$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft File: A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft (raw, json) Hash identifier: c4Et/dmiDPPUR4QyzpsLkqzqofvfNaG5ggyqM+TciUE= Subject key identifier: 53:AE:9A:D2:E1:1F:BC:4C:4F:1D:CD:2F:40:5B:F6:A8:8C:AC:E4:4E Authority key identifier: A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 Certificate issuer: /CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Certificate serial: 1B3F5FAFF677502C30993F6925EBACF35A77B8F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 02:01:44 +0000 Manifest this update: Fri 24 Jul 2026 01:56:44 +0000 Manifest next update: Sat 25 Jul 2026 03:00:44 +0000 Files and hashes: 1: A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl (hash: 3N+nkW6lTqADg030fEcourCawgkDK2EUPtBzZXNWr7A=) 2: 3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa (hash: AZJ4QAHlxTzcVIbJwO/UxabGeC31FjTnD/rHg0D3/ME=) 3: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (hash: +IUhzjX4iJxCcMgbcQWdmMHcD7sxtYcY/3hZmSmLykA=) 4: 3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa (hash: 8YrdvedqGs1zZAIQAtRZi80VSrXLRsF6zbtnQUstSsA=) 5: 3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa (hash: m7Frx9lSqsLf1s8zbJ/qpER1sGLgEtc9hyQy6nCFDhY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:3f:5f:af:f6:77:50:2c:30:99:3f:69:25:eb:ac:f3:5a:77:b8:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Validity Not Before: Jul 24 01:56:44 2026 GMT Not After : Jul 25 03:00:44 2026 GMT Subject: CN=53AE9AD2E11FBC4C4F1DCD2F405BF6A88CACE44E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:48:71:1b:3b:0d:e2:93:8f:41:54:d7:9b:92: 15:0f:b1:5f:5a:3c:65:45:46:71:2e:28:2c:88:f0: 82:11:23:08:ca:bc:7c:8b:46:af:a7:44:bf:69:21: 66:6e:36:05:4d:a1:4e:af:3e:f0:9e:d2:e2:29:08: 85:9f:0e:e2:3a:53:d2:1e:29:98:72:5b:f0:1a:d8: cc:3c:48:ef:fb:0d:7c:b2:55:de:9d:ea:18:d3:7c: d6:78:03:03:93:81:29:52:fd:da:b8:35:0e:e0:81: eb:41:20:b6:a7:04:d0:db:c8:65:67:4a:98:29:35: d8:4a:d8:96:98:68:3c:81:f4:b6:87:7a:c2:01:cb: 3f:b7:c1:53:fe:80:7f:c7:09:cf:e3:c6:fb:a4:e3: 5e:60:9a:69:c9:9c:b7:90:b3:f4:23:fb:7f:36:a0: b9:2d:86:c2:46:b2:8e:ee:f3:fc:8c:5c:f2:82:47: 10:5f:09:99:e5:f9:6e:3e:9c:ef:8d:d8:c4:b6:34: 90:b4:6d:2c:ce:2e:c7:70:67:c0:c1:b9:59:0e:37: 8c:10:a8:09:13:b5:39:c9:05:d4:b5:29:19:9a:e7: af:21:f3:f2:f9:80:82:1a:9b:8a:f3:5e:4e:d8:66: c8:b5:04:f2:d2:16:79:d2:20:5f:f1:66:69:d9:ad: 2d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AE:9A:D2:E1:1F:BC:4C:4F:1D:CD:2F:40:5B:F6:A8:8C:AC:E4:4E X509v3 Authority Key Identifier: keyid:A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:02:68:c1:04:bc:78:eb:b0:70:07:28:e1:03:d8:db:28:16: 11:ca:0e:9b:6a:d8:d5:94:93:f2:85:60:ed:90:0a:bb:a7:ea: 41:78:f9:62:59:8f:f8:9f:6d:17:d5:77:89:8a:3b:c9:e7:5c: fe:18:9a:55:91:cc:13:70:63:40:9c:a9:82:78:ba:3d:80:54: 95:4a:2b:ac:3d:dc:42:94:6f:69:8e:ff:4c:9b:ee:34:4b:ed: fd:a7:31:25:a2:27:59:38:f2:18:18:16:11:48:c6:15:7d:cc: f6:a5:60:c0:3d:45:9c:44:77:e1:1b:03:ca:fe:d5:4d:ed:66: fb:95:50:64:a5:d2:fb:8b:7c:2e:50:45:5f:8e:a6:4f:63:41: 94:fc:c8:c4:f7:3e:ea:03:c2:7b:85:17:1c:53:5f:eb:39:87: 1d:72:a4:eb:28:ea:7c:38:38:a4:12:0a:4d:a7:5f:20:85:ed: 81:c1:8d:61:72:ae:e3:e0:00:00:e9:ff:6b:d7:f1:b2:64:81: 01:91:6e:44:c9:60:e0:41:72:a5:bc:d7:7e:ad:59:71:ca:00: e2:ee:3c:ce:3e:a4:7c:1b:38:03:da:d1:0a:63:21:38:9b:ae: 76:cc:a3:ce:d6:9d:21:c6:7d:20:08:50:82:48:3b:18:f8:d8: 92:8d:f1:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGz9fr/Z3UCwwmT9pJeus81p3uPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMzZGRUZGMTExRDVCOTI1QTg5NTRFNTNDNEM5QzVF MjJBQjgwMDAeFw0yNjA3MjQwMTU2NDRaFw0yNjA3MjUwMzAwNDRaMDMxMTAvBgNV BAMTKDUzQUU5QUQyRTExRkJDNEM0RjFEQ0QyRjQwNUJGNkE4OENBQ0U0NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySHEbOw3ik49BVNebkhUPsV9a PGVFRnEuKCyI8IIRIwjKvHyLRq+nRL9pIWZuNgVNoU6vPvCe0uIpCIWfDuI6U9Ie KZhyW/Aa2Mw8SO/7DXyyVd6d6hjTfNZ4AwOTgSlS/dq4NQ7ggetBILanBNDbyGVn SpgpNdhK2JaYaDyB9LaHesIByz+3wVP+gH/HCc/jxvuk415gmmnJnLeQs/Qj+382 oLkthsJGso7u8/yMXPKCRxBfCZnl+W4+nO+N2MS2NJC0bSzOLsdwZ8DBuVkON4wQ qAkTtTnJBdS1KRma568h8/L5gIIam4rzXk7YZsi1BPLSFnnSIF/xZmnZrS0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU66a0uEfvExPHc0vQFv2qIys5E4wHwYDVR0j BBgwFoAUpTNv7/ER1bklqJVOU8TJxeIquAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGM1NGJlOWEtOWI1ZC00YzY0LWI0ZTgtNjFjNzRlOWVjZWRjLzAvQTUzMzZGRUZG MTExRDVCOTI1QTg5NTRFNTNDNEM5QzVFMjJBQjgwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTMzNkZFRkYxMTFENUI5MjVBODk1NEU1M0M0QzlDNUUyMkFC ODAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGM1NGJlOWEtOWI1ZC00YzY0LWI0 ZTgtNjFjNzRlOWVjZWRjLzAvQTUzMzZGRUZGMTExRDVCOTI1QTg5NTRFNTNDNEM5 QzVFMjJBQjgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkCaMEEvHjrsHAHKOED2NsoFhHKDptq2NWU k/KFYO2QCrun6kF4+WJZj/ifbRfVd4mKO8nnXP4YmlWRzBNwY0CcqYJ4uj2AVJVK K6w93EKUb2mO/0yb7jRL7f2nMSWiJ1k48hgYFhFIxhV9zPalYMA9RZxEd+EbA8r+ 1U3tZvuVUGSl0vuLfC5QRV+Opk9jQZT8yMT3PuoDwnuFFxxTX+s5hx1ypOso6nw4 OKQSCk2nXyCF7YHBjWFyruPgAADp/2vX8bJkgQGRbkTJYOBBcqW8136tWXHKAOLu PM4+pHwbOAPa0QpjITibrnbMo87WnSHGfSAIUIJIOxj42JKN8Ss= -----END CERTIFICATE-----Generated at Fri Jul 24 11:15:59 2026 by rpki-client