$ rpki-client -vvf rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft File: 5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft (raw, json) Hash identifier: jOevQOpk+Zck4o5zidynSwa6L56oTMGs0mcWcAlFh8M= Subject key identifier: D5:CC:A8:DD:52:0C:6C:3C:6D:42:D6:15:19:32:9F:A5:0F:B6:7B:F4 Authority key identifier: 5D:7C:FA:91:FB:D3:09:B4:50:5F:E1:D6:16:62:F4:AE:1F:4F:02:6F Certificate issuer: /CN=5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F Certificate serial: 36DC946490EC7BB24F085B44DA3241C219CDBA1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:39:54 +0000 Manifest this update: Fri 24 Jul 2026 00:34:54 +0000 Manifest next update: Sat 25 Jul 2026 03:10:54 +0000 Files and hashes: 1: 5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl (hash: p2aM7ceGEn5DnnquLWvMreuCWUCXwXUoK81w01fKpKw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:dc:94:64:90:ec:7b:b2:4f:08:5b:44:da:32:41:c2:19:cd:ba:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F Validity Not Before: Jul 24 00:34:54 2026 GMT Not After : Jul 25 03:10:54 2026 GMT Subject: CN=D5CCA8DD520C6C3C6D42D61519329FA50FB67BF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:49:fe:00:9a:c9:3a:38:2d:1a:a1:de:fe:88: 2c:c3:2f:fc:49:05:a3:24:d2:63:42:b0:ca:87:e7: 35:0b:d3:c5:82:69:56:e1:84:56:72:dd:dc:1f:c8: e7:10:d8:8d:cb:06:f2:b5:b8:6e:09:7c:09:f6:6d: 04:d5:3a:60:42:ee:48:6d:14:10:40:ef:32:8e:a4: 4a:8f:0d:5a:ec:6c:3f:d2:55:1b:32:57:f9:59:8b: 25:52:9f:c5:a7:8f:0c:8d:7e:5b:4a:c5:23:e3:3b: fd:a5:d2:a3:61:9d:56:59:aa:4f:0f:d3:62:1a:5b: 19:fa:19:94:5d:aa:a9:2d:dc:4e:5e:4a:75:2f:c6: 82:a3:b6:d5:0d:83:51:6c:f8:7e:46:f6:a3:85:6a: 4b:eb:97:ef:56:f9:b0:17:e7:32:d9:46:a9:7d:02: db:e2:37:e1:05:3e:3a:17:c5:82:ab:75:f4:d6:d9: c5:94:40:8f:3c:80:b4:fe:b7:aa:2e:19:c6:8e:f5: 39:6f:99:48:e6:b4:cf:92:31:72:da:99:4e:af:11: 25:7f:05:03:6b:cb:82:54:62:86:f6:0d:13:a2:79: 0b:a9:18:5f:5f:02:a8:22:10:75:91:b4:dc:86:11: 89:f0:09:24:fa:7e:92:84:72:f8:93:f0:8f:a4:f9: ae:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CC:A8:DD:52:0C:6C:3C:6D:42:D6:15:19:32:9F:A5:0F:B6:7B:F4 X509v3 Authority Key Identifier: keyid:5D:7C:FA:91:FB:D3:09:B4:50:5F:E1:D6:16:62:F4:AE:1F:4F:02:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:29:42:95:5e:7f:20:61:28:a4:dd:16:17:a7:f5:f0:7f:64: 26:7e:4a:22:9a:cd:18:ea:bb:80:a1:8a:43:90:92:01:fb:15: e2:8e:4a:1e:ba:93:c8:d6:96:3b:f3:70:49:84:18:83:6a:fa: 3f:ae:72:18:30:28:95:41:43:64:bc:d5:13:6a:07:6e:ac:0e: 3c:08:7d:41:14:0d:6c:6a:ef:30:c8:aa:3c:85:12:d5:05:f2: 21:ba:3d:f5:82:da:2a:92:5d:a2:39:c3:6f:88:fa:01:9b:35: 51:a2:57:3b:ac:dd:fe:42:57:a8:74:ef:32:59:1d:0c:7e:f5: d2:b3:17:ac:f5:88:7a:b9:6f:af:9a:43:15:e2:07:ec:b4:35: 4b:c4:f9:58:86:34:c7:de:23:67:87:4b:8d:48:d4:78:5e:5b: 76:81:e6:5f:2c:bc:6b:c2:69:6f:f9:65:01:89:98:8a:31:97: 5b:10:b3:31:d1:4a:9a:52:69:16:99:5d:f7:ba:22:ce:8a:d8: d8:92:13:0c:a2:bb:9f:51:a5:33:5c:5d:1e:d6:f2:be:04:70: f1:77:1c:86:36:0a:8d:d4:5a:be:bc:c6:b0:b1:34:71:3b:2a: 1d:64:84:23:a3:ac:d6:bb:b5:3c:79:70:46:48:21:3b:82:b4: 3d:d5:dc:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNtyUZJDse7JPCFtE2jJBwhnNuhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ3Q0ZBOTFGQkQzMDlCNDUwNUZFMUQ2MTY2MkY0QUUx RjRGMDI2RjAeFw0yNjA3MjQwMDM0NTRaFw0yNjA3MjUwMzEwNTRaMDMxMTAvBgNV BAMTKEQ1Q0NBOERENTIwQzZDM0M2RDQyRDYxNTE5MzI5RkE1MEZCNjdCRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZSf4Amsk6OC0aod7+iCzDL/xJ BaMk0mNCsMqH5zUL08WCaVbhhFZy3dwfyOcQ2I3LBvK1uG4JfAn2bQTVOmBC7kht FBBA7zKOpEqPDVrsbD/SVRsyV/lZiyVSn8WnjwyNfltKxSPjO/2l0qNhnVZZqk8P 02IaWxn6GZRdqqkt3E5eSnUvxoKjttUNg1Fs+H5G9qOFakvrl+9W+bAX5zLZRql9 AtviN+EFPjoXxYKrdfTW2cWUQI88gLT+t6ouGcaO9TlvmUjmtM+SMXLamU6vESV/ BQNry4JUYob2DROieQupGF9fAqgiEHWRtNyGEYnwCST6fpKEcviT8I+k+a7XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1cyo3VIMbDxtQtYVGTKfpQ+2e/QwHwYDVR0j BBgwFoAUXXz6kfvTCbRQX+HWFmL0rh9PAm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhhOGVhN2YtMmY2MS00NDZiLThiNTEtNTE5NDViMDgyZmFhLzAvNUQ3Q0ZBOTFG QkQzMDlCNDUwNUZFMUQ2MTY2MkY0QUUxRjRGMDI2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDdDRkE5MUZCRDMwOUI0NTA1RkUxRDYxNjYyRjRBRTFGNEYw MjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvNUQ3Q0ZBOTFGQkQzMDlCNDUwNUZFMUQ2MTY2MkY0 QUUxRjRGMDI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4pQpVefyBhKKTdFhen9fB/ZCZ+SiKazRjq u4ChikOQkgH7FeKOSh66k8jWljvzcEmEGINq+j+uchgwKJVBQ2S81RNqB26sDjwI fUEUDWxq7zDIqjyFEtUF8iG6PfWC2iqSXaI5w2+I+gGbNVGiVzus3f5CV6h07zJZ HQx+9dKzF6z1iHq5b6+aQxXiB+y0NUvE+ViGNMfeI2eHS41I1HheW3aB5l8svGvC aW/5ZQGJmIoxl1sQszHRSppSaRaZXfe6Is6K2NiSEwyiu59RpTNcXR7W8r4EcPF3 HIY2Co3UWr68xrCxNHE7Kh1khCOjrNa7tTx5cEZIITuCtD3V3AU= -----END CERTIFICATE-----Generated at Fri Jul 24 06:21:54 2026 by rpki-client