$ rpki-client -vvf rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft File: 5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft (raw, json) Hash identifier: VCAfutKi0ltebhXVtzxWgztJqfICByDpE8gkKH7e9Rg= Subject key identifier: 59:C5:C9:51:E5:EA:E5:34:B0:98:50:06:2B:2A:FE:0A:D6:45:08:14 Authority key identifier: 5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61 Certificate issuer: /CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61 Certificate serial: 06E3203C29A55FB3D575F8C561EE7192E812E3CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 12:40:04 +0000 Manifest this update: Fri 24 Jul 2026 12:35:04 +0000 Manifest next update: Sat 25 Jul 2026 15:30:04 +0000 Files and hashes: 1: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: BWylbxtj1ROm+MVww31ybQOgEWW9jWHft5tLSvCMDwM=) 2: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: ZSQfDBDx08SMOJ9/mfQRF6dJyZ/7l6GG2dcY9tQkt/U=) 3: 5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl (hash: jsdjMPydtFjKHgTZIx6uOUBssICkD/jsS4sHSFiHA0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:e3:20:3c:29:a5:5f:b3:d5:75:f8:c5:61:ee:71:92:e8:12:e3:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61 Validity Not Before: Jul 24 12:35:04 2026 GMT Not After : Jul 25 15:30:04 2026 GMT Subject: CN=59C5C951E5EAE534B09850062B2AFE0AD6450814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c2:4e:7c:8b:4f:93:63:74:e6:b1:0e:5c:4b: f5:81:18:01:5f:37:25:ab:c1:97:5e:d3:a4:c6:2b: 13:5c:90:59:4b:27:cd:fc:04:ea:bf:91:09:7f:ec: 16:39:62:79:8a:65:7f:d9:76:d1:98:4d:f4:a9:d0: d8:90:03:a1:2e:93:44:b4:f6:e5:15:cf:e7:78:9d: b1:45:b3:97:e8:31:8e:6c:fe:67:7d:3e:ab:c8:a8: 96:cb:aa:13:33:01:d2:58:a4:b3:a9:e8:e2:9a:e9: e9:59:05:c8:c9:3a:6f:3c:41:79:cf:bf:a6:86:1f: 8b:96:a6:f0:5a:ae:4c:38:ac:e5:a0:9d:b6:6e:24: 33:2c:3d:21:09:c8:b4:89:ed:c0:0b:65:01:c6:14: 16:a1:13:cf:c0:ac:b0:1c:18:0b:6d:b3:bf:06:1e: de:13:73:4a:94:10:d7:2a:6f:4f:5c:3e:cd:e9:4d: 35:05:0e:d6:32:52:f3:3f:e1:2b:94:11:99:c6:6b: b5:32:f0:2d:40:23:fc:4e:e8:39:f7:06:39:86:e9: 3c:3f:88:ea:0a:31:8c:1f:ad:35:7b:7e:0c:a2:60: 87:7d:70:b8:4c:91:8c:69:44:ed:33:82:2e:e3:e4: 7a:03:52:3b:e9:14:8f:85:f4:2c:d3:fa:a6:c6:80: 1c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C5:C9:51:E5:EA:E5:34:B0:98:50:06:2B:2A:FE:0A:D6:45:08:14 X509v3 Authority Key Identifier: keyid:5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:b9:84:9c:e3:ca:0f:84:6a:23:46:c2:ae:c7:22:7c:8e:bb: 