$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft File: D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft (raw, json) Hash identifier: KaKmFyW71PUD9U0Ymll+pnfdjAbu31/Nm2TJ5m0X/fE= Subject key identifier: BE:9C:36:EC:A2:E4:D8:CD:B7:5F:50:B0:26:CE:7D:86:8C:9A:D4:AD Authority key identifier: D5:CE:8C:4E:21:EC:81:F4:95:8C:F6:07:42:0F:1E:EB:48:B2:E5:EC Certificate issuer: /CN=D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC Certificate serial: 66D0E014F5DB5C48E789E7CAEC73E81CD29EBF44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 10:43:09 +0000 Manifest this update: Thu 23 Jul 2026 10:38:09 +0000 Manifest next update: Fri 24 Jul 2026 12:55:09 +0000 Files and hashes: 1: 3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa (hash: c5ycRdkZmzicMcHlVxH8DNqWq6vMY1pMgkNwLRJ1u08=) 2: 3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa (hash: Zd8dKndrIl4VSQfqixAyA/TOWCY5DaeyRMvOby+h3uw=) 3: 3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa (hash: RqUjB86YVPgt7tRWRmn7/EkRMj2UXiSSsOWSw1LcnVs=) 4: D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl (hash: GPMMvrtkvZviNv+6DszQ0yEJi5+ZoHD3RuFnifRKH9k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d0:e0:14:f5:db:5c:48:e7:89:e7:ca:ec:73:e8:1c:d2:9e:bf:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC Validity Not Before: Jul 23 10:38:09 2026 GMT Not After : Jul 24 12:55:09 2026 GMT Subject: CN=BE9C36ECA2E4D8CDB75F50B026CE7D868C9AD4AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:14:ac:55:d9:ba:c2:9c:00:f8:47:16:7b: 71:5b:63:f9:6a:8e:86:7a:c7:97:3d:0d:f1:35:2e: 31:aa:dd:bb:06:6d:79:ec:e7:ce:07:66:ff:9d:00: 04:af:a1:7e:c4:9c:dd:17:72:c0:b9:29:b3:ab:a1: b4:44:22:d5:68:99:0a:f8:2d:05:d6:bd:34:57:b3: 99:89:46:0a:30:86:5b:8f:2b:bd:ea:f6:60:ca:55: d7:02:a2:cc:9f:07:8a:dd:24:39:49:dd:92:c6:ee: 6b:be:1a:6a:9b:e7:6d:bb:16:b4:19:89:40:9c:05: 3b:00:f3:31:6a:f3:29:f5:98:4f:40:d2:49:2b:88: eb:ba:d5:8a:6d:e1:2d:de:6c:24:c8:8c:1f:40:fe: 8b:24:f5:5e:60:94:a1:f9:7f:76:26:db:f3:a8:cc: ff:37:a2:2c:5c:3e:bd:95:27:9d:cc:e6:42:56:96: c2:18:33:ef:43:40:3c:b0:1a:d4:64:ce:8c:13:67: fd:d3:d0:e5:6f:e4:f5:44:49:97:35:69:00:68:7a: 65:69:79:a5:a6:f7:51:05:53:d5:5f:78:d8:5f:dd: 36:b5:94:fe:b0:c4:93:72:b2:5d:d8:79:45:20:c0: 53:8a:ac:1a:0d:72:95:3c:f1:0e:13:6d:61:f7:77: 9e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9C:36:EC:A2:E4:D8:CD:B7:5F:50:B0:26:CE:7D:86:8C:9A:D4:AD X509v3 Authority Key Identifier: keyid:D5:CE:8C:4E:21:EC:81:F4:95:8C:F6:07:42:0F:1E:EB:48:B2:E5:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f5:86:2d:d6:a9:a0:a2:d7:a4:3b:68:0c:4a:67:7d:8a:2a: 