$ rpki-client -vvf rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft File: 5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft (raw, json) Hash identifier: 8wdXCMim56IE4Li52i76rPIgE5EFXCY/+U2ASEpKqBo= Subject key identifier: 1F:41:EA:98:FD:8C:79:06:CD:54:8B:7E:E3:06:BB:AB:57:3A:C2:08 Authority key identifier: 5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA Certificate issuer: /CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA Certificate serial: 44B3FAFD5E5A55DF1157C62790863D27C957BEBB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:05:58 +0000 Manifest this update: Thu 23 Jul 2026 17:00:58 +0000 Manifest next update: Fri 24 Jul 2026 18:55:58 +0000 Files and hashes: 1: 3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa (hash: 59pE6Ft4WIHTXAP3g5lUlDtYPeQDKcESjhCmblAbyfo=) 2: 3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (hash: SYK3QYwE1Bkhg2g4VRE2icwWvyuVDU6csoYcYgAZP3U=) 3: 5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl (hash: UiNHowxvBL1NlO2mk/DpsLvK++1COFzMeLFguep658M=) 4: 3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (hash: 1KOQAKv6O99pd7ry74vlSf/BC5MqWkjxGtXhI66S9EE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b3:fa:fd:5e:5a:55:df:11:57:c6:27:90:86:3d:27:c9:57:be:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA Validity Not Before: Jul 23 17:00:58 2026 GMT Not After : Jul 24 18:55:58 2026 GMT Subject: CN=1F41EA98FD8C7906CD548B7EE306BBAB573AC208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1c:1d:8e:0b:a6:cf:71:52:08:f4:33:01:e6: 93:f0:b8:16:88:8b:4c:cd:7a:a2:90:f8:27:f2:b2: bb:62:46:d7:35:e5:63:8a:cd:7f:4a:f5:58:17:e0: b2:46:62:d5:23:cc:a1:2b:90:75:ec:b8:a1:d5:55: a8:a9:8a:ce:5b:df:9e:cd:e9:de:47:e9:f3:90:21: 26:0d:cc:fe:fb:a7:e6:81:55:86:db:8d:2b:a6:05: 08:28:f3:4f:32:d0:bf:cb:4a:1f:f3:bc:df:6f:f3: 0b:d9:18:4f:cf:bf:1b:0f:03:f2:b2:41:ac:3f:25: d5:93:26:c2:c3:cf:ca:0c:7c:f8:46:fe:65:12:bb: c8:3c:f7:1c:ab:5c:22:bc:72:f6:66:23:c2:10:19: ed:5e:33:54:c4:99:c4:bb:15:84:98:c6:dc:c2:94: 3d:f6:53:25:be:5d:e2:c5:8c:44:f1:b5:93:83:b5: 76:9f:d3:d7:4a:44:a4:f7:17:b9:10:86:93:90:11: f9:e5:af:78:55:99:50:0c:51:67:dd:e4:94:0c:a6: ee:eb:30:53:47:15:1c:3f:2f:7c:b3:92:a9:78:5c: cd:cd:26:df:31:2b:50:ad:02:2e:50:b3:d7:81:0b: 68:56:2f:d6:7f:36:32:96:9d:44:eb:19:c2:5f:0c: 1b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:41:EA:98:FD:8C:79:06:CD:54:8B:7E:E3:06:BB:AB:57:3A:C2:08 X509v3 Authority Key Identifier: keyid:5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:62:aa:15:d0:46:7b:b0:51:21:43:f0:58:58:95:a7:4e:f6: 