$ rpki-client -vvf rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft File: D5B392E916885394AA1C2B31FE082DC317BCE686.mft (raw, json) Hash identifier: F8wDPQIdOElF/6bfMfSlO/NSgTTj5VvqjRJgCgOyeaE= Subject key identifier: DF:45:70:C2:50:A7:69:82:3E:7D:B9:10:AB:75:FA:A0:75:19:EE:C2 Authority key identifier: D5:B3:92:E9:16:88:53:94:AA:1C:2B:31:FE:08:2D:C3:17:BC:E6:86 Certificate issuer: /CN=D5B392E916885394AA1C2B31FE082DC317BCE686 Certificate serial: 0A4BBD87C78C5AEA20EDDFC7210CEC4B7206433F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:51:33 +0000 Manifest this update: Fri 24 Jul 2026 01:46:33 +0000 Manifest next update: Sat 25 Jul 2026 05:07:33 +0000 Files and hashes: 1: D5B392E916885394AA1C2B31FE082DC317BCE686.crl (hash: o09HyPUgNfgN8Tm0+NSotAwVtvHnVrYX4dbPwGqB1Dg=) 2: 323430353a343663303a3a2f33322d3332203d3e20313339343331.roa (hash: 72ltkdAz77XwydUIwwc3kpnQIFXbCRX8QiK7JdJ6abI=) 3: 3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa (hash: AcnbfkvX1w/c7v0ssG/zc+baC3z+ryz2Lyxv+skns7o=) 4: 3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa (hash: n/anw1j/p698bFcxqqm49V4G12x2QBboMMl4JYNKkrU=) 5: 3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa (hash: Mij6gjlboJz168uvi1+veD3ghjYsq0hmKTYOHdpJFfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.crl rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:4b:bd:87:c7:8c:5a:ea:20:ed:df:c7:21:0c:ec:4b:72:06:43:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5B392E916885394AA1C2B31FE082DC317BCE686 Validity Not Before: Jul 24 01:46:33 2026 GMT Not After : Jul 25 05:07:33 2026 GMT Subject: CN=DF4570C250A769823E7DB910AB75FAA07519EEC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:58:f1:c1:04:e7:ed:f2:5c:18:28:ca:41:44: 4b:48:90:3d:eb:cc:7e:10:3a:88:0b:e6:9f:39:70: 05:ba:9d:67:b9:2d:fa:ef:8d:91:1c:6d:4f:33:87: 73:30:79:e5:aa:69:77:c8:a1:cf:90:07:7c:c4:59: 3b:a7:32:a0:c7:04:b5:06:51:98:b1:47:81:2f:6d: ae:48:74:90:a1:d6:0b:bb:0a:0b:d9:3d:ce:11:44: 30:0d:84:81:fd:98:94:53:32:08:c9:79:d5:e0:71: 7a:28:4d:3f:f1:0d:51:5c:41:31:9e:ef:06:31:30: 84:c9:7e:c4:8d:39:39:c6:07:05:02:e6:09:cf:74: ca:a1:ec:81:eb:ba:f2:b5:6a:a0:86:18:c1:13:53: 47:2e:e5:21:26:8f:c1:c5:c6:3f:91:9c:87:50:c2: 48:be:44:7a:ce:d0:53:09:13:8b:e8:ed:38:d8:d6: 5a:54:33:aa:ce:a7:b7:16:79:e9:3c:6e:3d:6b:5c: 2f:c5:11:6e:f6:f1:90:a6:9c:86:e8:38:98:c1:bd: 27:5f:0a:ab:05:31:ce:07:54:8a:71:dd:31:45:34: 84:39:fa:a3:0d:24:7e:78:fc:92:0d:6a:3f:d6:ad: 4e:61:6a:b5:25:45:b3:06:7e:b9:6c:80:7b:17:43: a9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:45:70:C2:50:A7:69:82:3E:7D:B9:10:AB:75:FA:A0:75:19:EE:C2 X509v3 Authority Key Identifier: keyid:D5:B3:92:E9:16:88:53:94:AA:1C:2B:31:FE:08:2D:C3:17:BC:E6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:78:76:a2:0c:3e:5c:81:92:4e:8a:a0:42:0b:bb:14:ab:78: 57:bb:10:5f:af:98:9e:18:c3:c9:29:2b:09:64:25:df:e5:7f: eb:13:f0:26:30:83:bd:07:47:20:cc:82:df:65:bb:c0:71:8a: db:43:26:99:27:52:95:f5:4f:7f:36:b9:54:ce:c5:f4:1c:dd: 1a:2f:10:0f:ae:3f:32:88:50:da:cd:46:02:e0:56:4d:61:75: 41:e0:88:e6:da:95:4e:bb:61:f8:63:3f:15:53:2a:1b:41:66: b3:8f:e3:b4:4e:e3:85:d4:7d:ed:7b:f5:36:19:e3:28:85:11: 13:8f:c3:28:fc:dc:56:b8:2a:8a:f3:2c:5e:92:c8:63:cd:70: 37:a8:cd:2b:24:90:f9:fe:85:16:53:b9:f0:6d:62:2f:c3:a7: a2:43:f2:c9:71:01:73:a2:f5:6a:8f:aa:45:7b:21:ab:0c:9f: 79:bb:a5:c0:ae:77:d1:36:0d:5a:a2:c2:d8:4b:33:90:13:7c: 57:59:95:4d:ac:17:60:3e:46:5e:4b:16:24:67:ba:06:ad:95: e5:5f:c1:a4:95:50:a6:ee:a8:34:3f:ef:7b:e7:99:fc:d1:e4: ce:b2:2d:3b:1a:d7:3b:ea:ab:bd:fb:c4:ff:5b:d9:09:40:5a: 29:16:1d:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCku9h8eMWuog7d/HIQzsS3IGQz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVCMzkyRTkxNjg4NTM5NEFBMUMyQjMxRkUwODJEQzMx N0JDRTY4NjAeFw0yNjA3MjQwMTQ2MzNaFw0yNjA3MjUwNTA3MzNaMDMxMTAvBgNV BAMTKERGNDU3MEMyNTBBNzY5ODIzRTdEQjkxMEFCNzVGQUEwNzUxOUVFQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZWPHBBOft8lwYKMpBREtIkD3r zH4QOogL5p85cAW6nWe5LfrvjZEcbU8zh3MweeWqaXfIoc+QB3zEWTunMqDHBLUG UZixR4Evba5IdJCh1gu7CgvZPc4RRDANhIH9mJRTMgjJedXgcXooTT/xDVFcQTGe 7wYxMITJfsSNOTnGBwUC5gnPdMqh7IHruvK1aqCGGMETU0cu5SEmj8HFxj+RnIdQ wki+RHrO0FMJE4vo7TjY1lpUM6rOp7cWeek8bj1rXC/FEW728ZCmnIboOJjBvSdf CqsFMc4HVIpx3TFFNIQ5+qMNJH54/JINaj/WrU5harUlRbMGfrlsgHsXQ6l9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU30VwwlCnaYI+fbkQq3X6oHUZ7sIwHwYDVR0j BBgwFoAU1bOS6RaIU5SqHCsx/ggtwxe85oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ2ZjMzZjItZjA2ZS00ZWI2LWFlNjEtNTUyOWJjYTFjZGNkLzAvRDVCMzkyRTkx Njg4NTM5NEFBMUMyQjMxRkUwODJEQzMxN0JDRTY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUIzOTJFOTE2ODg1Mzk0QUExQzJCMzFGRTA4MkRDMzE3QkNF Njg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ2ZjMzZjItZjA2ZS00ZWI2LWFl NjEtNTUyOWJjYTFjZGNkLzAvRDVCMzkyRTkxNjg4NTM5NEFBMUMyQjMxRkUwODJE QzMxN0JDRTY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHl4dqIMPlyBkk6KoEILuxSreFe7EF+vmJ4Y w8kpKwlkJd/lf+sT8CYwg70HRyDMgt9lu8BxittDJpknUpX1T382uVTOxfQc3Rov EA+uPzKIUNrNRgLgVk1hdUHgiObalU67YfhjPxVTKhtBZrOP47RO44XUfe179TYZ 4yiFEROPwyj83Fa4KorzLF6SyGPNcDeozSskkPn+hRZTufBtYi/Dp6JD8slxAXOi 9WqPqkV7IasMn3m7pcCud9E2DVqiwthLM5ATfFdZlU2sF2A+Rl5LFiRnugatleVf waSVUKbuqDQ/73vnmfzR5M6yLTsa1zvqq737xP9b2QlAWikWHYs= -----END CERTIFICATE-----Generated at Fri Jul 24 05:50:26 2026 by rpki-client