$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft File: 5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft (raw, json) Hash identifier: HivKPITia0BrVbocbAK9nIIhkP1CU7tNh0XmUR9UmTo= Subject key identifier: 86:1D:C6:4C:49:2A:9C:80:95:4E:03:12:86:28:58:A7:50:BA:AE:5C Authority key identifier: 5A:A9:4F:74:20:AA:22:63:29:E6:9A:E8:CD:2E:C0:CE:60:D8:77:6A Certificate issuer: /CN=5AA94F7420AA226329E69AE8CD2EC0CE60D8776A Certificate serial: 7EE7B5053CFF47C1062C9D9B20490E4C2083A759 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft Manifest number: 6D Signing time: Fri 24 Jul 2026 01:51:28 +0000 Manifest this update: Fri 24 Jul 2026 01:46:28 +0000 Manifest next update: Sat 25 Jul 2026 03:52:28 +0000 Files and hashes: 1: 5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl (hash: P2/FlZ4dFSHKow7jiul1f226T2FWefTufsdpnHVKrD8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e7:b5:05:3c:ff:47:c1:06:2c:9d:9b:20:49:0e:4c:20:83:a7:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AA94F7420AA226329E69AE8CD2EC0CE60D8776A Validity Not Before: Jul 24 01:46:28 2026 GMT Not After : Jul 25 03:52:28 2026 GMT Subject: CN=861DC64C492A9C80954E0312862858A750BAAE5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e2:0e:2a:de:e9:55:ea:01:ef:3d:94:c6:c4: ef:aa:78:c3:59:68:25:b5:d5:cf:e7:d9:dd:0b:3e: ef:04:60:ff:4a:79:2b:9c:31:df:58:3e:56:91:d5: 79:9e:de:e2:7b:c5:35:17:97:2e:68:e8:40:13:f5: ee:87:02:f8:77:b9:e1:f8:24:6c:a6:e2:cf:48:13: 35:50:5c:ed:92:f4:cb:6a:dc:3a:80:0e:8d:34:b6: 3a:70:b5:a2:3a:8d:53:68:9f:15:21:bc:52:28:07: d8:b4:f8:94:7d:4e:d2:dd:aa:a3:3e:e1:be:d0:cf: 48:e4:85:9e:87:43:93:f2:27:c4:ac:3b:99:35:1e: 6b:13:92:67:c2:c6:2a:ab:0f:f4:90:04:a8:c7:fa: 5e:59:73:0c:1d:4d:f0:87:c9:13:b1:15:42:21:17: b9:5d:e6:51:c8:62:bb:64:46:2f:65:4d:8f:0b:92: b0:43:50:9c:20:49:10:31:1d:04:59:23:89:ba:4c: ce:d2:0c:e7:7a:4f:cd:6f:2a:62:fd:96:64:99:4a: 3a:71:82:d0:a5:18:30:0f:0a:1c:5b:c0:c5:03:cf: 6d:3f:d8:c4:05:5a:1b:84:50:e0:1b:e2:07:ae:07: eb:5d:59:d2:2e:94:cd:1a:c9:2d:6b:aa:d0:9b:5a: 55:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1D:C6:4C:49:2A:9C:80:95:4E:03:12:86:28:58:A7:50:BA:AE:5C X509v3 Authority Key Identifier: keyid:5A:A9:4F:74:20:AA:22:63:29:E6:9A:E8:CD:2E:C0:CE:60:D8:77:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:13:97:39:39:99:e1:71:32:c4:26:97:41:32:6d:4c:d3:0c: f1:01:0b:95:ac:29:62:8c:7f:ea:44:5d:fc:73:80:07:87:e7: 