$ rpki-client -vvf rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft File: 5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft (raw, json) Hash identifier: HhWiVj2YBMqkDSXvAMbxT4F3sz6qRfKICzRAvadjziQ= Subject key identifier: C9:58:B1:01:3E:A0:1C:32:D3:6B:F0:AB:D1:0A:63:1B:68:F2:5E:98 Authority key identifier: 5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24 Certificate issuer: /CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24 Certificate serial: 04B43689267DFB1EF5F58EAB5747F0537426AF84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:19:45 +0000 Manifest this update: Fri 24 Jul 2026 04:14:45 +0000 Manifest next update: Sat 25 Jul 2026 04:42:45 +0000 Files and hashes: 1: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: jrMRupZddQA8qjBzuVH771xwK+1/f2hSGRy4MrlXlSc=) 2: 5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl (hash: +7ELG3o6f7mqcU3yMTE3PkfIzFfywXCW0+4/a3/VewM=) 3: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: hrwaL58bLcWsXLir3kxI1OkAj6GGFQmLA1ZKUXd0Ogs=) 4: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: swr4aEtGPRWs62gogwkO9Y1o8MbTFhHlDaee8r9gWcE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b4:36:89:26:7d:fb:1e:f5:f5:8e:ab:57:47:f0:53:74:26:af:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24 Validity Not Before: Jul 24 04:14:45 2026 GMT Not After : Jul 25 04:42:45 2026 GMT Subject: CN=C958B1013EA01C32D36BF0ABD10A631B68F25E98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5e:d9:a0:9e:d7:50:6b:04:9f:89:bb:6d:e8: 6e:35:62:42:5f:d7:44:4b:3b:2f:22:e0:b3:c5:40: 24:d6:08:7b:37:2b:c0:e7:d8:c9:5a:24:6d:45:66: 4c:19:b0:85:3a:e7:15:07:13:8e:67:7d:28:d2:3e: 31:c7:05:2e:6b:b9:4b:ab:18:e9:6e:c0:a1:31:94: 68:f1:1a:09:1c:c2:9a:e7:f7:83:70:13:67:59:6a: 0b:8c:0b:fb:c1:28:cc:c4:30:7b:b0:ff:bd:c3:23: ba:44:85:dd:a5:9f:2f:07:55:45:16:5c:f4:2d:93: 7b:c0:95:be:23:d3:8a:28:d4:21:85:23:69:db:d7: 5e:be:d3:be:71:69:1f:67:a6:ec:1c:37:df:39:bb: 25:63:4d:16:ab:81:5f:11:f0:f8:a4:59:40:d8:84: c0:85:1c:db:cc:58:02:c5:f6:59:76:1e:cb:26:b8: 87:5a:71:08:c9:72:7e:fb:47:48:d2:a9:ad:3a:5b: ca:14:bf:77:26:1a:e8:1e:58:b2:ab:75:15:83:5f: ef:70:7e:87:35:22:f2:3b:fa:b2:07:dc:e2:60:3e: 66:f8:38:7f:e9:a7:01:dd:78:02:a1:90:f4:f5:15: e4:fb:d1:01:30:0c:88:8f:7e:bf:33:41:20:47:8b: ec:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:58:B1:01:3E:A0:1C:32:D3:6B:F0:AB:D1:0A:63:1B:68:F2:5E:98 X509v3 Authority Key Identifier: