$ rpki-client -vvf rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft File: 5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft (raw, json) Hash identifier: 6al/SgH+5GaOnI9VrbfiLP16C7djLcOvsHV5mEhcO1c= Subject key identifier: DA:81:26:A0:14:73:BE:DD:2F:30:4C:A9:87:52:B1:35:1E:30:5C:78 Authority key identifier: 5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 Certificate issuer: /CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Certificate serial: 0D8AAFDB93378D25E18C2ECBBD6238ED3F362780 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:02:09 +0000 Manifest this update: Thu 23 Jul 2026 17:57:09 +0000 Manifest next update: Fri 24 Jul 2026 21:17:09 +0000 Files and hashes: 1: 5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl (hash: MpN72wilsNppf6najsnbeuwuarEfPCpSJXLZIgZNKZc=) 2: 3135372e32302e34352e302f32342d3234203d3e20313532333932.roa (hash: PIubzi7VZ2N4uYX3mam6XOmZc4gw31pwt2ndjjqEeIM=) 3: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: P5BEjOqlnRhd5dHiMK0aXJooM/BcbKofscPw2JJ5bRQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:8a:af:db:93:37:8d:25:e1:8c:2e:cb:bd:62:38:ed:3f:36:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Validity Not Before: Jul 23 17:57:09 2026 GMT Not After : Jul 24 21:17:09 2026 GMT Subject: CN=DA8126A01473BEDD2F304CA98752B1351E305C78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:c1:ed:25:29:68:8d:3d:54:75:c5:52:7b: d3:0b:70:cd:23:c6:b2:6c:f0:45:93:27:bb:fd:dc: c9:26:01:4f:d4:7f:a0:a5:e6:01:3e:a6:5d:01:86: 75:f6:9f:8d:17:d8:2d:b0:90:21:69:ff:4c:be:5b: 86:63:e4:39:0e:c7:e4:b5:de:e0:e8:b9:29:95:d3: 73:b9:8a:4a:d4:bf:cf:c7:c6:03:4b:dc:76:58:79: 89:5a:f7:e7:b5:2f:7c:c3:1b:a9:f3:6f:72:f6:6a: 84:0c:0d:e0:84:f0:a8:cf:8e:fc:40:a9:e6:de:21: 5d:4e:b6:62:54:95:08:31:97:d1:be:bd:43:3e:83: 59:e7:b1:15:01:14:16:3a:c0:ec:c7:bc:26:62:c4: 4e:fe:45:4f:93:56:e6:c0:c4:ec:74:b9:55:18:8b: 4e:04:5a:44:b7:ab:fb:93:4d:59:08:f8:79:8b:41: 99:1e:c6:be:41:35:fd:f8:b2:c6:64:a5:a5:38:99: 67:66:23:1a:8d:1d:ef:65:89:56:1e:8c:12:30:78: 64:0a:1b:b5:a7:ce:17:58:8b:04:1e:b3:57:14:db: 1f:64:b2:2e:5e:af:74:a2:da:34:41:d1:0a:5e:46: 92:b8:66:2a:a8:aa:68:49:a3:3b:32:c5:7a:21:5a: c0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:81:26:A0:14:73:BE:DD:2F:30:4C:A9:87:52:B1:35:1E:30:5C:78 X509v3 Authority Key Identifier: keyid:5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:6a:f3:1c:e4:20:59:5d:ea:83:17:45:ef:31:01:a8:30:d1: f9:0e:56:cd:20:b6:90:02:27:73:b6:95:62:fb:28:4f:4c:30: 24:39:eb:cd:50:39:47:06:5f:98:94:3e:ec:9b:84:c3:88:6f: a9:e4:4f:54:99:fb:b4:f5:f6:fb:8e:d2:d4:ac:51:6c:27:e4: d5:76:60:9b:37:f9:7d:d4:90:3d:13:56:be:c3:41:53:bb:37: b5:ff:e2:d0:74:9a:97:ad:d6:ac:f6:39:23:cb:ab:aa:fb:7c: d6:b2:9d:72:a4:83:61:51:82:10:96:42:a5:52:4a:a9:e6:4e: 65:44:0a:87:d9:b5:7b:47:7b:dd:58:7b:a4:e5:65:5f:0f:06: 1c:6d:14:68:8d:e6:04:61:9a:a4:d7:30:62:0a:cd:6f:70:82: 22:5e:64:56:cb:73:1a:28:b0:b1:9b:4e:c4:51:94:1d:91:ea: 6d:ec:cf:9c:b6:15:fb:a7:ce:97:87:bc:02:48:c4:ce:3d:d9: 21:0b:0e:83:6e:65:ac:bb:06:db:90:13:15:72:2b:21:93:ce: 2a:4b:26:62:44:64:47:d5:1e:4a:bf:f1:14:66:02:54:9d:3e: 0f:e9:fd:2d:93:ae:19:50:db:a4:e9:98:bc:e7:9f:d7:7a:0d: 49:e4:d0:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDYqv25M3jSXhjC7LvWI47T82J4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNG RUFBQjkwOTAeFw0yNjA3MjMxNzU3MDlaFw0yNjA3MjQyMTE3MDlaMDMxMTAvBgNV BAMTKERBODEyNkEwMTQ3M0JFREQyRjMwNENBOTg3NTJCMTM1MUUzMDVDNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3OcHtJSlojT1UdcVSe9MLcM0j xrJs8EWTJ7v93MkmAU/Uf6Cl5gE+pl0BhnX2n40X2C2wkCFp/0y+W4Zj5DkOx+S1 3uDouSmV03O5ikrUv8/HxgNL3HZYeYla9+e1L3zDG6nzb3L2aoQMDeCE8KjPjvxA qebeIV1OtmJUlQgxl9G+vUM+g1nnsRUBFBY6wOzHvCZixE7+RU+TVubAxOx0uVUY i04EWkS3q/uTTVkI+HmLQZkexr5BNf34ssZkpaU4mWdmIxqNHe9liVYejBIweGQK G7WnzhdYiwQes1cU2x9ksi5er3Si2jRB0QpeRpK4ZiqoqmhJozsyxXohWsAZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2oEmoBRzvt0vMEyph1KxNR4wXHgwHwYDVR0j BBgwFoAUWhwazsC2dAF/+4nyGGW6Y/6quQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU4OGRmZjctNmE5Mi00MjkzLTg4MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VD MEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNGRUFBQjkwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81QTFDMUFDRUMwQjY3NDAxN0ZGQjg5RjIxODY1QkE2M0ZFQUFC OTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJB NjNGRUFBQjkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMdq8xzkIFld6oMXRe8xAagw0fkOVs0gtpAC J3O2lWL7KE9MMCQ5681QOUcGX5iUPuybhMOIb6nkT1SZ+7T19vuO0tSsUWwn5NV2 YJs3+X3UkD0TVr7DQVO7N7X/4tB0mpet1qz2OSPLq6r7fNaynXKkg2FRghCWQqVS SqnmTmVECofZtXtHe91Ye6TlZV8PBhxtFGiN5gRhmqTXMGIKzW9wgiJeZFbLcxoo sLGbTsRRlB2R6m3sz5y2FfunzpeHvAJIxM492SELDoNuZay7BtuQExVyKyGTzipL JmJEZEfVHkq/8RRmAlSdPg/p/S2TrhlQ26TpmLznn9d6DUnk0PM= -----END CERTIFICATE-----Generated at Fri Jul 24 10:06:32 2026 by rpki-client