$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft File: 5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft (raw, json) Hash identifier: pbO9Mt38iwjSByVwGbCZ3AzWpNGzqXj9X9DT3jFGbHQ= Subject key identifier: AD:36:F1:CB:E8:D2:CC:74:DE:D9:3B:F2:F1:18:04:AC:10:36:2A:05 Authority key identifier: 5D:10:A7:2C:87:21:CE:50:C0:93:BD:9B:5D:1A:C9:BB:6F:E9:34:95 Certificate issuer: /CN=5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495 Certificate serial: 0790139D59AD80648F896524FF13DAACFD1894AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 14:48:02 +0000 Manifest this update: Thu 23 Jul 2026 14:43:02 +0000 Manifest next update: Fri 24 Jul 2026 18:46:02 +0000 Files and hashes: 1: 5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl (hash: OWtlWlXX0lgEMzLDYvqgKlB5jmxDXQXsSCH5UBrPbEE=) 2: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: JniyB+kykIY2ndXJuy/YxGMo3Dbdi9UVhfqGmbiBAvY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:90:13:9d:59:ad:80:64:8f:89:65:24:ff:13:da:ac:fd:18:94:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495 Validity Not Before: Jul 23 14:43:02 2026 GMT Not After : Jul 24 18:46:02 2026 GMT Subject: CN=AD36F1CBE8D2CC74DED93BF2F11804AC10362A05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:57:f8:3e:8c:f0:dc:5e:b7:a4:cc:a8:52:77: 48:cc:90:c4:fe:d6:9b:18:e3:09:31:a4:39:44:b1: 56:b9:96:f3:5b:70:4a:ee:95:99:7b:b0:c5:fd:89: 0f:c7:86:47:2d:86:a9:4c:d5:cd:81:04:f2:b3:c6: 02:df:c2:87:c4:88:f2:c4:9d:d9:a8:41:11:62:c7: 04:73:bd:e4:50:a5:77:67:a0:cc:6f:ac:d4:8f:51: 43:55:a1:a2:e7:85:e8:f8:84:31:b7:51:14:7b:fd: 64:5c:ac:7c:f3:59:f2:1b:a0:47:ca:57:65:d9:15: c7:55:27:45:ec:48:1a:4a:41:9e:bc:5b:35:0b:0e: d8:fb:6f:4b:2e:32:79:80:92:62:b5:d2:63:f8:d0: 17:63:da:ce:74:b2:a6:74:f7:ec:09:c3:87:29:3b: 7d:dc:69:d7:1f:78:59:2a:07:24:a3:65:21:15:1e: 44:0f:a1:07:32:49:2e:2b:15:ec:41:b3:46:0e:9e: d8:eb:d3:a6:73:ef:7a:3b:f6:c8:e6:60:ae:86:5a: 96:97:1f:88:39:33:21:37:56:dc:95:3e:f5:27:29: 85:1d:ba:4b:f2:2a:6a:77:0b:04:d0:4d:78:68:21: c9:f3:a1:31:b9:d1:90:0b:78:dc:e9:fd:33:89:34: 66:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:36:F1:CB:E8:D2:CC:74:DE:D9:3B:F2:F1:18:04:AC:10:36:2A:05 X509v3 Authority Key Identifier: keyid:5D:10:A7:2C:87:21:CE:50:C0:93:BD:9B:5D:1A:C9:BB:6F:E9:34:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a2:35:15:78:ee:54:f0:19:fc:6e:de:a8:46:0b:a9:a2:be: 