$ rpki-client -vvf rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft File: 5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft (raw, json) Hash identifier: rhK65d9vYnSuwDzw0WpXnGXnX0pBZLBD6sQHgKoFv7g= Subject key identifier: 62:2C:A7:8F:47:70:E6:13:DD:92:BF:3C:06:2A:6A:47:27:19:58:AE Authority key identifier: 56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B Certificate issuer: /CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B Certificate serial: 485798A339FD449863A00C6F30E64EA3E5D81826 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 14:37:48 +0000 Manifest this update: Thu 23 Jul 2026 14:32:48 +0000 Manifest next update: Fri 24 Jul 2026 18:36:48 +0000 Files and hashes: 1: 3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (hash: tFFR6+x+fpHHrNjo8i5wrXGQVmpCIjPUzPsVU8CszYg=) 2: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (hash: PFdBLc9JDIxArwgoU/YzuObUbGI99im6tjm/eoPLbM8=) 3: 3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (hash: Wb6gH+JiAvO+ARbeGk8L44agijONRst7EWLeoO4CUoU=) 4: 5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl (hash: saZHrrNdA6mYBrXzykG12rGR+lfyqH+i5UpyzJjLyeQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:57:98:a3:39:fd:44:98:63:a0:0c:6f:30:e6:4e:a3:e5:d8:18:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B Validity Not Before: Jul 23 14:32:48 2026 GMT Not After : Jul 24 18:36:48 2026 GMT Subject: CN=622CA78F4770E613DD92BF3C062A6A47271958AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fd:de:32:e5:1b:2d:ec:57:88:7d:45:b8:36: 4e:50:91:bd:ef:08:0b:43:9e:ea:d6:9b:6b:f0:33: 68:8a:72:bd:98:6e:34:4c:80:36:cd:46:7d:0c:93: dd:24:ef:33:08:09:fc:9d:be:36:bc:bb:ad:da:16: 24:15:6c:cd:82:e9:9b:81:0a:3e:50:70:09:b0:83: de:56:83:ac:3b:a0:1d:0e:21:ad:b8:7a:dc:d0:e3: 2d:8d:d1:55:a8:65:a6:c4:40:93:4f:fe:10:bf:d9: ec:25:16:f0:96:da:8c:35:4b:99:2f:69:a7:d0:f1: 44:df:c5:08:e6:e9:f7:a0:60:6c:ee:5a:32:31:1f: 05:d4:e4:e0:1d:70:09:ca:e4:11:ec:78:56:f8:58: 21:d5:c6:0f:d7:33:bb:76:ff:2a:5d:69:e2:26:b5: fa:00:07:cc:1a:a5:98:e0:b7:80:7c:fd:4c:0e:1d: 93:3f:4c:49:33:af:75:13:ab:d2:94:58:08:83:ec: 43:b8:88:1b:f6:11:a5:80:71:c1:30:e5:61:64:f8: c4:9c:93:ae:17:90:39:af:4c:0a:97:93:cd:22:f8: 41:58:a3:a3:4c:84:d3:90:99:3e:60:18:7e:43:c1: 38:d0:76:9d:b7:96:2c:62:1f:19:97:40:4d:92:de: bd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2C:A7:8F:47:70:E6:13:DD:92:BF:3C:06:2A:6A:47:27:19:58:AE X509v3 Authority Key Identifier: keyid:56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:cc:d2:24:b0:13:57:11:61:e8:01:cf:81:b7:fa:a8:94:56: 