$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft File: 5C0C0165C2202336BADFB9247E38D0C985467004.mft (raw, json) Hash identifier: uWGI5OTXu966M03yioNWXlUuBE5EA1E2YARlDDS3/JY= Subject key identifier: 97:70:83:0F:0F:50:03:1B:0E:D4:55:5E:00:5A:C4:60:A3:35:ED:A5 Authority key identifier: 5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04 Certificate issuer: /CN=5C0C0165C2202336BADFB9247E38D0C985467004 Certificate serial: 61C27C0EFB4ED205BBF7370D5756F18A3A3C9884 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 07:08:42 +0000 Manifest this update: Thu 23 Jul 2026 07:03:42 +0000 Manifest next update: Fri 24 Jul 2026 08:11:42 +0000 Files and hashes: 1: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: /DtJd8dT2bjoU0kUlHmis7kzNqsj8Fecx0D1VoaowR0=) 2: 5C0C0165C2202336BADFB9247E38D0C985467004.crl (hash: s77/W62iSpSRFuJFC3wdRMSZA4iupctnLAJ1Hym9W5w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.crl rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 08:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c2:7c:0e:fb:4e:d2:05:bb:f7:37:0d:57:56:f1:8a:3a:3c:98:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C0C0165C2202336BADFB9247E38D0C985467004 Validity Not Before: Jul 23 07:03:42 2026 GMT Not After : Jul 24 08:11:42 2026 GMT Subject: CN=9770830F0F50031B0ED4555E005AC460A335EDA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:83:3c:4a:5f:a5:61:1e:67:a6:69:8c:2c:61: 80:dd:3b:85:a4:e0:96:82:fe:58:cd:97:ad:81:c2: 0e:56:a9:3f:8e:6e:31:98:03:47:a5:cc:5b:91:da: d5:17:36:cc:9f:b2:b3:c2:4f:19:e6:85:f6:8c:94: eb:77:b4:a2:29:93:84:45:cc:41:52:2c:41:c2:0e: e0:4b:56:ee:c8:9e:5f:d2:f9:5f:64:85:4c:5a:5c: c2:67:4e:9b:6e:0b:64:9f:9b:b4:7d:59:c2:3d:36: 68:f6:52:55:94:fa:ab:97:29:d6:76:94:23:31:5e: 14:71:55:71:97:c4:43:76:5d:19:c6:af:26:1d:e1: 33:5b:e9:36:e7:8b:b0:35:19:4d:b7:36:70:ed:f5: cb:7a:d3:33:88:be:21:b7:6a:77:11:64:86:de:48: 79:7f:80:36:25:15:83:9d:65:30:bc:79:12:fd:6e: 64:ea:58:6d:2d:20:85:a9:0d:02:31:72:77:f8:25: 1d:87:81:92:ee:ab:c2:a6:6e:cf:10:17:99:bd:1e: 6d:ab:70:f0:dc:9e:ea:32:4f:b1:27:89:bf:33:7c: d4:6d:51:cf:f6:e7:89:c1:b8:12:9a:b0:d3:ea:61: 0c:87:aa:bb:f5:cc:07:47:67:16:f2:de:f1:f9:e4: fd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:70:83:0F:0F:50:03:1B:0E:D4:55:5E:00:5A:C4:60:A3:35:ED:A5 X509v3 Authority Key Identifier: keyid:5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:70:10:3c:e8:c0:d2:e7:0b:8f:7c:9f:26:86:f5:0c:77:e1: 