$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft File: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft (raw, json) Hash identifier: lhH8Gg3vQcAMdn6/W9nRhm9OfNmcYPlhrDf2z/SH474= Subject key identifier: BC:01:B5:EC:B0:D9:0F:D2:7D:9F:4A:6C:8A:29:0E:B9:99:5E:36:B4 Authority key identifier: 5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 Certificate issuer: /CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Certificate serial: 2B17AA2F73B7944D773306E3097A06AD4A9CF992 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 17:21:15 +0000 Manifest this update: Thu 23 Jul 2026 17:16:15 +0000 Manifest next update: Fri 24 Jul 2026 18:56:15 +0000 Files and hashes: 1: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: YDSkpFGq8xybThgooh1RThJN9W0fBsfNyr37Omd1f4w=) 2: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: FXO9CsmctV8fdA5KiII/rw/3Y+5l9AlF4P2ED3TDR8A=) 3: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl (hash: KxLz94R8OEqdNiiSwSEIuQS/Me4h9mU6p4dWF2xSQDI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:17:aa:2f:73:b7:94:4d:77:33:06:e3:09:7a:06:ad:4a:9c:f9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Validity Not Before: Jul 23 17:16:15 2026 GMT Not After : Jul 24 18:56:15 2026 GMT Subject: CN=BC01B5ECB0D90FD27D9F4A6C8A290EB9995E36B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:79:5f:04:7a:1d:d0:02:76:30:7d:4d:cc: 1c:82:92:bb:19:25:54:13:9a:76:98:8d:60:2c:46: 4d:5f:4c:b8:78:ac:e3:fe:00:ff:5b:da:d0:fd:94: 96:09:37:c8:88:60:92:bb:47:3f:bc:8d:99:28:bb: 32:02:f8:7f:05:c2:91:8f:a0:bd:c8:26:3b:29:2c: 0d:b1:19:99:65:74:50:1f:7f:93:ff:03:bb:b6:52: e9:89:9d:1f:d6:37:f5:20:65:09:14:2b:a7:75:65: 79:c8:55:27:53:c0:92:57:03:18:0f:a4:6a:08:4e: c5:85:46:fe:4b:90:ab:65:83:25:a3:fa:8b:81:01: 46:87:be:58:f2:c7:fb:a4:49:5f:5a:4f:97:73:51: 60:02:c7:c1:32:f0:d1:49:7a:c8:09:96:d3:16:31: a0:82:dc:ac:6a:3d:af:4d:ce:4f:5f:82:af:e5:5c: 64:7c:12:89:e4:a3:49:84:1c:03:ef:8c:ec:15:21: 6b:d7:99:d6:2e:46:c7:eb:a9:83:dc:88:f4:8d:8b: f0:b7:44:6a:8d:bb:0d:61:80:a7:ca:7c:4a:79:91: 53:3a:c4:ca:b8:d8:fc:01:79:69:28:43:19:aa:76: 95:12:2f:8c:45:63:bd:a7:ff:8c:10:c3:cb:24:57: 1f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:01:B5:EC:B0:D9:0F:D2:7D:9F:4A:6C:8A:29:0E:B9:99:5E:36:B4 X509v3 Authority Key Identifier: keyid:5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f0:0c:11:13:2d:ea:a8:83:7e:b1:71:ff:8c:70:47:4c:c3: 