14:29:af:bf:8a:c3:69:0e:a8:75:12:fc:91:f2:b6:69:09:87: 9f:68:c6:1f:46:f7:c8:4c:8f:43:c4:63:d5:76:0b:2b:03:8b: 27:1f:f5:87:4c:4b:2b:1f:87:8c:4a:60:a8:25:4e:fb:a6:33: 15:66:95:e9:bb:cb:f0:22:68:d7:8a:2d:63:6c:82:30:51:c7: 12:8a:ee:5a:0a:19:ff:62:74:4d:cc:c9:8c:fe:4c:7d:d6:28: 4a:ca:cb:b1:9d:c8:e4:08:51:38:42:7b:29:4e:2d:92:c8:e9: f4:23:c2:e6:c0:93:c5:2a:83:a9:01:c2:63:44:1b:58:4f:96: e0:cb:91:a6:85:2c:b1:80:f1:89:6a:70:99:07:71:24:97:16: 8a:e7:86:5f:97:a7:ee:cc:2e:eb:b3:05:98:e3:9e:3c:48:5d: 12:8f:06:dd:f9:f7:61:41:49:ec:dc:84:17:7f:7a:e3:22:b4: 96:14:fe:a2:ca:5e:3c:47:78:b5:3f:ed:bb:3d:ba:37:ed:28: 47:04:6c:68:3d:f3:91:e5:47:f5:d2:50:c1:c9:86:30:50:c9: 50:51:ee:97:da:aa:ce:3b:cc:69:f6:dd:27:cc:da:8a:3f:4b: ee:07:90:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURLP6/V5aVd8RV8YnkIY9J8lXvrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxRjhCODFCQTk1ODQ4RkE1MTg5NkUwOTVEQjdBNDI5 MjA5N0VGQTAeFw0yNjA3MjMxNzAwNThaFw0yNjA3MjQxODU1NThaMDMxMTAvBgNV BAMTKDFGNDFFQTk4RkQ4Qzc5MDZDRDU0OEI3RUUzMDZCQkFCNTczQUMyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmHB2OC6bPcVII9DMB5pPwuBaI i0zNeqKQ+CfysrtiRtc15WOKzX9K9VgX4LJGYtUjzKErkHXsuKHVVaipis5b357N 6d5H6fOQISYNzP77p+aBVYbbjSumBQgo808y0L/LSh/zvN9v8wvZGE/PvxsPA/Ky Qaw/JdWTJsLDz8oMfPhG/mUSu8g89xyrXCK8cvZmI8IQGe1eM1TEmcS7FYSYxtzC lD32UyW+XeLFjETxtZODtXaf09dKRKT3F7kQhpOQEfnlr3hVmVAMUWfd5JQMpu7r MFNHFRw/L3yzkql4XM3NJt8xK1CtAi5Qs9eBC2hWL9Z/NjKWnUTrGcJfDBsPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH0HqmP2MeQbNVIt+4wa7q1c6wggwHwYDVR0j BBgwFoAUXB+LgbqVhI+lGJbgldt6QpIJfvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTRlMWFjN2MtOTA0ZC00OTNmLWJhNWUtNWUwODM3ZGNiZDI5LzAvNUMxRjhCODFC QTk1ODQ4RkE1MTg5NkUwOTVEQjdBNDI5MjA5N0VGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzFGOEI4MUJBOTU4NDhGQTUxODk2RTA5NURCN0E0MjkyMDk3 RUZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTRlMWFjN2MtOTA0ZC00OTNmLWJh NWUtNWUwODM3ZGNiZDI5LzAvNUMxRjhCODFCQTk1ODQ4RkE1MTg5NkUwOTVEQjdB NDI5MjA5N0VGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNiqhXQRnuwUSFD8FhYladO9hQpr7+Kw2kO qHUS/JHytmkJh59oxh9G98hMj0PEY9V2CysDiycf9YdMSysfh4xKYKglTvumMxVm lem7y/AiaNeKLWNsgjBRxxKK7loKGf9idE3MyYz+TH3WKErKy7GdyOQIUThCeylO LZLI6fQjwubAk8Uqg6kBwmNEG1hPluDLkaaFLLGA8YlqcJkHcSSXFornhl+Xp+7M LuuzBZjjnjxIXRKPBt3592FBSezchBd/euMitJYU/qLKXjxHeLU/7bs9ujftKEcE bGg985HlR/XSUMHJhjBQyVBR7pfaqs47zGn23SfM2oo/S+4HkKw= -----END CERTIFICATE-----Generated at Fri Jul 24 05:25:12 2026 by rpki-client