$ rpki-client -vvf rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft File: 5CB4B0C07702B8252693A6958EABDFD306B34D72.mft (raw, json) Hash identifier: Uu3Skh5Q6jDwuSt4E/ta3aRYHRrpN0lr0ZCWZjTn+1Q= Subject key identifier: 31:5D:C0:41:CB:75:7C:EA:3E:B4:1E:02:0A:3E:C0:FC:9E:53:1C:03 Authority key identifier: 5C:B4:B0:C0:77:02:B8:25:26:93:A6:95:8E:AB:DF:D3:06:B3:4D:72 Certificate issuer: /CN=5CB4B0C07702B8252693A6958EABDFD306B34D72 Certificate serial: 1FB5D70A14CE69B53EEB551BB5D8070961A95D99 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 17:21:16 +0000 Manifest this update: Thu 23 Jul 2026 17:16:16 +0000 Manifest next update: Fri 24 Jul 2026 20:21:16 +0000 Files and hashes: 1: 5CB4B0C07702B8252693A6958EABDFD306B34D72.crl (hash: cgHWZ5wEiSGRblf0nl6Soog5X7WV4myreq0xAYiUNHg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.crl rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b5:d7:0a:14:ce:69:b5:3e:eb:55:1b:b5:d8:07:09:61:a9:5d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CB4B0C07702B8252693A6958EABDFD306B34D72 Validity Not Before: Jul 23 17:16:16 2026 GMT Not After : Jul 24 20:21:16 2026 GMT Subject: CN=315DC041CB757CEA3EB41E020A3EC0FC9E531C03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e0:5e:77:fc:c8:be:cf:d7:2f:42:c0:be:ff: f9:1c:11:0b:9f:c6:ab:0f:e0:e5:84:44:90:5c:ad: 77:9f:fd:f8:ff:65:15:26:4e:d1:a2:21:09:e2:3e: 38:8c:94:79:0e:06:9d:88:ba:fe:fd:13:e9:11:0c: 1a:7e:0b:c2:5b:e9:d2:6d:a8:92:e1:5c:6a:06:60: 9f:c2:40:64:b8:21:a2:4c:21:5b:1e:27:83:14:e1: 32:19:97:f6:ee:c4:da:ee:8d:1f:29:c2:92:59:89: 8f:b8:f7:fb:50:10:6e:0f:32:36:ab:f7:75:c6:7c: 5f:c5:97:bd:22:18:e4:5c:79:ce:e4:46:eb:c6:2d: 68:e5:d2:46:14:00:31:2d:21:fe:dd:b6:b4:f9:a5: 11:d4:84:bb:d9:69:49:44:00:84:6c:2d:bb:2b:16: 29:06:4c:f3:51:d5:33:62:51:7b:6d:f9:01:19:93: 49:73:89:b0:90:33:c4:51:dc:e4:bc:5d:fe:53:ab: 54:1d:69:99:b5:e0:6d:76:e1:cf:29:bf:8c:1c:eb: f6:b2:64:b9:6e:8c:91:19:f0:c9:64:fd:28:85:57: 84:fa:d6:9b:6e:81:08:46:79:c5:70:1e:cd:9c:fc: a5:24:26:5a:03:07:f2:21:49:07:fa:14:d4:fc:82: b7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5D:C0:41:CB:75:7C:EA:3E:B4:1E:02:0A:3E:C0:FC:9E:53:1C:03 X509v3 Authority Key Identifier: keyid:5C:B4:B0:C0:77:02:B8:25:26:93:A6:95:8E:AB:DF:D3:06:B3:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:e1:6c:c4:28:83:4c:59:7c:19:05:ad:37:90:9e:f4:3f:63: e4:9e:7e:6f:8f:95:67:9d:b3:b5:72:13:f8:32:c1:53:45:3c: 