36:73:75:ff:e0:df:cc:56:3d:29:93:29:1a:97:11:f0:46:1b: 7a:8d:27:09:dd:02:f4:16:06:67:d8:cc:20:36:ac:91:e6:73: d0:fd:b8:2d:7b:63:dd:7e:3f:52:ba:43:16:7d:c1:bd:70:7f: b4:3b:5a:f6:d4:75:4c:81:56:b4:27:10:2f:82:a5:35:4b:5b: 0d:56:47:32:46:6c:b6:0a:61:c1:be:df:3c:f2:d2:ab:39:3e: b8:c9:2b:36:1f:2c:d1:b0:9a:b0:fe:1d:0b:7d:51:25:56:3b: cd:fa:c9:5e:8e:5b:f1:ae:f9:7b:1f:7a:7d:55:d4:28:0c:06: b3:10:fa:8f:09:ea:b0:5f:66:eb:08:85:a3:e7:97:96:c2:56: f9:43:fc:26:64:ec:9c:63:d7:6f:ef:f1:fb:7e:6f:a7:8f:76: 4a:eb:23:92:c6:0b:87:9e:f5:90:5e:29:a9:c0:e7:58:20:d2: b5:2d:17:7f:1c:0e:45:b4:16:d8:bc:26:7d:a4:ac:21:15:f0: 5e:e5:8d:7c:09:1e:dc:d5:ea:57:04:e7:a8:dd:23:9f:df:18: 4c:82:22:12:05:5b:0e:55:fb:63:28:65:ce:3e:60:88:36:c7: 5c:83:b9:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKxeqL3O3lE13MwbjCXoGrUqc+ZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3NDQ1QzFFMTM3NkU0QTdCNDA0QkM1M0E3MUFDOTI3 RDJDMjIwNDAeFw0yNjA3MjMxNzE2MTVaFw0yNjA3MjQxODU2MTVaMDMxMTAvBgNV BAMTKEJDMDFCNUVDQjBEOTBGRDI3RDlGNEE2QzhBMjkwRUI5OTk1RTM2QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14nlfBHod0AJ2MH1NzByCkrsZ JVQTmnaYjWAsRk1fTLh4rOP+AP9b2tD9lJYJN8iIYJK7Rz+8jZkouzIC+H8FwpGP oL3IJjspLA2xGZlldFAff5P/A7u2UumJnR/WN/UgZQkUK6d1ZXnIVSdTwJJXAxgP pGoITsWFRv5LkKtlgyWj+ouBAUaHvljyx/ukSV9aT5dzUWACx8Ey8NFJesgJltMW MaCC3KxqPa9Nzk9fgq/lXGR8Eonko0mEHAPvjOwVIWvXmdYuRsfrqYPciPSNi/C3 RGqNuw1hgKfKfEp5kVM6xMq42PwBeWkoQxmqdpUSL4xFY72n/4wQw8skVx/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvAG17LDZD9J9n0psiikOuZleNrQwHwYDVR0j BBgwFoAUXHRFweE3bkp7QEvFOnGskn0sIgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM3MmVlM2MtZTE4MC00Mjk2LTlkYWQtOTUwMGVmZDk0ODkwLzAvNUM3NDQ1QzFF MTM3NkU0QTdCNDA0QkM1M0E3MUFDOTI3RDJDMjIwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Qzc0NDVDMUUxMzc2RTRBN0I0MDRCQzUzQTcxQUM5MjdEMkMy MjA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvNUM3NDQ1QzFFMTM3NkU0QTdCNDA0QkM1M0E3MUFD OTI3RDJDMjIwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPwDBETLeqog36xcf+McEdMwzZzdf/g38xW PSmTKRqXEfBGG3qNJwndAvQWBmfYzCA2rJHmc9D9uC17Y91+P1K6QxZ9wb1wf7Q7 WvbUdUyBVrQnEC+CpTVLWw1WRzJGbLYKYcG+3zzy0qs5PrjJKzYfLNGwmrD+HQt9 USVWO836yV6OW/Gu+Xsfen1V1CgMBrMQ+o8J6rBfZusIhaPnl5bCVvlD/CZk7Jxj 12/v8ft+b6ePdkrrI5LGC4ee9ZBeKanA51gg0rUtF38cDkW0Fti8Jn2krCEV8F7l jXwJHtzV6lcE56jdI5/fGEyCIhIFWw5V+2MoZc4+YIg2x1yDuS4= -----END CERTIFICATE-----Generated at Fri Jul 24 07:02:07 2026 by rpki-client