$ rpki-client -vvf rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft File: 5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft (raw, json) Hash identifier: ZiPScL1YV83ql45dAnnGaPt2z33vB/C/tCW6X09exF8= Subject key identifier: 00:CE:1D:79:2B:66:F4:55:DF:5B:AE:78:30:1C:86:04:1C:67:C4:33 Authority key identifier: 5E:25:E7:5E:AD:14:FB:9C:87:77:75:CF:A5:C7:68:C9:9B:F8:31:CB Certificate issuer: /CN=5E25E75EAD14FB9C877775CFA5C768C99BF831CB Certificate serial: 57256B640B0CA043C4BF6228EADE8285A84859F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:26:22 +0000 Manifest this update: Thu 23 Jul 2026 17:21:22 +0000 Manifest next update: Fri 24 Jul 2026 20:38:22 +0000 Files and hashes: 1: 3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (hash: GheubIEbC2RH3FMbulGJZm2AS1TBwHys9ZC8vY6htKI=) 2: 5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl (hash: duxiqDUqXUIOSG4Waux6ld+V4IHzP0bdiprDGLrmJNk=) 3: 3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa (hash: U6ZrAajnenCJBZYC9uBM6kAorfrc1n55yTDGAGbaXuI=) 4: 323030313a6466303a666534303a3a2f34382d3438203d3e20313439393133.roa (hash: Mx1Bs+uk4ORbPOJY3X4OSkdxpVJJ2TqdAiAI7XjMvYw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:25:6b:64:0b:0c:a0:43:c4:bf:62:28:ea:de:82:85:a8:48:59:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E25E75EAD14FB9C877775CFA5C768C99BF831CB Validity Not Before: Jul 23 17:21:22 2026 GMT Not After : Jul 24 20:38:22 2026 GMT Subject: CN=00CE1D792B66F455DF5BAE78301C86041C67C433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:ae:03:60:4d:4c:64:c9:fe:29:95:58:7e: e5:32:aa:cd:db:24:7d:27:85:0c:29:41:41:f9:0f: 54:d7:2d:46:d8:d5:46:5a:f2:df:ba:55:f4:b6:45: 0e:53:89:32:a7:db:89:14:a0:39:85:90:01:44:ae: 99:e9:08:1c:c2:4b:da:c8:d4:59:b0:df:51:c1:9f: ff:24:da:a9:55:18:7e:06:b9:00:ee:ac:a4:b1:20: 0e:67:27:40:82:16:99:cd:7d:cf:af:30:ea:0d:66: 72:10:bc:95:25:c1:02:a2:5b:eb:b0:35:5b:41:a2: 6d:2a:82:94:28:d4:b9:eb:24:7a:29:24:9e:7c:82: 8f:86:a9:4e:d9:42:ce:69:8b:14:f9:6b:9f:af:97: af:83:13:25:66:33:e3:4a:a8:05:eb:87:0b:94:87: c2:0e:40:0a:35:8c:3d:6f:7f:2b:02:96:72:88:dc: eb:60:59:42:eb:dc:df:60:a6:82:fa:d7:ec:27:83: 15:6b:ee:0a:5e:3d:75:ab:f3:bf:d9:c0:1d:c4:20: 3b:20:2d:35:c1:a4:6f:b3:4c:e2:81:ff:de:c8:73: 6f:a9:36:12:c5:93:1e:a8:6b:13:0d:93:47:19:f8: 16:10:96:36:25:bd:26:fb:54:f8:15:ca:1e:36:79: 77:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CE:1D:79:2B:66:F4:55:DF:5B:AE:78:30:1C:86:04:1C:67:C4:33 X509v3 Authority Key Identifier: keyid:5E:25:E7:5E:AD:14:FB:9C:87:77:75:CF:A5:C7:68:C9:9B:F8:31:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:1a:f2:1f:c9:3c:f7:cf:41:1c:b8:58:21:58:56:a1:aa:77: c9:3e:7f:3d:d1:1d:b9:f3:29:a3:19:0d:29:63:a3:92:17:85: aa:0d:3b:49:e2:76:6b:eb:65:2f:40:eb:70:31:7f:ee:b6:be: e8:64:1d:d9:d7:40:16:12:64:86:3b:f4:d7:f9:bf:30:31:e9: 9b:f1:84:57:93:1e:e5:ae:4b:e9:98:75:10:8d:9a:6b:72:b5: 07:04:16:68:80:61:f7:61:bc:1e:42:74:f9:08:04:49:d8:27: 60:55:13:f7:bc:85:00:e9:29:68:f2:a3:1a:88:93:ae:54:ce: 7a:ed:25:97:c9:3e:b1:5c:46:9c:22:db:be:1b:fd:44:ed:a8: ef:1b:00:7b:ae:26:92:88:8e:a7:22:ea:5c:cc:12:4e:32:56: 20:20:8f:34:70:dd:aa:c6:05:d4:fe:dd:6a:5d:5c:d3:05:41: 14:1e:b7:7e:8d:ee:d1:e6:b8:35:d1:46:41:97:b9:cf:55:fe: 77:4b:be:eb:dd:e5:c1:eb:8b:e1:19:4e:12:8b:13:82:46:b6: d0:9c:b9:78:21:9d:b6:95:c5:15:8f:dd:cc:f1:73:f2:17:94: fe:8e:ee:c1:f4:f0:9e:e7:a3:f8:98:51:b0:3e:43:9b:4a:7c: 40:da:87:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVyVrZAsMoEPEv2Io6t6ChahIWfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUyNUU3NUVBRDE0RkI5Qzg3Nzc3NUNGQTVDNzY4Qzk5 QkY4MzFDQjAeFw0yNjA3MjMxNzIxMjJaFw0yNjA3MjQyMDM4MjJaMDMxMTAvBgNV BAMTKDAwQ0UxRDc5MkI2NkY0NTVERjVCQUU3ODMwMUM4NjA0MUM2N0M0MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3a4DYE1MZMn+KZVYfuUyqs3b JH0nhQwpQUH5D1TXLUbY1UZa8t+6VfS2RQ5TiTKn24kUoDmFkAFErpnpCBzCS9rI 1Fmw31HBn/8k2qlVGH4GuQDurKSxIA5nJ0CCFpnNfc+vMOoNZnIQvJUlwQKiW+uw NVtBom0qgpQo1LnrJHopJJ58go+GqU7ZQs5pixT5a5+vl6+DEyVmM+NKqAXrhwuU h8IOQAo1jD1vfysClnKI3OtgWULr3N9gpoL61+wngxVr7gpePXWr87/ZwB3EIDsg LTXBpG+zTOKB/97Ic2+pNhLFkx6oaxMNk0cZ+BYQljYlvSb7VPgVyh42eXdJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAM4deStm9FXfW654MByGBBxnxDMwHwYDVR0j BBgwFoAUXiXnXq0U+5yHd3XPpcdoyZv4McswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg2ZDZiYTEtMWY3My00Nzc2LThhNmEtNGY0NTEyMDc5MmIxLzAvNUUyNUU3NUVB RDE0RkI5Qzg3Nzc3NUNGQTVDNzY4Qzk5QkY4MzFDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RTI1RTc1RUFEMTRGQjlDODc3Nzc1Q0ZBNUM3NjhDOTlCRjgz MUNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg2ZDZiYTEtMWY3My00Nzc2LThh NmEtNGY0NTEyMDc5MmIxLzAvNUUyNUU3NUVBRDE0RkI5Qzg3Nzc3NUNGQTVDNzY4 Qzk5QkY4MzFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQa8h/JPPfPQRy4WCFYVqGqd8k+fz3RHbnz KaMZDSljo5IXhaoNO0nidmvrZS9A63Axf+62vuhkHdnXQBYSZIY79Nf5vzAx6Zvx hFeTHuWuS+mYdRCNmmtytQcEFmiAYfdhvB5CdPkIBEnYJ2BVE/e8hQDpKWjyoxqI k65UznrtJZfJPrFcRpwi274b/UTtqO8bAHuuJpKIjqci6lzMEk4yViAgjzRw3arG BdT+3WpdXNMFQRQet36N7tHmuDXRRkGXuc9V/ndLvuvd5cHri+EZThKLE4JGttCc uXghnbaVxRWP3czxc/IXlP6O7sH08J7no/iYUbA+Q5tKfEDah1Y= -----END CERTIFICATE-----Generated at Fri Jul 24 07:57:02 2026 by rpki-client