$ rpki-client -vvf rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft File: B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft (raw, json) Hash identifier: qFRnW/t6fpF2yf190Cfir8h/Q/LoR33rtKuyDDVpBEs= Subject key identifier: 68:4B:34:E0:0C:CE:7C:BA:9A:B0:EE:04:7A:9C:4D:77:B5:1C:54:44 Authority key identifier: B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5 Certificate issuer: /CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5 Certificate serial: 18EB6640EE7DED5AB8498BE73F06C5F74039ACF3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 12:25:15 +0000 Manifest this update: Thu 23 Jul 2026 12:20:15 +0000 Manifest next update: Fri 24 Jul 2026 13:22:15 +0000 Files and hashes: 1: B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl (hash: BVDy8A5UKN/77jIIawE29uBDIRcYMCnN/6wGjKRA4Iw=) 2: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: hZL/hi6Qgsw4sgW/mhx3uNInW8MyX4I+jFDzsHcP8Z4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:eb:66:40:ee:7d:ed:5a:b8:49:8b:e7:3f:06:c5:f7:40:39:ac:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5 Validity Not Before: Jul 23 12:20:15 2026 GMT Not After : Jul 24 13:22:15 2026 GMT Subject: CN=684B34E00CCE7CBA9AB0EE047A9C4D77B51C5444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:3d:09:6c:a3:52:ff:65:3d:1e:1e:71:69: 07:53:64:0b:0d:35:e3:31:11:18:ed:a9:cd:54:f7: 23:53:14:3a:58:f6:01:54:60:8c:31:ae:85:31:b2: 91:ac:ac:80:56:6c:f6:97:64:f6:90:86:c7:ff:94: cc:fd:c8:9b:15:82:d2:33:d1:49:97:38:d0:fd:59: 47:67:63:f8:e1:7d:80:cd:d9:54:da:9e:4f:3e:a4: 43:d9:73:a1:e8:6c:08:3f:d1:1a:47:94:46:22:c2: d7:e1:a0:bb:d8:26:62:a6:b5:b2:aa:44:2b:57:9d: be:30:f6:5c:a5:f8:ef:1b:bd:0f:09:91:b6:03:28: 80:85:18:4f:42:d8:a0:37:d4:3c:5b:4b:8d:d2:bd: c5:d9:83:5f:32:42:bf:a6:76:2a:38:27:6d:5a:a6: 36:25:8d:fd:71:79:fa:bb:7b:1d:9a:dc:bb:75:61: f1:8d:ee:1a:8c:75:00:8b:29:c7:07:5a:16:8e:0c: 09:f2:26:f0:56:db:5d:77:91:0a:e4:df:ae:14:70: 80:92:bf:1d:fa:e8:c5:6b:0f:21:f2:0e:fb:f7:70: ee:c1:bd:21:ac:d1:5c:86:a4:56:c4:bb:d5:97:f8: 24:f1:96:1a:3b:fa:14:4c:48:4c:c7:e9:53:88:81: 97:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4B:34:E0:0C:CE:7C:BA:9A:B0:EE:04:7A:9C:4D:77:B5:1C:54:44 X509v3 Authority Key Identifier: keyid:B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:24:56:55:ca:f8:13:09:6a:d3:20:ff:61:c1:05:2c:93:62: 21:bb:a2:36:89:01:4d:6a:df:47:c5:8e:a7:77:b8:27:6b:e6: