$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft File: 5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft (raw, json) Hash identifier: v8PUYsIwhJ5EM1EVlnLUvJcOf2YaADSf5dTm4/sk2l8= Subject key identifier: DF:89:35:72:1C:B0:AD:62:DC:CA:09:A1:FD:68:92:F8:0D:2E:84:7E Authority key identifier: 5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64 Certificate issuer: /CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564 Certificate serial: 43B5E3E4D7A63CBB09B4F1664BA8A6CB2ED1E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:55:38 +0000 Manifest this update: Thu 23 Jul 2026 16:50:38 +0000 Manifest next update: Fri 24 Jul 2026 18:18:38 +0000 Files and hashes: 1: 3130332e3134322e38392e302f32342d3234203d3e20313339333638.roa (hash: 4JRcCjrbt6UQy9keTGtyxuVyA16nB/RDNc0x3IcBoFU=) 2: 3130332e3134322e38382e302f32332d3233203d3e20313339333638.roa (hash: 85nzKNKm1prDMlKjYCs/G3skXgXdFpd3BSx7AhsXh80=) 3: 5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl (hash: YD+x1mMzAd3SZT3jCt1xaBzwXiWio0LuG7tCLO9FfYc=) 4: 3130332e3134322e38382e302f32342d3234203d3e20313339333638.roa (hash: tQktaum4KycUd3NVfEb+S8gEbr6uIhyBlDiFsL9oiH8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b5:e3:e4:d7:a6:3c:bb:09:b4:f1:66:4b:a8:a6:cb:2e:d1:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564 Validity Not Before: Jul 23 16:50:38 2026 GMT Not After : Jul 24 18:18:38 2026 GMT Subject: CN=DF8935721CB0AD62DCCA09A1FD6892F80D2E847E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:34:1c:6b:6c:3a:37:c3:13:68:ae:17:b3:ac: ce:45:fe:f4:2f:0b:a9:a2:7d:c9:be:50:bb:53:fb: d1:ec:34:b5:97:54:79:41:0d:e6:7c:fa:0e:b2:d6: c6:e7:34:f6:f1:d4:1f:dd:33:40:5c:34:d7:9a:ad: 15:23:ee:a2:b0:15:00:93:65:f9:07:1b:8a:46:e8: e2:1b:9e:12:a5:99:2d:fe:7e:01:5d:b6:89:0c:30: 96:5c:fe:93:3a:62:1d:e9:e5:85:e6:16:c4:15:57: d7:19:71:bd:90:1a:5d:0d:c7:10:84:db:87:ba:99: 25:f2:73:af:1f:a3:ef:e0:fb:42:88:34:8d:81:0d: 3e:23:00:df:7f:19:b0:35:58:20:0a:65:9f:69:63: 6f:cd:25:84:ee:63:bc:78:c2:d8:4a:5c:ee:b1:76: 15:df:83:f6:61:66:c4:4b:f9:c0:09:9d:f2:3f:f3: 3e:32:9f:d0:25:ea:54:d6:0e:6d:db:35:2d:d6:92: 44:60:78:8e:4e:0b:96:5f:d7:cf:9b:fd:63:ce:af: f7:1d:e2:1a:33:45:d8:7b:9f:24:5c:62:ae:48:28: 96:a6:13:0c:22:ae:b8:d1:d2:d8:8c:00:1c:dd:27: 21:80:af:0f:dd:b2:33:91:b0:f0:b0:e5:d9:65:73: 22:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:89:35:72:1C:B0:AD:62:DC:CA:09:A1:FD:68:92:F8:0D:2E:84:7E X509v3 Authority Key Identifier: keyid:5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c2:ae:25:55:a6:1a:8b:87:37:68:ff:85:f1:5d:95:f5:96: 