$ rpki-client -vvf rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft File: 853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft (raw, json) Hash identifier: SHkMJLAdP9JDJbN9/gft5bhz/9mGSdlMf2acT0WxEu4= Subject key identifier: E6:8C:22:CF:FE:3E:5A:FB:24:6C:E4:F8:28:35:F7:D2:7F:80:59:B7 Authority key identifier: 85:3E:DD:7A:B3:EF:9A:13:A0:77:9F:26:12:78:6F:6D:2D:7C:08:BE Certificate issuer: /CN=853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE Certificate serial: 0E6A6AABE7CDBC6264BDAE2AA4E9AC81E7E73762 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft Manifest number: 77 Signing time: Wed 29 Jul 2026 06:18:29 +0000 Manifest this update: Wed 29 Jul 2026 06:13:29 +0000 Manifest next update: Thu 30 Jul 2026 08:07:29 +0000 Files and hashes: 1: 3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa (hash: fgQOQ1ZPs6+mRIJ9mhffQJjtFV+ZjnGnsOoWLbAN6Mo=) 2: 323430333a653434303a3a2f33322d3332203d3e20313338303936.roa (hash: VwsatNn5AXuJ/LUW+n8JXwWEwiaViEVC741lbFCSMBE=) 3: 3130332e3132342e3139382e302f32342d3234203d3e20313338303936.roa (hash: 07pLPD2WlKL+vB7ypQ2CjBacLrYgbCjaYdQZk1Lj438=) 4: 3130332e3132342e3139372e302f32342d3234203d3e20313338303936.roa (hash: nJl837iJi/5SwBSDbdYVongO7p9uzBZcmTZb0XAZTJk=) 5: 853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl (hash: MuMTD+rhPz8OCfNMoF3dzi+jUa9aTTxG69FEoUPg5/k=) 6: 3130332e3132342e3139392e302f32342d3234203d3e20313338303936.roa (hash: fxSYsouQPJ65g7CwW1EnalKBkWjJiK50KJBFUAXhZzA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:6a:6a:ab:e7:cd:bc:62:64:bd:ae:2a:a4:e9:ac:81:e7:e7:37:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE Validity Not Before: Jul 29 06:13:29 2026 GMT Not After : Jul 30 08:07:29 2026 GMT Subject: CN=E68C22CFFE3E5AFB246CE4F82835F7D27F8059B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:66:96:25:72:a7:a3:61:ac:47:b7:ea:6e:b4: 89:a9:3e:78:9a:9f:2b:08:3f:fd:6d:23:e3:20:20: e9:4b:86:14:9a:46:a2:ed:b4:df:c0:18:89:8f:58: 7b:96:22:bf:ac:45:53:a9:be:b4:47:75:5c:24:ca: 4c:c5:f9:68:a6:d1:ac:4a:f0:63:a1:80:77:f5:f7: 76:fe:99:df:b4:f6:dd:58:b2:ee:8e:2a:19:74:be: 2f:2d:5a:68:f9:3a:6a:db:c4:03:74:b5:5a:7a:84: a7:d6:93:39:ef:3c:91:c6:ac:80:c3:63:ea:a4:9b: 04:84:a5:8f:0b:2b:f8:87:f1:18:e0:f9:fb:41:be: 0d:a4:5b:38:3a:f2:73:a9:59:4f:3c:5c:cc:fb:11: 22:4c:ac:29:65:19:dd:ab:a0:99:21:20:13:c5:21: 80:ad:7f:bb:70:b9:97:87:86:3c:a4:bc:b0:88:d0: a4:2b:cd:f4:2a:71:7d:f3:f0:f4:c8:9e:bc:d7:48: 56:ab:d2:67:b5:3b:e4:70:8e:28:85:d3:94:00:6e: 05:55:f5:e6:93:7e:d9:44:3d:1c:80:89:61:d4:bb: 63:8f:00:92:d4:03:b1:8b:2d:3e:65:14:87:cb:72: de:35:fe:bb:40:15:c2:c1:b7:af:c5:7f:55:89:f5: 27:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8C:22:CF:FE:3E:5A:FB:24:6C:E4:F8:28:35:F7:D2:7F:80:59:B7 