$ rpki-client -vvf rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft File: 5FF85953C6850E359467A581C3FE1AC78E529F2F.mft (raw, json) Hash identifier: dE6jupWdvecryalzvVaIaTdibBh8M0OKU/MtQMXbrUg= Subject key identifier: 31:8D:07:88:9B:71:BB:97:25:1B:0E:2E:A1:F5:8A:9F:18:AA:13:7B Authority key identifier: 5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F Certificate issuer: /CN=5FF85953C6850E359467A581C3FE1AC78E529F2F Certificate serial: 2A6AB4ABE5F9F7A3C1DAB771F01EE3FBE26DD3CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:39:08 +0000 Manifest this update: Thu 23 Jul 2026 19:34:08 +0000 Manifest next update: Fri 24 Jul 2026 21:24:08 +0000 Files and hashes: 1: 3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (hash: t97u2GqJ2jtckgSGR6Sjz6Jn9nKSQHkBxpLPsPLvaYM=) 2: 3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (hash: uTaNGo7IDdsOGs73zESne28tA+ZzMyK0wMRINMuXTcQ=) 3: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: MmVOOc/LuqFNSXqQ5IddobFw0Ch137C+avOoyFd6ZzY=) 4: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: AwkHb7HGSUt+TaaLZZEdADtv/v78j6fMphbiNKpRchs=) 5: 3131352e3136362e3131312e302f32342d3234203d3e203134363138.roa (hash: kPUK2GFDFYlKn9GXNmNAqFN8ChpgIluMw/CP+FmKw0o=) 6: 5FF85953C6850E359467A581C3FE1AC78E529F2F.crl (hash: 6gYEQ/RYcyp9mmsKR9JP2YLMJI0Y2TaGBNWOeQyLRDw=) 7: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: +qKLLz9ehRuOchJ8m6wI99oYtklf5Gx9ixqGHWMAzMw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:6a:b4:ab:e5:f9:f7:a3:c1:da:b7:71:f0:1e:e3:fb:e2:6d:d3:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF85953C6850E359467A581C3FE1AC78E529F2F Validity Not Before: Jul 23 19:34:08 2026 GMT Not After : Jul 24 21:24:08 2026 GMT Subject: CN=318D07889B71BB97251B0E2EA1F58A9F18AA137B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a2:eb:a2:a9:b4:ab:02:00:83:eb:5c:99:37: d4:f4:d6:20:f4:32:f9:cc:9c:90:49:1c:37:6c:4c: 44:51:5c:2f:d0:ee:80:92:90:20:45:c6:f6:ad:95: 0a:b4:da:51:94:79:ac:ec:fa:8e:33:17:c5:2a:26: 32:8d:cd:a1:8e:ad:72:cd:08:b5:9d:42:64:5c:a2: 5a:17:73:03:b0:b7:3b:87:18:ec:89:39:65:e9:bf: 67:d1:c3:28:52:9b:a1:74:6e:8d:4d:ee:8a:4c:ae: 7f:0b:77:2b:76:0c:0a:72:4b:94:50:e7:32:2b:3a: aa:ac:b2:08:fb:88:d7:c2:ab:39:3c:62:b0:f1:d0: d6:4c:44:a4:b5:58:5e:a6:ac:f7:78:34:88:4f:70: a1:e1:37:15:94:9b:9a:84:b2:54:9b:22:30:54:ed: 68:1b:fb:3e:3b:d6:8c:57:b6:ed:26:65:e2:c9:8c: f6:21:0d:d5:c5:9b:e7:c5:51:ef:cb:08:e4:a7:50: 93:3b:e9:af:9d:5d:74:50:6e:2d:74:31:52:cb:1f: 9a:c6:43:22:fc:06:8b:6d:2c:78:a0:1d:c5:ac:48: 56:98:da:93:86:2f:46:e6:ac:89:55:90:2a:7f:54: 2e:ef:2b:03:a2:1f:ae:ec:08:58:8b:e5:ed:06:25: 09:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8D:07:88:9B:71:BB:97:25:1B:0E:2E:A1:F5:8A:9F:18:AA:13:7B X509v3 Authority Key Identifier: keyid:5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:98:3f:0b:a9:d3:47:15:06:88:0c:1f:78:88:7d:a4:53:d8: 7b:91:84:b2:b6:21:43:1f:1c:77:b0:83:e8:d5:a8:56:d3:93: 76:26:79:d1:b0:ab:5a:10:70:4c:8f:6c:5d:2a:b2:ee:0c:28: 91:c9:54:d6:8a:4e:0e:38:4f:79:da:df:31:ce:4d:9d:7b:98: 15:13:80:3c:f8:ca:91:89:49:16:34:b9:d7:d7:e1:b4:84:a2: 92:c8:ab:8c:dd:82:c8:46:45:71:bb:6b:7d:f5:5a:2f:d1:e0: 6f:c8:0a:84:99:3e:06:aa:86:a2:40:90:60:83:37:c2:22:c7: 90:1c:b1:63:45:8a:39:38:bb:78:dd:d0:63:64:e4:c4:8c:80: 23:22:8e:bc:8c:25:6f:68:05:49:9e:57:d9:31:16:fd:c6:19: 3e:de:ed:d3:9d:61:c6:3a:c7:b9:77:b4:67:c3:c0:fb:22:83: 76:c3:08:7a:2d:43:8f:a0:4b:6d:d2:17:12:21:8a:76:1f:c1: f9:72:5d:64:1f:b4:e2:96:f2:53:e5:8e:5c:1a:c9:23:24:49: 41:7b:6a:5c:02:df:c5:1e:f9:64:7f:b3:ce:06:fa:4c:52:65: 14:6a:9d:42:df:6e:02:ad:15:c8:cc:b7:9b:0a:ed:f6:74:a1: ac:73:59:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKmq0q+X596PB2rdx8B7j++Jt084wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4 RTUyOUYyRjAeFw0yNjA3MjMxOTM0MDhaFw0yNjA3MjQyMTI0MDhaMDMxMTAvBgNV BAMTKDMxOEQwNzg4OUI3MUJCOTcyNTFCMEUyRUExRjU4QTlGMThBQTEzN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeouuiqbSrAgCD61yZN9T01iD0 MvnMnJBJHDdsTERRXC/Q7oCSkCBFxvatlQq02lGUeazs+o4zF8UqJjKNzaGOrXLN CLWdQmRcoloXcwOwtzuHGOyJOWXpv2fRwyhSm6F0bo1N7opMrn8Ldyt2DApyS5RQ 5zIrOqqssgj7iNfCqzk8YrDx0NZMRKS1WF6mrPd4NIhPcKHhNxWUm5qEslSbIjBU 7Wgb+z471oxXtu0mZeLJjPYhDdXFm+fFUe/LCOSnUJM76a+dXXRQbi10MVLLH5rG QyL8BottLHigHcWsSFaY2pOGL0bmrIlVkCp/VC7vKwOiH67sCFiL5e0GJQllAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMY0HiJtxu5clGw4uofWKnxiqE3swHwYDVR0j BBgwFoAUX/hZU8aFDjWUZ6WBw/4ax45Sny8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmRkNDdmNTYtZWM1My00MmViLTliOGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTND Njg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4RTUyOUYyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkY4NTk1M0M2ODUwRTM1OTQ2N0E1ODFDM0ZFMUFDNzhFNTI5 RjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFB Qzc4RTUyOUYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASYPwup00cVBogMH3iIfaRT2HuRhLK2IUMf HHewg+jVqFbTk3YmedGwq1oQcEyPbF0qsu4MKJHJVNaKTg44T3na3zHOTZ17mBUT gDz4ypGJSRY0udfX4bSEopLIq4zdgshGRXG7a331Wi/R4G/ICoSZPgaqhqJAkGCD N8Iix5AcsWNFijk4u3jd0GNk5MSMgCMijryMJW9oBUmeV9kxFv3GGT7e7dOdYcY6 x7l3tGfDwPsig3bDCHotQ4+gS23SFxIhinYfwflyXWQftOKW8lPljlwaySMkSUF7 alwC38Ue+WR/s84G+kxSZRRqnULfbgKtFcjMt5sK7fZ0oaxzWQ4= -----END CERTIFICATE-----Generated at Fri Jul 24 03:02:03 2026 by rpki-client