$ rpki-client -vvf rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft File: B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft (raw, json) Hash identifier: sUivfmfSQHmx8A1LTULt0Drk1vI8AidfWv6pcaVEKcQ= Subject key identifier: 0D:19:A3:80:5C:46:9A:63:21:9D:65:51:6E:68:70:73:F2:99:B0:FB Authority key identifier: B5:CF:A0:20:DD:4B:BF:D4:98:C5:E4:D8:4A:8D:63:09:73:87:49:CC Certificate issuer: /CN=B5CFA020DD4BBFD498C5E4D84A8D6309738749CC Certificate serial: 7FBEBAE918626110A541EB47E19A256B752A79AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:10:51 +0000 Manifest this update: Thu 23 Jul 2026 21:05:51 +0000 Manifest next update: Sat 25 Jul 2026 00:05:51 +0000 Files and hashes: 1: B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl (hash: /EDCPXJfoO9VYcqsoN9rT7P/no+I5LuoEa7ZmK4pg2A=) 2: 3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa (hash: KOBMUeuuJtkuzoTiB4FBFCyBVV1+45BqlCrbct7wq3M=) 3: 3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa (hash: xB0/WgkgeQpbT+DgIUgkpcHnnIC1tIl18yTmoTUITOQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:be:ba:e9:18:62:61:10:a5:41:eb:47:e1:9a:25:6b:75:2a:79:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CFA020DD4BBFD498C5E4D84A8D6309738749CC Validity Not Before: Jul 23 21:05:51 2026 GMT Not After : Jul 25 00:05:51 2026 GMT Subject: CN=0D19A3805C469A63219D65516E687073F299B0FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ad:0d:38:af:9f:05:d0:1c:69:d1:c9:66:a7: 7c:52:1d:43:2f:c9:f6:f8:54:a0:6a:da:2f:a2:9a: ee:45:ef:5c:79:ac:86:4f:53:bc:9d:d7:a9:cf:20: bd:f5:61:50:b4:4a:a6:32:6c:e4:49:9c:ff:76:d1: 9f:c0:c8:e9:2a:ff:42:dc:2b:d7:7e:6f:6e:2a:4c: ba:0e:9c:7b:9d:33:79:5b:eb:d7:54:fb:8f:18:63: 50:73:50:7b:55:bc:99:0b:8e:31:91:a6:f1:77:97: 3c:09:df:05:ea:42:f4:7c:fb:dd:9c:f2:f2:a2:44: de:45:4c:a4:89:43:87:10:3e:16:c8:16:a4:8b:1b: 3f:06:c7:20:19:1d:37:55:74:0d:37:cb:08:f1:3e: a9:5d:e9:9e:76:f9:58:42:d7:10:91:2a:7d:02:a6: 4b:5c:b7:f5:68:b5:ec:8c:f7:6c:57:a5:7c:d6:b5: 4e:9e:55:ca:8b:64:1b:5e:c7:f3:80:d5:d2:12:bc: 65:ab:69:ca:1c:0d:1d:8f:50:4c:3b:d1:f0:ce:79: 34:db:c5:28:6b:92:54:ba:8e:5e:0d:33:cc:96:5f: 2d:d9:e7:b7:5d:fc:2d:e1:37:55:19:0c:a1:66:97: ce:a2:62:51:76:f0:df:69:88:b1:0f:14:d0:e0:80: 6e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:19:A3:80:5C:46:9A:63:21:9D:65:51:6E:68:70:73:F2:99:B0:FB X509v3 Authority Key Identifier: keyid:B5:CF:A0:20:DD:4B:BF:D4:98:C5:E4:D8:4A:8D:63:09:73:87:49:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:77:51:89:5f:d3:73:fa:3b:d1:27:fe:1b:dd:58:e1:38:aa: 