$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft File: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft (raw, json) Hash identifier: iGsdVmpyAIQfQPB1ryatrQQUnW0xREV532OL1p84hqI= Subject key identifier: 75:AE:5F:8D:0B:D0:C6:7C:58:13:3A:57:A6:D8:F0:45:D5:E5:E8:5B Authority key identifier: 5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 Certificate issuer: /CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Certificate serial: 2CC8394C3B1686141E9352EC0A00B0EE9FC9C31E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 18:53:07 +0000 Manifest this update: Thu 23 Jul 2026 18:48:07 +0000 Manifest next update: Fri 24 Jul 2026 19:18:07 +0000 Files and hashes: 1: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: UIelaNmfU5flXZDJq0nsLusBExENtoFESIIlQRjCnSM=) 2: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl (hash: 3SjfHZEuAwSdnv/dsa4ztaOMoBfIIKDig3fT6rwLPNI=) 3: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: 7DiSKTCfGBXxBlqPDk9dxpdFDrZ/cVVBzOWF8p4BC1M=) 4: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: EBT29i1PsqgcTeXQev4zG3xPyCKZ73fS930Tr0addJQ=) 5: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: WS8lomwMTaspR/6nCKhD2CzQyU48KkvD9JTWAS0vGqs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c8:39:4c:3b:16:86:14:1e:93:52:ec:0a:00:b0:ee:9f:c9:c3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Validity Not Before: Jul 23 18:48:07 2026 GMT Not After : Jul 24 19:18:07 2026 GMT Subject: CN=75AE5F8D0BD0C67C58133A57A6D8F045D5E5E85B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:dd:60:e0:2c:5e:8b:0d:a1:7c:30:b7:6f: ab:1e:b5:f4:53:ce:d5:2c:74:11:98:2e:c7:d6:78: 8d:58:a4:24:4e:a7:77:95:39:c5:42:53:6c:34:53: 45:d6:1c:e8:7a:ea:39:49:ff:ba:e9:48:cd:0e:56: 43:9b:00:f4:11:eb:85:39:73:db:d5:d7:d8:ea:80: 36:24:53:14:1b:f7:9b:5f:5e:4a:d6:29:82:f6:12: 97:17:1e:9b:c1:6b:c7:c9:27:d6:c0:1e:32:f2:1a: 94:b1:eb:3a:1c:b1:dc:39:09:b4:af:46:f9:93:8f: d8:17:55:06:7c:1a:31:73:f7:e9:25:b6:35:e4:63: 68:2a:65:dc:82:6e:66:55:41:24:ba:80:d4:7a:00: 87:ec:1f:ae:8d:6d:b0:1c:d5:27:bc:93:bd:58:5e: 23:8d:eb:07:69:4a:72:ee:4e:8d:00:67:4c:e3:88: d1:7a:2f:30:02:5f:27:91:31:b0:3e:d5:2a:51:d1: 66:b2:70:9b:12:92:63:64:27:95:e9:d4:b1:da:aa: 00:fb:5d:99:b6:f3:43:94:69:3c:5d:39:5e:36:c4: c9:bb:1d:75:6d:94:bb:6e:d0:ee:d5:fa:d4:56:1e: 47:80:3e:26:d8:ba:f4:13:52:e8:e9:d8:f4:61:22: 49:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AE:5F:8D:0B:D0:C6:7C:58:13:3A:57:A6:D8:F0:45:D5:E5:E8:5B X509v3 Authority Key Identifier: keyid:5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:75:c9:b0:3b:47:e1:b0:93:fc:2a:57:2b:f7:0f:91:1e:42: 11:55:3c:eb:42:9a:72:8c:d0:cf:93:05:e9:8b:a5:1f:d9:20: f5:6e:81:2c:22:1b:d2:ba:17:f2:83:60:62:87:5a:a9:85:c4: f5:81:8a:3a:14:b7:6a:86:b0:35:c2:c7:64:f8:d7:60:18:07: 72:29:7b:82:f9:33:1f:33:bb:88:da:1e:46:34:21:59:d5:ec: 49:b7:d7:52:88:48:39:80:f5:75:47:d7:9d:51:9b:47:73:40: 6e:00:b3:47:8e:79:6d:36:23:ba:1c:1e:4d:49:d2:44:86:0b: 21:38:3a:1f:3b:73:b5:85:d6:b5:29:c6:26:16:6f:d0:a5:e3: 08:2f:d6:02:04:3a:98:da:2a:ea:72:db:25:27:a8:de:d2:fb: 6f:28:1c:b5:9c:54:b8:5c:58:5d:68:ba:a7:de:db:4c:87:e3: 8e:cf:6d:86:ab:9c:0d:35:a1:12:20:5f:34:e3:58:3e:b5:76: 65:74:fd:89:90:3d:a0:b3:7a:57:ed:ce:1b:de:53:b3:c0:a6: e5:26:28:0c:d8:a0:79:bf:d2:df:e6:e7:97:07:97:da:17:c8: cc:1f:2e:61:db:24:db:cd:78:44:1c:04:c5:13:0b:29:7d:08: fd:b7:26:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULMg5TDsWhhQek1LsCgCw7p/Jwx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAz OUE4M0ZGMzAeFw0yNjA3MjMxODQ4MDdaFw0yNjA3MjQxOTE4MDdaMDMxMTAvBgNV BAMTKDc1QUU1RjhEMEJEMEM2N0M1ODEzM0E1N0E2RDhGMDQ1RDVFNUU4NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwdt1g4Cxeiw2hfDC3b6setfRT ztUsdBGYLsfWeI1YpCROp3eVOcVCU2w0U0XWHOh66jlJ/7rpSM0OVkObAPQR64U5 c9vV19jqgDYkUxQb95tfXkrWKYL2EpcXHpvBa8fJJ9bAHjLyGpSx6zocsdw5CbSv RvmTj9gXVQZ8GjFz9+kltjXkY2gqZdyCbmZVQSS6gNR6AIfsH66NbbAc1Se8k71Y XiON6wdpSnLuTo0AZ0zjiNF6LzACXyeRMbA+1SpR0WaycJsSkmNkJ5Xp1LHaqgD7 XZm280OUaTxdOV42xMm7HXVtlLtu0O7V+tRWHkeAPibYuvQTUujp2PRhIklhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUda5fjQvQxnxYEzpXptjwRdXl6FswHwYDVR0j BBgwFoAUWhwKSWJIY5LuP5mK9tT/cDmoP/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzJmMjg4NzktNDg0NC00MmRlLWIyZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2 MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAzOUE4M0ZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTFDMEE0OTYyNDg2MzkyRUUzRjk5OEFGNkQ0RkY3MDM5QTgz RkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZG NzAzOUE4M0ZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKh1ybA7R+Gwk/wqVyv3D5EeQhFVPOtCmnKM 0M+TBemLpR/ZIPVugSwiG9K6F/KDYGKHWqmFxPWBijoUt2qGsDXCx2T412AYB3Ip e4L5Mx8zu4jaHkY0IVnV7Em311KISDmA9XVH151Rm0dzQG4As0eOeW02I7ocHk1J 0kSGCyE4Oh87c7WF1rUpxiYWb9Cl4wgv1gIEOpjaKupy2yUnqN7S+28oHLWcVLhc WF1ouqfe20yH447PbYarnA01oRIgXzTjWD61dmV0/YmQPaCzelftzhveU7PApuUm KAzYoHm/0t/m55cHl9oXyMwfLmHbJNvNeEQcBMUTCyl9CP23JuY= -----END CERTIFICATE-----Generated at Fri Jul 24 11:17:11 2026 by rpki-client