4d:7a:f4:a9:70:74:c2:f3:c5:8f:e6:7d:39:04:a9:0d:52:6b: 43:15:0f:07:48:e1:d1:e1:55:d9:bb:db:dc:27:f6:58:1d:da: 98:f0:11:5a:7b:a8:17:02:95:32:bf:01:80:b9:ef:10:6f:01: 4f:f1:95:cf:92:0c:fa:cd:0b:9a:bc:82:48:51:35:7e:52:20: 15:17:da:da:6b:a0:56:32:70:dc:98:24:8b:9c:54:74:74:15: 36:28:8b:6a:32:28:1f:58:a7:16:e4:6c:d9:b2:1b:53:e7:2b: 54:87:e9:f7:dd:ce:2c:43:1c:a5:9d:0c:a2:2d:4a:42:59:26: 80:69:04:24:2c:b1:cd:1f:35:da:2c:12:f5:54:d6:46:24:4f: 8d:04:e8:8e:58:94:33:6a:00:8f:71:9b:67:ea:2b:27:44:af: e1:ea:02:e2:66:6c:03:ff:a7:91:23:29:f9:54:17:48:7e:81: 3b:d3:93:20:7f:c8:30:df:c9:54:d8:7e:40:2c:e0:bc:20:5c: 20:67:f5:11:f2:bc:57:5e:6f:5d:56:e0:2c:5d:4d:a0:cd:3d: bb:77:83:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH7XXChTOabU+61UbtdgHCWGpXZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNCNEIwQzA3NzAyQjgyNTI2OTNBNjk1OEVBQkRGRDMw NkIzNEQ3MjAeFw0yNjA3MjMxNzE2MTZaFw0yNjA3MjQyMDIxMTZaMDMxMTAvBgNV BAMTKDMxNURDMDQxQ0I3NTdDRUEzRUI0MUUwMjBBM0VDMEZDOUU1MzFDMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4F53/Mi+z9cvQsC+//kcEQuf xqsP4OWERJBcrXef/fj/ZRUmTtGiIQniPjiMlHkOBp2Iuv79E+kRDBp+C8Jb6dJt qJLhXGoGYJ/CQGS4IaJMIVseJ4MU4TIZl/buxNrujR8pwpJZiY+49/tQEG4PMjar 93XGfF/Fl70iGORcec7kRuvGLWjl0kYUADEtIf7dtrT5pRHUhLvZaUlEAIRsLbsr FikGTPNR1TNiUXtt+QEZk0lzibCQM8RR3OS8Xf5Tq1QdaZm14G124c8pv4wc6/ay ZLlujJEZ8Mlk/SiFV4T61ptugQhGecVwHs2c/KUkJloDB/IhSQf6FNT8gre/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMV3AQct1fOo+tB4CCj7A/J5THAMwHwYDVR0j BBgwFoAUXLSwwHcCuCUmk6aVjqvf0wazTXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNiZGNiYWUtMmU5ZC00ZjNmLThhYjktMzQyNGU0NDg0ODRlLzAvNUNCNEIwQzA3 NzAyQjgyNTI2OTNBNjk1OEVBQkRGRDMwNkIzNEQ3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Q0I0QjBDMDc3MDJCODI1MjY5M0E2OTU4RUFCREZEMzA2QjM0 RDcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNiZGNiYWUtMmU5ZC00ZjNmLThh YjktMzQyNGU0NDg0ODRlLzAvNUNCNEIwQzA3NzAyQjgyNTI2OTNBNjk1OEVBQkRG RDMwNkIzNEQ3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbhbMQog0xZfBkFrTeQnvQ/Y+Sefm+PlWed s7VyE/gywVNFPE169KlwdMLzxY/mfTkEqQ1Sa0MVDwdI4dHhVdm729wn9lgd2pjw EVp7qBcClTK/AYC57xBvAU/xlc+SDPrNC5q8gkhRNX5SIBUX2tproFYycNyYJIuc VHR0FTYoi2oyKB9YpxbkbNmyG1PnK1SH6ffdzixDHKWdDKItSkJZJoBpBCQssc0f NdosEvVU1kYkT40E6I5YlDNqAI9xm2fqKydEr+HqAuJmbAP/p5EjKflUF0h+gTvT kyB/yDDfyVTYfkAs4LwgXCBn9RHyvFdeb11W4CxdTaDNPbt3g8s= -----END CERTIFICATE-----Generated at Fri Jul 24 02:41:41 2026 by rpki-client