$ rpki-client -vvf rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft File: D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft (raw, json) Hash identifier: pKaiJKI2JJjNTHg4AmvuhBFMeq+6GnAuB3ZaOiqvcqg= Subject key identifier: 30:31:51:6D:FE:17:AC:52:14:C6:82:69:25:21:D9:F7:96:13:47:D5 Authority key identifier: D5:B2:BC:B4:D7:CD:44:98:6E:0C:DE:AB:B1:9A:3E:8D:A8:ED:A3:DE Certificate issuer: /CN=D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE Certificate serial: 7110097898D9B3AE309356E78CC409EE43691D5F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 04:24:50 +0000 Manifest this update: Fri 24 Jul 2026 04:19:50 +0000 Manifest next update: Sat 25 Jul 2026 06:47:50 +0000 Files and hashes: 1: D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.crl (hash: XzL0xsTIzZ4IQGwOynDK8/mfTpyg3gDmRHob08ym+Lw=) 2: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (hash: Mbf898IR+Gt5QKErijFC4UdXVW5evXBibnE21kjCzDc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.crl rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:10:09:78:98:d9:b3:ae:30:93:56:e7:8c:c4:09:ee:43:69:1d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE Validity Not Before: Jul 24 04:19:50 2026 GMT Not After : Jul 25 06:47:50 2026 GMT Subject: CN=3031516DFE17AC5214C682692521D9F7961347D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3a:82:f3:fa:c4:99:8e:2f:c4:86:3f:db:09: 97:11:e3:d0:85:d7:2e:1a:6b:4d:f0:29:b4:a7:34: 4b:6d:5e:dd:eb:28:d3:84:d8:b0:06:cb:ae:89:47: 4e:de:98:e1:97:e8:ab:ee:67:84:4b:12:2f:8c:09: c4:95:f7:01:e7:02:c8:ac:95:01:6d:24:b2:fc:70: 07:33:22:18:b8:80:26:5c:cc:88:9c:a3:60:44:b7: 0c:92:97:0d:22:a5:6e:13:3c:a4:a0:77:25:ce:00: ef:c1:66:49:1c:af:2f:a9:97:e7:57:45:91:9b:7d: 7e:44:bf:13:e3:24:3f:01:f7:65:4f:fa:c3:96:18: e9:c4:fb:92:12:28:9a:bc:68:48:8b:02:0d:cd:24: 62:21:7e:61:39:e9:88:b2:37:4d:c4:54:16:4b:7c: 1e:b2:a7:87:b7:f2:fe:b8:04:5c:f8:f8:40:2f:47: 44:e2:86:e9:40:c4:9d:4e:3b:98:4f:90:ea:c4:fc: 8c:bc:46:a2:51:5d:2f:c9:18:bc:fa:9d:e6:86:0f: 89:ae:04:f4:4f:9d:ae:a2:17:ce:84:b3:f4:7a:91: 6a:a8:df:13:5e:29:6a:94:48:ec:cc:d3:1c:a5:90: 70:61:6d:c4:fd:e5:09:f9:67:6b:47:52:27:d8:a9: 49:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:31:51:6D:FE:17:AC:52:14:C6:82:69:25:21:D9:F7:96:13:47:D5 X509v3 Authority Key Identifier: keyid:D5:B2:BC:B4:D7:CD:44:98:6E:0C:DE:AB:B1:9A:3E:8D:A8:ED:A3:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:29:21:fb:14:0c:1a:10:f0:75:63:6f:84:77:e9:80:22:bc: 