$ rpki-client -vvf rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft File: 793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft (raw, json) Hash identifier: vctG3DER0RARNS9gZP9FixzJClEuDvVQXhqRtQeCq6U= Subject key identifier: 5F:FA:53:16:3B:3A:09:C4:98:29:44:A1:74:42:E6:AE:8C:30:1C:8A Authority key identifier: 79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5 Certificate issuer: /CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5 Certificate serial: 67FC1523DDA359603340A479E374ED4B22255ACF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 09:57:12 +0000 Manifest this update: Thu 23 Jul 2026 09:52:12 +0000 Manifest next update: Fri 24 Jul 2026 13:52:12 +0000 Files and hashes: 1: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: CYcQtk6Q2BGiqIh55Kes8nmVzVHDPahaB/OUEW8nJ4s=) 2: 793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl (hash: xo2BW8xm+HKIJ+C9LizXA4ZNBpZvd2w33VxtsofpNRg=) 3: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: 0QGECZtZ4NpVwUmkTwNZiQAD/nvM6N9DYMd+ulfiukw=) 4: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: 1ZSbqejAXASSMS+yiCaDvvpugHjgj1M6wD3m+4/7wrE=) 5: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: m8ctD+xav7ZeI0n+/CZUY0lL5X8THNniko/PGJK1gwE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fc:15:23:dd:a3:59:60:33:40:a4:79:e3:74:ed:4b:22:25:5a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5 Validity Not Before: Jul 23 09:52:12 2026 GMT Not After : Jul 24 13:52:12 2026 GMT Subject: CN=5FFA53163B3A09C4982944A17442E6AE8C301C8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:39:d8:c3:d9:5b:7e:0e:af:ac:ec:87:70:71: f3:49:a2:b3:9d:7b:b2:7e:25:54:0f:ce:49:af:86: 8a:06:d4:f7:cd:34:20:f1:ec:af:7c:f2:b2:d1:3b: fb:df:01:c5:dc:29:e8:cd:d3:a1:d7:71:c7:e3:4c: dd:2c:42:fa:a8:5d:40:1e:d3:94:d0:66:19:a5:50: 70:3a:21:8e:4f:13:ca:60:66:58:37:f2:e9:b0:72: 41:34:88:a1:5f:7b:ab:6f:2e:89:e8:b7:02:bd:4b: c2:92:23:0a:3e:fc:f3:75:11:50:bf:2c:b0:b3:c1: 9a:17:f1:e7:c3:f5:32:30:a4:00:95:be:45:97:ee: 79:04:4b:82:cd:0c:6b:7a:ca:a3:02:19:aa:8c:c9: f3:85:60:c5:0c:ce:4e:18:95:fd:50:1d:a4:41:7a: 7d:9d:31:4b:41:28:24:fe:c8:20:d3:2e:5c:04:25: e9:60:41:26:33:fe:b3:b2:49:cf:5d:a7:e2:36:fa: 14:94:f1:3d:55:5a:9d:56:0c:92:f5:35:73:d0:cf: 17:bc:51:a0:f0:20:0d:6e:24:59:e1:5f:d6:c2:29: 91:b2:38:53:85:1f:9c:72:ed:9a:ac:df:88:81:9a: 10:63:d5:b4:07:92:99:09:09:65:e9:e1:87:fa:06: a4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FA:53:16:3B:3A:09:C4:98:29:44:A1:74:42:E6:AE:8C:30:1C:8A X509v3 Authority Key Identifier: