$ rpki-client -vvf rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft File: 5FD95F455755676CB89A532D2F2A8301877C4AEC.mft (raw, json) Hash identifier: uT09dxxssO67+neDRZBTk0tC+GTBklnVL58GuvngON0= Subject key identifier: F2:5A:69:21:63:A9:C6:F4:E2:81:3F:85:50:E5:C7:3D:FF:C8:45:1C Authority key identifier: 5F:D9:5F:45:57:55:67:6C:B8:9A:53:2D:2F:2A:83:01:87:7C:4A:EC Certificate issuer: /CN=5FD95F455755676CB89A532D2F2A8301877C4AEC Certificate serial: 5736617707934F005CD3AE7054A658A8C8D6C443 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 10:58:29 +0000 Manifest this update: Thu 23 Jul 2026 10:53:29 +0000 Manifest next update: Fri 24 Jul 2026 12:02:29 +0000 Files and hashes: 1: 5FD95F455755676CB89A532D2F2A8301877C4AEC.crl (hash: iycd4TE/B/K7IrpTO85h5hmTHTyxgIHSkWmCajzf4DI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.crl rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:36:61:77:07:93:4f:00:5c:d3:ae:70:54:a6:58:a8:c8:d6:c4:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FD95F455755676CB89A532D2F2A8301877C4AEC Validity Not Before: Jul 23 10:53:29 2026 GMT Not After : Jul 24 12:02:29 2026 GMT Subject: CN=F25A692163A9C6F4E2813F8550E5C73DFFC8451C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:52:d5:29:93:ba:31:22:73:7d:79:6c:b9:7e: a7:0a:28:b4:44:25:af:34:09:4b:8a:03:9c:22:9c: 21:68:3f:43:ec:d7:b3:92:be:9c:e7:94:bc:dd:a5: 6f:2c:03:b2:45:3f:5e:a0:e1:b7:4b:26:8b:23:e9: 66:04:87:26:d3:ff:1c:9e:10:d8:24:97:1d:f3:be: 4a:dc:93:3d:b1:e7:b4:3a:b3:9a:b3:c8:71:c5:51: 8e:f5:51:0f:50:6b:d1:01:d1:42:9e:8f:9d:5b:ef: f7:c3:37:ff:4b:da:07:d2:cd:ad:9a:28:a5:b2:fa: e2:c8:0d:fe:00:bb:9b:16:d5:f1:ba:bc:df:c9:df: 03:cb:2d:a6:c8:99:55:22:77:03:c2:58:a2:9d:fa: cc:8e:c2:c5:3e:d5:af:2e:35:bb:9a:a3:09:46:bd: f7:9a:05:5a:3c:87:d6:dd:21:c2:d8:cc:55:0a:6b: 56:63:89:fe:c3:34:49:09:47:40:08:ab:eb:16:64: f0:60:86:35:2b:22:c2:35:c5:13:d5:1f:fe:19:10: a8:76:28:7b:c7:d6:b6:6b:83:71:d4:4f:3b:d7:5a: da:cb:ad:33:18:9f:b3:77:6d:a2:58:66:af:bd:30: 7e:61:6b:1d:2e:77:e1:72:8f:fc:02:aa:a5:07:9a: ff:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5A:69:21:63:A9:C6:F4:E2:81:3F:85:50:E5:C7:3D:FF:C8:45:1C X509v3 Authority Key Identifier: keyid:5F:D9:5F:45:57:55:67:6C:B8:9A:53:2D:2F:2A:83:01:87:7C:4A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:0e:e0:7c:0f:82:07:58:cc:71:15:ab:a4:3a:2e:f1:ee:88: 13:de:a6:4f:c4:2a:e1:46:2f:27:f6:59:9d:1e:08:d8:e5:96: 