$ rpki-client -vvf rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft File: 5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft (raw, json) Hash identifier: vHEzIpF3b3/ZPoQIJmEyYwdqgQXcFnCQHXzsJK5Y0AM= Subject key identifier: 58:2B:DB:4A:AA:6A:1E:8A:31:0D:BC:F8:52:84:CE:9F:74:F3:FC:14 Authority key identifier: 5F:66:F5:BF:93:48:D5:B5:A6:31:CE:B1:00:F2:02:65:EB:D8:BE:57 Certificate issuer: /CN=5F66F5BF9348D5B5A631CEB100F20265EBD8BE57 Certificate serial: 7244D11A359B48DCA865316051BAF534744B9C07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:31:30 +0000 Manifest this update: Thu 23 Jul 2026 17:26:30 +0000 Manifest next update: Fri 24 Jul 2026 20:26:30 +0000 Files and hashes: 1: 5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.crl (hash: +fTzvKo3Rbkt0pQ4IJZKT+//L1xE0H42mv7O6QEyRNg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.crl rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:44:d1:1a:35:9b:48:dc:a8:65:31:60:51:ba:f5:34:74:4b:9c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F66F5BF9348D5B5A631CEB100F20265EBD8BE57 Validity Not Before: Jul 23 17:26:30 2026 GMT Not After : Jul 24 20:26:30 2026 GMT Subject: CN=582BDB4AAA6A1E8A310DBCF85284CE9F74F3FC14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4e:1d:13:25:8d:84:41:44:16:b0:92:64:ba: d6:bc:f6:f3:84:b2:4d:94:88:d3:68:0b:f4:da:0e: 7f:4f:78:ef:8c:46:0b:a4:79:1d:58:bf:fd:ea:98: 57:fa:48:2c:3c:d7:6b:75:8f:65:bf:33:e4:c4:c1: 89:c4:5b:8b:77:2f:0e:01:85:19:36:61:75:02:2b: 79:3e:26:81:13:56:cd:be:11:30:fb:68:29:95:e7: 01:fe:7f:f6:0a:7f:1d:70:bf:c1:ae:f2:d6:a3:f0: 15:1d:11:5c:7b:00:7c:67:16:96:f7:96:a9:3d:c0: cc:3f:b4:a2:4e:d6:7f:fb:7f:b8:a0:d3:b4:95:bf: dc:28:f7:b7:8e:16:f7:6d:9c:1a:dc:8b:48:de:d5: 3b:83:72:a0:40:a4:88:33:88:ff:77:0f:da:7b:7c: ab:05:84:41:cf:d4:65:6f:76:6c:35:a4:c5:47:5b: 45:00:db:9a:2b:70:38:1a:17:7b:a0:bf:fd:89:3d: 7d:7d:02:1b:75:03:41:14:8b:49:f6:57:1d:84:84: 23:20:d4:47:f4:1b:3d:47:35:91:d2:52:21:2b:da: f1:bf:1f:3a:ed:57:5d:d7:37:7d:85:fc:c7:bb:2c: 5c:3a:d4:89:a9:6b:78:2b:87:e4:ee:27:19:0d:86: dd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2B:DB:4A:AA:6A:1E:8A:31:0D:BC:F8:52:84:CE:9F:74:F3:FC:14 X509v3 Authority Key Identifier: keyid:5F:66:F5:BF:93:48:D5:B5:A6:31:CE:B1:00:F2:02:65:EB:D8:BE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:73:b5:1e:ad:13:bf:79:fa:0b:2f:ee:24:18:58:7c:81:c5: 0d:41:69:ab:75:85:5c:5f:ab:9c:11:47:5c:98:b0:25:df:3b: cd:c9:ce:a1:a5:cf:13:f7:aa:b9:93:2c:ca:ca:cd:a9:29:ee: 23:b2:b5:76:da:b8:0a:76:ea:59:2e:8c:77:59:2a:b3:10:e6: 4a:2c:16:62:f8:62:f6:c6:0b:f4:54:36:1e:34:8c:67:f9:23: 0a:69:1c:8c:82:92:9f:07:48:27:31:9a:95:e4:42:2e:12:f4: 66:98:14:c9:d3:9d:04:9a:99:19:f1:c1:46:9d:75:74:68:ba: b7:08:c4:4e:0e:c2:80:51:e1:e6:c4:f4:21:a0:d9:6d:59:5b: a4:77:7f:15:63:0a:3a:f8:c9:15:48:40:4c:ed:76:e6:06:e9: ce:ab:16:ad:e0:30:66:94:ae:23:cd:3a:1b:2f:58:c5:fd:f3: 4e:61:28:23:89:9c:88:44:53:89:11:42:8d:32:f6:19:96:37: 00:09:df:d5:cd:e1:bd:3a:36:7f:21:c7:76:14:ed:d5:21:4c: 94:b5:02:1f:a2:db:ca:ef:f4:60:95:ee:6c:6d:ad:41:2a:a2: aa:f8:9c:21:78:5b:d2:df:d3:a7:2c:74:30:2a:eb:ef:be:9e: 81:08:b6:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUckTRGjWbSNyoZTFgUbr1NHRLnAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY2NkY1QkY5MzQ4RDVCNUE2MzFDRUIxMDBGMjAyNjVF QkQ4QkU1NzAeFw0yNjA3MjMxNzI2MzBaFw0yNjA3MjQyMDI2MzBaMDMxMTAvBgNV BAMTKDU4MkJEQjRBQUE2QTFFOEEzMTBEQkNGODUyODRDRTlGNzRGM0ZDMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTh0TJY2EQUQWsJJkuta89vOE sk2UiNNoC/TaDn9PeO+MRgukeR1Yv/3qmFf6SCw812t1j2W/M+TEwYnEW4t3Lw4B hRk2YXUCK3k+JoETVs2+ETD7aCmV5wH+f/YKfx1wv8Gu8taj8BUdEVx7AHxnFpb3 lqk9wMw/tKJO1n/7f7ig07SVv9wo97eOFvdtnBrci0je1TuDcqBApIgziP93D9p7 fKsFhEHP1GVvdmw1pMVHW0UA25orcDgaF3ugv/2JPX19Aht1A0EUi0n2Vx2EhCMg 1Ef0Gz1HNZHSUiEr2vG/HzrtV13XN32F/Me7LFw61Impa3grh+TuJxkNht1zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWCvbSqpqHooxDbz4UoTOn3Tz/BQwHwYDVR0j BBgwFoAUX2b1v5NI1bWmMc6xAPICZevYvlcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODJmYTNhMzktZTBlYy00ZmMxLTliNTQtMzUzZTA3ZjAwNWRkLzAvNUY2NkY1QkY5 MzQ4RDVCNUE2MzFDRUIxMDBGMjAyNjVFQkQ4QkU1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjY2RjVCRjkzNDhENUI1QTYzMUNFQjEwMEYyMDI2NUVCRDhC RTU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODJmYTNhMzktZTBlYy00ZmMxLTli NTQtMzUzZTA3ZjAwNWRkLzAvNUY2NkY1QkY5MzQ4RDVCNUE2MzFDRUIxMDBGMjAy NjVFQkQ4QkU1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFztR6tE795+gsv7iQYWHyBxQ1Baat1hVxf q5wRR1yYsCXfO83JzqGlzxP3qrmTLMrKzakp7iOytXbauAp26lkujHdZKrMQ5kos FmL4YvbGC/RUNh40jGf5IwppHIyCkp8HSCcxmpXkQi4S9GaYFMnTnQSamRnxwUad dXRourcIxE4OwoBR4ebE9CGg2W1ZW6R3fxVjCjr4yRVIQEztduYG6c6rFq3gMGaU riPNOhsvWMX9805hKCOJnIhEU4kRQo0y9hmWNwAJ39XN4b06Nn8hx3YU7dUhTJS1 Ah+i28rv9GCV7mxtrUEqoqr4nCF4W9Lf06csdDAq6+++noEItmw= -----END CERTIFICATE-----Generated at Fri Jul 24 12:36:12 2026 by rpki-client