$ rpki-client -vvf rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft File: 05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft (raw, json) Hash identifier: Li/I3oC4n/IGg2Wjvv3wWDM5rzcO1m7S3yxtR5L9VRo= Subject key identifier: 3A:36:D8:97:86:70:41:E4:92:0D:03:2F:D3:BD:9E:6E:A3:4D:C1:D0 Authority key identifier: 05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB Certificate issuer: /CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB Certificate serial: 0E3307CC7837DBB619B62C56409DC1FD574347C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft Manifest number: 6D Signing time: Fri 24 Jul 2026 06:17:04 +0000 Manifest this update: Fri 24 Jul 2026 06:12:04 +0000 Manifest next update: Sat 25 Jul 2026 09:07:04 +0000 Files and hashes: 1: 05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl (hash: S9LsEcBawc35+objNYXvjPaimMwqphedkN0CHcI/N20=) 2: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: z6kI94sxzHsqlH3E/LSFr36Xmy4KrSkD+IFv+WC4jTo=) 3: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: Fdccteawm8p+b48M0aaG/VtbesmEvdRHnNtrJ03BLvI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:33:07:cc:78:37:db:b6:19:b6:2c:56:40:9d:c1:fd:57:43:47:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB Validity Not Before: Jul 24 06:12:04 2026 GMT Not After : Jul 25 09:07:04 2026 GMT Subject: CN=3A36D897867041E4920D032FD3BD9E6EA34DC1D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c0:d0:16:8d:56:d4:e0:15:97:d9:e6:8a:bb: 35:81:0f:ee:29:4f:34:2d:da:75:d3:a3:67:3e:95: 39:07:00:68:c7:fe:8a:af:ca:01:6b:05:0a:e7:c3: 59:51:1b:b7:f9:b1:26:82:07:f1:6d:8b:4b:fb:65: 8c:9d:96:d6:dd:3d:6d:6b:ea:45:f6:59:9a:e7:9a: b0:4f:0e:bc:f2:3f:a6:4e:d0:82:c8:dd:5f:d5:61: 20:2b:a3:11:17:8a:7a:87:ef:c0:89:da:16:fe:21: 69:92:ce:c1:ad:6e:32:54:92:6e:a3:83:45:a8:34: f7:c5:72:8e:b5:52:ff:fe:f8:c9:2e:f8:f2:87:b6: 38:37:90:97:fc:8b:f9:23:e7:55:1c:91:06:47:1f: d4:77:7b:fe:fa:f7:91:cf:96:08:27:e7:3a:c9:6e: 53:05:9c:6d:27:b8:e5:9f:32:d5:7c:13:dd:25:59: 82:b7:87:19:47:1e:b8:6b:34:ed:97:29:b2:15:ec: 43:fd:72:bf:04:ba:b8:a7:e9:f9:af:78:a6:ab:95: cd:0f:1b:c4:e9:11:0f:a5:ff:00:63:0d:3f:85:38: e2:dd:e2:bb:8f:09:ff:65:d1:5b:bc:e3:7b:36:43: 01:9a:bd:24:e4:17:8a:43:97:ec:74:26:20:8f:6f: a7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:36:D8:97:86:70:41:E4:92:0D:03:2F:D3:BD:9E:6E:A3:4D:C1:D0 X509v3 Authority Key Identifier: keyid:05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:70:18:a5:9a:88:77:99:b7:e9:d8:c1:ab:58:d6:57:85:db: 