$ rpki-client -vvf rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft File: 5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft (raw, json) Hash identifier: H+yqOsR1AkVGEvpRqDTYQJj8pDJ2/Fq/GjQAijvF2iI= Subject key identifier: 73:FA:24:DE:F9:17:CC:53:59:B3:BE:C6:34:99:06:00:71:93:0D:12 Authority key identifier: 5F:7C:0C:BF:5B:B8:C4:66:1C:32:A0:E0:43:E5:00:56:0D:BF:47:29 Certificate issuer: /CN=5F7C0CBF5BB8C4661C32A0E043E500560DBF4729 Certificate serial: 46C7F0D9A39C206594E993C1C6CF0B32802915CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:09:19 +0000 Manifest this update: Fri 24 Jul 2026 00:04:19 +0000 Manifest next update: Sat 25 Jul 2026 01:56:19 +0000 Files and hashes: 1: 3130332e3138352e3139362e302f32342d3234203d3e20313333383136.roa (hash: oPlCdoIfmCJKqeBLs55VVkT8uc2vPldYwiU3y8pfCsM=) 2: 5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl (hash: q0n5OoTSpjCBrY8Q/wtr4z43fA7lFaL9mL+hzRKIZ1o=) 3: 3130332e35322e3231332e302f32342d3234203d3e20313333383136.roa (hash: SfQvGENDC41waooB6j4WUvvJFAlrc4V5XQaGfGIyIVQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c7:f0:d9:a3:9c:20:65:94:e9:93:c1:c6:cf:0b:32:80:29:15:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F7C0CBF5BB8C4661C32A0E043E500560DBF4729 Validity Not Before: Jul 24 00:04:19 2026 GMT Not After : Jul 25 01:56:19 2026 GMT Subject: CN=73FA24DEF917CC5359B3BEC63499060071930D12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:4c:40:18:22:26:a2:2f:0b:1e:65:85:ad: 49:84:9a:33:7f:ba:a1:cf:ac:02:83:1c:6f:23:ab: c4:1d:2c:74:f8:5e:e5:e2:19:e1:00:68:39:c0:02: 1e:94:87:f3:d1:ae:17:ec:cb:89:41:8d:cb:98:1a: b1:dc:0a:d7:84:b9:4f:e5:aa:fb:87:b3:a9:0b:3f: 88:04:e7:5a:84:f5:b5:75:c4:27:c5:fd:8c:78:40: fe:5f:df:f2:23:9f:4e:3a:f7:4f:52:9e:09:0f:31: 7c:65:d1:88:9c:da:f4:46:08:ae:84:12:9a:da:f9: 51:f7:48:75:84:34:19:de:77:50:e2:7b:5c:66:de: 03:61:ed:b3:51:88:06:15:68:95:3e:52:56:c9:54: eb:5b:31:e3:21:7e:03:81:59:20:3a:9d:cc:c2:f5: 86:c2:50:2f:2b:29:18:12:e2:e7:f7:3f:39:36:08: e1:98:fb:b1:07:3b:13:8b:50:f2:a8:f7:89:db:fd: da:72:53:3c:44:89:fc:d9:b7:0d:22:aa:d3:b2:a9: 0e:19:97:f3:56:18:e2:91:33:81:17:99:da:a2:b8: 51:ab:46:8a:87:78:a6:ff:db:ba:c8:ff:71:74:60: d3:60:2a:c9:66:4f:3e:1e:91:ba:cb:0d:af:63:dd: f4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FA:24:DE:F9:17:CC:53:59:B3:BE:C6:34:99:06:00:71:93:0D:12 X509v3 Authority Key Identifier: keyid:5F:7C:0C:BF:5B:B8:C4:66:1C:32:A0:E0:43:E5:00:56:0D:BF:47:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:20:80:06:5c:cf:f3:89:57:dd:30:77:94:20:8d:6b:5d:e2: 