keyid:79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:7d:d3:a8:37:ee:1c:1f:f4:8a:05:8a:fb:49:01:37:02:21: fd:50:90:7e:e5:c0:ad:57:f8:17:e0:31:90:36:15:a8:24:92: 38:48:8f:97:fa:36:a8:ea:fb:61:2b:bd:24:be:d1:d1:14:84: f6:2c:33:84:f6:d0:50:39:ab:33:79:16:66:19:01:af:99:ba: 3f:b4:3c:92:29:74:0b:e4:16:b2:86:68:08:62:81:26:73:a6: 26:71:f7:a9:7c:87:44:66:63:08:e2:79:dc:d2:b7:5e:43:23: 04:fa:2c:0a:bf:6e:69:6d:d3:58:43:0b:55:a8:f7:9c:0a:12: ef:66:90:d6:9e:0e:6a:d3:03:e7:6f:23:f4:3f:3a:1d:d9:c8: a3:30:f6:d5:2b:91:fb:f3:58:94:3b:1c:7a:d0:a5:25:d6:26: bc:42:db:69:c4:02:45:d5:f3:09:7c:00:ea:13:a6:cc:cf:e9: 72:4a:df:33:45:e6:8c:f2:7c:73:5e:a0:04:a7:6e:07:b1:8b: 52:f2:0e:86:0d:50:00:48:79:54:77:fd:f1:25:20:ac:7d:59: e5:92:d8:5a:c6:d3:12:d2:bc:34:b9:f3:4a:43:42:ba:ab:9a: 9e:bf:dc:20:04:be:69:6d:ab:a8:d8:c4:69:24:9c:4b:d1:3c: 11:2e:9c:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/wVI92jWWAzQKR543TtSyIlWs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkzMjkwRTdFQzE1NUZGNzFDNDREQjY0NjhDRUQ3OTg1 Q0JGMkRGNTAeFw0yNjA3MjMwOTUyMTJaFw0yNjA3MjQxMzUyMTJaMDMxMTAvBgNV BAMTKDVGRkE1MzE2M0IzQTA5QzQ5ODI5NDRBMTc0NDJFNkFFOEMzMDFDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNOdjD2Vt+Dq+s7IdwcfNJorOd e7J+JVQPzkmvhooG1PfNNCDx7K988rLRO/vfAcXcKejN06HXccfjTN0sQvqoXUAe 05TQZhmlUHA6IY5PE8pgZlg38umwckE0iKFfe6tvLonotwK9S8KSIwo+/PN1EVC/ LLCzwZoX8efD9TIwpACVvkWX7nkES4LNDGt6yqMCGaqMyfOFYMUMzk4Ylf1QHaRB en2dMUtBKCT+yCDTLlwEJelgQSYz/rOySc9dp+I2+hSU8T1VWp1WDJL1NXPQzxe8 UaDwIA1uJFnhX9bCKZGyOFOFH5xy7Zqs34iBmhBj1bQHkpkJCWXp4Yf6BqRXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX/pTFjs6CcSYKUShdELmrowwHIowHwYDVR0j BBgwFoAUeTKQ5+wVX/ccRNtkaM7XmFy/LfUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGU5OGIzYmQtMjg0ZC00YTdkLTlmMjctY2I1ODdlOWRkODQxLzAvNzkzMjkwRTdF QzE1NUZGNzFDNDREQjY0NjhDRUQ3OTg1Q0JGMkRGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OTMyOTBFN0VDMTU1RkY3MUM0NERCNjQ2OENFRDc5ODVDQkYy REY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvNzkzMjkwRTdFQzE1NUZGNzFDNDREQjY0NjhDRUQ3 OTg1Q0JGMkRGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGh906g37hwf9IoFivtJATcCIf1QkH7lwK1X +BfgMZA2FagkkjhIj5f6Nqjq+2ErvSS+0dEUhPYsM4T20FA5qzN5FmYZAa+Zuj+0 PJIpdAvkFrKGaAhigSZzpiZx96l8h0RmYwjiedzSt15DIwT6LAq/bmlt01hDC1Wo 95wKEu9mkNaeDmrTA+dvI/Q/Oh3ZyKMw9tUrkfvzWJQ7HHrQpSXWJrxC22nEAkXV 8wl8AOoTpszP6XJK3zNF5ozyfHNeoASnbgexi1LyDoYNUABIeVR3/fElIKx9WeWS 2FrG0xLSvDS580pDQrqrmp6/3CAEvmltq6jYxGkknEvRPBEunMw= -----END CERTIFICATE-----Generated at Fri Jul 24 05:02:20 2026 by rpki-client