keyid:5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:24:98:5c:7f:a2:17:72:16:1c:51:fc:7f:a8:74:af:30:38: b2:e7:d0:cb:92:28:6a:d4:ee:c6:1a:c0:f1:36:a5:ad:d7:5e: b1:c9:c9:7f:b2:51:a6:b2:c3:85:f0:82:7b:c6:d3:30:8e:79: 73:cf:16:cf:12:c9:14:4f:5c:16:69:1c:b5:cd:84:0d:42:dc: 68:cc:93:9e:f6:82:7d:50:a2:81:1f:58:e5:fa:4b:4b:b9:e9: fd:09:de:20:10:42:ea:34:7f:93:e6:36:20:f7:f7:db:b3:50: 36:c0:2f:6d:83:0e:1d:06:0d:df:b8:3f:af:ca:df:33:d9:1e: 17:4e:4f:be:0b:01:ec:59:09:0b:dd:9a:ed:6b:2b:da:00:6a: 67:85:55:ed:a8:96:69:df:22:64:e1:fb:1f:dd:a0:4f:af:de: 14:56:ff:f5:4d:c1:fa:01:0e:69:9e:a9:af:29:9e:3a:82:94: dd:97:be:71:f6:85:bd:e5:79:ce:3c:4c:c0:a7:61:ea:47:bf: d9:f2:f9:7e:c6:72:29:ac:2c:45:6a:7e:ca:0a:df:53:d8:8b: 89:9c:43:5c:ba:cf:00:10:9f:1a:c8:aa:16:be:8b:49:af:29: ea:a9:44:bd:e9:ef:47:c0:66:2e:76:51:dd:db:c3:1b:b8:eb: 51:68:4b:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLQ2iSZ9+x719Y6rV0fwU3Qmr4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY3MTUyQ0VFMDRGREFGQjRBM0U0QTBGM0ZEMEFERjgy MkM1Q0QyNDAeFw0yNjA3MjQwNDE0NDVaFw0yNjA3MjUwNDQyNDVaMDMxMTAvBgNV BAMTKEM5NThCMTAxM0VBMDFDMzJEMzZCRjBBQkQxMEE2MzFCNjhGMjVFOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDXtmgntdQawSfibtt6G41YkJf 10RLOy8i4LPFQCTWCHs3K8Dn2MlaJG1FZkwZsIU65xUHE45nfSjSPjHHBS5ruUur GOluwKExlGjxGgkcwprn94NwE2dZaguMC/vBKMzEMHuw/73DI7pEhd2lny8HVUUW XPQtk3vAlb4j04oo1CGFI2nb116+075xaR9npuwcN985uyVjTRargV8R8PikWUDY hMCFHNvMWALF9ll2HssmuIdacQjJcn77R0jSqa06W8oUv3cmGugeWLKrdRWDX+9w foc1IvI7+rIH3OJgPmb4OH/ppwHdeAKhkPT1FeT70QEwDIiPfr8zQSBHi+zxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyVixAT6gHDLTa/Cr0QpjG2jyXpgwHwYDVR0j BBgwFoAUX3FSzuBP2vtKPkoPP9Ct+CLFzSQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgxNTU0NWMtYzk5Ni00NjBmLTkyZGQtNjI5NGFlYzkyYzUyLzAvNUY3MTUyQ0VF MDRGREFGQjRBM0U0QTBGM0ZEMEFERjgyMkM1Q0QyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjcxNTJDRUUwNEZEQUZCNEEzRTRBMEYzRkQwQURGODIyQzVD RDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvNUY3MTUyQ0VFMDRGREFGQjRBM0U0QTBGM0ZEMEFE RjgyMkM1Q0QyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUkmFx/ohdyFhxR/H+odK8wOLLn0MuSKGrU 7sYawPE2pa3XXrHJyX+yUaayw4XwgnvG0zCOeXPPFs8SyRRPXBZpHLXNhA1C3GjM k572gn1QooEfWOX6S0u56f0J3iAQQuo0f5PmNiD399uzUDbAL22DDh0GDd+4P6/K 3zPZHhdOT74LAexZCQvdmu1rK9oAameFVe2olmnfImTh+x/doE+v3hRW//VNwfoB Dmmeqa8pnjqClN2XvnH2hb3lec48TMCnYepHv9ny+X7GcimsLEVqfsoK31PYi4mc Q1y6zwAQnxrIqha+i0mvKeqpRL3p70fAZi52Ud3bwxu461FoS5g= -----END CERTIFICATE-----Generated at Fri Jul 24 07:35:15 2026 by rpki-client