$ rpki-client -vvf rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft File: 5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft (raw, json) Hash identifier: +YPODidEQjrntNCGqWTH3Gyy3gMvfEcHWlOH7InAAAI= Subject key identifier: 19:4E:AE:2C:3B:8F:DD:37:B4:0F:98:E8:BE:A3:78:40:A5:01:D7:EF Authority key identifier: 5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1 Certificate issuer: /CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1 Certificate serial: 1D54D776C462D2668DCE014AAE53DA873C99D130 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 05:15:52 +0000 Manifest this update: Fri 24 Jul 2026 05:10:52 +0000 Manifest next update: Sat 25 Jul 2026 07:02:52 +0000 Files and hashes: 1: 3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa (hash: ht3wys3Y4NKbvssKz7Sxlx9g755vgJKTzTjwYqhy56E=) 2: 5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl (hash: NUsRHigG4y4330dRB0E2OWZawUAWeHQCvyMiq2VUFNQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:54:d7:76:c4:62:d2:66:8d:ce:01:4a:ae:53:da:87:3c:99:d1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1 Validity Not Before: Jul 24 05:10:52 2026 GMT Not After : Jul 25 07:02:52 2026 GMT Subject: CN=194EAE2C3B8FDD37B40F98E8BEA37840A501D7EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e1:ab:d5:e1:8d:a3:75:fd:e1:9b:c3:d3:31: 11:8c:a6:86:0e:4c:79:61:ff:70:b6:15:b5:7f:a0: 9a:89:3b:41:dc:89:ed:45:41:e7:d3:7d:12:89:43: 8d:50:9f:b7:17:20:fd:0a:af:55:fd:70:0d:5f:03: 70:3d:de:82:dd:83:a1:71:7b:7e:c2:29:b5:e3:c4: d0:1f:0a:09:81:4d:f0:13:ea:b8:61:b8:a2:ac:de: 12:b8:ea:77:c9:24:00:96:dc:7a:50:cb:cb:77:c5: 79:bc:99:68:ef:10:04:71:3b:f0:2a:52:42:b0:2d: ae:69:4c:2e:0b:22:47:70:69:7e:4b:1f:81:d4:bf: 2e:40:86:e7:20:f0:88:6a:ff:14:a9:7b:63:87:81: 25:c3:34:69:dc:6c:14:0a:54:38:62:93:eb:77:90: 65:55:f0:a1:60:8b:47:42:8d:9c:6c:68:4e:09:e0: b5:ce:d7:6f:86:63:a1:1e:53:f7:96:d6:2f:1d:9f: 21:56:41:95:74:e4:5d:13:2b:84:a9:fb:a5:7e:d6: be:35:8f:dc:93:78:3f:11:ba:f7:70:eb:76:ab:65: dc:aa:ef:f7:53:b2:37:df:a8:c3:d5:db:31:1d:55: 5c:1d:e0:93:55:22:84:91:8e:1d:6b:7b:89:5c:c4: 70:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4E:AE:2C:3B:8F:DD:37:B4:0F:98:E8:BE:A3:78:40:A5:01:D7:EF X509v3 Authority Key Identifier: keyid:5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9e:5b:67:a9:96:16:0d:c9:8d:30:96:5f:5c:bd:39:e6:fc: 13:b1:99:e6:ec:25:13:a8:d2:69:71:32:c0:0d:75:ce:b4:42: 