$ rpki-client -vvf rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft File: 5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft (raw, json) Hash identifier: 6eJ6M4ncxdpV6EfcnSbrZ0XGJQ1ZDkdLzE1pAgTQS0A= Subject key identifier: D9:E9:D6:F0:C1:C6:A1:27:49:79:06:FC:D2:CF:19:64:9E:EA:86:FF Authority key identifier: 5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1 Certificate issuer: /CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1 Certificate serial: 14162E3F45AB7C3AF3EB80F1B095F3FEE4A88A78 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 23:07:45 +0000 Manifest this update: Fri 24 Jul 2026 23:02:45 +0000 Manifest next update: Sat 25 Jul 2026 23:20:45 +0000 Files and hashes: 1: 3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa (hash: ht3wys3Y4NKbvssKz7Sxlx9g755vgJKTzTjwYqhy56E=) 2: 5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl (hash: nsYet7xqmc9RlTZff/z/JKfQLYDv/JEDk64ZJYpPdBc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 23:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:16:2e:3f:45:ab:7c:3a:f3:eb:80:f1:b0:95:f3:fe:e4:a8:8a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1 Validity Not Before: Jul 24 23:02:45 2026 GMT Not After : Jul 25 23:20:45 2026 GMT Subject: CN=D9E9D6F0C1C6A127497906FCD2CF19649EEA86FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:92:d1:21:76:3d:a0:b0:4b:2f:32:0c:52: 89:a3:0b:8a:a3:76:77:e6:66:f2:f7:3b:a7:fc:6f: 0c:c0:e7:2d:05:ce:a4:21:26:f9:26:0f:5c:ea:08: 11:0e:27:03:8d:b1:98:3e:8c:1c:a4:55:cf:38:6d: a9:17:e1:95:b3:9b:e8:0f:96:ab:86:db:e8:e4:a7: 2f:5f:2c:0a:ae:15:59:e9:e1:85:4d:c8:1f:93:49: 3b:6a:e1:bb:fa:39:b8:6f:c7:56:1a:49:c0:b3:6c: 22:41:75:8a:53:42:e2:05:cd:54:e3:3e:4c:75:13: 30:09:75:56:44:fb:01:09:b0:4b:25:9d:9d:28:b9: c0:eb:ab:68:a6:87:9e:50:e8:0a:ba:0d:da:4c:cd: da:be:9e:22:61:89:16:ac:7b:3d:d8:61:53:72:0c: 1e:a7:81:ad:a3:07:f9:c1:e8:c3:d6:5e:a6:e4:e3: b7:fa:27:be:6a:7f:d3:2f:6d:f0:c0:c2:cc:54:48: ed:01:ea:86:35:4d:3d:cd:8a:4d:ae:3d:9b:47:47: 99:bd:2f:95:62:19:57:8e:2b:3f:3a:eb:ff:33:e1: 8e:27:04:74:bd:82:a0:a5:f7:ad:45:1f:75:b1:f8: d3:d4:01:ee:ed:f3:7a:e2:92:85:9f:2c:cb:61:58: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E9:D6:F0:C1:C6:A1:27:49:79:06:FC:D2:CF:19:64:9E:EA:86:FF X509v3 Authority Key Identifier: keyid:5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:1a:32:66:76:0a:b8:9f:02:e3:e4:fe:f5:7a:ad:e8:10:a8: 8f:37:ae:e1:43:ec:37:00:3f:dd:a8:63:e5:c0:46:ed:49:ab: 