3d:c5:54:de:19:21:04:9f:63:92:7c:8b:f4:2c:46:14:1f:6c: 93:7b:a3:86:1b:c9:2a:b9:64:cd:10:09:ae:77:51:a0:b7:42: 86:77:77:cb:07:4f:7c:06:a8:0f:9b:88:d9:d6:9b:28:67:a8: 89:5f:74:98:8c:5d:9d:b4:14:2b:76:25:4c:db:98:b3:f3:be: da:81:51:be:b1:e4:c5:39:b2:66:96:4f:b8:74:16:e0:c8:06: 3d:01:c2:b4:2c:e9:9b:76:1b:7e:11:44:ab:f2:cc:fc:b1:bb: a6:35:49:83:95:5e:c9:2b:5f:aa:d2:93:9b:7e:3e:bf:55:95: ab:89:72:86:77:e2:59:23:82:55:0f:ad:65:01:9f:fd:1b:10: f6:65:6c:b4:2d:e7:d5:06:eb:e6:24:42:2d:14:8e:17:b7:dd: ae:dc:b4:0d:3f:27:f2:a3:01:ff:5f:e0:31:e7:5b:6d:8c:c1: 4a:c0:3e:ad:06:f0:ae:8d:77:9e:fe:f9:9b:b5:37:c3:4d:40: 68:15:e3:ba:f9:7f:b8:30:ee:14:ca:c4:01:83:e2:b9:e3:cc: 73:b7:33:1f:90:68:98:54:b5:ce:9b:20:ed:a7:a4:9f:1c:ea: a2:12:df:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtDgFPXbXEjniefK7HPoHNKev0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDRThDNEUyMUVDODFGNDk1OENGNjA3NDIwRjFFRUI0 OEIyRTVFQzAeFw0yNjA3MjMxMDM4MDlaFw0yNjA3MjQxMjU1MDlaMDMxMTAvBgNV BAMTKEJFOUMzNkVDQTJFNEQ4Q0RCNzVGNTBCMDI2Q0U3RDg2OEM5QUQ0QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5SRSsVdm6wpwA+EcWe3FbY/lq joZ6x5c9DfE1LjGq3bsGbXns584HZv+dAASvoX7EnN0XcsC5KbOrobREItVomQr4 LQXWvTRXs5mJRgowhluPK73q9mDKVdcCosyfB4rdJDlJ3ZLG7mu+Gmqb5227FrQZ iUCcBTsA8zFq8yn1mE9A0kkriOu61Ypt4S3ebCTIjB9A/osk9V5glKH5f3Ym2/Oo zP83oixcPr2VJ53M5kJWlsIYM+9DQDywGtRkzowTZ/3T0OVv5PVESZc1aQBoemVp eaWm91EFU9VfeNhf3Ta1lP6wxJNysl3YeUUgwFOKrBoNcpU88Q4TbWH3d57pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvpw27KLk2M23X1CwJs59hoya1K0wHwYDVR0j BBgwFoAU1c6MTiHsgfSVjPYHQg8e60iy5ewwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTVjOGI5ZTMtYjQ0Zi00OTBiLWJmNTEtOTlmMmRkMmExMzY0LzAvRDVDRThDNEUy MUVDODFGNDk1OENGNjA3NDIwRjFFRUI0OEIyRTVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUNFOEM0RTIxRUM4MUY0OTU4Q0Y2MDc0MjBGMUVFQjQ4QjJF NUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTVjOGI5ZTMtYjQ0Zi00OTBiLWJm NTEtOTlmMmRkMmExMzY0LzAvRDVDRThDNEUyMUVDODFGNDk1OENGNjA3NDIwRjFF RUI0OEIyRTVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIr1hi3WqaCi16Q7aAxKZ32KKj3FVN4ZIQSf Y5J8i/QsRhQfbJN7o4YbySq5ZM0QCa53UaC3QoZ3d8sHT3wGqA+biNnWmyhnqIlf dJiMXZ20FCt2JUzbmLPzvtqBUb6x5MU5smaWT7h0FuDIBj0BwrQs6Zt2G34RRKvy zPyxu6Y1SYOVXskrX6rSk5t+Pr9VlauJcoZ34lkjglUPrWUBn/0bEPZlbLQt59UG 6+YkQi0Ujhe33a7ctA0/J/KjAf9f4DHnW22MwUrAPq0G8K6Nd57++Zu1N8NNQGgV 47r5f7gw7hTKxAGD4rnjzHO3Mx+QaJhUtc6bIO2npJ8c6qIS38c= -----END CERTIFICATE-----Generated at Fri Jul 24 01:17:57 2026 by rpki-client