$ rpki-client -vvf rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft File: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft (raw, json) Hash identifier: wqgChuU8P8TD/AcXN9h+XfCmLHPFZcErzTStrpUGapg= Subject key identifier: 5C:DF:AD:2A:08:06:EA:E0:AD:6A:3D:20:64:91:49:94:1C:B0:D6:7E Authority key identifier: 5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 Certificate issuer: /CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Certificate serial: 6280FE1859206ECCA18D5B6B16BB92EB92CF2A4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 23:38:38 +0000 Manifest this update: Thu 23 Jul 2026 23:33:38 +0000 Manifest next update: Sat 25 Jul 2026 00:48:38 +0000 Files and hashes: 1: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl (hash: 9ct83+AfXkQKJ3sYXxFDUI1Z23i/3AU44OyknMtvh+U=) 2: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: YzbPSpHu4Y/3sNkzMjgGkQaP8RKL2rlB1MRk9WcO/JU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:80:fe:18:59:20:6e:cc:a1:8d:5b:6b:16:bb:92:eb:92:cf:2a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Validity Not Before: Jul 23 23:33:38 2026 GMT Not After : Jul 25 00:48:38 2026 GMT Subject: CN=5CDFAD2A0806EAE0AD6A3D20649149941CB0D67E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c0:99:51:65:68:70:cf:6a:2b:cb:a4:b3:22: 03:47:15:c9:49:a2:24:8e:14:dc:a1:30:8e:04:4a: 79:e7:d9:0c:89:ae:c5:d1:8b:09:c8:f5:2c:75:b8: 6c:8f:e6:99:fa:72:5e:aa:e5:6c:67:2f:e3:0c:c0: a3:f2:6d:d2:1d:8f:e8:ba:14:2b:cf:50:a2:ea:dc: 0d:33:5f:e3:94:ac:a4:ed:27:54:0e:47:7d:b3:1a: b1:c7:2e:48:48:cf:e0:e6:e5:d9:fb:b1:e1:b3:2d: aa:17:d0:d0:92:f1:22:9e:a4:d5:c3:3e:1c:91:cd: 12:f3:52:4d:10:d5:51:fd:e6:37:5c:78:fd:40:2b: d9:ac:01:13:92:9b:c3:10:f9:bd:ab:39:77:d2:20: 14:ee:8f:bc:6b:fd:76:13:c3:3e:b0:fb:dd:95:5a: 99:58:b3:46:98:66:3e:bf:3b:24:52:f3:56:ca:14: df:07:c5:22:5c:95:79:d5:a5:55:c6:d4:d4:bb:93: f2:97:8a:fc:05:ff:c5:ad:70:48:89:6b:63:65:0d: dd:1d:6e:da:db:03:52:61:87:51:c3:90:b7:7d:6d: 7c:07:93:08:71:bf:cf:1b:3a:e3:7b:b4:3f:97:c4: d6:4c:9e:cd:52:d4:7f:fe:ec:19:8d:b7:a8:2d:73: b6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DF:AD:2A:08:06:EA:E0:AD:6A:3D:20:64:91:49:94:1C:B0:D6:7E X509v3 Authority Key Identifier: keyid:5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:dc:96:57:e8:61:44:db:74:b3:fe:f6:c4:72:65:1f:0b:af: 28:73:ad:04:ce:67:7b:80:82:4e:b5:07:c5:2d:63:ab:56:49: 8b:85:11:35:71:87:98:12:44:00:0b:d4:fd:a9:9d:46:bc:5c: 43:0f:5b:e2:71:75:6c:ad:8f:3f:0f:5f:e3:2f:61:97:a3:82: f7:5c:50:c5:25:af:0f:14:7d:d3:34:46:cb:7a:b0:43:ce:23: bd:29:b8:8a:1b:23:4b:36:e7:1d:b3:29:fb:94:19:8c:b9:a0: 20:81:9f:33:4b:5b:28:62:c3:de:da:6f:e7:df:05:b9:97:2e: 10:c2:5c:50:65:d2:6a:27:54:8c:67:65:7a:1e:26:d4:57:7a: 9e:05:fe:bc:8b:0e:c5:11:72:58:d4:1e:d2:8e:43:4b:38:9b: 1a:6c:3b:4e:28:4c:4f:f6:c2:f0:76:41:68:f7:15:2c:8d:be: 59:79:9f:af:55:0b:7f:e9:63:8a:01:ea:0f:7c:7c:79:11:55: 6e:dc:cd:f9:dd:19:9d:a2:69:70:14:af:7d:9d:df:b7:30:61: 5d:3d:a6:d3:ef:98:92:bd:bb:61:2a:30:57:84:00:5d:62:6a: 38:7e:dc:bb:de:e3:9a:6d:e7:63:61:1b:90:2a:77:12:d2:20: 85:83:30:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYoD+GFkgbsyhjVtrFruS65LPKkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5 Q0NEN0RDNDAeFw0yNjA3MjMyMzMzMzhaFw0yNjA3MjUwMDQ4MzhaMDMxMTAvBgNV BAMTKDVDREZBRDJBMDgwNkVBRTBBRDZBM0QyMDY0OTE0OTk0MUNCMEQ2N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtwJlRZWhwz2ory6SzIgNHFclJ oiSOFNyhMI4ESnnn2QyJrsXRiwnI9Sx1uGyP5pn6cl6q5WxnL+MMwKPybdIdj+i6 FCvPUKLq3A0zX+OUrKTtJ1QOR32zGrHHLkhIz+Dm5dn7seGzLaoX0NCS8SKepNXD PhyRzRLzUk0Q1VH95jdceP1AK9msAROSm8MQ+b2rOXfSIBTuj7xr/XYTwz6w+92V WplYs0aYZj6/OyRS81bKFN8HxSJclXnVpVXG1NS7k/KXivwF/8WtcEiJa2NlDd0d btrbA1Jhh1HDkLd9bXwHkwhxv88bOuN7tD+XxNZMns1S1H/+7BmNt6gtc7bpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXN+tKggG6uCtaj0gZJFJlByw1n4wHwYDVR0j BBgwFoAUX8aJ6rlB0uD0A/TY/nuIZJzNfcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlOGJjYzktNDNhMS00YmFiLWI2ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFC OTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5Q0NEN0RDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkM2ODlFQUI5NDFEMkUwRjQwM0Y0RDhGRTdCODg2NDlDQ0Q3 REM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4 NjQ5Q0NEN0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFncllfoYUTbdLP+9sRyZR8LryhzrQTOZ3uA gk61B8UtY6tWSYuFETVxh5gSRAAL1P2pnUa8XEMPW+JxdWytjz8PX+MvYZejgvdc UMUlrw8UfdM0Rst6sEPOI70puIobI0s25x2zKfuUGYy5oCCBnzNLWyhiw97ab+ff BbmXLhDCXFBl0monVIxnZXoeJtRXep4F/ryLDsURcljUHtKOQ0s4mxpsO04oTE/2 wvB2QWj3FSyNvll5n69VC3/pY4oB6g98fHkRVW7czfndGZ2iaXAUr32d37cwYV09 ptPvmJK9u2EqMFeEAF1iajh+3Lve45pt52NhG5AqdxLSIIWDMNA= -----END CERTIFICATE-----Generated at Fri Jul 24 03:58:33 2026 by rpki-client