$ rpki-client -vvf rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft File: D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft (raw, json) Hash identifier: tGjpc/IIvLPqbUCe/y3FQBfToeZXK5DrVnDXGZN0PEY= Subject key identifier: 31:71:D8:34:E5:D0:FB:71:CF:26:55:C8:08:81:FB:F3:A7:04:57:1D Authority key identifier: D5:B2:BC:B4:D7:CD:44:98:6E:0C:DE:AB:B1:9A:3E:8D:A8:ED:A3:DE Certificate issuer: /CN=D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE Certificate serial: 26A5269E9973F591A55FE95DBA251DE493C05363 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft Manifest number: 6A Signing time: Tue 21 Jul 2026 00:05:53 +0000 Manifest this update: Tue 21 Jul 2026 00:00:53 +0000 Manifest next update: Wed 22 Jul 2026 02:19:53 +0000 Files and hashes: 1: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (hash: Mbf898IR+Gt5QKErijFC4UdXVW5evXBibnE21kjCzDc=) 2: D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.crl (hash: fvoaNY7Qpb8B5hFcmErvCetdtRwLX1CEAQkwVRgAv1E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.crl rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:a5:26:9e:99:73:f5:91:a5:5f:e9:5d:ba:25:1d:e4:93:c0:53:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE Validity Not Before: Jul 21 00:00:53 2026 GMT Not After : Jul 22 02:19:53 2026 GMT Subject: CN=3171D834E5D0FB71CF2655C80881FBF3A704571D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9b:15:82:76:48:76:73:64:a1:c5:0a:5b:4e: b9:80:3d:ba:22:16:76:d8:57:e3:87:9f:80:cc:70: 0c:56:00:40:3e:a6:02:4f:6f:a3:a3:60:58:3c:b1: 8f:30:73:0f:4c:94:51:54:67:a5:d7:29:26:fd:89: 0e:a1:7f:36:86:ed:56:13:69:d6:89:62:50:29:30: 70:c3:ee:54:c0:67:ef:30:dd:7f:d7:82:27:a6:27: 51:64:88:77:28:85:30:ca:93:ea:ef:78:a0:d9:da: 02:2e:51:a1:d1:fc:ae:d9:72:ed:6c:cd:6a:74:af: 86:0e:ae:ea:c0:7b:90:07:d4:bc:00:6b:86:86:c4: f0:92:83:23:46:9d:9e:ff:cb:91:43:f5:ea:b2:34: 9d:94:1b:64:8e:2b:c5:8c:b5:3a:c2:32:61:93:88: e9:4a:fa:b2:64:6e:42:24:75:48:38:2e:82:15:19: 63:44:b2:0f:d0:e5:e5:dd:3c:9e:ee:c5:b9:f0:2b: 18:a8:f6:c1:ff:eb:54:5d:f1:60:de:c5:4d:27:8f: fc:1e:9c:b4:16:21:86:a1:6b:07:4f:bf:3a:27:84: cd:93:76:c1:f5:53:b3:a1:10:73:5c:ad:42:ac:64: b6:ea:33:d9:9b:53:c2:b1:c7:e7:a7:6a:7d:60:19: 48:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:71:D8:34:E5:D0:FB:71:CF:26:55:C8:08:81:FB:F3:A7:04:57:1D X509v3 Authority Key Identifier: keyid:D5:B2:BC:B4:D7:CD:44:98:6E:0C:DE:AB:B1:9A:3E:8D:A8:ED:A3:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:1d:67:bd:e9:5e:1f:1f:2e:5e:a7:c5:ac:a2:a2:4d:5b:5f: a5:5d:ee:0b:d1:da:00:dd:7c:b1:94:60:05:64:f9:40:5b:9f: 4d:a6:0b:92:43:1e:23:59:e7:9c:1c:5c:08:8d:a6:2f:bc:a4: 96:90:6c:89:59:37:f5:4d:95:28:f4:66:de:58:cc:e3:2b:cc: 64:06:16:1e:7f:46:e1:25:87:78:a3:99:2d:dc:0a:0f:4a:8f: 0f:c1:7d:71:a5:fb:05:97:5a:f7:4f:cb:03:23:cd:1c:36:ff: ef:46:f2:bb:ba:d6:a8:f6:0d:41:48:4c:96:28:86:43:7b:cd: 8d:b5:58:34:3c:fa:bd:ca:46:ac:4a:db:44:df:36:de:bc:51: 59:f6:3b:fc:0c:a0:78:81:87:9b:34:91:d0:4c:ee:4d:96:e6: 72:c6:0c:bb:c5:6d:37:c3:5f:39:e5:2c:6a:ee:f7:62:59:fc: cb:5e:a3:9c:f8:40:70:66:bf:cc:a6:ff:11:0b:4b:51:4d:87: a8:33:b7:8c:ab:aa:68:8a:c2:63:7c:d6:97:b4:24:6c:86:19: a1:4f:00:c4:11:07:6d:78:17:b7:aa:6b:4b:8e:fc:49:7d:ca: db:be:ac:ef:a4:de:88:7f:f1:77:cc:74:fb:25:d1:40:7e:35: ce:b2:40:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJqUmnplz9ZGlX+lduiUd5JPAU2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVCMkJDQjREN0NENDQ5ODZFMENERUFCQjE5QTNFOERB OEVEQTNERTAeFw0yNjA3MjEwMDAwNTNaFw0yNjA3MjIwMjE5NTNaMDMxMTAvBgNV BAMTKDMxNzFEODM0RTVEMEZCNzFDRjI2NTVDODA4ODFGQkYzQTcwNDU3MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrmxWCdkh2c2ShxQpbTrmAPboi FnbYV+OHn4DMcAxWAEA+pgJPb6OjYFg8sY8wcw9MlFFUZ6XXKSb9iQ6hfzaG7VYT adaJYlApMHDD7lTAZ+8w3X/XgiemJ1FkiHcohTDKk+rveKDZ2gIuUaHR/K7Zcu1s zWp0r4YOrurAe5AH1LwAa4aGxPCSgyNGnZ7/y5FD9eqyNJ2UG2SOK8WMtTrCMmGT iOlK+rJkbkIkdUg4LoIVGWNEsg/Q5eXdPJ7uxbnwKxio9sH/61Rd8WDexU0nj/we nLQWIYahawdPvzonhM2TdsH1U7OhEHNcrUKsZLbqM9mbU8Kxx+enan1gGUilAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMXHYNOXQ+3HPJlXICIH786cEVx0wHwYDVR0j BBgwFoAU1bK8tNfNRJhuDN6rsZo+jajto94wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQxYTAyZTYtMjE3MS00N2M5LTg2YzktZDVkODBmNDU4ODM2LzAvRDVCMkJDQjRE N0NENDQ5ODZFMENERUFCQjE5QTNFOERBOEVEQTNERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUIyQkNCNEQ3Q0Q0NDk4NkUwQ0RFQUJCMTlBM0U4REE4RURB M0RFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQxYTAyZTYtMjE3MS00N2M5LTg2 YzktZDVkODBmNDU4ODM2LzAvRDVCMkJDQjREN0NENDQ5ODZFMENERUFCQjE5QTNF OERBOEVEQTNERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgdZ73pXh8fLl6nxayiok1bX6Vd7gvR2gDd fLGUYAVk+UBbn02mC5JDHiNZ55wcXAiNpi+8pJaQbIlZN/VNlSj0Zt5YzOMrzGQG Fh5/RuElh3ijmS3cCg9Kjw/BfXGl+wWXWvdPywMjzRw2/+9G8ru61qj2DUFITJYo hkN7zY21WDQ8+r3KRqxK20TfNt68UVn2O/wMoHiBh5s0kdBM7k2W5nLGDLvFbTfD XznlLGru92JZ/Mteo5z4QHBmv8ym/xELS1FNh6gzt4yrqmiKwmN81pe0JGyGGaFP AMQRB214F7eqa0uO/El9ytu+rO+k3oh/8XfMdPsl0UB+Nc6yQJY= -----END CERTIFICATE-----Generated at Tue Jul 21 06:23:56 2026 by rpki-client