8b:df:cc:c6:a8:d3:33:97:bc:77:54:c1:f5:51:5a:13:7a:45: 31:00:06:7c:5b:34:5e:c2:ef:fc:fa:f8:a5:0c:76:aa:e2:6d: 8e:1a:82:30:b6:f4:40:ea:c5:00:3a:b5:72:ec:23:36:22:1c: 29:2b:a9:f6:44:e1:48:a2:50:51:17:4c:a9:81:da:d9:c3:7c: 55:4b:d5:be:29:69:d8:8d:04:0d:5d:80:dc:c4:6c:6e:b5:28: 23:a0:f8:ec:83:28:86:4d:49:d9:84:d6:81:6b:c2:13:61:49: d9:dd:5c:4c:28:26:e0:92:b1:af:d8:62:53:b4:a2:66:7c:1d: f7:52:dd:03:05:b3:01:6e:40:32:99:8b:e0:76:01:73:86:ff: 47:3b:a7:5f:12:7a:3c:ea:df:86:70:a3:f1:df:09:28:65:93: 7e:e2:d0:d8:62:23:71:b5:9c:38:06:40:10:b8:f4:5e:7d:72: d7:07:32:1b:4f:f8:d0:88:cd:8b:da:ca:24:29:b9:76:be:d9: 25:35:73:25:27:47:59:cc:b9:2c:ea:d3:58:e4:99:58:65:78: 0c:2e:2b:c7:8e:d8:f7:cc:5f:35:86:a4:52:67:ce:89:7f:e0: ea:c7:0b:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYcJ8DvtO0gW79zcNV1bxijo8mIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMwQzAxNjVDMjIwMjMzNkJBREZCOTI0N0UzOEQwQzk4 NTQ2NzAwNDAeFw0yNjA3MjMwNzAzNDJaFw0yNjA3MjQwODExNDJaMDMxMTAvBgNV BAMTKDk3NzA4MzBGMEY1MDAzMUIwRUQ0NTU1RTAwNUFDNDYwQTMzNUVEQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpgzxKX6VhHmemaYwsYYDdO4Wk 4JaC/ljNl62Bwg5WqT+ObjGYA0elzFuR2tUXNsyfsrPCTxnmhfaMlOt3tKIpk4RF zEFSLEHCDuBLVu7Inl/S+V9khUxaXMJnTptuC2Sfm7R9WcI9Nmj2UlWU+quXKdZ2 lCMxXhRxVXGXxEN2XRnGryYd4TNb6Tbni7A1GU23NnDt9ct60zOIviG3ancRZIbe SHl/gDYlFYOdZTC8eRL9bmTqWG0tIIWpDQIxcnf4JR2HgZLuq8Kmbs8QF5m9Hm2r cPDcnuoyT7Enib8zfNRtUc/254nBuBKasNPqYQyHqrv1zAdHZxby3vH55P0NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl3CDDw9QAxsO1FVeAFrEYKM17aUwHwYDVR0j BBgwFoAUXAwBZcIgIza637kkfjjQyYVGcAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U1MTZlNmUtYzY3OS00ZTUwLWI3YWItMWU0MDY3OTEyNWNkLzAvNUMwQzAxNjVD MjIwMjMzNkJBREZCOTI0N0UzOEQwQzk4NTQ2NzAwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzBDMDE2NUMyMjAyMzM2QkFERkI5MjQ3RTM4RDBDOTg1NDY3 MDA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvNUMwQzAxNjVDMjIwMjMzNkJBREZCOTI0N0UzOEQw Qzk4NTQ2NzAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZwEDzowNLnC498nyaG9Qx34YvfzMao0zOX vHdUwfVRWhN6RTEABnxbNF7C7/z6+KUMdqribY4agjC29EDqxQA6tXLsIzYiHCkr qfZE4UiiUFEXTKmB2tnDfFVL1b4padiNBA1dgNzEbG61KCOg+OyDKIZNSdmE1oFr whNhSdndXEwoJuCSsa/YYlO0omZ8HfdS3QMFswFuQDKZi+B2AXOG/0c7p18Sejzq 34Zwo/HfCShlk37i0NhiI3G1nDgGQBC49F59ctcHMhtP+NCIzYvayiQpuXa+2SU1 cyUnR1nMuSzq01jkmVhleAwuK8eO2PfMXzWGpFJnzol/4OrHCx4= -----END CERTIFICATE-----Generated at Fri Jul 24 01:24:29 2026 by rpki-client