$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft File: CDAD8AE64850B7306026A1B46FF84D08284104C9.mft (raw, json) Hash identifier: 819gM5T0rvEHZNhxP7zq7YS4Y9oU3/E3+q9coeaj7Mg= Subject key identifier: 24:C0:86:B5:69:1B:57:64:82:05:5D:45:FD:4F:A8:E3:AD:58:EE:23 Authority key identifier: CD:AD:8A:E6:48:50:B7:30:60:26:A1:B4:6F:F8:4D:08:28:41:04:C9 Certificate issuer: /CN=CDAD8AE64850B7306026A1B46FF84D08284104C9 Certificate serial: 4FC987C155CE6D9F4DDBA06D8B19D35787F05C3E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 15:20:32 +0000 Manifest this update: Tue 28 Jul 2026 15:15:32 +0000 Manifest next update: Wed 29 Jul 2026 16:35:32 +0000 Files and hashes: 1: CDAD8AE64850B7306026A1B46FF84D08284104C9.crl (hash: VA9EqcEEXDl5fcHivnm7NleHJ1jr4EAK78oHHHsu3lw=) 2: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: Rie1EWmYCW5AS7gherk1HJqeE5vY8I4Pjrh2HLZJQzM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.crl rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c9:87:c1:55:ce:6d:9f:4d:db:a0:6d:8b:19:d3:57:87:f0:5c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDAD8AE64850B7306026A1B46FF84D08284104C9 Validity Not Before: Jul 28 15:15:32 2026 GMT Not After : Jul 29 16:35:32 2026 GMT Subject: CN=24C086B5691B576482055D45FD4FA8E3AD58EE23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fc:66:df:bc:e1:1c:0d:cc:d6:ab:45:66:52: 90:e4:f6:e7:05:84:de:57:2f:7a:54:bf:45:6b:7f: 69:ac:ae:1e:5d:bb:ff:79:9a:0a:c2:29:ee:1c:71: d2:fb:20:c0:b4:df:fa:ca:63:8c:a5:07:5d:31:07: 5a:82:5b:a5:8d:0f:16:1e:9a:2e:96:51:ca:af:79: f1:dd:2f:28:16:77:60:ad:a8:09:04:35:d2:64:4a: ae:53:ff:b6:44:df:0d:a5:8b:bd:7e:eb:94:c6:75: 8c:6d:26:51:9f:49:6e:0a:8d:21:31:a9:bb:52:3b: 46:20:b8:56:22:e5:db:1a:4e:02:61:b6:f7:0b:b4: 1d:53:de:f0:ae:93:31:bf:0c:e7:88:89:23:19:62: e2:02:33:38:14:29:3c:2d:29:6c:3d:a9:4c:9f:67: da:59:a3:f1:9e:f5:75:c7:b4:eb:20:02:b5:ac:48: d0:28:ec:21:6d:d0:1b:df:b6:47:f0:f8:8e:f8:34: 4d:15:b4:22:21:4d:20:73:16:ed:0e:a3:89:64:d3: 7b:0f:ba:e4:41:27:8d:f3:70:d0:f5:42:76:2e:ab: cc:eb:68:df:47:3d:50:d7:56:04:2a:3d:8c:7d:1f: 9e:a0:55:72:48:b2:73:cc:73:8f:f2:ab:56:51:cc: 41:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C0:86:B5:69:1B:57:64:82:05:5D:45:FD:4F:A8:E3:AD:58:EE:23 X509v3 Authority Key Identifier: keyid:CD:AD:8A:E6:48:50:B7:30:60:26:A1:B4:6F:F8:4D:08:28:41:04:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:5d:08:c3:0f:b9:44:27:6e:5b:0d:fb:90:6e:ea:32:db:98: 