBY/bPYbHGSaMPPpMFeNYlIaAWh7Y40ckbAUGCvyw Bfw2XH4/PBkUJHpfB4rLPhhW+2hwL4wGi2ODFw95Whz90RQzAuU= -----END CERTIFICATE-----Generated at Fri Jul 24 02:38:57 2026 by rpki-client