$ rpki-client -vvf rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft File: A5251C27E1AF09AE2F28618250807EA4D573694B.mft (raw, json) Hash identifier: dg4eG10+i7hVZELhksx8WsGlIyp8OToevXNUL2G/RJs= Subject key identifier: B5:4A:A4:A8:57:3C:79:4C:00:30:20:D0:EE:BD:BD:67:30:4E:8E:44 Authority key identifier: A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B Certificate issuer: /CN=A5251C27E1AF09AE2F28618250807EA4D573694B Certificate serial: 72343DBC19CF32B140CCFD7EFF3D3DFE3C477502 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:09:40 +0000 Manifest this update: Thu 23 Jul 2026 16:04:40 +0000 Manifest next update: Fri 24 Jul 2026 18:34:40 +0000 Files and hashes: 1: A5251C27E1AF09AE2F28618250807EA4D573694B.crl (hash: mhr6Lsa2YR5QejB5smQT75J2B9mpm3qYzGOpbq1FkrY=) 2: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: 8PPdaCX6mIjApYArjunSo3wNOsnTma7JcAZ0c6t+SzU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:34:3d:bc:19:cf:32:b1:40:cc:fd:7e:ff:3d:3d:fe:3c:47:75:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5251C27E1AF09AE2F28618250807EA4D573694B Validity Not Before: Jul 23 16:04:40 2026 GMT Not After : Jul 24 18:34:40 2026 GMT Subject: CN=B54AA4A8573C794C003020D0EEBDBD67304E8E44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4b:55:95:16:dd:de:2a:2f:a7:ed:51:7f:2a: 8b:ff:f2:67:34:cf:c2:1e:93:1e:30:1b:5c:1d:95: 8e:4e:54:76:1e:69:59:6f:02:c3:4e:c6:31:8c:18: 3f:bd:b5:c3:a4:8b:a3:4a:99:63:e1:0e:06:ac:1f: c9:b4:f7:bd:df:62:6e:8c:36:60:ac:2c:ac:9c:27: f2:0d:1b:f9:2f:22:47:68:63:b1:5d:46:03:a0:f1: 00:2b:7c:55:99:f1:ec:ee:0d:fc:bc:55:96:42:91: 0c:3b:29:e3:13:3e:ce:eb:42:cf:8f:bd:31:a3:fb: 7d:fd:8e:bb:20:b5:f1:71:09:23:a9:6e:45:0a:8f: eb:d5:5a:90:66:39:2f:9f:9e:c0:da:b8:14:6d:b1: 29:e0:4a:28:f1:1c:0c:2e:86:12:bf:d1:10:b7:3d: 52:8b:39:09:05:b4:2e:b8:de:05:25:f9:98:da:3e: f9:31:58:26:fb:0d:5e:51:93:1e:fd:f9:ef:e0:1b: fb:66:64:ae:6a:a9:c7:9f:89:b1:29:1d:e0:b6:89: 83:e6:51:de:da:bd:88:d0:eb:60:85:bd:33:f0:49: 64:9c:04:09:c6:63:2c:98:03:16:57:65:a4:56:48: 6c:58:f0:a1:b6:49:c1:75:3d:db:4e:3f:01:26:c0: 42:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4A:A4:A8:57:3C:79:4C:00:30:20:D0:EE:BD:BD:67:30:4E:8E:44 X509v3 Authority Key Identifier: keyid:A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:25:7d:ed:2d:07:0c:b6:db:39:f4:94:a8:af:cc:8b:be:cd: 9a:5a:58:3c:30:6a:e2:5c:6e:dc:e8:8e:8e:67:11:b4:cb:c7: 