$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft File: 7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft (raw, json) Hash identifier: GxjY3Odirg592LEJ4L2R1vWadte/u1925/R4jDewdzM= Subject key identifier: 70:34:42:85:0F:2C:B9:32:7F:4A:03:86:A2:E8:3C:FC:EF:32:DE:89 Authority key identifier: 7D:45:B2:ED:A1:9A:FF:B2:D1:13:11:2B:95:07:29:83:11:C5:DB:85 Certificate issuer: /CN=7D45B2EDA19AFFB2D113112B9507298311C5DB85 Certificate serial: 31939ABF94B1FAB34FD88687B09220CB66B7A262 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft Manifest number: BD Signing time: Mon 21 Sep 2026 05:28:25 +0000 Manifest this update: Mon 21 Sep 2026 05:23:25 +0000 Manifest next update: Tue 22 Sep 2026 06:58:25 +0000 Files and hashes: 1: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: MB43wivyVMcmejyDt+ILCLmOnQIliDhhXU3YyNcO9+8=) 2: 7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl (hash: HN9V4PcQJYlJ7h+2qOdtNoBnzSXm+LVK5+ORDRfQOgc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:93:9a:bf:94:b1:fa:b3:4f:d8:86:87:b0:92:20:cb:66:b7:a2:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D45B2EDA19AFFB2D113112B9507298311C5DB85 Validity Not Before: Sep 21 05:23:25 2026 GMT Not After : Sep 22 06:58:25 2026 GMT Subject: CN=703442850F2CB9327F4A0386A2E83CFCEF32DE89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e2:cd:22:e2:46:87:ba:1b:62:7f:b1:2c:21: 51:8d:93:51:f3:5a:d5:d0:37:18:15:cc:b2:13:2c: 94:8f:fd:2f:90:c6:a1:d2:02:e8:29:97:6b:73:8b: 30:04:04:eb:0b:32:8e:25:eb:15:ee:cd:83:10:cc: 41:75:c0:45:25:63:b7:38:f6:18:5e:cb:23:d2:b0: 64:ec:61:0a:ce:1d:7b:10:94:26:3a:2f:50:56:7e: 2a:2a:c1:3c:9b:1d:e3:a2:14:62:b4:4e:56:4b:14: 31:2f:1b:2d:f1:38:00:78:fb:b6:c1:69:4d:ab:5a: 30:c5:ac:5f:29:75:32:98:34:13:be:5b:a0:53:f2: 43:e0:18:e9:83:df:63:7a:86:1e:1b:a6:6b:b1:12: 6a:0b:3b:98:d8:7c:f9:30:63:76:4c:c1:b2:fb:e8: 0e:d7:a7:c4:a1:5c:cd:3e:6a:53:5c:98:1a:48:dd: 3d:c1:43:7b:16:84:0d:bc:15:2d:d0:00:41:0e:4d: 86:3e:9b:67:3b:67:ab:64:96:9d:a0:6e:d3:04:63: f5:6b:47:a1:4b:27:fc:e3:b5:9a:41:37:88:b6:5b: 84:4f:ec:74:11:3d:ef:44:64:a9:a4:b1:c6:af:f6: 68:8c:ea:2e:2d:58:28:8e:1e:10:ef:9a:a3:3d:e4: 5a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:34:42:85:0F:2C:B9:32:7F:4A:03:86:A2:E8:3C:FC:EF:32:DE:89 X509v3 Authority Key Identifier: keyid:7D:45:B2:ED:A1:9A:FF:B2:D1:13:11:2B:95:07:29:83:11:C5:DB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:10:30:00:f4:c7:12:50:6b:76:48:e1:13:a2:72:89:4d:75: 