$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft File: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft (raw, json) Hash identifier: i+bxXXIcC3lBogwwuewv6IqUuOFCT89Qfy9kNa5Y0Jc= Subject key identifier: DE:31:6E:0E:3A:4C:C0:E4:BC:2D:E0:82:D6:42:44:A4:2C:2C:4E:0E Authority key identifier: 53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 Certificate issuer: /CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Certificate serial: 9CA37E9EA47A743AD7395EAACF9FA5AF930EC4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:16:14 +0000 Manifest this update: Thu 23 Jul 2026 17:11:14 +0000 Manifest next update: Fri 24 Jul 2026 19:06:14 +0000 Files and hashes: 1: 3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa (hash: d/lQ7Oz9/jWtBq0Ck1NBYGMJFkT573cCc0+ynKJPdok=) 2: 3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (hash: 1t9yzNFOj0CAbODcXUQcoM9eYOKr+Gim4y4R0hZm1ws=) 3: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl (hash: ROTpPsdtKH66NC8LCcxstqntwvVeLyn3hyzDUwL3SBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9c:a3:7e:9e:a4:7a:74:3a:d7:39:5e:aa:cf:9f:a5:af:93:0e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Validity Not Before: Jul 23 17:11:14 2026 GMT Not After : Jul 24 19:06:14 2026 GMT Subject: CN=DE316E0E3A4CC0E4BC2DE082D64244A42C2C4E0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4d:5f:4d:07:2f:41:f5:55:0f:2a:4f:0f:d1: 5a:ba:f9:b6:ae:2f:6d:0f:80:03:7e:33:8e:d1:51: 85:1d:09:f7:3d:d4:e0:ff:47:cc:aa:f7:f9:d1:06: 71:cf:f4:68:ab:f7:c2:3b:b6:3b:88:7e:8f:d2:34: 77:f5:b8:61:45:1c:6f:7e:7d:c6:98:16:9f:da:d0: bc:e9:fb:03:7b:e1:47:af:c3:8e:ab:5c:c9:38:b2: 9c:61:01:d9:c1:6f:ae:c4:d6:27:79:23:a1:d0:30: 55:f5:87:d9:af:30:39:54:32:b7:74:1d:d2:21:d1: 18:4a:d3:37:64:b9:f2:b2:d3:63:bb:a5:1c:88:57: bc:2c:ca:b8:c7:99:1f:35:d4:76:bc:9c:7e:dd:a2: 05:13:6b:8c:09:e8:39:ee:16:6f:06:e8:41:c8:cb: a6:50:80:5c:f4:bd:67:8d:b7:c1:7c:0d:ae:1f:5e: dd:74:48:f1:50:8f:1b:17:a4:fb:49:e7:f5:9f:49: 31:53:e0:b2:7f:5a:ed:80:8a:34:2e:f6:74:f7:10: 8b:cc:bf:72:19:bc:d6:44:dd:e0:0d:72:e5:f8:51: 5c:82:28:01:a6:3b:08:92:30:61:a4:3d:be:a8:de: cc:30:7b:ce:8c:df:d1:b4:9a:d1:1d:e7:5d:b7:57: 31:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:31:6E:0E:3A:4C:C0:E4:BC:2D:E0:82:D6:42:44:A4:2C:2C:4E:0E X509v3 Authority Key Identifier: keyid:53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3d:1c:34:1f:79:ef:fe:7a:8a:4e:7f:6f:cb:fb:33:a5:4c: 