$ rpki-client -vvf rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft File: 45E5895753396A59380E8B15A613362BDD0B9399.mft (raw, json) Hash identifier: TsGTgTcE7AjwZax6WkpkYoapUFjzdVCP49T29LpXnpM= Subject key identifier: 58:BF:7C:8A:A3:6C:73:D9:2E:85:09:00:2F:1D:8F:89:A9:F5:57:EE Authority key identifier: 45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99 Certificate issuer: /CN=45E5895753396A59380E8B15A613362BDD0B9399 Certificate serial: 445C56C69AEC5AB59113C33B666857AE90D4B714 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 17:43:38 +0000 Manifest this update: Tue 28 Jul 2026 17:38:38 +0000 Manifest next update: Wed 29 Jul 2026 20:31:38 +0000 Files and hashes: 1: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: KhIaiPcjWv7aKSlHmjk0jk/GmZyLW5p+ewjbZDKYFRM=) 2: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: 9vIrzXo0hOqXg/rk1f6nwh6INf+P7PQpW2N95A+iLj4=) 3: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: apfoCrb1SRZGVQ94mZUP6Yq3PvFMs7dSvIUcNJlRoMg=) 4: 45E5895753396A59380E8B15A613362BDD0B9399.crl (hash: iO1XoNocSxTl6W6UJl7R8cOrnz4U6BOcoA/tNLAOAYI=) 5: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: 150lIPhgbdhzp4Y24XpmsufR4h1DDzZZlk0gSQD8XZc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:5c:56:c6:9a:ec:5a:b5:91:13:c3:3b:66:68:57:ae:90:d4:b7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E5895753396A59380E8B15A613362BDD0B9399 Validity Not Before: Jul 28 17:38:38 2026 GMT Not After : Jul 29 20:31:38 2026 GMT Subject: CN=58BF7C8AA36C73D92E8509002F1D8F89A9F557EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:6f:a3:bc:51:37:74:d2:c7:d9:dc:45:4c: ca:9b:2e:19:6b:0e:68:f0:f7:98:76:fd:4f:40:c5: 39:f9:fa:ae:18:a3:2b:a6:01:be:90:57:09:6e:df: b7:7e:58:fc:d7:21:2f:e7:91:a6:f9:f1:23:ad:06: 38:51:e5:5b:f6:fd:85:61:76:99:ec:dd:ae:aa:af: 41:fc:fd:05:ef:73:84:6a:4a:08:84:d2:ea:83:27: d1:13:b0:ba:55:96:4c:c7:1c:61:59:ff:e6:a8:14: dd:6c:71:82:1b:b9:49:29:86:46:c7:1d:44:83:fc: f8:6b:d1:f9:52:77:c0:a9:30:7e:2e:a9:ae:25:6a: 4a:25:bf:28:95:2b:a6:b6:30:26:ef:7b:d1:84:c1: c0:cf:5f:2e:09:e4:64:fa:cd:99:e2:18:68:d5:7d: 72:77:41:c0:94:43:f8:23:d4:1f:75:33:1a:53:54: 03:b1:5d:01:03:7a:66:2b:80:24:65:1d:6b:67:bd: 05:ad:df:81:f1:c0:3b:16:50:ba:43:26:8d:fb:3c: 44:84:1e:2f:48:ed:0d:f3:62:ae:55:64:8d:88:85: e8:0d:fa:21:a1:b7:e6:9c:08:92:fa:d1:70:0b:ac: d6:38:e7:5d:10:16:d9:7e:44:1a:c6:74:36:57:93: 5a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BF:7C:8A:A3:6C:73:D9:2E:85:09:00:2F:1D:8F:89:A9:F5:57:EE X509v3 Authority Key Identifier: keyid:45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:51:aa:e3:90:56:77:a8:91:77:2a:c6:7f:31:d0:a2:df:a3: eb:bf:95:89:b6:cb:f7:82:92:1c:c8:4c:a9:cf:79:53:52:eb: f1:b1:72:5a:b9:f2:2a:fb:82:d0:bf:3f:df:37:ed:18:93:73: 80:cf:75:80:cd:0e:b8:46:16:35:2a:59:28:5c:c0:ab:41:85: 27:33:92:37:f1:36:14:a5:cf:a6:e3:6f:d3:3b:4f:d9:de:83: 59:88:10:33:b5:82:42:13:02:5a:6b:21:42:d4:1c:5a:bb:fc: 54:ee:78:c8:d6:60:a9:1b:7d:74:0a:36:4f:02:c8:65:d2:15: 66:4f:6e:c6:9a:c6:26:65:31:95:31:49:87:a6:b5:c8:94:f1: 20:39:8c:a2:34:a3:16:c7:c0:0b:09:a0:95:d9:4e:81:f1:d6: ab:57:3b:a1:32:08:58:5e:5f:ef:a6:48:a1:d5:cf:fe:22:e5: 6a:74:47:a1:a0:54:8f:06:21:ff:1e:0e:3c:cf:a6:56:f4:a3: 7b:88:18:47:b1:8b:3f:6e:8a:31:af:26:a3:5c:8b:79:23:d5: 72:1e:b5:53:e2:61:1f:62:ef:64:2b:6e:f5:2f:00:d3:3d:91: 6e:91:47:62:fc:18:c1:1d:58:68:1f:a8:f0:32:48:d2:2d:f5: a3:fe:89:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURFxWxprsWrWRE8M7ZmhXrpDUtxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFNTg5NTc1MzM5NkE1OTM4MEU4QjE1QTYxMzM2MkJE RDBCOTM5OTAeFw0yNjA3MjgxNzM4MzhaFw0yNjA3MjkyMDMxMzhaMDMxMTAvBgNV BAMTKDU4QkY3QzhBQTM2QzczRDkyRTg1MDkwMDJGMUQ4Rjg5QTlGNTU3RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+W+jvFE3dNLH2dxFTMqbLhlr Dmjw95h2/U9AxTn5+q4YoyumAb6QVwlu37d+WPzXIS/nkab58SOtBjhR5Vv2/YVh dpns3a6qr0H8/QXvc4RqSgiE0uqDJ9ETsLpVlkzHHGFZ/+aoFN1scYIbuUkphkbH HUSD/Phr0flSd8CpMH4uqa4lakolvyiVK6a2MCbve9GEwcDPXy4J5GT6zZniGGjV fXJ3QcCUQ/gj1B91MxpTVAOxXQEDemYrgCRlHWtnvQWt34HxwDsWULpDJo37PESE Hi9I7Q3zYq5VZI2IhegN+iGht+acCJL60XALrNY4510QFtl+RBrGdDZXk1r/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWL98iqNsc9kuhQkALx2Pian1V+4wHwYDVR0j BBgwFoAUReWJV1M5alk4DosVphM2K90Lk5kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZiODdmZWItMGZlMi00MThhLWEzN2EtYmUzZGQxZjBlNjNjLzAvNDVFNTg5NTc1 MzM5NkE1OTM4MEU4QjE1QTYxMzM2MkJERDBCOTM5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUU1ODk1NzUzMzk2QTU5MzgwRThCMTVBNjEzMzYyQkREMEI5 Mzk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZiODdmZWItMGZlMi00MThhLWEz N2EtYmUzZGQxZjBlNjNjLzAvNDVFNTg5NTc1MzM5NkE1OTM4MEU4QjE1QTYxMzM2 MkJERDBCOTM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRRquOQVneokXcqxn8x0KLfo+u/lYm2y/eC khzITKnPeVNS6/Gxclq58ir7gtC/P9837RiTc4DPdYDNDrhGFjUqWShcwKtBhScz kjfxNhSlz6bjb9M7T9neg1mIEDO1gkITAlprIULUHFq7/FTueMjWYKkbfXQKNk8C yGXSFWZPbsaaxiZlMZUxSYemtciU8SA5jKI0oxbHwAsJoJXZToHx1qtXO6EyCFhe X++mSKHVz/4i5Wp0R6GgVI8GIf8eDjzPplb0o3uIGEexiz9uijGvJqNci3kj1XIe tVPiYR9i72QrbvUvANM9kW6RR2L8GMEdWGgfqPAySNIt9aP+ib4= -----END CERTIFICATE-----Generated at Wed Jul 29 06:21:53 2026 by rpki-client