5e:2a:ab:f2:d3:8f:a6:fb:c2:92:ba:04:9c:73:cf:71:a4:a6: d2:4f:12:9c:0f:07:1e:9d:7f:3a:82:95:0a:39:12:07:fe:4a: 22:f7:d0:67:4b:70:96:42:02:27:2b:ff:2c:77:0f:a1:0c:a4: a0:40:a9:1f:95:5c:c4:dc:53:a6:bb:2b:f8:11:32:42:18:19: 4a:19:96:61:19:32:da:7e:6d:cc:52:c9:a0:a8:d2:bc:16:0c: 80:13:2a:b5:5f:eb:e2:2f:6e:d6:e4:e6:b1:cc:be:7e:1f:d0: aa:75:9f:f4:16:94:70:03:dd:fd:f4:93:58:aa:3b:9f:df:64: 4c:6d:ab:e2:92:1d:f9:b1:68:41:96:a0:3a:c5:24:27:f4:83: c1:fa:35:ca:be:41:60:d5:2d:fa:ca:84:8e:fc:50:4b:0d:51: 09:c0:4f:8c:70:0a:1f:fc:a0:8d:04:3e:a7:47:95:ac:08:2d: 26:46:3a:b2:b8:a2:c5:a0:39:13:b4:4b:0d:d8:63:c4:5f:90: e5:96:b9:46:59:ff:e5:b4:eb:7a:0b:d8:d7:3d:10:2d:37:c2: 3f:21:78:01:46:cf:0d:4c:ae:8c:d4:44:d8:38:a4:27:e8:db: b2:20:98:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7666RhiYRClQetH4Zola3UqeaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRkEwMjBERDRCQkZENDk4QzVFNEQ4NEE4RDYzMDk3 Mzg3NDlDQzAeFw0yNjA3MjMyMTA1NTFaFw0yNjA3MjUwMDA1NTFaMDMxMTAvBgNV BAMTKDBEMTlBMzgwNUM0NjlBNjMyMTlENjU1MTZFNjg3MDczRjI5OUIwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrQ04r58F0Bxp0clmp3xSHUMv yfb4VKBq2i+imu5F71x5rIZPU7yd16nPIL31YVC0SqYybORJnP920Z/AyOkq/0Lc K9d+b24qTLoOnHudM3lb69dU+48YY1BzUHtVvJkLjjGRpvF3lzwJ3wXqQvR8+92c 8vKiRN5FTKSJQ4cQPhbIFqSLGz8GxyAZHTdVdA03ywjxPqld6Z52+VhC1xCRKn0C pktct/VoteyM92xXpXzWtU6eVcqLZBtex/OA1dISvGWracocDR2PUEw70fDOeTTb xShrklS6jl4NM8yWXy3Z57dd/C3hN1UZDKFml86iYlF28N9piLEPFNDggG4dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDRmjgFxGmmMhnWVRbmhwc/KZsPswHwYDVR0j BBgwFoAUtc+gIN1Lv9SYxeTYSo1jCXOHScwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGEwZmJiNTUtMWRkOC00ZjhiLWI4OTAtNGEyYzBhMDExMWRiLzAvQjVDRkEwMjBE RDRCQkZENDk4QzVFNEQ4NEE4RDYzMDk3Mzg3NDlDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNUNGQTAyMERENEJCRkQ0OThDNUU0RDg0QThENjMwOTczODc0 OUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGEwZmJiNTUtMWRkOC00ZjhiLWI4 OTAtNGEyYzBhMDExMWRiLzAvQjVDRkEwMjBERDRCQkZENDk4QzVFNEQ4NEE4RDYz MDk3Mzg3NDlDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHV3UYlf03P6O9En/hvdWOE4ql4qq/LTj6b7 wpK6BJxzz3GkptJPEpwPBx6dfzqClQo5Egf+SiL30GdLcJZCAicr/yx3D6EMpKBA qR+VXMTcU6a7K/gRMkIYGUoZlmEZMtp+bcxSyaCo0rwWDIATKrVf6+Ivbtbk5rHM vn4f0Kp1n/QWlHAD3f30k1iqO5/fZExtq+KSHfmxaEGWoDrFJCf0g8H6Ncq+QWDV LfrKhI78UEsNUQnAT4xwCh/8oI0EPqdHlawILSZGOrK4osWgORO0Sw3YY8RfkOWW uUZZ/+W063oL2Nc9EC03wj8heAFGzw1MrozURNg4pCfo27IgmJU= -----END CERTIFICATE-----Generated at Fri Jul 24 13:34:03 2026 by rpki-client