95:2d:0e:5b:5a:58:f2:74:23:9b:22:76:d5:ca:99:ec:c2:4e: 86:cc:26:67:d3:44:0d:f5:8e:25:3d:ff:ce:eb:f3:52:ad:8a: 8f:54:04:2f:cd:11:7c:6f:c6:d0:ba:42:04:0a:cf:42:00:db: c3:1e:59:31:29:41:be:3e:b7:d8:b9:b5:21:75:84:80:cd:c6: 36:ef:e1:ea:bc:fa:45:0c:17:27:36:0d:96:6e:ae:93:94:2f: f3:82:7c:e2:fe:4c:41:4e:8a:f8:63:87:d7:58:20:b7:9c:d1: ea:e9:8a:f0:86:66:7d:c9:d4:1b:26:19:ff:b8:64:bf:7b:93: f5:9c:be:6b:f4:e3:c4:da:96:fa:81:87:78:c1:20:59:2b:72: ad:06:c1:46:41:a2:5f:f9:06:57:cb:b7:62:41:97:69:ff:06: 83:34:c3:c2:40:b1:91:88:04:05:15:f9:e9:9e:8d:00:5e:10: 71:89:c2:64:e5:e6:90:79:df:74:56:a3:a2:35:3e:56:93:27: 69:1d:b1:22:3a:03:cc:cf:8a:b3:6a:2d:26:25:f3:e2:c9:89: 15:a1:1e:b2:7f:ef:a1:d0:66:67:6f:32:ca:dd:32:e2:a7:33: 2d:40:95:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAJyjfp6kenQ61zleqs+fpa+TDsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMwMEQwRUVDN0EyMUFBRkFENjFCNkU0MDgyOENCQkE3 QzAzQzg0OTAeFw0yNjA3MjMxNzExMTRaFw0yNjA3MjQxOTA2MTRaMDMxMTAvBgNV BAMTKERFMzE2RTBFM0E0Q0MwRTRCQzJERTA4MkQ2NDI0NEE0MkMyQzRFMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZTV9NBy9B9VUPKk8P0Vq6+bau L20PgAN+M47RUYUdCfc91OD/R8yq9/nRBnHP9Gir98I7tjuIfo/SNHf1uGFFHG9+ fcaYFp/a0Lzp+wN74Uevw46rXMk4spxhAdnBb67E1id5I6HQMFX1h9mvMDlUMrd0 HdIh0RhK0zdkufKy02O7pRyIV7wsyrjHmR811Ha8nH7dogUTa4wJ6DnuFm8G6EHI y6ZQgFz0vWeNt8F8Da4fXt10SPFQjxsXpPtJ5/WfSTFT4LJ/Wu2AijQu9nT3EIvM v3IZvNZE3eANcuX4UVyCKAGmOwiSMGGkPb6o3swwe86M39G0mtEd5123VzF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3jFuDjpMwOS8LeCC1kJEpCwsTg4wHwYDVR0j BBgwFoAUUwDQ7seiGq+tYbbkCCjLunwDyEkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFiM2MwM2QtMmUyZS00ODk3LTg2OWItMjFjZTQ4NjAxNjE5LzAvNTMwMEQwRUVD N0EyMUFBRkFENjFCNkU0MDgyOENCQkE3QzAzQzg0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzAwRDBFRUM3QTIxQUFGQUQ2MUI2RTQwODI4Q0JCQTdDMDND ODQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFiM2MwM2QtMmUyZS00ODk3LTg2 OWItMjFjZTQ4NjAxNjE5LzAvNTMwMEQwRUVDN0EyMUFBRkFENjFCNkU0MDgyOENC QkE3QzAzQzg0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADs9HDQfee/+eopOf2/L+zOlTJUtDltaWPJ0 I5sidtXKmezCTobMJmfTRA31jiU9/87r81Ktio9UBC/NEXxvxtC6QgQKz0IA28Me WTEpQb4+t9i5tSF1hIDNxjbv4eq8+kUMFyc2DZZurpOUL/OCfOL+TEFOivhjh9dY ILec0erpivCGZn3J1BsmGf+4ZL97k/Wcvmv048TalvqBh3jBIFkrcq0GwUZBol/5 BlfLt2JBl2n/BoM0w8JAsZGIBAUV+emejQBeEHGJwmTl5pB533RWo6I1PlaTJ2kd sSI6A8zPirNqLSYl8+LJiRWhHrJ/76HQZmdvMsrdMuKnMy1AlXY= -----END CERTIFICATE-----Generated at Fri Jul 24 04:14:20 2026 by rpki-client