X509v3 Authority Key Identifier: keyid:85:3E:DD:7A:B3:EF:9A:13:A0:77:9F:26:12:78:6F:6D:2D:7C:08:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:fd:9a:d5:13:5e:bc:36:7e:21:33:49:0d:be:f6:61:54:c6: 4c:72:eb:0b:13:61:3d:3a:6f:9e:8e:32:40:6e:5d:1d:ac:74: c2:1b:94:33:b7:99:18:56:69:7f:5f:87:8a:8a:cd:b5:d4:95: 08:db:64:bc:8d:d5:0d:8e:bc:2a:cf:13:bb:16:53:39:05:ae: 1c:4d:1e:74:1e:32:ce:a9:1d:85:1d:04:b3:25:96:2a:4d:38: b9:43:2d:6a:d9:96:b7:f0:f0:be:a7:8c:26:2f:d5:d8:d1:31: 4c:db:15:82:d6:a9:7f:92:ad:a5:c2:6d:c2:4c:4d:26:41:02: 48:ed:15:31:a7:4c:7d:9a:3e:71:ab:c0:c2:24:04:a1:05:18: 5e:08:fd:b8:c1:f4:ff:d1:68:5a:23:05:85:d8:9c:8e:31:6d: 26:49:b7:0b:91:30:eb:cb:e6:19:9e:57:b3:24:44:c9:43:83: 05:11:25:40:e4:20:fd:87:0d:25:63:05:21:b2:45:af:57:77: 4b:ff:32:49:85:4c:5c:fe:ce:58:4a:57:ef:53:55:8e:3d:fb: ec:f0:76:bc:46:d4:50:b8:8b:b8:ed:f9:0d:36:06:e9:48:f9: 9e:0d:36:b4:e8:55:ea:4d:b4:10:85:d4:ae:91:57:dd:a8:c9: 4d:ea:6e:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDmpqq+fNvGJkva4qpOmsgefnN2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzRUREN0FCM0VGOUExM0EwNzc5RjI2MTI3ODZGNkQy RDdDMDhCRTAeFw0yNjA3MjkwNjEzMjlaFw0yNjA3MzAwODA3MjlaMDMxMTAvBgNV BAMTKEU2OEMyMkNGRkUzRTVBRkIyNDZDRTRGODI4MzVGN0QyN0Y4MDU5QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLZpYlcqejYaxHt+putImpPnia nysIP/1tI+MgIOlLhhSaRqLttN/AGImPWHuWIr+sRVOpvrRHdVwkykzF+Wim0axK 8GOhgHf193b+md+09t1Ysu6OKhl0vi8tWmj5OmrbxAN0tVp6hKfWkznvPJHGrIDD Y+qkmwSEpY8LK/iH8Rjg+ftBvg2kWzg68nOpWU88XMz7ESJMrCllGd2roJkhIBPF IYCtf7twuZeHhjykvLCI0KQrzfQqcX3z8PTInrzXSFar0me1O+RwjiiF05QAbgVV 9eaTftlEPRyAiWHUu2OPAJLUA7GLLT5lFIfLct41/rtAFcLBt6/Ff1WJ9SeFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5owiz/4+WvskbOT4KDX30n+AWbcwHwYDVR0j BBgwFoAUhT7derPvmhOgd58mEnhvbS18CL4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDVkZmY5YjMtOTA0MS00ZGQ2LWI3YWItMDIwNjBkNjVkMDlhLzAvODUzRUREN0FC M0VGOUExM0EwNzc5RjI2MTI3ODZGNkQyRDdDMDhCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTNFREQ3QUIzRUY5QTEzQTA3NzlGMjYxMjc4NkY2RDJEN0Mw OEJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDVkZmY5YjMtOTA0MS00ZGQ2LWI3 YWItMDIwNjBkNjVkMDlhLzAvODUzRUREN0FCM0VGOUExM0EwNzc5RjI2MTI3ODZG NkQyRDdDMDhCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFn9mtUTXrw2fiEzSQ2+9mFUxkxy6wsTYT06 b56OMkBuXR2sdMIblDO3mRhWaX9fh4qKzbXUlQjbZLyN1Q2OvCrPE7sWUzkFrhxN HnQeMs6pHYUdBLMllipNOLlDLWrZlrfw8L6njCYv1djRMUzbFYLWqX+SraXCbcJM TSZBAkjtFTGnTH2aPnGrwMIkBKEFGF4I/bjB9P/RaFojBYXYnI4xbSZJtwuRMOvL 5hmeV7MkRMlDgwURJUDkIP2HDSVjBSGyRa9Xd0v/MkmFTFz+zlhKV+9TVY49++zw drxG1FC4i7jt+Q02BulI+Z4NNrToVepNtBCF1K6RV92oyU3qbhg= -----END CERTIFICATE-----Generated at Wed Jul 29 11:42:54 2026 by rpki-client