2c:46:70:ad:0f:e8:d2:76:03:a8:b7:0e:3d:ef:70:b6:14:5e: 28:f1:5f:9c:b2:e0:93:c4:23:4e:32:b9:59:29:5f:f0:77:f5: d2:f5:f4:4d:3d:4e:85:54:06:a1:6c:7a:f2:73:37:cb:64:99: 30:ba:41:65:b8:b1:73:7a:74:60:03:7b:28:52:5e:26:39:be: a1:b9:43:b4:8a:79:c6:56:41:a9:52:ef:a4:1e:92:11:dd:38: 79:27:d8:61:91:67:66:e4:1f:16:00:67:4a:41:60:c3:71:42: 3d:96:aa:f4:b7:43:3c:c2:ee:50:ae:af:0e:17:14:10:5b:a9: 13:59:2c:78:bb:57:f1:70:e7:c3:92:16:24:63:49:e6:b4:97: 3b:fe:d0:82:94:9f:f3:cf:f5:a9:c5:9f:89:7d:13:74:f5:94: a5:cd:4b:58:be:30:55:71:1d:d8:27:b2:ba:ba:ae:e6:b7:69: 34:78:f7:bc:bc:47:2d:11:a5:f4:7f:49:be:c8:f4:04:a8:87: e7:ef:d6:cf:24:2b:1f:32:78:d3:c6:c9:01:5c:7f:44:34:e7: 42:1e:78:5d:ff:c1:02:5f:8c:6b:39:6e:21:5d:e6:56:92:7a: 91:4e:d7:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURsfw2aOcIGWU6ZPBxs8LMoApFcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY3QzBDQkY1QkI4QzQ2NjFDMzJBMEUwNDNFNTAwNTYw REJGNDcyOTAeFw0yNjA3MjQwMDA0MTlaFw0yNjA3MjUwMTU2MTlaMDMxMTAvBgNV BAMTKDczRkEyNERFRjkxN0NDNTM1OUIzQkVDNjM0OTkwNjAwNzE5MzBEMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKw0xAGCImoi8LHmWFrUmEmjN/ uqHPrAKDHG8jq8QdLHT4XuXiGeEAaDnAAh6Uh/PRrhfsy4lBjcuYGrHcCteEuU/l qvuHs6kLP4gE51qE9bV1xCfF/Yx4QP5f3/Ijn046909SngkPMXxl0Yic2vRGCK6E Epra+VH3SHWENBned1Die1xm3gNh7bNRiAYVaJU+UlbJVOtbMeMhfgOBWSA6nczC 9YbCUC8rKRgS4uf3Pzk2COGY+7EHOxOLUPKo94nb/dpyUzxEifzZtw0iqtOyqQ4Z l/NWGOKRM4EXmdqiuFGrRoqHeKb/27rI/3F0YNNgKslmTz4ekbrLDa9j3fSdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc/ok3vkXzFNZs77GNJkGAHGTDRIwHwYDVR0j BBgwFoAUX3wMv1u4xGYcMqDgQ+UAVg2/RykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGU5YWJiMWEtZDZjMC00NTRmLTg3MGEtOGJlZWRkODFmY2QyLzAvNUY3QzBDQkY1 QkI4QzQ2NjFDMzJBMEUwNDNFNTAwNTYwREJGNDcyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjdDMENCRjVCQjhDNDY2MUMzMkEwRTA0M0U1MDA1NjBEQkY0 NzI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGU5YWJiMWEtZDZjMC00NTRmLTg3 MGEtOGJlZWRkODFmY2QyLzAvNUY3QzBDQkY1QkI4QzQ2NjFDMzJBMEUwNDNFNTAw NTYwREJGNDcyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8ggAZcz/OJV90wd5QgjWtd4ixGcK0P6NJ2 A6i3Dj3vcLYUXijxX5yy4JPEI04yuVkpX/B39dL19E09ToVUBqFsevJzN8tkmTC6 QWW4sXN6dGADeyhSXiY5vqG5Q7SKecZWQalS76QekhHdOHkn2GGRZ2bkHxYAZ0pB YMNxQj2WqvS3QzzC7lCurw4XFBBbqRNZLHi7V/Fw58OSFiRjSea0lzv+0IKUn/PP 9anFn4l9E3T1lKXNS1i+MFVxHdgnsrq6rua3aTR497y8Ry0RpfR/Sb7I9ASoh+fv 1s8kKx8yeNPGyQFcf0Q050IeeF3/wQJfjGs5biFd5laSepFO17A= -----END CERTIFICATE-----Generated at Fri Jul 24 13:08:55 2026 by rpki-client