9e:14:8e:aa:3c:e9:7f:8b:30:1b:fe:2e:71:31:ed:af:7b:a7: de:34:90:a3:24:d5:e7:5b:47:39:3e:44:d4:da:a8:da:80:e7: d8:e4:1c:74:49:e4:9f:1f:e9:ee:c3:30:c2:3f:ae:cd:69:63: 80:a3:44:b1:a0:54:82:dc:67:e5:88:b7:00:bd:4a:67:a6:86: 4a:7c:62:6e:c0:d4:46:23:87:ce:ed:e8:92:8e:9a:dd:a7:49: 6a:01:f5:6e:50:80:00:cf:15:99:c3:44:50:a4:d5:bf:e2:70: b7:06:51:a0:8c:34:bc:0a:dd:58:2b:eb:75:29:a6:17:f8:97: 54:d9:d0:05:eb:91:ff:2c:59:1a:50:22:11:64:2e:df:fc:9f: f2:1b:d3:46:a6:f7:d0:37:1f:8d:47:47:e5:10:e4:61:32:11: af:d8:c3:a6:06:2a:ee:bd:6d:e0:de:5e:02:f8:0a:a1:41:1e: 41:dd:b5:d5:bb:cc:3a:40:88:16:88:95:54:10:7e:4f:ec:a8: 7a:f7:39:3f:17:45:89:69:c4:cf:e7:01:16:c0:b4:2c:6e:c1: db:56:7b:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVzZhdweTTwBc065wVKZYqMjWxEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZEOTVGNDU1NzU1Njc2Q0I4OUE1MzJEMkYyQTgzMDE4 NzdDNEFFQzAeFw0yNjA3MjMxMDUzMjlaFw0yNjA3MjQxMjAyMjlaMDMxMTAvBgNV BAMTKEYyNUE2OTIxNjNBOUM2RjRFMjgxM0Y4NTUwRTVDNzNERkZDODQ1MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUtUpk7oxInN9eWy5fqcKKLRE Ja80CUuKA5winCFoP0Ps17OSvpznlLzdpW8sA7JFP16g4bdLJosj6WYEhybT/xye ENgklx3zvkrckz2x57Q6s5qzyHHFUY71UQ9Qa9EB0UKej51b7/fDN/9L2gfSza2a KKWy+uLIDf4Au5sW1fG6vN/J3wPLLabImVUidwPCWKKd+syOwsU+1a8uNbuaowlG vfeaBVo8h9bdIcLYzFUKa1Zjif7DNEkJR0AIq+sWZPBghjUrIsI1xRPVH/4ZEKh2 KHvH1rZrg3HUTzvXWtrLrTMYn7N3baJYZq+9MH5hax0ud+Fyj/wCqqUHmv+jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8lppIWOpxvTigT+FUOXHPf/IRRwwHwYDVR0j BBgwFoAUX9lfRVdVZ2y4mlMtLyqDAYd8SuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJhOTdiMGItMzlhZS00YzJjLWIxM2ItMDFlMzk1YjdhMjRiLzAvNUZEOTVGNDU1 NzU1Njc2Q0I4OUE1MzJEMkYyQTgzMDE4NzdDNEFFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkQ5NUY0NTU3NTU2NzZDQjg5QTUzMkQyRjJBODMwMTg3N0M0 QUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvNUZEOTVGNDU1NzU1Njc2Q0I4OUE1MzJEMkYyQTgz MDE4NzdDNEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALsO4HwPggdYzHEVq6Q6LvHuiBPepk/EKuFG Lyf2WZ0eCNjllp4Ujqo86X+LMBv+LnEx7a97p940kKMk1edbRzk+RNTaqNqA59jk HHRJ5J8f6e7DMMI/rs1pY4CjRLGgVILcZ+WItwC9Smemhkp8Ym7A1EYjh87t6JKO mt2nSWoB9W5QgADPFZnDRFCk1b/icLcGUaCMNLwK3Vgr63Upphf4l1TZ0AXrkf8s WRpQIhFkLt/8n/Ib00am99A3H41HR+UQ5GEyEa/Yw6YGKu69beDeXgL4CqFBHkHd tdW7zDpAiBaIlVQQfk/sqHr3OT8XRYlpxM/nARbAtCxuwdtWeyg= -----END CERTIFICATE-----Generated at Fri Jul 24 05:08:49 2026 by rpki-client