$ rpki-client -vvf rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft File: 5D885821D2406437CDFEC04380E967515A67AECC.mft (raw, json) Hash identifier: 2Z0y1g3ArOzY74dFVfreBUU2QiTcl2Su2ZqKwJjdyp8= Subject key identifier: 8F:B6:FB:F1:F6:B5:63:52:CB:6F:43:76:24:65:57:AE:63:89:2B:02 Authority key identifier: 5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC Certificate issuer: /CN=5D885821D2406437CDFEC04380E967515A67AECC Certificate serial: 4BB5C083DC27241555654B309826AD41ED62B54E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:14:43 +0000 Manifest this update: Fri 24 Jul 2026 04:09:43 +0000 Manifest next update: Sat 25 Jul 2026 04:14:43 +0000 Files and hashes: 1: 5D885821D2406437CDFEC04380E967515A67AECC.crl (hash: JUGOErgFwqBUkVuQteJDDFjM+tUlMiJiYunI/d8LCBg=) 2: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (hash: L6gQCpLzy7aXDtfuVgbwQW0xcldnnRmpgqFEsdoAP3Q=) 3: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: K0RHUYKMgdp0wpj2LpgjeiPXy+duWorfZjM80sQwxyc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b5:c0:83:dc:27:24:15:55:65:4b:30:98:26:ad:41:ed:62:b5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D885821D2406437CDFEC04380E967515A67AECC Validity Not Before: Jul 24 04:09:43 2026 GMT Not After : Jul 25 04:14:43 2026 GMT Subject: CN=8FB6FBF1F6B56352CB6F4376246557AE63892B02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:79:f7:13:56:8a:33:4a:99:28:aa:f0:78:d6: 62:cf:63:5f:e8:4c:c5:11:1b:94:df:64:dd:68:a1: 83:57:e5:2a:5f:23:37:36:bc:b6:e9:b6:3d:5c:77: 4b:80:82:47:2e:57:cd:f3:a3:38:54:c1:3b:3c:fe: 51:f3:12:07:e2:97:33:ab:ae:98:1d:37:e0:c0:08: 69:39:4f:b4:34:e5:52:22:7b:bd:5e:e3:d6:25:a9: 65:96:fe:b4:bf:8d:60:5f:32:bf:fa:49:05:db:ca: 2a:51:a1:4f:1f:b2:ac:66:63:d2:c7:c8:2c:0e:1e: 75:0a:a0:33:73:22:b1:7f:0e:b3:7c:b5:04:49:71: c4:3b:d4:f2:b5:cf:75:b7:09:4d:75:02:64:cb:bb: 60:8f:45:40:25:46:4f:fe:9a:b2:23:48:b5:d8:8b: e7:8f:a3:31:00:81:a5:bb:4f:e3:d2:c7:33:84:31: 68:82:12:40:2b:e8:ed:a0:ae:93:7c:4b:7d:c3:1e: b1:93:87:d4:5d:b8:fb:de:54:15:91:41:66:ba:ac: 52:e8:03:af:0a:72:2f:12:22:20:bc:cd:a7:08:9b: 91:1e:b1:e9:5a:09:df:c9:9f:ff:2d:cb:19:94:70: e0:52:4d:33:9b:b7:e3:ca:71:e2:9e:ec:1d:52:b0: e2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B6:FB:F1:F6:B5:63:52:CB:6F:43:76:24:65:57:AE:63:89:2B:02 X509v3 Authority Key Identifier: keyid:5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c1:46:ae:9b:44:b3:4d:3c:37:9f:44:4d:2c:8e:8a:77:55: cc:39:c4:fb:7b:8e:0f:ef:84:08:ff:ab:d4:29:98:6e:b5:3d: 74:f0:36:8c:ec:75:45:46:6d:97:18:f6:98:c3:88:09:11:53: 72:de:65:70:ca:14:16:20:52:c6:be:75:09:b8:ab:91:90:e9: e5:1c:74:c0:91:6f:22:e2:a7:1b:86:38:ea:35:46:8a:a1:7b: ff:d9:a3:64:fb:6e:78:31:2e:69:fb:51:00:93:d4:0c:cc:22: e0:da:f0:1e:ae:de:90:c3:ba:23:0c:d0:90:69:0b:ac:e9:b5: 21:46:45:0c:da:62:e8:61:40:7a:2e:00:b8:54:a3:14:eb:02: 4c:29:c0:7a:36:2c:82:68:8e:19:08:d3:af:10:4c:7b:32:ab: a5:e2:17:0f:83:bf:79:0a:af:f1:4d:0b:98:c7:5b:3d:cc:9d: 05:b8:15:de:80:f5:cb:1c:0d:7b:ea:9b:c4:7d:3d:8d:0c:ab: 25:05:66:4b:ee:bb:19:6d:65:92:dc:09:1d:5c:c5:62:2e:fb: f6:b3:81:64:54:c6:d7:08:7a:ed:d6:6e:9d:00:02:ee:67:3a: e4:af:6a:f5:64:04:4e:5d:79:f3:d9:42:fe:ea:de:3d:9b:86: e2:78:e1:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7XAg9wnJBVVZUswmCatQe1itU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ4ODU4MjFEMjQwNjQzN0NERkVDMDQzODBFOTY3NTE1 QTY3QUVDQzAeFw0yNjA3MjQwNDA5NDNaFw0yNjA3MjUwNDE0NDNaMDMxMTAvBgNV BAMTKDhGQjZGQkYxRjZCNTYzNTJDQjZGNDM3NjI0NjU1N0FFNjM4OTJCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEefcTVoozSpkoqvB41mLPY1/o TMURG5TfZN1ooYNX5SpfIzc2vLbptj1cd0uAgkcuV83zozhUwTs8/lHzEgfilzOr rpgdN+DACGk5T7Q05VIie71e49YlqWWW/rS/jWBfMr/6SQXbyipRoU8fsqxmY9LH yCwOHnUKoDNzIrF/DrN8tQRJccQ71PK1z3W3CU11AmTLu2CPRUAlRk/+mrIjSLXY i+ePozEAgaW7T+PSxzOEMWiCEkAr6O2grpN8S33DHrGTh9RduPveVBWRQWa6rFLo A68Kci8SIiC8zacIm5EeselaCd/Jn/8tyxmUcOBSTTObt+PKceKe7B1SsOI3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj7b78fa1Y1LLb0N2JGVXrmOJKwIwHwYDVR0j BBgwFoAUXYhYIdJAZDfN/sBDgOlnUVpnrswwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM3Njk0YjctMzI1Ni00NjY2LWEzZmUtNmU4MmU3ODNiMWUxLzAvNUQ4ODU4MjFE MjQwNjQzN0NERkVDMDQzODBFOTY3NTE1QTY3QUVDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDg4NTgyMUQyNDA2NDM3Q0RGRUMwNDM4MEU5Njc1MTVBNjdB RUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvNUQ4ODU4MjFEMjQwNjQzN0NERkVDMDQzODBFOTY3 NTE1QTY3QUVDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzBRq6bRLNNPDefRE0sjop3Vcw5xPt7jg/v hAj/q9QpmG61PXTwNozsdUVGbZcY9pjDiAkRU3LeZXDKFBYgUsa+dQm4q5GQ6eUc dMCRbyLipxuGOOo1Roqhe//Zo2T7bngxLmn7UQCT1AzMIuDa8B6u3pDDuiMM0JBp C6zptSFGRQzaYuhhQHouALhUoxTrAkwpwHo2LIJojhkI068QTHsyq6XiFw+Dv3kK r/FNC5jHWz3MnQW4Fd6A9cscDXvqm8R9PY0MqyUFZkvuuxltZZLcCR1cxWIu+/az gWRUxtcIeu3Wbp0AAu5nOuSvavVkBE5defPZQv7q3j2bhuJ44eE= -----END CERTIFICATE-----Generated at Fri Jul 24 11:19:54 2026 by rpki-client