$ rpki-client -vvf rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.mft File: E54912D936D5BF778FBB732E7E449916627DA941.mft (raw, json) Hash identifier: E4hmp3MGES1xQkN7VI38nWdzRjTwcrBsUti35izeGH8= Subject key identifier: 1A:5C:F5:FF:B7:6C:B8:DE:37:1E:11:36:FF:5A:51:5F:57:AB:84:0D Authority key identifier: E5:49:12:D9:36:D5:BF:77:8F:BB:73:2E:7E:44:99:16:62:7D:A9:41 Certificate issuer: /CN=E54912D936D5BF778FBB732E7E449916627DA941 Certificate serial: 2AE99D7268D4A3A56038AC9B0C934FBE6A8F244F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E54912D936D5BF778FBB732E7E449916627DA941.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:30:01 +0000 Manifest this update: Fri 24 Jul 2026 04:25:01 +0000 Manifest next update: Sat 25 Jul 2026 06:29:01 +0000 Files and hashes: 1: E54912D936D5BF778FBB732E7E449916627DA941.crl (hash: dtUlp9L+PbdrMvk1jcEnAp2BEtcP0f7GtCd1ifsqenM=) 2: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: afoPHznoH0e131M1W28pnPXY7hbzwID+nPCNXifuAL4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.crl rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E54912D936D5BF778FBB732E7E449916627DA941.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e9:9d:72:68:d4:a3:a5:60:38:ac:9b:0c:93:4f:be:6a:8f:24:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E54912D936D5BF778FBB732E7E449916627DA941 Validity Not Before: Jul 24 04:25:01 2026 GMT Not After : Jul 25 06:29:01 2026 GMT Subject: CN=1A5CF5FFB76CB8DE371E1136FF5A515F57AB840D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:21:6a:a2:63:e4:d9:11:a2:ae:7b:89:c6:32: ab:c9:73:9e:99:a3:e6:22:93:76:ac:8c:88:fa:73: 63:f0:eb:e9:de:00:6c:f6:58:19:2c:0a:e5:45:e7: a5:d0:09:1b:0e:0d:5e:6f:d6:2d:a8:66:50:de:a8: ee:6c:0b:c0:5d:05:f8:f9:17:fe:55:b9:21:53:36: cb:82:73:21:cb:9c:b9:c3:ec:66:96:da:d8:d7:0a: 53:b7:c7:97:c9:e4:3d:73:72:6a:27:99:04:0b:8c: e0:ec:9e:61:2c:a9:56:6f:b6:ca:a4:f4:b8:95:1c: 15:9b:03:31:3e:3a:20:df:89:2e:c2:e0:b1:6e:f6: f7:36:ef:32:0a:2d:0d:ca:d0:e3:ea:be:8f:10:0a: 4c:5e:9c:22:91:01:96:1a:83:87:70:f3:1d:ac:df: a2:9d:b7:8d:23:57:7a:9e:b3:19:68:e7:0d:a0:c4: 04:78:71:2d:f0:d2:e1:42:96:38:5a:87:20:b1:72: 09:2a:f6:fa:eb:76:6a:f7:bb:45:ec:cd:c7:c9:46: d8:61:65:b1:68:6c:9a:ce:59:02:cb:86:f6:79:64: 32:7f:62:7b:b0:dc:58:1a:1d:99:51:72:6b:b2:65: b7:4f:f6:8e:30:85:76:31:23:b2:8e:0d:4c:a0:72: fa:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5C:F5:FF:B7:6C:B8:DE:37:1E:11:36:FF:5A:51:5F:57:AB:84:0D X509v3 Authority Key Identifier: keyid:E5:49:12:D9:36:D5:BF:77:8F:BB:73:2E:7E:44:99:16:62:7D:A9:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E54912D936D5BF778FBB732E7E449916627DA941.