50:bb:c6:c9:38:3c:74:42:3c:d7:bf:8e:aa:be:aa:8f:b9:ac: 1d:0c:50:2b:7a:a9:aa:4e:80:b3:cf:19:32:a0:fa:cc:72:10: 89:f0:a3:17:11:fc:c7:21:4f:4f:f7:98:5b:24:f3:b1:f2:90: d4:09:82:33:f0:90:5c:2e:0b:b5:65:99:3c:87:c1:fb:bc:f9: 68:22:7d:3e:fe:c5:47:19:53:30:2d:0e:85:3b:85:ec:0c:a4: 2f:83:b0:e4:30:db:72:1a:2a:b9:24:08:e4:68:52:01:45:15: e3:91:23:7b:1b:34:6f:f8:66:10:78:56:66:84:01:26:fb:cf: 81:a2:fb:a9:8f:fa:38:b8:a1:84:96:32:15:8f:93:9c:b9:ae: 3f:93:82:e6:20:a0:06:8c:84:5e:20:9b:ef:a5:61:3b:53:9d: 27:d1:12:77:46:39:75:22:87:4f:11:96:be:6e:5f:63:28:c6: 1d:9f:89:a7:82:8f:29:77:1a:d4:6b:dc:1e:3b:3e:33:f5:25: 15:8e:19:27:e2:3c:51:cd:34:6a:6f:ff:2d:80:10:60:ef:5b: 30:6c:2a:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfue1BTz/R8EGLJ2bIEkOTCCDp1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFBOTRGNzQyMEFBMjI2MzI5RTY5QUU4Q0QyRUMwQ0U2 MEQ4Nzc2QTAeFw0yNjA3MjQwMTQ2MjhaFw0yNjA3MjUwMzUyMjhaMDMxMTAvBgNV BAMTKDg2MURDNjRDNDkyQTlDODA5NTRFMDMxMjg2Mjg1OEE3NTBCQUFFNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL4g4q3ulV6gHvPZTGxO+qeMNZ aCW11c/n2d0LPu8EYP9KeSucMd9YPlaR1Xme3uJ7xTUXly5o6EAT9e6HAvh3ueH4 JGym4s9IEzVQXO2S9Mtq3DqADo00tjpwtaI6jVNonxUhvFIoB9i0+JR9TtLdqqM+ 4b7Qz0jkhZ6HQ5PyJ8SsO5k1HmsTkmfCxiqrD/SQBKjH+l5ZcwwdTfCHyROxFUIh F7ld5lHIYrtkRi9lTY8LkrBDUJwgSRAxHQRZI4m6TM7SDOd6T81vKmL9lmSZSjpx gtClGDAPChxbwMUDz20/2MQFWhuEUOAb4geuB+tdWdIulM0ayS1rqtCbWlVxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhh3GTEkqnICVTgMShihYp1C6rlwwHwYDVR0j BBgwFoAUWqlPdCCqImMp5prozS7AzmDYd2owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ1MDA4YTAtMGFjMy00OThlLThjYmYtZjMxMTJiOTFiZGY0LzAvNUFBOTRGNzQy MEFBMjI2MzI5RTY5QUU4Q0QyRUMwQ0U2MEQ4Nzc2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUE5NEY3NDIwQUEyMjYzMjlFNjlBRThDRDJFQzBDRTYwRDg3 NzZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ1MDA4YTAtMGFjMy00OThlLThj YmYtZjMxMTJiOTFiZGY0LzAvNUFBOTRGNzQyMEFBMjI2MzI5RTY5QUU4Q0QyRUMw Q0U2MEQ4Nzc2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoTlzk5meFxMsQml0EybUzTDPEBC5WsKWKM f+pEXfxzgAeH51C7xsk4PHRCPNe/jqq+qo+5rB0MUCt6qapOgLPPGTKg+sxyEInw oxcR/MchT0/3mFsk87HykNQJgjPwkFwuC7VlmTyHwfu8+WgifT7+xUcZUzAtDoU7 hewMpC+DsOQw23IaKrkkCORoUgFFFeORI3sbNG/4ZhB4VmaEASb7z4Gi+6mP+ji4 oYSWMhWPk5y5rj+TguYgoAaMhF4gm++lYTtTnSfREndGOXUih08Rlr5uX2Moxh2f iaeCjyl3GtRr3B47PjP1JRWOGSfiPFHNNGpv/y2AEGDvWzBsKhI= -----END CERTIFICATE-----Generated at Fri Jul 24 12:09:37 2026 by rpki-client