ee:d9:3a:83:b7:74:ee:a3:bb:c9:4c:0d:af:92:0f:fb:dc:4d: 43:ea:3a:0c:93:9d:bc:6d:4a:44:c3:5e:9f:ab:29:3a:41:a9: db:38:68:f3:4a:7c:4e:16:6e:27:cf:df:2b:d5:63:0d:47:fc: c7:25:98:9a:eb:aa:b6:7a:07:b9:fa:bd:69:79:f9:57:1e:80: 6f:49:62:3a:c4:19:32:06:c5:b4:60:04:88:14:93:5c:77:6a: b5:27:8a:5c:9f:c3:b5:39:36:43:ad:69:bb:5e:45:35:8b:54: 87:20:6f:75:23:94:ee:30:9f:65:6c:76:f4:38:f9:5b:41:5a: 38:c9:8e:d5:6f:58:62:43:fc:8d:51:3b:68:a5:8b:32:b5:09: a4:f1:cc:9c:1b:b8:34:9a:b5:96:e6:68:9f:b9:00:a9:f6:9a: d5:da:35:f6:34:b5:1e:c0:be:ed:76:a6:0d:cf:3f:e6:96:30: 63:5a:ef:47:53:40:11:b1:b4:89:7f:9a:22:56:76:f5:5b:07: fb:16:c5:f2:75:47:6f:fc:9f:ed:11:cc:71:d9:1b:0a:21:3e: c6:16:37:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGOtmQO597Vq4SYvnPwbF90A5rPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBRTdENzlCMjI5NTY1REI1QTlDNEU3NENEMDM4RTUz Rjk4NEJGNTAeFw0yNjA3MjMxMjIwMTVaFw0yNjA3MjQxMzIyMTVaMDMxMTAvBgNV BAMTKDY4NEIzNEUwMENDRTdDQkE5QUIwRUUwNDdBOUM0RDc3QjUxQzU0NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vT0JbKNS/2U9Hh5xaQdTZAsN NeMxERjtqc1U9yNTFDpY9gFUYIwxroUxspGsrIBWbPaXZPaQhsf/lMz9yJsVgtIz 0UmXOND9WUdnY/jhfYDN2VTank8+pEPZc6HobAg/0RpHlEYiwtfhoLvYJmKmtbKq RCtXnb4w9lyl+O8bvQ8JkbYDKICFGE9C2KA31DxbS43SvcXZg18yQr+mdio4J21a pjYljf1xefq7ex2a3Lt1YfGN7hqMdQCLKccHWhaODAnyJvBW2113kQrk364UcICS vx366MVrDyHyDvv3cO7BvSGs0VyGpFbEu9WX+CTxlho7+hRMSEzH6VOIgZcnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaEs04AzOfLqasO4EepxNd7UcVEQwHwYDVR0j BBgwFoAUta59ebIpVl21qcTnTNA45T+YS/UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzhjNzM5NmMtNGJiZS00YzZlLThmNTAtNDQyYzIwNWUwNzBjLzAvQjVBRTdENzlC MjI5NTY1REI1QTlDNEU3NENEMDM4RTUzRjk4NEJGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNUFFN0Q3OUIyMjk1NjVEQjVBOUM0RTc0Q0QwMzhFNTNGOTg0 QkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzhjNzM5NmMtNGJiZS00YzZlLThm NTAtNDQyYzIwNWUwNzBjLzAvQjVBRTdENzlCMjI5NTY1REI1QTlDNEU3NENEMDM4 RTUzRjk4NEJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUkVlXK+BMJatMg/2HBBSyTYiG7ojaJAU1q 30fFjqd3uCdr5u7ZOoO3dO6ju8lMDa+SD/vcTUPqOgyTnbxtSkTDXp+rKTpBqds4 aPNKfE4WbifP3yvVYw1H/MclmJrrqrZ6B7n6vWl5+VcegG9JYjrEGTIGxbRgBIgU k1x3arUnilyfw7U5NkOtabteRTWLVIcgb3UjlO4wn2VsdvQ4+VtBWjjJjtVvWGJD /I1RO2ilizK1CaTxzJwbuDSatZbmaJ+5AKn2mtXaNfY0tR7Avu12pg3PP+aWMGNa 70dTQBGxtIl/miJWdvVbB/sWxfJ1R2/8n+0RzHHZGwohPsYWN4c= -----END CERTIFICATE-----Generated at Fri Jul 24 07:08:13 2026 by rpki-client