6b:d5:bc:2a:00:0b:85:ab:e6:b5:5e:52:c2:cd:4d:0f:e3:95: 51:06:aa:3a:5c:4b:46:80:d9:b5:22:2c:ec:c8:6b:9b:21:50: 0e:a0:b0:7b:98:35:6e:37:b3:29:9e:63:d7:c3:43:88:f6:43: 59:08:8b:79:d4:b0:57:48:5a:31:85:13:34:3b:ea:20:ab:f9: 6a:85:d8:85:94:38:2b:12:00:ee:8c:9e:8a:93:5f:40:ef:74: 81:39:fb:f9:e3:9f:01:d0:16:11:90:f8:09:8b:e8:d4:f8:47: 9f:b1:94:13:fb:13:f3:07:da:f6:8f:cf:d7:1f:cb:0c:dd:ba: c0:bb:b0:9b:f2:8c:69:5d:d7:75:fa:44:3e:92:84:f5:b0:d9: 2b:26:4d:3e:26:21:b3:d9:b6:8f:ae:34:1f:85:c0:e3:f1:70: f9:14:0a:01:64:5c:93:bf:74:ed:80:72:9a:bb:e8:15:8a:6a: 5c:76:b3:cc:79:ec:16:84:ff:52:94:8d:2d:99:92:48:10:99: d0:71:91:d7:b1:c5:43:61:ab:63:6f:e4:dc:62:6a:61:66:72: 23:ae:16:49:6b:39:9b:79:cd:72:b9:f9:ab:96:75:22:92:76: fc:3d:0d:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB5ATnVmtgGSPiWUk/xParP0YlKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxMEE3MkM4NzIxQ0U1MEMwOTNCRDlCNUQxQUM5QkI2 RkU5MzQ5NTAeFw0yNjA3MjMxNDQzMDJaFw0yNjA3MjQxODQ2MDJaMDMxMTAvBgNV BAMTKEFEMzZGMUNCRThEMkNDNzRERUQ5M0JGMkYxMTgwNEFDMTAzNjJBMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxV/g+jPDcXrekzKhSd0jMkMT+ 1psY4wkxpDlEsVa5lvNbcErulZl7sMX9iQ/HhkcthqlM1c2BBPKzxgLfwofEiPLE ndmoQRFixwRzveRQpXdnoMxvrNSPUUNVoaLnhej4hDG3URR7/WRcrHzzWfIboEfK V2XZFcdVJ0XsSBpKQZ68WzULDtj7b0suMnmAkmK10mP40Bdj2s50sqZ09+wJw4cp O33cadcfeFkqBySjZSEVHkQPoQcySS4rFexBs0YOntjr06Zz73o79sjmYK6GWpaX H4g5MyE3VtyVPvUnKYUdukvyKmp3CwTQTXhoIcnzoTG50ZALeNzp/TOJNGaxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrTbxy+jSzHTe2Tvy8RgErBA2KgUwHwYDVR0j BBgwFoAUXRCnLIchzlDAk72bXRrJu2/pNJUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRjMTAwN2QtZmQ2MS00NTQzLThmNWYtM2ZkZmZhNGIwMWU2LzAvNUQxMEE3MkM4 NzIxQ0U1MEMwOTNCRDlCNUQxQUM5QkI2RkU5MzQ5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RDEwQTcyQzg3MjFDRTUwQzA5M0JEOUI1RDFBQzlCQjZGRTkz NDk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvNUQxMEE3MkM4NzIxQ0U1MEMwOTNCRDlCNUQxQUM5 QkI2RkU5MzQ5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiiNRV47lTwGfxu3qhGC6mivmvVvCoAC4Wr 5rVeUsLNTQ/jlVEGqjpcS0aA2bUiLOzIa5shUA6gsHuYNW43symeY9fDQ4j2Q1kI i3nUsFdIWjGFEzQ76iCr+WqF2IWUOCsSAO6MnoqTX0DvdIE5+/njnwHQFhGQ+AmL 6NT4R5+xlBP7E/MH2vaPz9cfywzdusC7sJvyjGld13X6RD6ShPWw2SsmTT4mIbPZ to+uNB+FwOPxcPkUCgFkXJO/dO2Acpq76BWKalx2s8x57BaE/1KUjS2ZkkgQmdBx kdexxUNhq2Nv5NxiamFmciOuFklrOZt5zXK5+auWdSKSdvw9DXs= -----END CERTIFICATE-----Generated at Fri Jul 24 07:40:15 2026 by rpki-client