89:59:27:ff:9d:d0:1e:5e:4a:41:b9:10:8f:6d:18:64:e9:0f: 55:37:37:b8:af:40:9b:ee:8a:5a:35:05:b1:d6:71:fb:6e:ea: 98:5e:57:be:47:4e:4a:4c:bd:f0:67:65:ea:ff:ac:5f:a4:c2: dc:31:0b:18:df:a8:bc:c6:55:91:24:44:8f:b6:22:2e:75:02: 69:f5:59:c7:82:46:3c:af:7e:51:4c:8b:34:36:70:5d:20:48: 93:95:e5:b6:5d:4a:ac:5b:83:4a:c8:b6:68:56:bc:25:d1:a9: a6:7a:db:f9:34:5b:b0:bd:eb:97:49:05:62:da:33:de:e1:91: ed:27:10:ba:75:73:4c:f6:0f:16:f9:08:2a:58:98:8a:54:e0: 0b:a2:85:3a:ef:93:d6:99:c3:2e:e5:75:10:ae:45:cc:4f:da: 93:3e:50:a5:1f:af:33:f3:29:f7:88:6c:78:fd:70:d8:6e:d4: 83:21:02:31:5b:13:ea:e3:0f:88:fa:ec:99:a4:22:d3:fb:a0: 9c:f1:a0:9b:1d:dc:fb:06:7d:28:5f:ae:73:d4:57:ba:9b:06: c2:66:f8:9a:1e:9d:3c:57:3f:91:fc:7a:8c:21:cb:73:4c:8c: e0:a7:3e:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSFeYozn9RJhjoAxvMOZOo+XYGCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2M0IyOTcwNUZGOUQyRDcyMDhDRDM5NEM1NzY3RDVB Mjg5OUYxQjAeFw0yNjA3MjMxNDMyNDhaFw0yNjA3MjQxODM2NDhaMDMxMTAvBgNV BAMTKDYyMkNBNzhGNDc3MEU2MTNERDkyQkYzQzA2MkE2QTQ3MjcxOTU4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/d4y5Rst7FeIfUW4Nk5Qkb3v CAtDnurWm2vwM2iKcr2YbjRMgDbNRn0Mk90k7zMICfydvja8u63aFiQVbM2C6ZuB Cj5QcAmwg95Wg6w7oB0OIa24etzQ4y2N0VWoZabEQJNP/hC/2ewlFvCW2ow1S5kv aafQ8UTfxQjm6fegYGzuWjIxHwXU5OAdcAnK5BHseFb4WCHVxg/XM7t2/ypdaeIm tfoAB8wapZjgt4B8/UwOHZM/TEkzr3UTq9KUWAiD7EO4iBv2EaWAccEw5WFk+MSc k64XkDmvTAqXk80i+EFYo6NMhNOQmT5gGH5DwTjQdp23lixiHxmXQE2S3r0jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYiynj0dw5hPdkr88BipqRycZWK4wHwYDVR0j BBgwFoAUVmOylwX/nS1yCM05TFdn1aKJnxswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIyN2IxNzYtNGMxNy00MjQ0LWJhZGYtZjQ5NmJjYjE1ZTIwLzAvNTY2M0IyOTcw NUZGOUQyRDcyMDhDRDM5NEM1NzY3RDVBMjg5OUYxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NjYzQjI5NzA1RkY5RDJENzIwOENEMzk0QzU3NjdENUEyODk5 RjFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIyN2IxNzYtNGMxNy00MjQ0LWJh ZGYtZjQ5NmJjYjE1ZTIwLzAvNTY2M0IyOTcwNUZGOUQyRDcyMDhDRDM5NEM1NzY3 RDVBMjg5OUYxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXM0iSwE1cRYegBz4G3+qiUVolZJ/+d0B5e SkG5EI9tGGTpD1U3N7ivQJvuilo1BbHWcftu6pheV75HTkpMvfBnZer/rF+kwtwx CxjfqLzGVZEkRI+2Ii51Amn1WceCRjyvflFMizQ2cF0gSJOV5bZdSqxbg0rItmhW vCXRqaZ62/k0W7C965dJBWLaM97hke0nELp1c0z2Dxb5CCpYmIpU4AuihTrvk9aZ wy7ldRCuRcxP2pM+UKUfrzPzKfeIbHj9cNhu1IMhAjFbE+rjD4j67JmkItP7oJzx oJsd3PsGfShfrnPUV7qbBsJm+JoenTxXP5H8eowhy3NMjOCnPvU= -----END CERTIFICATE-----Generated at Fri Jul 24 11:34:15 2026 by rpki-client