$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft File: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft (raw, json) Hash identifier: PyM/065wgy7FLxDchRCYz0lEQ0C3D4W8KXnFCXJYYw0= Subject key identifier: 2C:46:06:17:47:35:66:6C:B1:01:56:86:EA:02:6A:B1:32:63:EE:0F Authority key identifier: 52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF Certificate issuer: /CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Certificate serial: 67555D85A133B52C2B43A2423E7DD71F28D89C3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 16:19:55 +0000 Manifest this update: Thu 23 Jul 2026 16:14:55 +0000 Manifest next update: Fri 24 Jul 2026 17:48:55 +0000 Files and hashes: 1: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: NHw4QH7kx6gwhf24chR9MVQWVvSl6RuQvk3rMGt5qyQ=) 2: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: Xm5n/XLcKtlX7vaWLbK2D/7cXu3TQ6c3pSXsVlfA9/0=) 3: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl (hash: 05ESYw1YP1+/y4cYoszFBxJ4GPXGZD3BYYQtJvJz1TQ=) 4: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: s0qL2weEhTe4sBj4h3x5XjkUykXaQaRd3WPD4VdRPq0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:55:5d:85:a1:33:b5:2c:2b:43:a2:42:3e:7d:d7:1f:28:d8:9c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Validity Not Before: Jul 23 16:14:55 2026 GMT Not After : Jul 24 17:48:55 2026 GMT Subject: CN=2C4606174735666CB1015686EA026AB13263EE0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f8:c6:7b:2d:d3:e7:28:a4:80:35:94:f7:46: fb:24:38:4b:7e:86:94:6c:e1:2b:64:d9:ba:09:d0: 61:bd:91:17:3b:9c:a8:03:82:67:17:ba:c6:ca:07: 93:1e:56:26:48:f8:9b:9f:da:a8:e9:46:82:8b:3d: c4:7b:8a:87:0a:ca:dd:e6:ab:93:34:af:12:0c:9d: 96:46:f7:60:5f:71:96:47:b9:65:36:65:57:ab:2f: 6a:f5:98:cc:f9:54:96:73:3b:01:ce:a4:e5:0b:4f: 51:2f:6c:0d:db:15:71:ff:11:6e:8d:c1:08:ec:25: 7f:9b:ba:e4:39:38:fa:dc:df:1d:ed:4b:de:f2:6a: 1a:d1:51:65:62:1f:b9:e7:2e:e4:3b:f7:4f:76:9f: 92:07:7b:21:96:25:ce:71:c9:96:5e:c0:28:45:7e: 7f:8f:2a:8d:20:2a:e7:89:3f:68:c5:5c:8e:48:37: 8c:cf:62:63:5b:b0:0f:ab:3b:8a:48:f6:31:9b:fc: 5f:aa:a6:79:b6:09:b1:4a:e2:9f:c6:60:7b:1b:07: 91:45:70:3f:db:b1:9e:8c:6b:75:c0:24:e6:03:5d: da:34:68:2a:33:29:66:3a:47:de:45:ff:25:48:38: bc:f5:d2:ee:d7:37:e4:21:3a:67:d3:12:42:c3:36: 38:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:46:06:17:47:35:66:6C:B1:01:56:86:EA:02:6A:B1:32:63:EE:0F X509v3 Authority Key Identifier: keyid:52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ca:b9:5a:8c:65:3d:52:bb:01:34:4c:3d:62:30:94:7e:fa: 6e:86:6c:43:74:45:de:e4:b2:fe:97:bc:19:65:64:9f:38:72: c5:30:d4:c1:43:8d:8d:d0:83:9d:ab:76:c3:88:46:89:0c:42: 3a:cb:ef:8c:e8:65:2a:e6:42:18:5d:9b:38:8e:1b:42:a7:bf: cf:ac:f9:b8:54:b2:b8:00:42:a9:61:a2:68:61:99:9b:ff:3f: 7c:01:8b:39:0c:08:ac:25:76:81:cb:41:94:48:b5:72:29:da: 8c:36:1c:e5:d1:bb:be:59:13:b8:77:53:71:b8:e8:81:ec:e2: 75:d0:ae:51:e3:1f:46:c6:71:29:b4:46:23:34:9f:1b:98:5e: a0:83:1c:aa:92:23:c0:d0:e6:16:5d:5f:47:14:a8:63:45:51: 92:46:83:7b:59:32:fd:c7:1c:5e:c6:1a:6a:60:f4:cd:5a:71: 01:b1:15:9f:ba:a2:64:48:98:26:8b:ab:b7:ac:41:1d:20:69: 43:f2:4a:33:bd:f1:02:ce:54:55:3e:90:31:d5:67:f2:9b:d7: f5:d9:87:b2:81:a2:42:1d:d4:70:f6:be:43:b6:0f:96:79:cf: 86:e4:81:ef:d0:e5:68:5a:4f:61:b2:25:b6:19:21:0a:d2:c6: a0:78:ee:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ1VdhaEztSwrQ6JCPn3XHyjYnDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgx QTE2RjhERjAeFw0yNjA3MjMxNjE0NTVaFw0yNjA3MjQxNzQ4NTVaMDMxMTAvBgNV BAMTKDJDNDYwNjE3NDczNTY2NkNCMTAxNTY4NkVBMDI2QUIxMzI2M0VFMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg+MZ7LdPnKKSANZT3RvskOEt+ hpRs4Stk2boJ0GG9kRc7nKgDgmcXusbKB5MeViZI+Juf2qjpRoKLPcR7iocKyt3m q5M0rxIMnZZG92BfcZZHuWU2ZVerL2r1mMz5VJZzOwHOpOULT1EvbA3bFXH/EW6N wQjsJX+buuQ5OPrc3x3tS97yahrRUWViH7nnLuQ79092n5IHeyGWJc5xyZZewChF fn+PKo0gKueJP2jFXI5IN4zPYmNbsA+rO4pI9jGb/F+qpnm2CbFK4p/GYHsbB5FF cD/bsZ6Ma3XAJOYDXdo0aCozKWY6R95F/yVIOLz10u7XN+QhOmfTEkLDNjhhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULEYGF0c1ZmyxAVaG6gJqsTJj7g8wHwYDVR0j BBgwFoAUUpf8C1LNT8fwbBZTENETyBoW+N8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2RkYmI3OWMtOWVhMi00N2YwLWI0NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1 MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgxQTE2RjhERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Mjk3RkMwQjUyQ0Q0RkM3RjA2QzE2NTMxMEQxMTNDODFBMTZG OERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEz QzgxQTE2RjhERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHKuVqMZT1SuwE0TD1iMJR++m6GbEN0Rd7k sv6XvBllZJ84csUw1MFDjY3Qg52rdsOIRokMQjrL74zoZSrmQhhdmziOG0Knv8+s +bhUsrgAQqlhomhhmZv/P3wBizkMCKwldoHLQZRItXIp2ow2HOXRu75ZE7h3U3G4 6IHs4nXQrlHjH0bGcSm0RiM0nxuYXqCDHKqSI8DQ5hZdX0cUqGNFUZJGg3tZMv3H HF7GGmpg9M1acQGxFZ+6omRImCaLq7esQR0gaUPySjO98QLOVFU+kDHVZ/Kb1/XZ h7KBokId1HD2vkO2D5Z5z4bkge/Q5WhaT2GyJbYZIQrSxqB47mI= -----END CERTIFICATE-----Generated at Fri Jul 24 03:57:21 2026 by rpki-client