$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft File: 5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft (raw, json) Hash identifier: SNXtmid4wwtCTjDdsmldz+wJoLiRPEj0fe+uCDj8fYk= Subject key identifier: 4B:22:8C:06:BE:17:3F:19:49:FF:01:94:30:F2:BC:DD:25:77:23:A0 Authority key identifier: 5F:13:D6:48:5B:05:8C:0C:1D:31:D7:0E:67:C5:C2:C5:B2:76:74:73 Certificate issuer: /CN=5F13D6485B058C0C1D31D70E67C5C2C5B2767473 Certificate serial: 5C173C3A029D6A079C5D484B24BB95CE7D1C5A6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 19:39:12 +0000 Manifest this update: Thu 23 Jul 2026 19:34:12 +0000 Manifest next update: Fri 24 Jul 2026 23:22:12 +0000 Files and hashes: 1: 3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa (hash: x30oT/Lrnap20G4fAn+tMYY1/fn7+IpyTEVsCdXHJyU=) 2: 5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl (hash: pqo5UIwLZxeD3vfISHBvf5y2JUCoiTBne7qC5fwhVNY=) 3: 323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa (hash: KKf4Jl2OsQd3MJnMUlr/HfdddutYB5E1WPKkn8EgV+Y=) 4: 3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa (hash: qiIo+SN3MC7vwCLrsPjubqqbgVImtRMedDlPEjqNz+c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:17:3c:3a:02:9d:6a:07:9c:5d:48:4b:24:bb:95:ce:7d:1c:5a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F13D6485B058C0C1D31D70E67C5C2C5B2767473 Validity Not Before: Jul 23 19:34:12 2026 GMT Not After : Jul 24 23:22:12 2026 GMT Subject: CN=4B228C06BE173F1949FF019430F2BCDD257723A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6d:d7:59:c2:96:49:20:89:a3:73:24:84:57: da:24:88:83:45:f2:82:d2:eb:09:ab:07:8a:78:d9: 21:9e:fa:5e:64:b2:dd:53:ba:71:69:41:6c:d9:1a: 22:aa:b7:c7:1b:07:e9:7c:8b:6e:73:92:94:52:27: 93:ee:bf:18:e1:8f:db:61:b4:83:87:67:96:ae:00: 18:f5:1f:bf:f0:35:ac:8f:3f:38:32:49:1d:78:d2: 65:71:0a:b4:26:9f:7e:c2:8c:4a:b9:bd:98:6f:18: e8:f1:c4:13:e3:1d:45:eb:7f:8f:06:2d:a8:ce:f8: 94:f7:b7:76:b5:60:0d:65:78:4e:20:dd:8f:3f:1b: 2d:73:34:db:06:a6:03:9a:00:a8:e3:b2:d3:f8:c4: a1:3c:82:e6:eb:de:b8:b3:e7:bd:90:ea:33:51:53: a2:42:fa:3b:53:6e:ca:f2:57:0d:53:1d:07:f3:67: fd:d4:6a:5e:4e:c2:5a:e0:4a:e8:f3:80:6d:fa:cf: 07:2c:fc:2d:63:be:8c:2f:62:c4:8a:4a:d8:c2:ec: 55:b6:40:aa:2c:16:a6:7a:66:e3:c5:51:83:36:d5: a6:30:1e:1d:f0:19:e1:b4:a8:0c:a8:cf:9c:90:ac: a9:90:06:3b:6c:40:19:b3:4b:e7:fb:1e:da:eb:71: e8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:22:8C:06:BE:17:3F:19:49:FF:01:94:30:F2:BC:DD:25:77:23:A0 X509v3 Authority Key Identifier: keyid:5F:13:D6:48:5B:05:8C:0C:1D:31:D7:0E:67:C5:C2:C5:B2:76:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b7:f1:75:48:c5:dc:24:1f:dd:d6:e7:0c:02:a2:10:e1:c7: 3e:fe:85:91:6d:3b:06:d0:1e:99:c0:4f:9b:58:67:f6:13:8d: af:e2:bf:8b:95:71:b0:75:b4:2d:26:4b:cf:03:c6:07:a3:97: 86:bc:17:81:34:fc:d5:9c:b4:24:ec:5c:49:55:1c:78:a4:8a: 67:34:9f:0e:a5:29:27:a8:85:34:cb:a9:7b:99:35:de:1c:95: 92:0c:fa:ab:80:c7:47:a8:e2:2c:1f:c4:b1:6b:2d:82:7c:d7: c7:da:62:43:d5:27:f0:ee:a7:1e:94:94:6d:b1:c6:c8:15:0e: 5d:9c:5f:03:e9:37:19:6a:81:78:2b:64:a0:ee:51:52:21:30: 0e:60:53:a9:3e:b9:64:54:72:ac:71:63:ba:09:ac:10:e3:43: 93:a7:30:39:b5:d3:9f:9f:83:a4:e5:b8:0d:e3:3d:47:ab:5a: 13:f0:f0:df:e4:58:6c:12:9e:90:15:5e:9e:ac:7b:7a:77:d5: 10:f5:d5:0e:f9:50:22:e9:31:15:82:9b:da:45:e4:7b:3b:fd: a5:8b:b6:0e:81:72:f0:65:e1:2d:11:19:52:71:8d:d0:93:59: 33:87:e6:9d:42:a9:72:8b:75:c0:9d:3b:e1:6a:2e:4b:e5:1e: ec:4c:7b:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXBc8OgKdagecXUhLJLuVzn0cWmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxM0Q2NDg1QjA1OEMwQzFEMzFENzBFNjdDNUMyQzVC Mjc2NzQ3MzAeFw0yNjA3MjMxOTM0MTJaFw0yNjA3MjQyMzIyMTJaMDMxMTAvBgNV BAMTKDRCMjI4QzA2QkUxNzNGMTk0OUZGMDE5NDMwRjJCQ0REMjU3NzIzQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbddZwpZJIImjcySEV9okiINF 8oLS6wmrB4p42SGe+l5kst1TunFpQWzZGiKqt8cbB+l8i25zkpRSJ5Puvxjhj9th tIOHZ5auABj1H7/wNayPPzgySR140mVxCrQmn37CjEq5vZhvGOjxxBPjHUXrf48G LajO+JT3t3a1YA1leE4g3Y8/Gy1zNNsGpgOaAKjjstP4xKE8gubr3riz572Q6jNR U6JC+jtTbsryVw1THQfzZ/3Ual5OwlrgSujzgG36zwcs/C1jvowvYsSKStjC7FW2 QKosFqZ6ZuPFUYM21aYwHh3wGeG0qAyoz5yQrKmQBjtsQBmzS+f7HtrrcegzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSyKMBr4XPxlJ/wGUMPK83SV3I6AwHwYDVR0j BBgwFoAUXxPWSFsFjAwdMdcOZ8XCxbJ2dHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E3NWI3NDEtODQ2YS00MzMwLTk2NTktMDVmZmU4MjY5OGVlLzAvNUYxM0Q2NDg1 QjA1OEMwQzFEMzFENzBFNjdDNUMyQzVCMjc2NzQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjEzRDY0ODVCMDU4QzBDMUQzMUQ3MEU2N0M1QzJDNUIyNzY3 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E3NWI3NDEtODQ2YS00MzMwLTk2 NTktMDVmZmU4MjY5OGVlLzAvNUYxM0Q2NDg1QjA1OEMwQzFEMzFENzBFNjdDNUMy QzVCMjc2NzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADG38XVIxdwkH93W5wwCohDhxz7+hZFtOwbQ HpnAT5tYZ/YTja/iv4uVcbB1tC0mS88Dxgejl4a8F4E0/NWctCTsXElVHHikimc0 nw6lKSeohTTLqXuZNd4clZIM+quAx0eo4iwfxLFrLYJ818faYkPVJ/Dupx6UlG2x xsgVDl2cXwPpNxlqgXgrZKDuUVIhMA5gU6k+uWRUcqxxY7oJrBDjQ5OnMDm105+f g6TluA3jPUerWhPw8N/kWGwSnpAVXp6se3p31RD11Q75UCLpMRWCm9pF5Hs7/aWL tg6BcvBl4S0RGVJxjdCTWTOH5p1CqXKLdcCdO+FqLkvlHuxMezg= -----END CERTIFICATE-----Generated at Fri Jul 24 07:49:48 2026 by rpki-client