66:3b:30:ff:3b:fd:5d:52:e5:35:86:50:c8:2a:f8:db:a0:fd: 07:0f:42:27:b1:e8:fa:94:81:ae:9e:9f:13:92:2e:46:24:fb: 67:ca:cc:14:35:d2:28:ac:75:f4:12:5e:24:d1:35:4d:9d:83: ae:81:2b:35:ef:80:54:ed:f1:b7:5f:05:59:ec:c7:89:63:75: 3d:db:d5:d9:24:29:b5:58:f9:ea:c8:d2:fb:e5:df:ab:23:d7: 96:41:c0:fd:b0:3f:3e:b0:6d:e1:dd:c6:0f:af:6d:6d:4e:5c: 81:cc:d8:ba:6f:cf:22:71:76:57:09:c6:f2:cf:37:b8:ca:51: 24:03:cc:d2:b6:f3:f8:e2:18:14:23:d6:5e:16:a7:cb:87:6c: bb:16:69:cf:b4:17:5f:28:c6:70:96:ac:0d:29:fb:51:29:00: 3a:93:c2:05:94:55:1c:48:5c:b7:2d:f6:30:d8:8e:9b:21:9b: a6:d1:e5:37:f5:9f:b0:93:cd:e1:47:71:59:d2:ce:97:1c:01: d2:1b:1f:3d:70:45:5b:8e:3c:38:d9:c6:19:df:83:a7:ca:f9: 23:29:7b:5c:ed:5b:e4:21:a3:dc:d6:7b:41:33:c3:3b:20:be: 92:3b:1b:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjMHzHg327YZtixWQJ3B/VdDR8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDVDRjlFMTYxN0VDRjhCRTAyRjJGREZBMjdGMTNBODYy QTJCMjBFQjAeFw0yNjA3MjQwNjEyMDRaFw0yNjA3MjUwOTA3MDRaMDMxMTAvBgNV BAMTKDNBMzZEODk3ODY3MDQxRTQ5MjBEMDMyRkQzQkQ5RTZFQTM0REMxRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGwNAWjVbU4BWX2eaKuzWBD+4p TzQt2nXTo2c+lTkHAGjH/oqvygFrBQrnw1lRG7f5sSaCB/Fti0v7ZYydltbdPW1r 6kX2WZrnmrBPDrzyP6ZO0ILI3V/VYSAroxEXinqH78CJ2hb+IWmSzsGtbjJUkm6j g0WoNPfFco61Uv/++Mku+PKHtjg3kJf8i/kj51UckQZHH9R3e/7695HPlggn5zrJ blMFnG0nuOWfMtV8E90lWYK3hxlHHrhrNO2XKbIV7EP9cr8Eurin6fmveKarlc0P G8TpEQ+l/wBjDT+FOOLd4ruPCf9l0Vu843s2QwGavSTkF4pDl+x0JiCPb6chAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOjbYl4ZwQeSSDQMv072ebqNNwdAwHwYDVR0j BBgwFoAUBc+eFhfs+L4C8v36J/E6hiorIOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRmZDQyMzQtMTMyMy00ZjBlLWI2ODYtMWQ3MmFjYjg4MDI5LzAvMDVDRjlFMTYx N0VDRjhCRTAyRjJGREZBMjdGMTNBODYyQTJCMjBFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNUNGOUUxNjE3RUNGOEJFMDJGMkZERkEyN0YxM0E4NjJBMkIy MEVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRmZDQyMzQtMTMyMy00ZjBlLWI2 ODYtMWQ3MmFjYjg4MDI5LzAvMDVDRjlFMTYxN0VDRjhCRTAyRjJGREZBMjdGMTNB ODYyQTJCMjBFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhwGKWaiHeZt+nYwatY1leF22Y7MP87/V1S 5TWGUMgq+Nug/QcPQiex6PqUga6enxOSLkYk+2fKzBQ10iisdfQSXiTRNU2dg66B KzXvgFTt8bdfBVnsx4ljdT3b1dkkKbVY+erI0vvl36sj15ZBwP2wPz6wbeHdxg+v bW1OXIHM2LpvzyJxdlcJxvLPN7jKUSQDzNK28/jiGBQj1l4Wp8uHbLsWac+0F18o xnCWrA0p+1EpADqTwgWUVRxIXLct9jDYjpshm6bR5Tf1n7CTzeFHcVnSzpccAdIb Hz1wRVuOPDjZxhnfg6fK+SMpe1ztW+Qho9zWe0EzwzsgvpI7G8M= -----END CERTIFICATE-----Generated at Fri Jul 24 15:36:33 2026 by rpki-client