61:f9:8d:20:4f:e0:10:b5:c2:0b:d0:d5:05:18:12:d1:94:c3: d3:27:82:cf:e3:09:c0:29:9a:fc:ef:43:8d:ad:53:69:d6:e4: f5:6a:ac:3d:1a:af:8e:64:6e:0c:ff:3c:db:25:3c:a4:9b:6b: 25:5b:96:68:66:38:cb:fd:75:4c:58:20:47:14:e3:df:c0:9c: e5:fa:bb:26:af:23:18:ab:f4:2e:1e:e6:fe:67:7a:29:88:6a: f7:0a:4d:f9:e7:60:1b:46:93:b3:96:5f:84:ab:13:cb:0c:81: bb:4b:d2:bb:2c:b2:1e:17:98:35:95:bb:59:b5:df:ff:af:7b: ff:d9:66:f7:b3:fd:bc:80:df:8a:60:b7:8b:d9:f6:38:58:15: b2:83:7e:28:53:74:f7:e4:fa:ad:b1:28:b9:48:83:de:af:26: 21:97:60:7e:d1:8e:c1:0c:7a:6b:74:42:b7:fa:00:15:a6:dc: 7b:3a:27:f0:9f:84:50:d1:a8:7d:84:54:a4:bf:13:a3:55:7d: 9f:86:97:c7:b2:19:42:54:bb:8e:87:cb:42:c6:60:30:5b:8c: 2e:9f:43:e9:d0:18:81:2e:86:d3:ad:01:10:2e:36:b4:f0:26: ca:bb:9b:03 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITQ7Xj5NemPLsJtPFmS6imyy7R4TANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg1REY1REJCMTQ4RDBGNEVBQkIxQTcwODdEOENBRDg3RkIy QTkxNTY0MB4XDTI2MDcyMzE2NTAzOFoXDTI2MDcyNDE4MTgzOFowMzExMC8GA1UE AxMoREY4OTM1NzIxQ0IwQUQ2MkRDQ0EwOUExRkQ2ODkyRjgwRDJFODQ3RTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALM0HGtsOjfDE2iuF7OszkX+9C8L qaJ9yb5Qu1P70ew0tZdUeUEN5nz6DrLWxuc09vHUH90zQFw015qtFSPuorAVAJNl +Qcbikbo4hueEqWZLf5+AV22iQwwllz+kzpiHenlheYWxBVX1xlxvZAaXQ3HEITb h7qZJfJzrx+j7+D7Qog0jYENPiMA338ZsDVYIApln2ljb80lhO5jvHjC2Epc7rF2 Fd+D9mFmxEv5wAmd8j/zPjKf0CXqVNYObds1LdaSRGB4jk4Lll/Xz5v9Y86v9x3i GjNF2HufJFxirkgolqYTDCKuuNHS2IwAHN0nIYCvD92yM5Gw8LDl2WVzIp0CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTfiTVyHLCtYtzKCaH9aJL4DS6EfjAfBgNVHSME GDAWgBRd9duxSND06rsacIfYyth/sqkVZDAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9l ZDQ5ZDQ5Yi1kYWVhLTQ4YzAtOGQ3Ny0xMzczOGI3NDU3NzIvMC81REY1REJCMTQ4 RDBGNEVBQkIxQTcwODdEOENBRDg3RkIyQTkxNTY0LmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzVERjVEQkIxNDhEMEY0RUFCQjFBNzA4N0Q4Q0FEODdGQjJBOTE1 NjQuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lZDQ5ZDQ5Yi1kYWVhLTQ4YzAtOGQ3 Ny0xMzczOGI3NDU3NzIvMC81REY1REJCMTQ4RDBGNEVBQkIxQTcwODdEOENBRDg3 RkIyQTkxNTY0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAHMKuJVWmGouHN2j/hfFdlfWWYfmNIE/gELXC C9DVBRgS0ZTD0yeCz+MJwCma/O9Dja1Tadbk9WqsPRqvjmRuDP882yU8pJtrJVuW aGY4y/11TFggRxTj38Cc5fq7Jq8jGKv0Lh7m/md6KYhq9wpN+edgG0aTs5ZfhKsT ywyBu0vSuyyyHheYNZW7WbXf/697/9lm97P9vIDfimC3i9n2OFgVsoN+KFN09+T6 rbEouUiD3q8mIZdgftGOwQx6a3RCt/oAFabcezon8J+EUNGofYRUpL8To1V9n4aX x7IZQlS7jofLQsZgMFuMLp9D6dAYgS6G060BEC42tPAmyrubAw== -----END CERTIFICATE-----Generated at Fri Jul 24 06:20:21 2026 by rpki-client