$ rpki-client -vvf rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft File: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft (raw, json) Hash identifier: RiQYKKXkOQ0URmUhB/toePj86+w3+/znoWRFWOxxyk0= Subject key identifier: 34:0A:AD:26:13:A1:5C:95:00:4D:9C:D6:A7:AE:8E:C5:6E:52:A1:66 Authority key identifier: 5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D Certificate issuer: /CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Certificate serial: 406663178968B94EDD9E0F9589C7D06BDAA51168 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 08:19:39 +0000 Manifest this update: Fri 24 Jul 2026 08:14:39 +0000 Manifest next update: Sat 25 Jul 2026 08:58:39 +0000 Files and hashes: 1: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl (hash: jlS7EOB6kTDB1wc2HLiPah1KbxWOAoMx2K1OmjabdNA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 08:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:66:63:17:89:68:b9:4e:dd:9e:0f:95:89:c7:d0:6b:da:a5:11:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Validity Not Before: Jul 24 08:14:39 2026 GMT Not After : Jul 25 08:58:39 2026 GMT Subject: CN=340AAD2613A15C95004D9CD6A7AE8EC56E52A166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:b4:7b:8b:57:e9:e0:95:45:e0:c1:35:4f: ea:c4:51:09:45:b1:5b:c9:ec:02:7d:15:c8:9c:cc: b0:5f:7b:57:f8:a9:c4:7d:80:58:13:3e:77:98:58: 73:0b:ab:49:dc:e1:c4:ad:f1:c7:0b:2a:2c:78:2f: da:70:c8:46:2e:73:c4:f3:a1:8a:13:1d:a0:0f:55: fe:7a:de:40:98:11:d3:30:f6:8c:be:b4:fb:e2:ff: d3:0f:79:be:69:82:db:f8:05:e4:8a:7b:f9:c3:53: b2:58:eb:cc:60:9b:41:40:79:2d:7b:28:a5:fa:1b: 78:ff:7e:21:b0:9a:7b:92:8b:ec:c5:9c:6f:8e:45: 4f:f4:91:42:ff:e0:30:31:6d:04:8d:ad:44:cf:cc: 4c:71:49:c6:1b:ae:3d:28:6b:f6:0b:28:3c:23:9e: 2d:22:43:74:b7:fd:1e:35:dc:cd:68:48:f3:65:0d: aa:c3:63:29:ed:4a:e4:14:82:11:4c:c9:8f:e4:46: a2:20:a8:60:2f:07:33:80:b3:ec:ab:f5:5a:83:b8: 53:3c:f6:e4:4b:74:77:1c:8e:1f:a4:5f:7b:d7:a2: 50:86:ff:6a:dd:9e:6a:05:6e:0d:05:5b:44:72:87: 5a:6b:a6:f6:2e:35:df:29:07:5d:f8:b9:7e:05:0d: 5d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0A:AD:26:13:A1:5C:95:00:4D:9C:D6:A7:AE:8E:C5:6E:52:A1:66 X509v3 Authority Key Identifier: keyid:5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:6d:ab:d0:93:ee:22:34:bb:04:5a:89:cc:26:94:9f:25:ab: cd:a9:f9:3d:24:45:70:3f:72:e5:99:34:d3:fa:55:cf:a6:b3: ca:53:4d:61:a6:a4:04:7e:fc:6a:82:af:09:2e:42:ac:42:f7: fc:a2:77:31:49:df:be:3f:0a:6e:68:84:a6:44:8e:98:86:63: 6c:95:a6:0e:af:ff:a8:64:21:d3:f9:51:75:5c:be:d3:7e:7f: e1:de:78:54:8d:17:0c:1c:66:f5:dd:31:10:dd:af:6a:06:d4: 61:eb:74:fa:fd:81:da:90:1b:43:dc:45:68:b7:83:d3:f6:12: ac:f8:c8:35:8c:af:51:72:73:4c:f7:db:9b:c0:33:91:81:74: 6f:66:80:dc:b6:ea:96:72:21:e5:65:2e:47:86:c5:5c:ed:c2: af:36:b7:cd:3e:00:21:8d:ae:57:2b:7a:5d:3b:a1:7a:c0:98: fe:f4:bf:c8:3c:5b:7f:53:2c:1f:b8:e7:d0:e8:c2:1b:27:bb: b3:5c:16:c0:04:84:d2:9f:8b:76:fd:e2:64:98:6b:53:94:2c: 84:32:6e:04:b0:b6:45:c5:c6:7f:c6:1e:3a:a2:a5:0c:ec:8c: 69:15:10:13:86:93:48:77:28:11:3e:8c:ee:5e:40:14:c4:36: 00:5d:82:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQGZjF4louU7dng+VicfQa9qlEWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1 QTE2ODA0RDAeFw0yNjA3MjQwODE0MzlaFw0yNjA3MjUwODU4MzlaMDMxMTAvBgNV BAMTKDM0MEFBRDI2MTNBMTVDOTUwMDREOUNENkE3QUU4RUM1NkU1MkExNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCktbR7i1fp4JVF4ME1T+rEUQlF sVvJ7AJ9FciczLBfe1f4qcR9gFgTPneYWHMLq0nc4cSt8ccLKix4L9pwyEYuc8Tz oYoTHaAPVf563kCYEdMw9oy+tPvi/9MPeb5pgtv4BeSKe/nDU7JY68xgm0FAeS17 KKX6G3j/fiGwmnuSi+zFnG+ORU/0kUL/4DAxbQSNrUTPzExxScYbrj0oa/YLKDwj ni0iQ3S3/R413M1oSPNlDarDYyntSuQUghFMyY/kRqIgqGAvBzOAs+yr9VqDuFM8 9uRLdHccjh+kX3vXolCG/2rdnmoFbg0FW0Ryh1prpvYuNd8pB134uX4FDV1XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNAqtJhOhXJUATZzWp66OxW5SoWYwHwYDVR0j BBgwFoAUX/ajp8MEnWezbNeWmR5c5FoWgE0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM3ZjE5NWEtMzY5ZS00NGJhLTgwY2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdD MzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1QTE2ODA0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RkY2QTNBN0MzMDQ5RDY3QjM2Q0Q3OTY5OTFFNUNFNDVBMTY4 MDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM3ZjE5NWEtMzY5ZS00NGJhLTgw Y2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVD RTQ1QTE2ODA0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM1tq9CT7iI0uwRaicwmlJ8lq82p+T0kRXA/ cuWZNNP6Vc+ms8pTTWGmpAR+/GqCrwkuQqxC9/yidzFJ374/Cm5ohKZEjpiGY2yV pg6v/6hkIdP5UXVcvtN+f+HeeFSNFwwcZvXdMRDdr2oG1GHrdPr9gdqQG0PcRWi3 g9P2Eqz4yDWMr1Fyc0z325vAM5GBdG9mgNy26pZyIeVlLkeGxVztwq82t80+ACGN rlcrel07oXrAmP70v8g8W39TLB+459Dowhsnu7NcFsAEhNKfi3b94mSYa1OULIQy bgSwtkXFxn/GHjqipQzsjGkVEBOGk0h3KBE+jO5eQBTENgBdgmw= -----END CERTIFICATE-----Generated at Fri Jul 24 10:10:14 2026 by rpki-client