$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.mft File: 83C5DA823B493EA97EC4890003D1D660CAEA5ED2.mft (raw, json) Hash identifier: lkWZ5qg5D+dnh9qosGrL8Cjg1/ahusasIXaGIRSRNmo= Subject key identifier: 75:C4:0A:82:3C:02:90:C7:B7:A3:FE:F2:DB:0C:44:41:BF:F5:4D:32 Authority key identifier: 83:C5:DA:82:3B:49:3E:A9:7E:C4:89:00:03:D1:D6:60:CA:EA:5E:D2 Certificate issuer: /CN=83C5DA823B493EA97EC4890003D1D660CAEA5ED2 Certificate serial: 1D1FD2A7633F6494D4F9E36F723EC0DE06509325 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 17:11:01 +0000 Manifest this update: Thu 23 Jul 2026 17:06:01 +0000 Manifest next update: Fri 24 Jul 2026 17:43:01 +0000 Files and hashes: 1: 3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa (hash: Pl9ASfx3Yd6SHdsYRmX1Tr27V4CYohbU5XT4mL5KknA=) 2: 83C5DA823B493EA97EC4890003D1D660CAEA5ED2.crl (hash: kbkxNDAEuqBpJU1cN1GaQ/dyacJQVKNXOkNFEcE3Abw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.crl rsync://rpki-rsync.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:1f:d2:a7:63:3f:64:94:d4:f9:e3:6f:72:3e:c0:de:06:50:93:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83C5DA823B493EA97EC4890003D1D660CAEA5ED2 Validity Not Before: Jul 23 17:06:01 2026 GMT Not After : Jul 24 17:43:01 2026 GMT Subject: CN=75C40A823C0290C7B7A3FEF2DB0C4441BFF54D32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e4:a7:43:74:3d:f9:d5:63:36:1f:7a:24:15: 36:75:01:93:26:ff:2c:48:98:b3:91:6b:de:86:3b: ec:a4:20:7b:7e:b2:13:14:94:96:1a:5f:f8:07:e5: 87:03:4e:99:da:80:57:47:02:b0:73:68:d1:4b:cd: 5c:75:39:7c:6a:5e:f1:6a:2b:a7:e6:e8:1f:79:c0: 39:aa:ce:f4:ef:20:0a:57:d1:cf:82:0f:2c:de:56: 60:eb:bc:d7:2d:1e:cd:eb:b3:15:90:00:8a:46:cc: 37:f3:e7:37:90:7d:86:f1:65:9f:7f:f7:df:73:79: 42:97:27:95:b0:a8:d9:a4:7f:9a:54:b7:48:ae:48: 80:d8:59:48:f4:78:61:03:ae:8d:d8:a3:3d:f6:f9: 6b:ad:39:dc:f0:83:40:7f:91:a4:dc:d3:a9:dd:df: 61:38:46:a6:a2:32:c0:4a:c9:6d:70:2d:43:1f:0a: 3a:58:fc:9a:5b:2e:9a:b3:05:c2:ed:74:5d:8a:e3: dc:6b:42:41:a9:4a:1b:c2:33:09:64:0b:bd:c8:b1: b3:c3:db:a1:91:54:e5:7c:fb:d2:c9:c0:2c:a2:9a: 01:af:f6:b1:73:bf:9c:9a:98:b4:d7:e9:32:01:02: 59:20:77:a8:1c:7b:cf:c9:f2:62:47:b3:c3:02:24: b1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C4:0A:82:3C:02:90:C7:B7:A3:FE:F2:DB:0C:44:41:BF:F5:4D:32 X509v3 Authority Key Identifier: keyid:83:C5:DA:82:3B:49:3E:A9:7E:C4:89:00:03:D1:D6:60:CA:EA:5E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:bc:c5:50:aa:09:51:52:63:05:c7:b0:79:f3:8f:85:98:a4: 