34:1d:6f:cb:23:ab:82:da:42:2b:19:2f:2f:c8:cc:ac:eb:3b: f3:2a:f1:68:5a:98:45:d8:f2:17:b5:12:ad:17:6a:10:49:f1: ff:56:04:0f:b7:ed:7f:d1:1e:4b:d0:e8:10:89:e8:2f:6d:56: cc:e7:8d:ac:5c:a9:46:20:16:ca:4a:77:b3:34:eb:bb:a2:cc: eb:d7:44:86:ef:47:9c:32:d6:4e:5f:89:42:8c:83:71:af:52: f9:d3:02:21:7f:c3:28:f1:b3:7a:e8:f9:7d:45:7d:db:3a:1b: 2c:97:4f:5f:95:4e:20:36:2c:1f:d1:e7:4b:2f:25:48:30:c7: 8a:4e:64:a8:fa:43:3f:58:6e:08:57:55:90:d3:37:04:ce:8f: 58:28:e5:3a:bb:51:a0:58:f0:74:c1:7e:8b:b8:6e:b4:1c:b6: de:af:d7:36:a9:8a:e7:86:58:70:e4:b7:54:97:9b:40:e8:85: 8c:14:07:bd:b7:4c:e9:33:d7:6a:0c:14:20:9e:95:f8:bd:a1: bd:bd:89:c1:ad:1d:31:25:19:64:fb:4b:ec:51:9d:64:30:46: d8:5a:4b:28:96:8f:21:f0:70:a4:29:3f:6b:43:07:a7:9e:b3: 95:ee:ea:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZOav5Sx+rNP2IaHsJIgy2a3omIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q0NUIyRURBMTlBRkZCMkQxMTMxMTJCOTUwNzI5ODMx MUM1REI4NTAeFw0yNjA5MjEwNTIzMjVaFw0yNjA5MjIwNjU4MjVaMDMxMTAvBgNV BAMTKDcwMzQ0Mjg1MEYyQ0I5MzI3RjRBMDM4NkEyRTgzQ0ZDRUYzMkRFODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW4s0i4kaHuhtif7EsIVGNk1Hz WtXQNxgVzLITLJSP/S+QxqHSAugpl2tzizAEBOsLMo4l6xXuzYMQzEF1wEUlY7c4 9hheyyPSsGTsYQrOHXsQlCY6L1BWfioqwTybHeOiFGK0TlZLFDEvGy3xOAB4+7bB aU2rWjDFrF8pdTKYNBO+W6BT8kPgGOmD32N6hh4bpmuxEmoLO5jYfPkwY3ZMwbL7 6A7Xp8ShXM0+alNcmBpI3T3BQ3sWhA28FS3QAEEOTYY+m2c7Z6tklp2gbtMEY/Vr R6FLJ/zjtZpBN4i2W4RP7HQRPe9EZKmkscav9miM6i4tWCiOHhDvmqM95FrvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcDRChQ8suTJ/SgOGoug8/O8y3okwHwYDVR0j BBgwFoAUfUWy7aGa/7LRExErlQcpgxHF24UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJkNDM0MGItMjFjNC00ZmM3LWEyNTktZTIzNTRjNTNmZGQyLzAvN0Q0NUIyRURB MTlBRkZCMkQxMTMxMTJCOTUwNzI5ODMxMUM1REI4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDQ1QjJFREExOUFGRkIyRDExMzExMkI5NTA3Mjk4MzExQzVE Qjg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJkNDM0MGItMjFjNC00ZmM3LWEy NTktZTIzNTRjNTNmZGQyLzAvN0Q0NUIyRURBMTlBRkZCMkQxMTMxMTJCOTUwNzI5 ODMxMUM1REI4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8QMAD0xxJQa3ZI4ROicolNdTQdb8sjq4La QisZLy/IzKzrO/Mq8WhamEXY8he1Eq0XahBJ8f9WBA+37X/RHkvQ6BCJ6C9tVszn jaxcqUYgFspKd7M067uizOvXRIbvR5wy1k5fiUKMg3GvUvnTAiF/wyjxs3ro+X1F fds6GyyXT1+VTiA2LB/R50svJUgwx4pOZKj6Qz9YbghXVZDTNwTOj1go5Tq7UaBY 8HTBfou4brQctt6v1zapiueGWHDkt1SXm0DohYwUB723TOkz12oMFCCelfi9ob29 icGtHTElGWT7S+xRnWQwRthaSyiWjyHwcKQpP2tDB6ees5Xu6tM= -----END CERTIFICATE-----Generated at Mon Sep 21 21:54:55 2026 by rpki-client