4d:d6:bb:13:74:1e:94:df:49:73:b7:bd:1b:12:4d:60:bd:ce: 8f:d5:9e:59:4d:58:03:99:f8:58:98:11:5e:92:84:52:d7:01: 66:71:9a:ee:5c:cd:7d:8a:64:df:49:19:f6:7f:6f:c9:28:60: 3a:34:42:fe:e3:c5:d0:74:62:e5:3a:64:2e:f1:29:e6:8a:21: bd:46:ca:68:ed:e1:5b:33:42:20:e4:3d:43:c3:35:6b:ce:fc: b5:22:1d:60:a5:3f:01:cb:be:9e:e6:b9:fd:7d:a8:fa:c6:25: f8:85:30:ee:3d:9c:e6:af:12:32:93:a7:d8:6d:c8:e3:94:b1: 60:8e:40:24:9c:5a:41:bd:43:90:51:e8:ea:70:26:39:b5:a1: 69:81:61:43:c6:76:c3:0f:af:68:cf:42:e9:3b:af:0b:0b:f9: dd:9e:c4:24:3b:13:6f:3c:82:29:dc:35:d4:a4:db:73:0c:35: 8b:bc:37:e4:39:b5:84:52:15:c9:1b:bb:c3:f5:15:5e:ba:be: 7e:4d:07:4c:fc:22:bd:16:4f:fc:a4:1c:7d:ae:bb:76:96:ce: dc:d7:9f:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFBYuP0WrfDrz64DxsJXz/uSoingwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJCMTJDMzFEMzZFNTVDRkQ2QUY5NDRDQTRFNzY3RTBC OURCOUJGMTAeFw0yNjA3MjQyMzAyNDVaFw0yNjA3MjUyMzIwNDVaMDMxMTAvBgNV BAMTKEQ5RTlENkYwQzFDNkExMjc0OTc5MDZGQ0QyQ0YxOTY0OUVFQTg2RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8H5LRIXY9oLBLLzIMUomjC4qj dnfmZvL3O6f8bwzA5y0FzqQhJvkmD1zqCBEOJwONsZg+jBykVc84bakX4ZWzm+gP lquG2+jkpy9fLAquFVnp4YVNyB+TSTtq4bv6Obhvx1YaScCzbCJBdYpTQuIFzVTj Pkx1EzAJdVZE+wEJsEslnZ0oucDrq2imh55Q6Aq6DdpMzdq+niJhiRasez3YYVNy DB6nga2jB/nB6MPWXqbk47f6J75qf9MvbfDAwsxUSO0B6oY1TT3Nik2uPZtHR5m9 L5ViGVeOKz866/8z4Y4nBHS9gqCl961FH3Wx+NPUAe7t83rikoWfLMthWC25AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2enW8MHGoSdJeQb80s8ZZJ7qhv8wHwYDVR0j BBgwFoAUW7EsMdNuVc/Wr5RMpOdn4Lnbm/EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTliOTNlMWMtNWYyYS00M2E5LTk5ZjEtZmRkMDQwMmY5NDZlLzAvNUJCMTJDMzFE MzZFNTVDRkQ2QUY5NDRDQTRFNzY3RTBCOURCOUJGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkIxMkMzMUQzNkU1NUNGRDZBRjk0NENBNEU3NjdFMEI5REI5 QkYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTliOTNlMWMtNWYyYS00M2E5LTk5 ZjEtZmRkMDQwMmY5NDZlLzAvNUJCMTJDMzFEMzZFNTVDRkQ2QUY5NDRDQTRFNzY3 RTBCOURCOUJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgaMmZ2CrifAuPk/vV6regQqI83ruFD7DcA P92oY+XARu1Jq03WuxN0HpTfSXO3vRsSTWC9zo/VnllNWAOZ+FiYEV6ShFLXAWZx mu5czX2KZN9JGfZ/b8koYDo0Qv7jxdB0YuU6ZC7xKeaKIb1Gymjt4VszQiDkPUPD NWvO/LUiHWClPwHLvp7muf19qPrGJfiFMO49nOavEjKTp9htyOOUsWCOQCScWkG9 Q5BR6OpwJjm1oWmBYUPGdsMPr2jPQuk7rwsL+d2exCQ7E288gincNdSk23MMNYu8 N+Q5tYRSFckbu8P1FV66vn5NB0z8Ir0WT/ykHH2uu3aWztzXn/M= -----END CERTIFICATE-----Generated at Sat Jul 25 00:27:36 2026 by rpki-client