$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft File: 5AE2131384B411127BE4CF7467B12F83CBAD9996.mft (raw, json) Hash identifier: k7RIV3qtYDcz9y1k2EP1f3WDZ6Q0g7R/Vc4Cgsnwg+8= Subject key identifier: D0:6E:51:32:F1:04:33:06:60:F3:A0:6F:D2:0F:BA:7B:1D:EB:EA:8F Authority key identifier: 5A:E2:13:13:84:B4:11:12:7B:E4:CF:74:67:B1:2F:83:CB:AD:99:96 Certificate issuer: /CN=5AE2131384B411127BE4CF7467B12F83CBAD9996 Certificate serial: 1B733038F417AF19B61E608FB6FB1BBAFCCDF56B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 20:35:10 +0000 Manifest this update: Thu 23 Jul 2026 20:30:10 +0000 Manifest next update: Fri 24 Jul 2026 21:40:10 +0000 Files and hashes: 1: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: NmIt0iuskNCmt4uz1oIpjbFNHodPs9Y9zQPXOPslKF0=) 2: 5AE2131384B411127BE4CF7467B12F83CBAD9996.crl (hash: O2V8/DTFin+GMSvvPSXSIcyqce+0/cJPgCUbVAMrPkI=) 3: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: I0jTp/Lb+KlyYGeSMZScDem+MblcbAhoI37lZDiIvac=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.crl rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:73:30:38:f4:17:af:19:b6:1e:60:8f:b6:fb:1b:ba:fc:cd:f5:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE2131384B411127BE4CF7467B12F83CBAD9996 Validity Not Before: Jul 23 20:30:10 2026 GMT Not After : Jul 24 21:40:10 2026 GMT Subject: CN=D06E5132F104330660F3A06FD20FBA7B1DEBEA8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:57:ba:ac:6d:01:03:22:88:0f:14:b5:00: 80:7c:5e:d1:42:48:67:69:bc:f3:6c:d0:42:6b:e9: de:24:34:c2:64:49:26:af:6b:b4:d7:0b:72:1f:02: 3f:32:03:7a:56:b6:f2:3b:a7:61:57:54:d4:b7:8e: 1b:7b:5d:c5:e1:75:dd:aa:39:c0:3d:55:a7:17:91: d5:da:a2:c7:5f:ca:32:18:95:72:6a:7a:ba:38:4f: 56:66:be:bb:ff:7b:f7:74:bf:a5:45:d8:2a:56:ba: 38:80:ec:46:cf:df:9a:72:c9:c3:18:df:09:4c:21: 25:2c:78:ba:75:ea:ab:db:9b:ab:18:3b:08:0c:90: b7:09:20:bb:92:cc:d7:84:cb:43:23:9c:1a:43:75: 98:36:7d:28:51:d4:e3:74:8c:fd:73:f7:de:82:78: b2:01:49:db:42:72:98:c9:b0:c3:14:c6:41:93:3b: 81:c6:61:0c:9a:f2:07:5b:c7:ab:da:14:20:23:9a: df:6c:5e:61:ea:92:b6:f0:33:25:5e:ea:5c:60:e7: 21:73:4f:ae:4c:f8:03:58:d5:80:2f:4e:a4:6c:46: db:0d:6d:7b:22:3a:88:cd:e1:47:ce:11:ea:04:b2: 8c:dc:e3:7c:29:20:e5:85:b2:d6:43:bd:69:72:1a: a7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6E:51:32:F1:04:33:06:60:F3:A0:6F:D2:0F:BA:7B:1D:EB:EA:8F X509v3 Authority Key Identifier: keyid:5A:E2:13:13:84:B4:11:12:7B:E4:CF:74:67:B1:2F:83:CB:AD:99:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:5e:ce:df:c7:36:c6:31:d2:a8:df:bc:32:e1:aa:34:c8:24: 