$ rpki-client -vvf rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft File: 04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft (raw, json) Hash identifier: gDu14b6QlXPFOD9lN2BP09agS1N/KZ7/VpJo9pZZQTg= Subject key identifier: 8E:F2:56:0E:4D:B0:4A:0D:85:82:38:E2:A0:14:AB:34:83:E7:A5:23 Authority key identifier: 04:52:2B:78:37:74:E8:96:9A:25:3B:79:C9:BD:8B:7A:F1:1E:0E:6E Certificate issuer: /CN=04522B783774E8969A253B79C9BD8B7AF11E0E6E Certificate serial: 1D9775E4AB43970AEF179B3BEA0DFE1BFE56FB9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 17:48:39 +0000 Manifest this update: Tue 28 Jul 2026 17:43:39 +0000 Manifest next update: Wed 29 Jul 2026 19:06:39 +0000 Files and hashes: 1: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: JGTo44TwhcX4ivQ52rHxAzJZareWjfxAS0kPXAmQ5EE=) 2: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: 40yX7GBS0nX6cgx29ls12Yp5h3Ba+XKjPu45g8FVQzo=) 3: 04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl (hash: VwNzW2NeYAzS1LhVENkWBKXWZBfTddxz9ONffLrLHak=) 4: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CZVghfd+RMSIYEhXYYQSwl8vEVYu7UKTsPMOPTno7kM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:97:75:e4:ab:43:97:0a:ef:17:9b:3b:ea:0d:fe:1b:fe:56:fb:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04522B783774E8969A253B79C9BD8B7AF11E0E6E Validity Not Before: Jul 28 17:43:39 2026 GMT Not After : Jul 29 19:06:39 2026 GMT Subject: CN=8EF2560E4DB04A0D858238E2A014AB3483E7A523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8b:c2:52:39:f8:d9:a8:b6:f2:7f:b6:2e:d3: 92:7c:c8:c4:c5:aa:9d:7e:df:0e:47:ea:5d:93:59: 50:87:58:38:b3:2a:14:e7:87:07:0c:0d:2c:30:4f: 06:18:60:1d:ae:ee:16:d2:ab:89:2d:84:76:7e:ac: 71:29:a4:a0:5e:bb:d5:a2:75:e7:0f:16:db:56:2b: d8:27:88:02:ec:56:7d:0c:79:e7:f4:2d:18:96:30: b3:02:00:9f:c3:32:5c:6a:a5:dc:d8:be:f2:48:17: 56:b9:66:e8:5f:81:5f:89:03:a1:4c:4a:4e:41:85: fa:9e:7e:7c:97:e4:14:64:bc:77:1a:29:0d:54:cc: 52:49:8c:08:19:00:90:cd:8d:7c:97:e6:33:ed:bb: e4:b3:18:f1:90:ab:db:4b:8e:fa:94:8c:10:b1:16: 0b:68:93:d9:8c:d3:14:c2:20:ba:e3:8a:21:0e:3b: 89:80:98:c6:ae:03:20:0a:3e:56:67:77:87:d7:c5: 89:33:33:38:92:2d:8e:b2:2a:ee:c8:5b:d7:3d:5b: e1:b1:18:04:00:35:b7:75:3d:e9:5c:c5:f2:47:ea: d8:a4:f1:4c:76:e2:f9:79:72:7c:14:fb:39:2a:bb: 2a:8e:fb:7d:a1:42:86:47:e5:b0:86:78:cb:55:ab: 14:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F2:56:0E:4D:B0:4A:0D:85:82:38:E2:A0:14:AB:34:83:E7:A5:23 X509v3 Authority Key Identifier: keyid:04:52:2B:78:37:74:E8:96:9A:25:3B:79:C9:BD:8B:7A:F1:1E:0E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c0:5f:0d:a6:85:bd:36:90:ff:5a:d6:ae:3b:74:79:c0:f2: 18:4e:97:ec:fc:2d:3b:6b:c1:af:b1:19:3b:1f:48:bc:94:e5: f8:e9:2c:fb:b1:57:22:a2:51:60:12:87:65:b1:09:f3:0c:e9: ef:31:92:c9:e8:cb:d6:1f:02:7c:45:1d:a0:77:ad:65:69:f0: d5:07:43:48:54:1e:9a:af:cd:33:bd:59:2e:9d:cd:ea:f4:d8: 4b:c4:c5:91:8b:0d:55:70:c9:fe:9d:27:83:da:f5:b9:e1:fd: 0f:a5:f8:96:61:21:40:90:eb:45:1a:b0:a8:21:d7:72:23:0f: c3:56:38:81:f0:b0:f6:14:a9:ea:84:94:f6:fd:f7:8b:18:75: 39:a3:7c:fb:e5:95:5a:0c:60:9b:e8:31:0c:8b:ed:b1:1b:97: 50:e0:76:8d:77:47:cc:79:61:44:9d:4e:ae:8f:98:0e:20:a8: 28:3a:1c:68:7b:c5:eb:c7:ae:fd:28:83:99:47:41:bd:57:80: a7:8c:73:f2:4d:4a:88:cc:f7:d3:28:1c:dc:36:2a:bf:42:56: ec:f0:9d:c2:1a:e7:82:22:ee:65:19:87:45:27:de:ed:4b:38: d0:b9:2b:78:15:1d:3e:c4:41:45:e2:40:95:2c:dd:48:f8:ce: ed:62:f0:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHZd15KtDlwrvF5s76g3+G/5W+54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1MjJCNzgzNzc0RTg5NjlBMjUzQjc5QzlCRDhCN0FG MTFFMEU2RTAeFw0yNjA3MjgxNzQzMzlaFw0yNjA3MjkxOTA2MzlaMDMxMTAvBgNV BAMTKDhFRjI1NjBFNERCMDRBMEQ4NTgyMzhFMkEwMTRBQjM0ODNFN0E1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFi8JSOfjZqLbyf7Yu05J8yMTF qp1+3w5H6l2TWVCHWDizKhTnhwcMDSwwTwYYYB2u7hbSq4kthHZ+rHEppKBeu9Wi decPFttWK9gniALsVn0Meef0LRiWMLMCAJ/DMlxqpdzYvvJIF1a5ZuhfgV+JA6FM Sk5BhfqefnyX5BRkvHcaKQ1UzFJJjAgZAJDNjXyX5jPtu+SzGPGQq9tLjvqUjBCx Fgtok9mM0xTCILrjiiEOO4mAmMauAyAKPlZnd4fXxYkzMziSLY6yKu7IW9c9W+Gx GAQANbd1PelcxfJH6tik8Ux24vl5cnwU+zkquyqO+32hQoZH5bCGeMtVqxQnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjvJWDk2wSg2FgjjioBSrNIPnpSMwHwYDVR0j BBgwFoAUBFIreDd06JaaJTt5yb2LevEeDm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODliODYwNGYtMzk1YS00MmJlLWI5OTctZTgwZmMxZGY5MGY5LzAvMDQ1MjJCNzgz Nzc0RTg5NjlBMjUzQjc5QzlCRDhCN0FGMTFFMEU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDUyMkI3ODM3NzRFODk2OUEyNTNCNzlDOUJEOEI3QUYxMUUw RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMDQ1MjJCNzgzNzc0RTg5NjlBMjUzQjc5QzlCRDhC N0FGMTFFMEU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/AXw2mhb02kP9a1q47dHnA8hhOl+z8LTtr wa+xGTsfSLyU5fjpLPuxVyKiUWASh2WxCfMM6e8xksnoy9YfAnxFHaB3rWVp8NUH Q0hUHpqvzTO9WS6dzer02EvExZGLDVVwyf6dJ4Pa9bnh/Q+l+JZhIUCQ60UasKgh 13IjD8NWOIHwsPYUqeqElPb994sYdTmjfPvllVoMYJvoMQyL7bEbl1Dgdo13R8x5 YUSdTq6PmA4gqCg6HGh7xevHrv0og5lHQb1XgKeMc/JNSojM99MoHNw2Kr9CVuzw ncIa54Ii7mUZh0Un3u1LONC5K3gVHT7EQUXiQJUs3Uj4zu1i8M4= -----END CERTIFICATE-----Generated at Wed Jul 29 09:00:24 2026 by rpki-client