0d:98:c2:60:6c:c3:42:6c:18:b9:fa:17:e2:24:10:b8:cb:f8: eb:fb:17:fc:3b:a9:46:fa:0c:d4:7d:fc:20:92:83:e1:21:bb: 38:95:ec:ca:b9:23:2f:bb:1d:de:86:5d:eb:a4:83:3e:a1:3d: 38:41:c3:3b:d7:23:1a:64:2a:73:23:ee:a1:d9:75:00:b6:74: 8c:e4:42:15:0f:bf:00:57:11:11:f4:e7:f0:5a:82:46:2f:be: b6:ac:34:40:60:e7:1a:cf:91:4e:f1:99:d9:06:d7:dc:13:0e: bf:26:a6:d4:74:77:ca:6e:9f:4f:33:09:42:cf:35:fb:b9:67: a2:3e:aa:7d:c5:da:7e:20:33:38:b7:81:9e:64:10:9a:08:ad: 27:de:51:de:f4:b5:68:98:10:c5:9a:a0:4d:b7:0d:9d:1d:6f: d1:4d:ec:93:6f:2b:92:49:11:bd:73:c6:99:06:e4:26:72:fb: c8:65:95:b0:33:e2:2c:bd:80:ed:59:21:df:b2:87:65:2f:a7: 30:7c:c4:8f:75:77:d9:1b:b8:45:51:8c:14:ee:7f:7e:03:4a: 60:19:ae:e3:ed:d8:6b:1c:a5:ce:8f:89:99:70:3c:7c:a1:8d: e0:d5:eb:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcRAJeJjZs64wk1bnjMQJ7kNpHV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVCMkJDQjREN0NENDQ5ODZFMENERUFCQjE5QTNFOERB OEVEQTNERTAeFw0yNjA3MjQwNDE5NTBaFw0yNjA3MjUwNjQ3NTBaMDMxMTAvBgNV BAMTKDMwMzE1MTZERkUxN0FDNTIxNEM2ODI2OTI1MjFEOUY3OTYxMzQ3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxOoLz+sSZji/Ehj/bCZcR49CF 1y4aa03wKbSnNEttXt3rKNOE2LAGy66JR07emOGX6KvuZ4RLEi+MCcSV9wHnAsis lQFtJLL8cAczIhi4gCZczIico2BEtwySlw0ipW4TPKSgdyXOAO/BZkkcry+pl+dX RZGbfX5EvxPjJD8B92VP+sOWGOnE+5ISKJq8aEiLAg3NJGIhfmE56YiyN03EVBZL fB6yp4e38v64BFz4+EAvR0TihulAxJ1OO5hPkOrE/Iy8RqJRXS/JGLz6neaGD4mu BPRPna6iF86Es/R6kWqo3xNeKWqUSOzM0xylkHBhbcT95Qn5Z2tHUifYqUkVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMDFRbf4XrFIUxoJpJSHZ95YTR9UwHwYDVR0j BBgwFoAU1bK8tNfNRJhuDN6rsZo+jajto94wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQxYTAyZTYtMjE3MS00N2M5LTg2YzktZDVkODBmNDU4ODM2LzAvRDVCMkJDQjRE N0NENDQ5ODZFMENERUFCQjE5QTNFOERBOEVEQTNERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUIyQkNCNEQ3Q0Q0NDk4NkUwQ0RFQUJCMTlBM0U4REE4RURB M0RFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQxYTAyZTYtMjE3MS00N2M5LTg2 YzktZDVkODBmNDU4ODM2LzAvRDVCMkJDQjREN0NENDQ5ODZFMENERUFCQjE5QTNF OERBOEVEQTNERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwpIfsUDBoQ8HVjb4R36YAivA2YwmBsw0Js GLn6F+IkELjL+Ov7F/w7qUb6DNR9/CCSg+EhuziV7Mq5Iy+7Hd6GXeukgz6hPThB wzvXIxpkKnMj7qHZdQC2dIzkQhUPvwBXERH05/BagkYvvrasNEBg5xrPkU7xmdkG 19wTDr8mptR0d8pun08zCULPNfu5Z6I+qn3F2n4gMzi3gZ5kEJoIrSfeUd70tWiY EMWaoE23DZ0db9FN7JNvK5JJEb1zxpkG5CZy+8hllbAz4iy9gO1ZId+yh2UvpzB8 xI91d9kbuEVRjBTuf34DSmAZruPt2Gscpc6PiZlwPHyhjeDV61g= -----END CERTIFICATE-----Generated at Fri Jul 24 12:45:33 2026 by rpki-client