64:e2:91:fc:93:9d:be:96:50:60:ac:0e:63:c9:fb:a8:e8:2d: 7a:a0:09:a0:79:59:bd:4a:85:5a:ae:a8:cd:04:a6:bc:85:2b: 83:46:55:9a:18:c7:99:3d:d6:ac:0e:62:55:1a:9a:1e:db:17: 61:6f:8e:26:62:b7:e2:6b:07:d0:cc:96:23:13:b3:c4:2e:61: 13:7a:98:45:52:fc:38:72:df:4c:0f:45:ed:b3:e8:f1:62:9f: f1:9b:a1:6c:b7:c7:30:98:83:3d:54:56:47:25:f6:0d:45:3f: e9:61:29:87:94:98:14:85:de:e8:ad:7b:34:c8:03:cb:73:0d: db:f0:1a:ca:89:cb:49:ef:76:ce:3b:91:14:c7:9d:41:b2:76: 94:d3:f6:e1:40:f8:f0:61:3a:aa:51:6f:f7:08:9f:97:7a:15: ba:b3:8d:c2:19:ca:79:76:d5:14:88:20:c1:ca:1a:fc:78:e7: f5:09:6f:2e:50:b7:1b:80:10:dc:c5:ec:16:7e:e0:85:7a:e6: d7:63:1a:d3:be:aa:ec:80:9a:d8:3c:be:c9:5f:e6:32:89:3a: 1f:c8:81:fa:02:96:78:ea:39:be:90:9a:45:ab:31:e3:5f:49: 85:6d:07:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBuMgPCmlX7PVdfjFYe5xkugS484wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4NDc0Q0Q1QUQ3RjU5OEE0ODI2ODk5REQ2NTIxN0Ex QkI4NUM2MTAeFw0yNjA3MjQxMjM1MDRaFw0yNjA3MjUxNTMwMDRaMDMxMTAvBgNV BAMTKDU5QzVDOTUxRTVFQUU1MzRCMDk4NTAwNjJCMkFGRTBBRDY0NTA4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKwk58i0+TY3TmsQ5cS/WBGAFf NyWrwZde06TGKxNckFlLJ838BOq/kQl/7BY5YnmKZX/ZdtGYTfSp0NiQA6Euk0S0 9uUVz+d4nbFFs5foMY5s/md9PqvIqJbLqhMzAdJYpLOp6OKa6elZBcjJOm88QXnP v6aGH4uWpvBarkw4rOWgnbZuJDMsPSEJyLSJ7cALZQHGFBahE8/ArLAcGAtts78G Ht4Tc0qUENcqb09cPs3pTTUFDtYyUvM/4SuUEZnGa7Uy8C1AI/xO6Dn3BjmG6Tw/ iOoKMYwfrTV7fgyiYId9cLhMkYxpRO0zgi7j5HoDUjvpFI+F9CzT+qbGgByRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWcXJUeXq5TSwmFAGKyr+CtZFCBQwHwYDVR0j BBgwFoAUW4R0zVrX9ZikgmiZ3WUhehu4XGEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3YTZiY2ItOWViNi00OWRlLWI5OTgtMGJlZDNjNWMxMjc4LzAvNUI4NDc0Q0Q1 QUQ3RjU5OEE0ODI2ODk5REQ2NTIxN0ExQkI4NUM2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Qjg0NzRDRDVBRDdGNTk4QTQ4MjY4OTlERDY1MjE3QTFCQjg1 QzYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNUI4NDc0Q0Q1QUQ3RjU5OEE0ODI2ODk5REQ2NTIx N0ExQkI4NUM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANa5hJzjyg+EaiNGwq7HInyOu2TikfyTnb6W UGCsDmPJ+6joLXqgCaB5Wb1KhVquqM0EpryFK4NGVZoYx5k91qwOYlUamh7bF2Fv jiZit+JrB9DMliMTs8QuYRN6mEVS/Dhy30wPRe2z6PFin/GboWy3xzCYgz1UVkcl 9g1FP+lhKYeUmBSF3uitezTIA8tzDdvwGsqJy0nvds47kRTHnUGydpTT9uFA+PBh OqpRb/cIn5d6FbqzjcIZynl21RSIIMHKGvx45/UJby5QtxuAENzF7BZ+4IV65tdj GtO+quyAmtg8vslf5jKJOh/IgfoClnjqOb6QmkWrMeNfSYVtB7A= -----END CERTIFICATE-----Generated at Fri Jul 24 15:39:43 2026 by rpki-client