6b:09:75:55:36:40:ed:3f:78:f0:3c:f0:e6:98:c2:9a:93:0e: 5a:f6:fe:8e:27:f7:a4:07:24:8a:b5:c3:e5:6f:a4:7b:eb:77: c3:d8:97:54:57:90:a6:ae:44:94:d6:8b:e9:7b:db:00:a5:ce: 6d:4f:05:c4:3a:69:a6:d1:66:64:05:89:db:59:ff:f4:29:51: 85:e1:67:c3:12:d8:6b:cb:9b:82:34:7d:03:4c:45:23:86:c6: 14:76:ec:64:53:b4:2f:e8:15:54:94:21:7c:cf:cd:50:ac:90: 7a:56:d4:53:46:55:f4:b0:eb:0b:cb:84:bd:ec:a0:d8:e4:8c: c3:96:64:1a:b0:9a:13:b2:59:26:1e:be:09:1f:05:ab:f6:cc: ad:a1:a0:8b:dc:4d:f3:06:53:84:c0:28:66:40:cf:66:3f:17: 7e:49:3f:a4:a5:39:2b:87:68:c0:c0:e1:e5:db:85:bf:cf:e9: c5:4c:99:b4:88:dd:6b:b1:48:b6:46:49:a4:27:f8:97:6a:0f: b4:a6:12:ab:f3:0b:52:20:4d:f7:f2:52:b7:23:65:18:6f:32: 5c:3c:d1:42:42:fb:50:8a:e4:f4:17:06:32:b1:52:9e:79:7c: 06:69:df:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG3MwOPQXrxm2HmCPtvsbuvzN9WswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMjEzMTM4NEI0MTExMjdCRTRDRjc0NjdCMTJGODND QkFEOTk5NjAeFw0yNjA3MjMyMDMwMTBaFw0yNjA3MjQyMTQwMTBaMDMxMTAvBgNV BAMTKEQwNkU1MTMyRjEwNDMzMDY2MEYzQTA2RkQyMEZCQTdCMURFQkVBOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz51e6rG0BAyKIDxS1AIB8XtFC SGdpvPNs0EJr6d4kNMJkSSava7TXC3IfAj8yA3pWtvI7p2FXVNS3jht7XcXhdd2q OcA9VacXkdXaosdfyjIYlXJqero4T1Zmvrv/e/d0v6VF2CpWujiA7EbP35pyycMY 3wlMISUseLp16qvbm6sYOwgMkLcJILuSzNeEy0MjnBpDdZg2fShR1ON0jP1z996C eLIBSdtCcpjJsMMUxkGTO4HGYQya8gdbx6vaFCAjmt9sXmHqkrbwMyVe6lxg5yFz T65M+ANY1YAvTqRsRtsNbXsiOojN4UfOEeoEsozc43wpIOWFstZDvWlyGqdBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0G5RMvEEMwZg86Bv0g+6ex3r6o8wHwYDVR0j BBgwFoAUWuITE4S0ERJ75M90Z7Evg8utmZYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQxOTZkNjUtMjFhOC00YjA0LWE5ZGUtNzI4M2ZiZTNjMWNiLzAvNUFFMjEzMTM4 NEI0MTExMjdCRTRDRjc0NjdCMTJGODNDQkFEOTk5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUUyMTMxMzg0QjQxMTEyN0JFNENGNzQ2N0IxMkY4M0NCQUQ5 OTk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvNUFFMjEzMTM4NEI0MTExMjdCRTRDRjc0NjdCMTJG ODNDQkFEOTk5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpezt/HNsYx0qjfvDLhqjTIJGsJdVU2QO0/ ePA88OaYwpqTDlr2/o4n96QHJIq1w+VvpHvrd8PYl1RXkKauRJTWi+l72wClzm1P BcQ6aabRZmQFidtZ//QpUYXhZ8MS2GvLm4I0fQNMRSOGxhR27GRTtC/oFVSUIXzP zVCskHpW1FNGVfSw6wvLhL3soNjkjMOWZBqwmhOyWSYevgkfBav2zK2hoIvcTfMG U4TAKGZAz2Y/F35JP6SlOSuHaMDA4eXbhb/P6cVMmbSI3WuxSLZGSaQn+JdqD7Sm EqvzC1IgTffyUrcjZRhvMlw80UJC+1CK5PQXBjKxUp55fAZp358= -----END CERTIFICATE-----Generated at Fri Jul 24 10:02:18 2026 by rpki-client