$ rpki-client -vvf rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft File: F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft (raw, json) Hash identifier: ta5zmsPG1UjRGRz9jRPpwkI3jz4B7KrW+VZAkvJOGBI= Subject key identifier: 00:40:E2:51:26:33:B1:AC:B5:F4:23:6A:F0:93:25:77:95:11:7B:17 Authority key identifier: F5:A8:75:F4:B1:94:D8:FE:EE:E6:58:64:23:80:16:F5:BA:01:1B:F3 Certificate issuer: /CN=F5A875F4B194D8FEEEE65864238016F5BA011BF3 Certificate serial: 5C71A5206641A94D16EB9E7C72E96D5F1DE9C1A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5A875F4B194D8FEEEE65864238016F5BA011BF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 12:09:58 +0000 Manifest this update: Thu 23 Jul 2026 12:04:58 +0000 Manifest next update: Fri 24 Jul 2026 15:17:58 +0000 Files and hashes: 1: F5A875F4B194D8FEEEE65864238016F5BA011BF3.crl (hash: +vHco4u787v6ncxUoqhkHsjOJzuZqRpFWxbt8NFBzJk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.crl rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5A875F4B194D8FEEEE65864238016F5BA011BF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:71:a5:20:66:41:a9:4d:16:eb:9e:7c:72:e9:6d:5f:1d:e9:c1:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A875F4B194D8FEEEE65864238016F5BA011BF3 Validity Not Before: Jul 23 12:04:58 2026 GMT Not After : Jul 24 15:17:58 2026 GMT Subject: CN=0040E2512633B1ACB5F4236AF093257795117B17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e9:1d:b0:90:3d:2e:77:7b:58:5f:11:0a:8c: e4:a8:9a:99:83:e8:c3:a6:f8:de:ef:59:75:59:c4: 41:3f:d5:4f:e9:ad:15:61:3d:bb:03:5d:2a:ea:81: 54:25:e2:f0:f8:2a:ce:ef:31:e5:ff:73:e6:17:53: 19:18:18:8b:23:f4:d8:f2:ea:fc:d3:bc:82:5e:a8: f0:3a:c0:94:99:70:c3:2d:50:f7:25:05:c8:73:24: b5:2b:cc:f3:37:23:47:47:5d:26:25:cd:31:7d:0b: 6e:66:c1:27:83:a6:37:3d:cd:9f:6f:02:03:38:6b: 38:be:0b:c4:e0:28:ba:42:65:f3:89:c1:c7:3b:04: 3a:7e:df:8b:58:21:12:f7:1b:91:f5:91:1b:56:f1: a4:b2:f6:ab:ff:a6:b1:83:33:98:f3:13:86:61:1f: 5d:05:97:66:a5:cf:7c:f5:ad:05:a4:c1:50:02:6b: 4a:44:cc:72:74:80:16:82:ee:05:64:18:5f:89:8e: 60:9c:f0:f0:a7:d9:d3:a9:d7:fc:52:1f:39:99:16: 7f:78:b6:41:61:a4:20:8e:7a:2d:e6:35:a8:bf:51: 51:f8:90:23:ff:c2:11:95:21:eb:f8:7a:46:8f:69: 0b:fd:57:94:4e:ed:06:ae:ff:eb:5c:a6:65:20:da: 85:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:40:E2:51:26:33:B1:AC:B5:F4:23:6A:F0:93:25:77:95:11:7B:17 X509v3 Authority Key Identifier: keyid:F5:A8:75:F4:B1:94:D8:FE:EE:E6:58:64:23:80:16:F5:BA:01:1B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5A875F4B194D8FEEEE65864238016F5BA011BF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:66:10:a7:b0:7e:66:85:4e:f5:29:b3:39:57:9b:20:23:eb: