$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft File: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft (raw, json) Hash identifier: KUru6kFM2jbICZFXPHx/DtbtQ3h42xFFiuVMajLe/ww= Subject key identifier: 43:DF:4D:0B:76:17:C8:72:4E:C8:6F:1B:90:0E:B7:34:21:E9:95:87 Authority key identifier: 5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 Certificate issuer: /CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Certificate serial: 6986EC80E5A862874A5FD5044189B97B07287D64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 11:18:13 +0000 Manifest this update: Fri 24 Jul 2026 11:13:13 +0000 Manifest next update: Sat 25 Jul 2026 12:26:13 +0000 Files and hashes: 1: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: WS8lomwMTaspR/6nCKhD2CzQyU48KkvD9JTWAS0vGqs=) 2: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: UIelaNmfU5flXZDJq0nsLusBExENtoFESIIlQRjCnSM=) 3: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl (hash: eXDeLD/X13TgUc6Vbo8LPR0kkR5sZxbsr3/rstGmurk=) 4: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: 7DiSKTCfGBXxBlqPDk9dxpdFDrZ/cVVBzOWF8p4BC1M=) 5: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: EBT29i1PsqgcTeXQev4zG3xPyCKZ73fS930Tr0addJQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:86:ec:80:e5:a8:62:87:4a:5f:d5:04:41:89:b9:7b:07:28:7d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Validity Not Before: Jul 24 11:13:13 2026 GMT Not After : Jul 25 12:26:13 2026 GMT Subject: CN=43DF4D0B7617C8724EC86F1B900EB73421E99587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:40:b0:51:75:95:dd:79:24:fc:52:a2:c0:98: aa:8c:ce:b7:a1:d2:78:39:4c:66:22:2a:4f:82:41: 23:bb:c4:6f:d1:67:e7:4d:4a:16:9a:7a:9a:0c:38: e0:9d:32:92:a6:c3:f4:aa:cb:61:65:30:40:26:ca: 56:cb:62:cc:86:63:c8:76:55:d2:dc:7a:d5:0e:06: 47:50:5d:20:7b:35:c4:27:fd:3d:75:59:12:09:1a: 36:ea:77:b6:0a:d4:8a:74:0e:1f:83:4e:fe:e4:65: a0:ee:05:f0:b0:eb:f1:25:86:ae:20:01:e8:3e:ad: d2:b7:3f:42:97:35:dc:92:a3:3d:f5:57:e3:30:9b: 01:fe:16:76:95:03:1b:e0:38:61:bb:b0:be:4b:46: 5e:53:87:41:82:11:05:6e:62:d1:12:76:8f:42:95: 8e:d7:6a:d2:b9:5e:0e:28:19:2b:c1:ff:23:7f:f6: d0:42:4a:01:b0:f4:a6:c0:af:34:a8:21:49:76:7e: d4:86:ff:36:de:bd:43:cc:28:ec:4b:13:1d:7f:21: c2:bb:b3:2a:f6:c9:77:0f:26:89:c2:a7:98:ff:44: 74:58:ad:3c:69:db:17:fa:51:76:9c:1d:b6:f4:5c: ff:03:9d:41:87:e7:0e:bf:09:cc:4c:1c:6e:41:d3: 8c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DF:4D:0B:76:17:C8:72:4E:C8:6F:1B:90:0E:B7:34:21:E9:95:87 X509v3 Authority Key Identifier: keyid:5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:e8:10:2c:ad:8d:9f:11:45:99:bb:c3:c1:f5:e8:12:ab:6a: dd:62:ae:e7:f4:b3:c3:b5:05:83:1c:22:f6:ce:8e:a7:11:73: 3d:f0:93:c4:07:ae:a5:f0:6d:5c:ef:f1:c8:a3:10:8e:e8:90: d0:96:4a:1b:a0:f4:8f:fc:0f:9c:b9:30:73:54:bc:00:cd:db: a4:98:e5:30:db:12:0b:d1:6f:29:4c:87:81:88:21:e9:82:e8: de:62:72:4b:f3:f3:d6:40:f7:25:28:1c:8f:59:18:cf:16:c3: c1:c8:b9:07:fa:49:0d:bf:38:28:48:3f:f4:a3:15:5f:51:12: f0:dd:4d:a1:30:e7:a9:d6:ba:ee:eb:41:85:39:a9:13:27:e9: 08:78:58:03:d4:1e:e7:1f:8f:30:2a:48:47:44:04:bf:3f:b6: 7f:8a:08:83:5c:0e:7b:3a:b6:d8:30:56:65:42:fe:f8:79:9d: ad:80:ba:29:8c:d9:31:cd:57:65:42:89:a6:68:12:a8:66:43: c2:90:e7:03:33:2e:06:ac:b2:86:7f:9a:8f:a8:6a:c4:5c:38: 19:0c:85:54:97:1c:11:f6:41:f6:3b:2e:0a:09:25:92:98:e4: d9:1f:6e:5b:61:84:7f:80:4d:a4:5d:0e:e3:a2:11:dc:cc:98: 85:2a:74:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaYbsgOWoYodKX9UEQYm5ewcofWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAz OUE4M0ZGMzAeFw0yNjA3MjQxMTEzMTNaFw0yNjA3MjUxMjI2MTNaMDMxMTAvBgNV BAMTKDQzREY0RDBCNzYxN0M4NzI0RUM4NkYxQjkwMEVCNzM0MjFFOTk1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhQLBRdZXdeST8UqLAmKqMzreh 0ng5TGYiKk+CQSO7xG/RZ+dNShaaepoMOOCdMpKmw/Sqy2FlMEAmylbLYsyGY8h2 VdLcetUOBkdQXSB7NcQn/T11WRIJGjbqd7YK1Ip0Dh+DTv7kZaDuBfCw6/Elhq4g Aeg+rdK3P0KXNdySoz31V+MwmwH+FnaVAxvgOGG7sL5LRl5Th0GCEQVuYtESdo9C lY7XatK5Xg4oGSvB/yN/9tBCSgGw9KbArzSoIUl2ftSG/zbevUPMKOxLEx1/IcK7 syr2yXcPJonCp5j/RHRYrTxp2xf6UXacHbb0XP8DnUGH5w6/CcxMHG5B04yTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ99NC3YXyHJOyG8bkA63NCHplYcwHwYDVR0j BBgwFoAUWhwKSWJIY5LuP5mK9tT/cDmoP/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzJmMjg4NzktNDg0NC00MmRlLWIyZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2 MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAzOUE4M0ZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTFDMEE0OTYyNDg2MzkyRUUzRjk5OEFGNkQ0RkY3MDM5QTgz RkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZG NzAzOUE4M0ZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXoECytjZ8RRZm7w8H16BKrat1iruf0s8O1 BYMcIvbOjqcRcz3wk8QHrqXwbVzv8cijEI7okNCWShug9I/8D5y5MHNUvADN26SY 5TDbEgvRbylMh4GIIemC6N5ickvz89ZA9yUoHI9ZGM8Ww8HIuQf6SQ2/OChIP/Sj FV9REvDdTaEw56nWuu7rQYU5qRMn6Qh4WAPUHucfjzAqSEdEBL8/tn+KCINcDns6 ttgwVmVC/vh5na2AuimM2THNV2VCiaZoEqhmQ8KQ5wMzLgassoZ/mo+oasRcOBkM hVSXHBH2QfY7LgoJJZKY5NkfblthhH+ATaRdDuOiEdzMmIUqdNU= -----END CERTIFICATE-----Generated at Fri Jul 24 13:08:52 2026 by rpki-client