13:fa:b1:2a:ea:dd:a8:a2:f2:1b:dc:ba:8f:48:df:46:a9:bd: d1:b9:1f:82:9a:8b:55:91:94:fa:43:da:18:0e:42:4e:00:6f: 60:31:e9:a4:4a:45:f7:99:6e:0e:31:65:de:b5:17:63:15:df: 07:57:9a:30:b2:bb:f3:0f:23:7d:6c:f3:5c:54:d6:66:e9:89: 70:91:74:9d:f0:ba:ef:f7:da:fe:b6:3c:82:2d:49:06:6e:51: 04:1e:ea:17:45:89:20:f7:99:90:57:26:94:7d:31:9d:52:a1: 4a:36:c6:71:c3:db:2d:a7:f2:db:0f:86:54:40:47:5f:6e:c6: 15:c0:2b:ee:a9:7d:42:5a:91:f0:6b:8c:f3:31:56:90:0f:ac: 67:6d:a5:e4:5d:a3:eb:b0:97:e8:b0:99:54:f7:3b:e3:3c:4a: b3:14:54:56:f1:c2:e1:78:85:47:9b:1d:2d:12:31:eb:a3:9f: 51:96:de:02:92:65:8c:f4:6d:a1:35:ff:8a:2b:13:45:75:21: 0c:27:ab:d8:63:6b:04:51:d4:4c:4f:d9:b8:92:ad:a0:84:f3: ad:a2:11:11:df:24:65:79:03:cb:a3:b3:73:7c:c1:15:2f:83: cb:7c:3d:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT8mHwVXObZ9N26BtixnTV4fwXD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBRDhBRTY0ODUwQjczMDYwMjZBMUI0NkZGODREMDgy ODQxMDRDOTAeFw0yNjA3MjgxNTE1MzJaFw0yNjA3MjkxNjM1MzJaMDMxMTAvBgNV BAMTKDI0QzA4NkI1NjkxQjU3NjQ4MjA1NUQ0NUZENEZBOEUzQUQ1OEVFMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE/GbfvOEcDczWq0VmUpDk9ucF hN5XL3pUv0Vrf2msrh5du/95mgrCKe4ccdL7IMC03/rKY4ylB10xB1qCW6WNDxYe mi6WUcqvefHdLygWd2CtqAkENdJkSq5T/7ZE3w2li71+65TGdYxtJlGfSW4KjSEx qbtSO0YguFYi5dsaTgJhtvcLtB1T3vCukzG/DOeIiSMZYuICMzgUKTwtKWw9qUyf Z9pZo/Ge9XXHtOsgArWsSNAo7CFt0Bvftkfw+I74NE0VtCIhTSBzFu0Oo4lk03sP uuRBJ43zcND1QnYuq8zraN9HPVDXVgQqPYx9H56gVXJIsnPMc4/yq1ZRzEEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJMCGtWkbV2SCBV1F/U+o461Y7iMwHwYDVR0j BBgwFoAUza2K5khQtzBgJqG0b/hNCChBBMkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI4YzU0M2MtZGUxZi00ZWY0LTkyYjEtNjg1NTZmZjEzMWEzLzAvQ0RBRDhBRTY0 ODUwQjczMDYwMjZBMUI0NkZGODREMDgyODQxMDRDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREFEOEFFNjQ4NTBCNzMwNjAyNkExQjQ2RkY4NEQwODI4NDEw NEM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvQ0RBRDhBRTY0ODUwQjczMDYwMjZBMUI0NkZGODRE MDgyODQxMDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpdCMMPuUQnblsN+5Bu6jLbmBP6sSrq3aii 8hvcuo9I30apvdG5H4Kai1WRlPpD2hgOQk4Ab2Ax6aRKRfeZbg4xZd61F2MV3wdX mjCyu/MPI31s81xU1mbpiXCRdJ3wuu/32v62PIItSQZuUQQe6hdFiSD3mZBXJpR9 MZ1SoUo2xnHD2y2n8tsPhlRAR19uxhXAK+6pfUJakfBrjPMxVpAPrGdtpeRdo+uw l+iwmVT3O+M8SrMUVFbxwuF4hUebHS0SMeujn1GW3gKSZYz0baE1/4orE0V1IQwn q9hjawRR1ExP2biSraCE862iERHfJGV5A8ujs3N8wRUvg8t8Pco= -----END CERTIFICATE-----Generated at Wed Jul 29 08:31:33 2026 by rpki-client