$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft File: CD845730E45E4D531071D97C1EDC23DA378D662F.mft (raw, json) Hash identifier: Xz7OTbR1bhCFVvq6iPDVi04cJI4b7ZrCVEEAspbiXZI= Subject key identifier: D5:12:7E:19:32:E3:0D:82:8A:8F:05:15:DA:9C:E0:C3:ED:2A:FB:86 Authority key identifier: CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F Certificate issuer: /CN=CD845730E45E4D531071D97C1EDC23DA378D662F Certificate serial: 7C8CCA0598D7719EEBDC81BE95C2C9DAC69E9F11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft Manifest number: 77 Signing time: Wed 29 Jul 2026 02:44:27 +0000 Manifest this update: Wed 29 Jul 2026 02:39:27 +0000 Manifest next update: Thu 30 Jul 2026 04:01:27 +0000 Files and hashes: 1: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: lb4d9lrnmMWGai0ItqfgLnvKFt7iEuEC2HCE9pUg2nE=) 2: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: qBRAe7C40tWA04dsJPNXkwqtoGUaunwx7S+rfFhu9ho=) 3: CD845730E45E4D531071D97C1EDC23DA378D662F.crl (hash: UvKphvzsrE1UL4y7yYURlNsqAaaaNm5D8P11Q8q+EKg=) 4: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: ZyTKIgLUxCGhcIet/CFJoBSXRoiA7e9G+Kr6S5o0mEQ=) 5: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: BgiKJc54U9vx0Bz6VAlgbJ7Gti2eL3QTE9xees67wzA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8c:ca:05:98:d7:71:9e:eb:dc:81:be:95:c2:c9:da:c6:9e:9f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD845730E45E4D531071D97C1EDC23DA378D662F Validity Not Before: Jul 29 02:39:27 2026 GMT Not After : Jul 30 04:01:27 2026 GMT Subject: CN=D5127E1932E30D828A8F0515DA9CE0C3ED2AFB86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:80:03:4b:26:c9:37:9e:54:09:c4:a3:de:1e: b3:37:c2:74:b2:9a:e8:51:5b:87:03:e0:c2:4c:92: c5:a1:8c:bb:ba:0c:a1:cf:9b:67:58:c0:90:b2:1c: 70:2c:ef:d1:65:d1:f8:41:91:a4:59:54:77:aa:42: 4b:25:db:26:6f:f8:2f:2c:22:6d:76:6d:a7:c5:6f: 85:4d:38:43:09:3b:c0:5a:04:f2:54:cd:ac:2a:82: ec:15:f9:d2:13:5f:a1:2a:ab:56:96:d4:91:22:b2: f9:5a:19:f3:a1:1c:40:15:8b:40:f0:72:29:de:fd: 83:90:c7:64:d7:4d:5d:66:fe:f0:15:9c:b7:11:63: 6a:67:30:39:6b:73:1b:ce:dc:f7:4e:7a:52:fd:1f: f1:b9:7b:af:a1:5d:5a:f7:21:8d:b7:3c:a3:c8:1d: 15:5a:3d:c1:6c:9a:6d:c7:9f:1b:a8:a7:4f:87:0e: 40:14:2b:cd:78:37:19:7f:68:68:22:65:c0:14:64: 05:6c:4d:62:5b:03:20:36:1b:33:6f:cb:50:3d:29: 3b:7e:28:b8:22:73:f7:6b:14:d7:d1:34:49:81:fa: 74:f8:6e:a6:59:9d:76:a5:82:31:64:e4:37:68:95: 4b:45:8d:45:92:3f:fa:db:08:0f:26:7b:54:cb:f8: 60:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:12:7E:19:32:E3:0D:82:8A:8F:05:15:DA:9C:E0:C3:ED:2A:FB:86 X509v3 Authority Key Identifier: keyid:CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e5:76:46:37:b9:47:96:be:9f:61:fa:54:09:07:9c:7c:fc: 0f:4c:3c:98:e0:43:4f:87:f5:35:06:9f:d2:de:f2:ee:4a:b8: 10:a3:f1:83:b0:c6:8d:c0:83:5f:ac:6c:3e:1f:81:dd:5d:53: d6:f6:80:54:78:c3:44:4f:94:0d:14:df:81:4e:9c:be:ab:b3: 54:fe:46:66:ec:42:a4:21:15:af:cb:6d:16:a0:38:c8:b3:01: 4a:70:96:8b:28:88:92:53:05:eb:b8:f1:0f:98:a0:18:f1:ec: d5:a3:0a:8d:70:75:ac:ed:66:ec:c3:2b:2e:db:39:99:1d:27: ed:c2:46:1d:08:6c:43:f3:02:6f:03:c2:ea:cd:a2:ba:2b:65: 76:74:d6:6d:bc:19:05:e3:c4:ff:85:b8:fc:e1:bc:c4:b6:f1: 35:8d:8c:4b:af:bb:80:f1:ae:13:3e:65:86:c4:c3:d7:23:0b: e4:59:3d:38:56:6c:e2:0f:3a:ba:97:6d:70:38:d4:61:d2:3c: 3b:2c:52:06:4e:f0:17:ac:80:3b:e9:b3:8c:58:d1:41:d6:ee: d2:25:01:99:5a:6e:19:39:c8:99:c0:37:ec:a3:d1:27:a9:6e: 59:44:51:ff:8f:7a:8b:27:f5:f5:b6:0e:7c:fe:ba:6e:1a:40: 82:94:f7:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIzKBZjXcZ7r3IG+lcLJ2saenxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEz NzhENjYyRjAeFw0yNjA3MjkwMjM5MjdaFw0yNjA3MzAwNDAxMjdaMDMxMTAvBgNV BAMTKEQ1MTI3RTE5MzJFMzBEODI4QThGMDUxNURBOUNFMEMzRUQyQUZCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCagANLJsk3nlQJxKPeHrM3wnSy muhRW4cD4MJMksWhjLu6DKHPm2dYwJCyHHAs79Fl0fhBkaRZVHeqQksl2yZv+C8s Im12bafFb4VNOEMJO8BaBPJUzawqguwV+dITX6Eqq1aW1JEisvlaGfOhHEAVi0Dw cine/YOQx2TXTV1m/vAVnLcRY2pnMDlrcxvO3PdOelL9H/G5e6+hXVr3IY23PKPI HRVaPcFsmm3Hnxuop0+HDkAUK814Nxl/aGgiZcAUZAVsTWJbAyA2GzNvy1A9KTt+ KLgic/drFNfRNEmB+nT4bqZZnXalgjFk5DdolUtFjUWSP/rbCA8me1TL+GDXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1RJ+GTLjDYKKjwUV2pzgw+0q+4YwHwYDVR0j BBgwFoAUzYRXMOReTVMQcdl8Htwj2jeNZi8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA5NjJjNmUtNTk1YS00N2M0LWFhN2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBF NDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEzNzhENjYyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDg0NTczMEU0NUU0RDUzMTA3MUQ5N0MxRURDMjNEQTM3OEQ2 NjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA5NjJjNmUtNTk1YS00N2M0LWFh N2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIz REEzNzhENjYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTldkY3uUeWvp9h+lQJB5x8/A9MPJjgQ0+H 9TUGn9Le8u5KuBCj8YOwxo3Ag1+sbD4fgd1dU9b2gFR4w0RPlA0U34FOnL6rs1T+ RmbsQqQhFa/LbRagOMizAUpwlosoiJJTBeu48Q+YoBjx7NWjCo1wdaztZuzDKy7b OZkdJ+3CRh0IbEPzAm8DwurNororZXZ01m28GQXjxP+FuPzhvMS28TWNjEuvu4Dx rhM+ZYbEw9cjC+RZPThWbOIPOrqXbXA41GHSPDssUgZO8BesgDvps4xY0UHW7tIl AZlabhk5yJnAN+yj0SepbllEUf+Peosn9fW2Dnz+um4aQIKU9zc= -----END CERTIFICATE-----Generated at Wed Jul 29 09:48:56 2026 by rpki-client