$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft File: F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft (raw, json) Hash identifier: 50/V/m5oGMc/jVWnutRO8oGAOG8f5RESsKw/ybrMSp4= Subject key identifier: C1:1A:9D:2B:9A:47:7A:A6:59:1C:A7:4F:25:09:0E:D3:A5:9B:A0:C4 Authority key identifier: F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A Certificate issuer: /CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A Certificate serial: 2B4031938114AF8F0C9C80C876B07C9B1CBA7E8D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 15:23:42 +0000 Manifest this update: Thu 23 Jul 2026 15:18:42 +0000 Manifest next update: Fri 24 Jul 2026 18:42:42 +0000 Files and hashes: 1: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: QWT8clnM0WSHO8g469pTliT/WCBN4Kmg5lPcdlpi8/s=) 2: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: +WK4iRrSPfnkrJEz8Gq8cT5bkygdZQkUoe49fePODB0=) 3: F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl (hash: yPSPyuvLbDgAkXtUe5Vj2PzNPszEyArrYFin/rox4/I=) 4: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: cRnHdJ6ERY/gOe2MatEAOxOT41WEyNcMegmve8GczJo=) 5: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: pZiifrcLbDchRtYwQAPaQx4TCr202zft6iysN0v48zg=) 6: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: noFGhrWS2shsN12iREyShnTzBgPrE7wgh7GcY82aKhc=) 7: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: +u/9D9vfsyaLH2MwRf/oL8GHy2QY5reW5CdS1r9iLUo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:40:31:93:81:14:af:8f:0c:9c:80:c8:76:b0:7c:9b:1c:ba:7e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A Validity Not Before: Jul 23 15:18:42 2026 GMT Not After : Jul 24 18:42:42 2026 GMT Subject: CN=C11A9D2B9A477AA6591CA74F25090ED3A59BA0C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a1:0d:9b:6e:5c:0f:b8:26:ca:cb:69:fa:57: b1:57:d9:23:34:89:72:05:81:ba:8b:89:81:0d:ca: 7f:5e:72:a3:77:97:f3:e2:bc:e4:fe:ac:6a:40:20: 42:87:8d:2b:b8:a7:df:87:ff:d0:f9:ec:19:ca:55: 1c:56:87:40:4a:f9:e8:0b:17:39:66:d6:ed:7f:c1: 71:5e:6b:16:20:c6:2a:50:a4:30:14:e4:d5:be:44: 32:16:21:9a:8c:e7:87:7d:ea:d8:06:98:80:0d:f9: 28:f9:23:5e:fc:14:35:f6:dd:9b:9b:86:4a:e4:9c: 15:c7:de:4d:6b:24:df:24:90:b5:73:35:76:e2:56: 64:88:43:8d:ee:22:40:95:2b:db:29:ec:17:41:cc: 63:88:c6:d6:15:ad:c4:ca:0e:4b:31:41:75:b6:26: 2b:de:f9:54:6f:bc:37:f4:b9:bb:cc:91:0c:10:91: a1:48:b3:e2:6c:5d:bd:8a:e4:ca:1e:4b:7f:fa:4d: 31:ee:2d:24:e9:bb:ed:0d:24:9d:81:d3:33:d8:3d: 24:fb:1d:cd:3c:72:04:c9:e3:79:3d:13:01:ec:32: 53:48:01:c1:47:9a:24:51:cf:38:4c:c2:9e:d0:7a: db:66:a5:ff:0f:54:b5:23:50:ad:6d:82:6e:c6:e7: ef:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1A:9D:2B:9A:47:7A:A6:59:1C:A7:4F:25:09:0E:D3:A5:9B:A0:C4 X509v3 Authority Key Identifier: keyid:F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1d:d3:17:a6:47:ae:0d:71:3b:a4:77:ee:c4:c8:8e:a0:6d: a1:43:07:8c:80:07:22:1d:89:21:17:a1:35:9c:dc:2f:27:56: bf:f3:21:30:f3:80:71:b6:f9:51:04:6a:b3:75:e1:6b:06:59: 18:4d:ec:7f:ef:2f:6c:10:47:40:ac:38:5f:6d:20:c9:ee:0c: c8:74:da:1b:2f:9f:d2:a8:cc:a3:85:cf:75:67:9e:38:58:47: e5:46:09:64:ea:3f:b7:50:54:5b:67:43:26:70:48:3d:d2:2d: 11:f8:95:2d:b5:0d:7e:be:03:1a:a9:4a:9f:da:58:94:e0:e5: cd:10:c0:7a:fd:8f:66:0e:62:04:a8:5f:7b:2e:c3:5b:1c:4b: 08:2f:99:d6:86:cd:49:7d:a5:36:14:fa:f6:11:fa:76:7e:40: 57:63:58:e1:10:c5:4b:e6:e9:29:50:4c:a1:8f:3f:8b:db:0e: 0e:c5:ff:08:6c:00:42:a7:6b:8b:61:0d:8b:13:08:77:73:dc: 47:a6:da:da:15:5d:2e:be:84:22:30:5a:a5:10:db:b5:f5:5f: 40:f3:c6:d1:0d:b3:df:6a:9d:02:3e:de:9d:ba:52:d4:50:d6: 69:96:e7:0c:e8:97:ec:ac:c5:d6:94:b1:fd:3c:39:70:93:d2: ae:4a:db:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK0Axk4EUr48MnIDIdrB8mxy6fo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVFMTMzQkNFNTAxNEI3QTc5QUU2RThFNDgwQkMzNUJE M0MzMTg3QTAeFw0yNjA3MjMxNTE4NDJaFw0yNjA3MjQxODQyNDJaMDMxMTAvBgNV BAMTKEMxMUE5RDJCOUE0NzdBQTY1OTFDQTc0RjI1MDkwRUQzQTU5QkEwQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9oQ2bblwPuCbKy2n6V7FX2SM0 iXIFgbqLiYENyn9ecqN3l/PivOT+rGpAIEKHjSu4p9+H/9D57BnKVRxWh0BK+egL Fzlm1u1/wXFeaxYgxipQpDAU5NW+RDIWIZqM54d96tgGmIAN+Sj5I178FDX23Zub hkrknBXH3k1rJN8kkLVzNXbiVmSIQ43uIkCVK9sp7BdBzGOIxtYVrcTKDksxQXW2 Jive+VRvvDf0ubvMkQwQkaFIs+JsXb2K5MoeS3/6TTHuLSTpu+0NJJ2B0zPYPST7 Hc08cgTJ43k9EwHsMlNIAcFHmiRRzzhMwp7Qettmpf8PVLUjUK1tgm7G5+/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwRqdK5pHeqZZHKdPJQkO06WboMQwHwYDVR0j BBgwFoAU9eEzvOUBS3p5rm6OSAvDW9PDGHowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNlNDUwMzktNmVkMC00ODNkLWExYjktYzRmNDg1NGM1Y2Y1LzAvRjVFMTMzQkNF NTAxNEI3QTc5QUU2RThFNDgwQkMzNUJEM0MzMTg3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNUUxMzNCQ0U1MDE0QjdBNzlBRTZFOEU0ODBCQzM1QkQzQzMx ODdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvRjVFMTMzQkNFNTAxNEI3QTc5QUU2RThFNDgwQkMz NUJEM0MzMTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0d0xemR64NcTukd+7EyI6gbaFDB4yAById iSEXoTWc3C8nVr/zITDzgHG2+VEEarN14WsGWRhN7H/vL2wQR0CsOF9tIMnuDMh0 2hsvn9KozKOFz3VnnjhYR+VGCWTqP7dQVFtnQyZwSD3SLRH4lS21DX6+AxqpSp/a WJTg5c0QwHr9j2YOYgSoX3suw1scSwgvmdaGzUl9pTYU+vYR+nZ+QFdjWOEQxUvm 6SlQTKGPP4vbDg7F/whsAEKna4thDYsTCHdz3Eem2toVXS6+hCIwWqUQ27X1X0Dz xtENs99qnQI+3p26UtRQ1mmW5wzol+ysxdaUsf08OXCT0q5K2wA= -----END CERTIFICATE-----Generated at Fri Jul 24 10:57:27 2026 by rpki-client