$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft File: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft (raw, json) Hash identifier: n24Pl8PrrVoIY3TJ33DG2MQNw+Ap0uiemAVEckeDw1Y= Subject key identifier: CD:EB:7F:25:B5:BE:0A:B0:9F:ED:B0:0C:BD:8E:B7:D8:A3:00:97:CC Authority key identifier: E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A Certificate issuer: /CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Certificate serial: 67C280674837DFCAC61A25451382B895BA870317 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:41:46 +0000 Manifest this update: Thu 23 Jul 2026 17:36:46 +0000 Manifest next update: Fri 24 Jul 2026 18:13:46 +0000 Files and hashes: 1: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl (hash: iX6N/BEQeCA5bBu6/UEV0MWdowpk+aEalEsCKGKSdBE=) 2: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: is5WdfvUY1KRmUVaEDtXvqlI2WCzItjy85jNK7qc29s=) 3: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: mmr69bHLezkQuiDZandeSB0qYXcAYeWx1GHP/ifPRTA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c2:80:67:48:37:df:ca:c6:1a:25:45:13:82:b8:95:ba:87:03:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Validity Not Before: Jul 23 17:36:46 2026 GMT Not After : Jul 24 18:13:46 2026 GMT Subject: CN=CDEB7F25B5BE0AB09FEDB00CBD8EB7D8A30097CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0e:77:9f:30:ef:58:61:98:06:8b:f9:44:18: 5a:e8:5e:66:bf:e2:c2:3a:bb:d2:56:18:81:16:39: b2:28:e4:8d:b1:e2:25:73:c3:03:b1:dc:17:69:1d: d7:8c:bb:a9:c5:88:91:41:52:5d:88:16:42:d3:96: 2d:ac:54:4c:b0:62:76:2e:a3:5e:aa:93:3a:31:c0: fe:34:82:2d:2a:dd:ee:9f:ed:f6:f3:fa:af:33:70: df:c2:7e:5d:05:ee:90:08:f1:fd:da:23:43:72:32: 34:b3:a6:73:36:17:43:08:41:19:7a:9c:21:2d:2e: 5d:74:fa:20:a1:cb:24:f1:64:ba:05:b1:28:6f:36: 87:22:15:ba:d0:94:41:9e:2f:d8:a3:70:08:f2:49: a8:48:c3:2f:90:73:53:6c:43:af:0a:a7:3a:dd:03: 05:3e:6e:10:76:63:4b:62:dd:69:ec:0d:21:7d:0d: 43:e7:2b:27:a8:e3:f7:5a:f4:c4:de:3e:d7:f6:34: 0c:5e:3d:4e:58:a7:92:0f:72:d2:e9:a1:e1:70:bd: 6e:4a:de:a4:bf:16:8b:e3:ca:c0:61:3b:65:3d:08: cb:b6:71:77:14:bc:23:86:fc:67:43:e7:5d:4e:7a: 64:0c:96:cd:95:2e:83:ec:6b:a8:ba:0d:d9:3d:80: 85:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EB:7F:25:B5:BE:0A:B0:9F:ED:B0:0C:BD:8E:B7:D8:A3:00:97:CC X509v3 Authority Key Identifier: keyid:E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:4c:8c:55:d5:ec:7a:12:7c:c1:d0:fb:8c:8c:63:17:cd:8a: 64:ab:c4:04:02:3b:64:72:35:db:a9:d5:6f:7e:fa:42:78:64: 3b:c5:44:f5:50:91:b8:63:47:ca:ec:fd:55:8f:2c:e3:08:a4: a1:2a:36:a2:7e:5e:36:b6:1d:70:98:68:69:91:96:2f:15:13: 52:aa:3f:4d:02:52:bd:84:3b:56:da:eb:bc:27:0c:db:2e:92: 4a:0e:4b:5a:b4:50:1a:70:bf:c9:e3:45:b2:2d:68:07:25:62: bf:2e:93:fc:34:b0:6c:bd:bc:5c:2a:45:f6:c5:16:bd:30:e9: 38:b6:c2:d6:7c:5e:7b:db:eb:c0:b3:eb:61:32:e6:fd:17:94: f6:cd:b3:7e:41:92:41:ad:ca:84:95:d8:1f:9e:1b:0f:5c:b7: 09:95:d1:88:ae:e8:82:d7:ce:a8:d3:f6:ff:c4:0f:aa:a2:0f: af:13:e2:b3:77:12:19:6a:c0:a8:1d:f4:e8:46:a8:4b:fe:49: 52:ae:de:c0:c5:ee:1d:52:4a:99:7d:86:74:bf:23:b1:db:5f: 8c:53:a8:23:ce:c7:65:cf:2f:29:1b:3f:06:51:dd:e0:b8:d7: 8d:88:9b:47:fa:bb:80:46:cb:24:5a:9f:aa:e3:9b:b0:97:b7: 5a:6c:fd:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ8KAZ0g338rGGiVFE4K4lbqHAxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1RURC QkZCRTk2QTAeFw0yNjA3MjMxNzM2NDZaFw0yNjA3MjQxODEzNDZaMDMxMTAvBgNV BAMTKENERUI3RjI1QjVCRTBBQjA5RkVEQjAwQ0JEOEVCN0Q4QTMwMDk3Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHDnefMO9YYZgGi/lEGFroXma/ 4sI6u9JWGIEWObIo5I2x4iVzwwOx3BdpHdeMu6nFiJFBUl2IFkLTli2sVEywYnYu o16qkzoxwP40gi0q3e6f7fbz+q8zcN/Cfl0F7pAI8f3aI0NyMjSzpnM2F0MIQRl6 nCEtLl10+iChyyTxZLoFsShvNociFbrQlEGeL9ijcAjySahIwy+Qc1NsQ68Kpzrd AwU+bhB2Y0ti3WnsDSF9DUPnKyeo4/da9MTePtf2NAxePU5Yp5IPctLpoeFwvW5K 3qS/FovjysBhO2U9CMu2cXcUvCOG/GdD511OemQMls2VLoPsa6i6Ddk9gIXFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzet/JbW+CrCf7bAMvY632KMAl8wwHwYDVR0j BBgwFoAU5QQ6BTu6W71l8RfDgKjl7bv76WowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUz QkJBNUJCRDY1RjExN0MzODBBOEU1RURCQkZCRTk2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNTA0M0EwNTNCQkE1QkJENjVGMTE3QzM4MEE4RTVFREJCRkJF OTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1 RURCQkZCRTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRMjFXV7HoSfMHQ+4yMYxfNimSrxAQCO2Ry Ndup1W9++kJ4ZDvFRPVQkbhjR8rs/VWPLOMIpKEqNqJ+Xja2HXCYaGmRli8VE1Kq P00CUr2EO1ba67wnDNsukkoOS1q0UBpwv8njRbItaAclYr8uk/w0sGy9vFwqRfbF Fr0w6Ti2wtZ8Xnvb68Cz62Ey5v0XlPbNs35BkkGtyoSV2B+eGw9ctwmV0Yiu6ILX zqjT9v/ED6qiD68T4rN3EhlqwKgd9OhGqEv+SVKu3sDF7h1SSpl9hnS/I7HbX4xT qCPOx2XPLykbPwZR3eC4142Im0f6u4BGyyRan6rjm7CXt1ps/fw= -----END CERTIFICATE-----Generated at Fri Jul 24 10:04:10 2026 by rpki-client