ec:07:36:ea:33:37:af:1e:ec:ec:29:e3:25:be:b6:c5:82:55: 1c:ce:69:52:dd:3d:60:db:89:6f:a9:53:5c:a8:0c:98:8d:08: f7:8c:97:9f:04:cd:fd:6d:f4:90:70:b9:9c:52:41:5b:eb:9c: c9:20:a4:7d:e8:3e:60:49:b0:d3:55:96:61:13:e4:05:1a:bf: 9b:99:6a:65:3e:7c:86:92:6a:4b:a7:f3:9b:22:2e:e3:5d:61: c6:6c:8d:a8:d1:17:a0:88:a6:d3:e4:fc:31:f3:b3:cc:d6:95: c9:37:77:0f:a0:2e:ac:2b:d6:4a:6a:d2:e0:33:b9:67:f3:c2: 47:33:26:d6:a1:86:7e:16:a6:cc:1b:73:7b:c1:97:01:56:6d: 47:a9:d0:77:6d:07:b7:dc:e4:c2:b3:ea:4e:c4:5f:aa:0a:d8: e2:34:6a:37:a1:af:b0:ba:f9:04:18:bf:ba:9f:59:7c:0f:7e: 31:97:98:28:c4:58:43:bc:f0:d8:85:81:0b:41:59:3a:a6:0a: bc:78:8d:07:38:b2:55:18:00:9c:45:5a:46:91:9c:bd:e3:f9: 54:38:54:0c:7a:48:27:bc:79:5e:0d:2a:34:9b:23:d9:1a:21: 3d:d8:e4:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXHGlIGZBqU0W6558cultXx3pwaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBODc1RjRCMTk0RDhGRUVFRTY1ODY0MjM4MDE2RjVC QTAxMUJGMzAeFw0yNjA3MjMxMjA0NThaFw0yNjA3MjQxNTE3NThaMDMxMTAvBgNV BAMTKDAwNDBFMjUxMjYzM0IxQUNCNUY0MjM2QUYwOTMyNTc3OTUxMTdCMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV6R2wkD0ud3tYXxEKjOSompmD 6MOm+N7vWXVZxEE/1U/prRVhPbsDXSrqgVQl4vD4Ks7vMeX/c+YXUxkYGIsj9Njy 6vzTvIJeqPA6wJSZcMMtUPclBchzJLUrzPM3I0dHXSYlzTF9C25mwSeDpjc9zZ9v AgM4azi+C8TgKLpCZfOJwcc7BDp+34tYIRL3G5H1kRtW8aSy9qv/prGDM5jzE4Zh H10Fl2alz3z1rQWkwVACa0pEzHJ0gBaC7gVkGF+JjmCc8PCn2dOp1/xSHzmZFn94 tkFhpCCOei3mNai/UVH4kCP/whGVIev4ekaPaQv9V5RO7Qau/+tcpmUg2oVbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAEDiUSYzsay19CNq8JMld5URexcwHwYDVR0j BBgwFoAU9ah19LGU2P7u5lhkI4AW9boBG/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjUzNTg1MGUtNGJmYS00NTA0LWJiZWMtNmM2YjJjYzNiYTI5LzAvRjVBODc1RjRC MTk0RDhGRUVFRTY1ODY0MjM4MDE2RjVCQTAxMUJGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNUE4NzVGNEIxOTREOEZFRUVFNjU4NjQyMzgwMTZGNUJBMDEx QkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjUzNTg1MGUtNGJmYS00NTA0LWJi ZWMtNmM2YjJjYzNiYTI5LzAvRjVBODc1RjRCMTk0RDhGRUVFRTY1ODY0MjM4MDE2 RjVCQTAxMUJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdmEKewfmaFTvUpszlXmyAj6+wHNuozN68e 7Owp4yW+tsWCVRzOaVLdPWDbiW+pU1yoDJiNCPeMl58Ezf1t9JBwuZxSQVvrnMkg pH3oPmBJsNNVlmET5AUav5uZamU+fIaSakun85siLuNdYcZsjajRF6CIptPk/DHz s8zWlck3dw+gLqwr1kpq0uAzuWfzwkczJtahhn4Wpswbc3vBlwFWbUep0HdtB7fc 5MKz6k7EX6oK2OI0ajehr7C6+QQYv7qfWXwPfjGXmCjEWEO88NiFgQtBWTqmCrx4 jQc4slUYAJxFWkaRnL3j+VQ4VAx6SCe8eV4NKjSbI9kaIT3Y5Fo= -----END CERTIFICATE-----Generated at Fri Jul 24 06:21:27 2026 by rpki-client