89:55:7b:66:7f:55:1b:ef:f8:c5:fe:e3:aa:19:98:0e:b7:18: e2:02:85:92:42:de:62:63:44:c9:ba:ef:39:87:41:56:2a:0b: ee:43:b7:f5:7e:34:c4:bd:13:25:40:d3:ff:44:06:fb:50:44: 59:cc:09:4d:cc:38:47:b6:8f:33:05:d7:4f:cd:a3:77:00:ee: 02:58:99:c3:9a:ca:49:83:e0:5c:bf:69:e8:95:f9:1a:f0:49: 92:fe:d8:ca:0a:03:60:fd:92:b4:ac:a2:17:97:03:b3:e1:fa: bc:19:3a:25:10:66:9f:f3:e7:2c:b3:74:e5:65:16:9a:db:bb: 39:44:8b:06:b3:cb:cd:f0:15:29:d3:b9:9e:dd:d9:bc:8f:d3: dc:89:28:6c:1f:56:6c:cd:e1:7d:7e:5e:36:cd:c9:0e:b3:0b: cb:d9:0b:61:e8:47:0e:4c:75:69:06:51:18:98:f1:47:b2:89: a3:80:7b:90:00:a9:59:18:43:4f:74:8e:c9:7b:5a:60:bf:41: c8:d2:0d:44:83:09:b0:47:43:d5:fd:8f:c7:ed:b0:a5:2e:78: 2e:9d:fb:17:7a:13:ba:f9:75:00:de:4f:85:8e:53:3c:f4:2f: 16:2f:df:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHR/Sp2M/ZJTU+eNvcj7A3gZQkyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNDNURBODIzQjQ5M0VBOTdFQzQ4OTAwMDNEMUQ2NjBD QUVBNUVEMjAeFw0yNjA3MjMxNzA2MDFaFw0yNjA3MjQxNzQzMDFaMDMxMTAvBgNV BAMTKDc1QzQwQTgyM0MwMjkwQzdCN0EzRkVGMkRCMEM0NDQxQkZGNTREMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC95KdDdD351WM2H3okFTZ1AZMm /yxImLORa96GO+ykIHt+shMUlJYaX/gH5YcDTpnagFdHArBzaNFLzVx1OXxqXvFq K6fm6B95wDmqzvTvIApX0c+CDyzeVmDrvNctHs3rsxWQAIpGzDfz5zeQfYbxZZ9/ 999zeUKXJ5WwqNmkf5pUt0iuSIDYWUj0eGEDro3Yoz32+WutOdzwg0B/kaTc06nd 32E4RqaiMsBKyW1wLUMfCjpY/JpbLpqzBcLtdF2K49xrQkGpShvCMwlkC73IsbPD 26GRVOV8+9LJwCyimgGv9rFzv5yamLTX6TIBAlkgd6gce8/J8mJHs8MCJLHfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdcQKgjwCkMe3o/7y2wxEQb/1TTIwHwYDVR0j BBgwFoAUg8XagjtJPql+xIkAA9HWYMrqXtIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmIyNWYwZWItM2M0ZC00ZmM3LWIzYTQtYWRiMjI5N2RlNmNmLzAvODNDNURBODIz QjQ5M0VBOTdFQzQ4OTAwMDNEMUQ2NjBDQUVBNUVEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84M0M1REE4MjNCNDkzRUE5N0VDNDg5MDAwM0QxRDY2MENBRUE1 RUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmIyNWYwZWItM2M0ZC00ZmM3LWIz YTQtYWRiMjI5N2RlNmNmLzAvODNDNURBODIzQjQ5M0VBOTdFQzQ4OTAwMDNEMUQ2 NjBDQUVBNUVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACq8xVCqCVFSYwXHsHnzj4WYpIlVe2Z/VRvv +MX+46oZmA63GOIChZJC3mJjRMm67zmHQVYqC+5Dt/V+NMS9EyVA0/9EBvtQRFnM CU3MOEe2jzMF10/No3cA7gJYmcOaykmD4Fy/aeiV+RrwSZL+2MoKA2D9krSsoheX A7Ph+rwZOiUQZp/z5yyzdOVlFprbuzlEiwazy83wFSnTuZ7d2byP09yJKGwfVmzN 4X1+XjbNyQ6zC8vZC2HoRw5MdWkGURiY8UeyiaOAe5AAqVkYQ090jsl7WmC/QcjS DUSDCbBHQ9X9j8ftsKUueC6d+xd6E7r5dQDeT4WOUzz0LxYv35E= -----END CERTIFICATE-----Generated at Fri Jul 24 08:50:08 2026 by rpki-client