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:dd:54:1b:73:20:e1:8c:97:05:6f:5b:08:37:c4:9f:e0:77: 65:ed:6b:eb:2c:cc:5b:30:57:bb:ad:7e:1f:af:b1:c5:fa:01: 19:75:79:81:d3:a6:a5:5b:f9:1f:b3:60:57:74:e3:d7:56:38: c6:2d:30:c3:28:a7:d1:ce:59:d0:7b:cd:55:ca:3d:26:b0:d3: 95:a8:ed:c8:76:99:e0:da:bc:9d:3c:0f:2f:1b:36:06:78:b9: fa:f2:2c:a0:12:ab:6d:34:61:a0:e4:80:9d:4f:0a:9b:a6:f6: 28:f9:b1:1d:a6:2b:3e:54:2a:91:77:a6:07:79:73:9f:2f:dd: 29:cb:e0:2b:0a:99:51:05:e0:1b:a7:2f:f0:a5:ed:19:fd:1a: 74:63:c7:c2:37:40:87:0f:bb:8d:75:38:ac:e9:47:b2:87:c5: f8:1f:3d:04:14:0e:c7:fc:ff:21:6a:1f:70:36:81:6a:0c:71: c1:b1:6e:05:c7:a1:07:d1:50:fb:d2:92:0b:37:c4:16:87:73: 4b:0a:00:0e:a9:a3:3a:e0:5e:db:74:13:cc:ff:97:50:ac:f3: 4b:a4:f3:d2:68:bd:74:f0:fb:9e:ca:17:ce:cf:51:0d:86:49: 80:d7:cf:af:6f:4a:06:26:c0:46:73:bb:eb:d3:cb:9d:51:a9: cc:1f:37:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKumdcmjUo6VgOKybDJNPvmqPJE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTU0OTEyRDkzNkQ1QkY3NzhGQkI3MzJFN0U0NDk5MTY2 MjdEQTk0MTAeFw0yNjA3MjQwNDI1MDFaFw0yNjA3MjUwNjI5MDFaMDMxMTAvBgNV BAMTKDFBNUNGNUZGQjc2Q0I4REUzNzFFMTEzNkZGNUE1MTVGNTdBQjg0MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPIWqiY+TZEaKue4nGMqvJc56Z o+Yik3asjIj6c2Pw6+neAGz2WBksCuVF56XQCRsODV5v1i2oZlDeqO5sC8BdBfj5 F/5VuSFTNsuCcyHLnLnD7GaW2tjXClO3x5fJ5D1zcmonmQQLjODsnmEsqVZvtsqk 9LiVHBWbAzE+OiDfiS7C4LFu9vc27zIKLQ3K0OPqvo8QCkxenCKRAZYag4dw8x2s 36Kdt40jV3qesxlo5w2gxAR4cS3w0uFCljhahyCxcgkq9vrrdmr3u0XszcfJRthh ZbFobJrOWQLLhvZ5ZDJ/Ynuw3FgaHZlRcmuyZbdP9o4whXYxI7KODUygcvrFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGlz1/7dsuN43HhE2/1pRX1erhA0wHwYDVR0j BBgwFoAU5UkS2TbVv3ePu3MufkSZFmJ9qUEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJiNWZhNGEtYmVhNi00NjRmLWI0MDktMTFkOWEzNzYxYTZjLzEvRTU0OTEyRDkz NkQ1QkY3NzhGQkI3MzJFN0U0NDk5MTY2MjdEQTk0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNTQ5MTJEOTM2RDVCRjc3OEZCQjczMkU3RTQ0OTkxNjYyN0RB OTQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvRTU0OTEyRDkzNkQ1QkY3NzhGQkI3MzJFN0U0NDk5 MTY2MjdEQTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTdVBtzIOGMlwVvWwg3xJ/gd2Xta+sszFsw V7utfh+vscX6ARl1eYHTpqVb+R+zYFd049dWOMYtMMMop9HOWdB7zVXKPSaw05Wo 7ch2meDavJ08Dy8bNgZ4ufryLKASq200YaDkgJ1PCpum9ij5sR2mKz5UKpF3pgd5 c58v3SnL4CsKmVEF4BunL/Cl7Rn9GnRjx8I3QIcPu411OKzpR7KHxfgfPQQUDsf8 /yFqH3A2gWoMccGxbgXHoQfRUPvSkgs3xBaHc0sKAA6pozrgXtt0E8z/l1Cs80uk 89JovXTw+57KF87PUQ2GSYDXz69vSgYmwEZzu+vTy51RqcwfN3U= -----END CERTIFICATE-----Generated at Fri Jul 24 10:04:12 2026 by rpki-client