72:4d:12:de:54:fa:f0:7c:8f:49:96:99:bb:e5:27:0b:06:b9: cc:fb:58:e9:7f:61:71:6c:a5:69:de:50:93:6a:3c:5d:64:a5: 31:2e:26:c7:17:0d:68:bb:36:46:ad:38:40:9e:2d:f1:64:64: 41:03:dd:d2:0f:6a:d8:33:2f:33:52:0f:fb:5f:71:b8:98:c3: 03:b6:40:d0:4b:03:85:d5:12:a3:0f:20:6c:a7:3b:f8:18:e4: 28:3d:0f:d0:b2:b8:68:22:1f:6c:59:32:d2:ed:76:02:a8:50: 6b:49:4e:af:31:92:bd:fa:2d:5f:78:f8:a4:bb:04:d0:e3:03: f5:dc:bd:b8:12:2c:75:82:9f:a1:48:aa:a7:94:ac:66:78:ea: 9a:8d:45:73:69:2e:08:db:04:f2:6d:2b:b2:89:63:3d:cf:e5: f8:ee:9f:95:a0:f0:b0:84:b7:95:9e:3b:87:b2:56:20:dc:8a: c9:aa:82:64:dc:cb:fc:87:27:f9:6b:1a:0a:b8:15:7f:68:3a: b3:c6:90:2d:4e:65:90:8b:4f:ab:7a:ce:6a:6a:50:f7:bc:94: 8a:81:52:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHVTXdsRi0maNzgFKrlPahzyZ0TAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJCMTJDMzFEMzZFNTVDRkQ2QUY5NDRDQTRFNzY3RTBC OURCOUJGMTAeFw0yNjA3MjQwNTEwNTJaFw0yNjA3MjUwNzAyNTJaMDMxMTAvBgNV BAMTKDE5NEVBRTJDM0I4RkREMzdCNDBGOThFOEJFQTM3ODQwQTUwMUQ3RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34avV4Y2jdf3hm8PTMRGMpoYO THlh/3C2FbV/oJqJO0Hcie1FQefTfRKJQ41Qn7cXIP0Kr1X9cA1fA3A93oLdg6Fx e37CKbXjxNAfCgmBTfAT6rhhuKKs3hK46nfJJACW3HpQy8t3xXm8mWjvEARxO/Aq UkKwLa5pTC4LIkdwaX5LH4HUvy5Ahucg8Ihq/xSpe2OHgSXDNGncbBQKVDhik+t3 kGVV8KFgi0dCjZxsaE4J4LXO12+GY6EeU/eW1i8dnyFWQZV05F0TK4Sp+6V+1r41 j9yTeD8Ruvdw63arZdyq7/dTsjffqMPV2zEdVVwd4JNVIoSRjh1re4lcxHBpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGU6uLDuP3Te0D5jovqN4QKUB1+8wHwYDVR0j BBgwFoAUW7EsMdNuVc/Wr5RMpOdn4Lnbm/EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTliOTNlMWMtNWYyYS00M2E5LTk5ZjEtZmRkMDQwMmY5NDZlLzAvNUJCMTJDMzFE MzZFNTVDRkQ2QUY5NDRDQTRFNzY3RTBCOURCOUJGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkIxMkMzMUQzNkU1NUNGRDZBRjk0NENBNEU3NjdFMEI5REI5 QkYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTliOTNlMWMtNWYyYS00M2E5LTk5 ZjEtZmRkMDQwMmY5NDZlLzAvNUJCMTJDMzFEMzZFNTVDRkQ2QUY5NDRDQTRFNzY3 RTBCOURCOUJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqeW2eplhYNyY0wll9cvTnm/BOxmebsJROo 0mlxMsANdc60QnJNEt5U+vB8j0mWmbvlJwsGucz7WOl/YXFspWneUJNqPF1kpTEu JscXDWi7NkatOECeLfFkZEED3dIPatgzLzNSD/tfcbiYwwO2QNBLA4XVEqMPIGyn O/gY5Cg9D9CyuGgiH2xZMtLtdgKoUGtJTq8xkr36LV94+KS7BNDjA/XcvbgSLHWC n6FIqqeUrGZ46pqNRXNpLgjbBPJtK7KJYz3P5fjun5Wg8LCEt5WeO4eyViDcismq gmTcy/yHJ/lrGgq4FX9oOrPGkC1OZZCLT6t6zmpqUPe8lIqBUmE= -----END CERTIFICATE-----Generated at Fri Jul 24 14:47:41 2026 by rpki-client