7f:f3:95:e6:fe:a7:02:b7:d4:1f:48:0f:32:4f:66:f2:c4:0e: e5:2f:d8:6e:77:1e:29:73:2d:de:20:1d:96:38:cd:ff:3a:9e: 38:e4:d2:9c:13:fa:5b:e5:9a:92:4b:7e:38:39:99:b1:67:f3: 90:4a:66:ae:27:59:1c:aa:8e:83:02:5c:b4:b0:49:ee:d6:1a: 4f:2d:c9:56:b5:f0:11:82:c4:a3:27:3c:2c:ab:d7:0e:2f:44: 2c:2a:c5:4c:06:bf:d4:ad:fb:13:13:b9:5e:e8:3e:29:02:de: 35:cf:cd:3b:1b:24:2b:08:ff:12:f6:96:56:43:86:76:a2:c0: f3:1d:46:04:1d:78:56:0b:57:68:db:d1:83:68:b6:88:6a:4b: 4f:8b:69:60:c2:a3:60:ed:a3:37:4e:4a:d9:2e:3a:3b:9c:96: 7e:52:3d:e9:7b:25:ea:e7:b5:0e:fd:af:49:f9:5d:9d:2b:6d: 87:83:10:80:da:32:06:2a:00:86:08:48:17:63:ae:29:ce:a5: 31:e6:33:6c:a1:db:d2:5f:b0:6b:ce:a6:d1:cb:e5:ca:a4:91: 5c:15:3f:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcjQ9vBnPMrFAzP1+/z09/jxHdQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUyNTFDMjdFMUFGMDlBRTJGMjg2MTgyNTA4MDdFQTRE NTczNjk0QjAeFw0yNjA3MjMxNjA0NDBaFw0yNjA3MjQxODM0NDBaMDMxMTAvBgNV BAMTKEI1NEFBNEE4NTczQzc5NEMwMDMwMjBEMEVFQkRCRDY3MzA0RThFNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcS1WVFt3eKi+n7VF/Kov/8mc0 z8Iekx4wG1wdlY5OVHYeaVlvAsNOxjGMGD+9tcOki6NKmWPhDgasH8m0973fYm6M NmCsLKycJ/ING/kvIkdoY7FdRgOg8QArfFWZ8ezuDfy8VZZCkQw7KeMTPs7rQs+P vTGj+339jrsgtfFxCSOpbkUKj+vVWpBmOS+fnsDauBRtsSngSijxHAwuhhK/0RC3 PVKLOQkFtC643gUl+ZjaPvkxWCb7DV5Rkx79+e/gG/tmZK5qqcefibEpHeC2iYPm Ud7avYjQ62CFvTPwSWScBAnGYyyYAxZXZaRWSGxY8KG2ScF1PdtOPwEmwEIFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtUqkqFc8eUwAMCDQ7r29ZzBOjkQwHwYDVR0j BBgwFoAUpSUcJ+GvCa4vKGGCUIB+pNVzaUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ3ZjZjZjYtZGQyYi00ODIzLWIyNjQtZTJiZjRmMzBhYmZlLzAvQTUyNTFDMjdF MUFGMDlBRTJGMjg2MTgyNTA4MDdFQTRENTczNjk0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNTI1MUMyN0UxQUYwOUFFMkYyODYxODI1MDgwN0VBNEQ1NzM2 OTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvQTUyNTFDMjdFMUFGMDlBRTJGMjg2MTgyNTA4MDdF QTRENTczNjk0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAColfe0tBwy22zn0lKivzIu+zZpaWDwwauJc btzojo5nEbTLx3/zleb+pwK31B9IDzJPZvLEDuUv2G53HilzLd4gHZY4zf86njjk 0pwT+lvlmpJLfjg5mbFn85BKZq4nWRyqjoMCXLSwSe7WGk8tyVa18BGCxKMnPCyr 1w4vRCwqxUwGv9St+xMTuV7oPikC3jXPzTsbJCsI/xL2llZDhnaiwPMdRgQdeFYL V2jb0YNotohqS0+LaWDCo2DtozdOStkuOjucln5SPel7JerntQ79r0n5XZ0rbYeD EIDaMgYqAIYISBdjrinOpTHmM2yh29JfsGvOptHL5cqkkVwVP9s= -----END CERTIFICATE-----Generated at Fri Jul 24 05:09:02 2026 by rpki-client