$ rpki-client -vvf rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft File: 5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft (raw, json) Hash identifier: DyHuI9hs3r7QRnFnjSd/f+nzTVbw8ixiwbYYwuC9bCI= Subject key identifier: 4F:8B:B0:9A:6F:3B:45:DF:76:E7:99:04:A1:85:DD:46:41:5E:9D:3E Authority key identifier: 5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24 Certificate issuer: /CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24 Certificate serial: 5505D013813A96FEA986D318083FC49221D64AD2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 11:25:31 +0000 Manifest this update: Mon 20 Jul 2026 11:20:31 +0000 Manifest next update: Tue 21 Jul 2026 14:18:31 +0000 Files and hashes: 1: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: swr4aEtGPRWs62gogwkO9Y1o8MbTFhHlDaee8r9gWcE=) 2: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: hrwaL58bLcWsXLir3kxI1OkAj6GGFQmLA1ZKUXd0Ogs=) 3: 5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl (hash: RmMdwryqffDhNi6TbxFEiMHSBxDIBOS78Ne2baaYYAU=) 4: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: jrMRupZddQA8qjBzuVH771xwK+1/f2hSGRy4MrlXlSc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:05:d0:13:81:3a:96:fe:a9:86:d3:18:08:3f:c4:92:21:d6:4a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24 Validity Not Before: Jul 20 11:20:31 2026 GMT Not After : Jul 21 14:18:31 2026 GMT Subject: CN=4F8BB09A6F3B45DF76E79904A185DD46415E9D3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:60:23:02:e5:72:61:e9:5b:73:a0:28:d5:68: bf:79:32:21:fa:53:3b:d3:34:3b:dd:b0:27:4d:9d: c1:20:e1:f9:bc:91:c3:6d:71:98:bf:2a:d9:f7:3a: 78:29:58:66:4a:d0:df:f5:c6:26:b9:f3:74:a2:8f: 17:64:0f:9a:fe:26:9e:1e:da:80:58:0c:9f:d5:e2: 83:a4:9b:ad:2b:39:2a:dc:1d:4e:91:57:ee:84:c9: b0:3b:be:54:bb:24:65:da:44:5a:b4:e2:81:f7:cd: a4:e0:8e:15:ab:c8:7d:7b:38:4a:af:d4:08:e6:c7: d2:0a:44:d3:ac:d2:1b:21:5a:0c:b8:95:97:16:58: c0:7d:13:3b:66:39:37:4e:a4:05:8e:8b:78:06:4c: d7:4c:7b:12:9d:ca:3e:6d:85:a3:c4:8c:ee:76:51: af:e1:02:27:37:44:65:48:9b:64:69:c0:d7:0f:84: a4:25:98:8b:9b:45:3d:c7:32:48:75:5c:56:f1:c7: 76:5a:a1:bf:b8:ed:78:01:48:20:0f:57:b5:63:54: 12:3b:0d:a9:64:c0:21:63:55:e3:af:62:24:4d:a1: 7d:73:1e:cd:69:dc:4d:48:a1:d2:37:4c:3a:ad:04: 13:6d:ba:59:f6:95:5b:25:e9:f0:34:4c:1b:97:8c: d8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8B:B0:9A:6F:3B:45:DF:76:E7:99:04:A1:85:DD:46:41:5E:9D:3E X509v3 Authority Key Identifier: keyid:5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:e1:43:e7:d4:b9:94:82:3e:08:41:55:cd:57:2d:a7:73:9c: f8:a2:ac:8d:c8:93:89:e6:8b:a9:5e:bd:f2:f1:4e:31:56:91: 62:b6:ff:44:51:b6:78:e9:66:35:5c:38:7d:c4:c9:d8:5d:fb: e2:ae:d0:bd:1e:30:59:b4:a2:20:bf:83:6e:b8:eb:33:95:ef: c2:ca:17:a2:eb:7c:1e:bd:e5:96:9f:22:a7:d9:75:e6:ce:0e: 6a:a4:13:7b:a4:8e:84:04:34:80:46:36:b4:a7:72:2c:cb:ae: 9b:c9:68:e8:ca:3f:e6:81:20:3e:fd:a8:7d:96:32:e1:74:53: b6:a7:71:c0:65:2a:05:5a:82:23:41:81:9c:0b:96:91:4f:79: 63:29:c7:eb:5e:ed:c2:f5:50:52:3b:0f:25:32:68:ca:ec:f3: 91:19:34:ae:f0:98:d1:26:cc:07:e0:88:b5:64:49:17:22:4e: 18:06:f3:50:33:75:be:ee:34:fe:76:36:2f:e2:42:45:b7:70: 85:86:a9:c8:e2:84:ba:b0:ef:23:46:57:fc:1a:c0:49:00:cf: 51:2e:54:d9:fb:c0:fb:bf:4e:a1:9c:a6:f0:7f:7d:88:62:08: d6:49:49:58:46:f1:da:43:2c:8e:c5:79:30:28:92:21:6c:56: c4:1f:32:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVQXQE4E6lv6phtMYCD/EkiHWStIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY3MTUyQ0VFMDRGREFGQjRBM0U0QTBGM0ZEMEFERjgy MkM1Q0QyNDAeFw0yNjA3MjAxMTIwMzFaFw0yNjA3MjExNDE4MzFaMDMxMTAvBgNV BAMTKDRGOEJCMDlBNkYzQjQ1REY3NkU3OTkwNEExODVERDQ2NDE1RTlEM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzYCMC5XJh6VtzoCjVaL95MiH6 UzvTNDvdsCdNncEg4fm8kcNtcZi/Ktn3OngpWGZK0N/1xia583SijxdkD5r+Jp4e 2oBYDJ/V4oOkm60rOSrcHU6RV+6EybA7vlS7JGXaRFq04oH3zaTgjhWryH17OEqv 1Ajmx9IKRNOs0hshWgy4lZcWWMB9EztmOTdOpAWOi3gGTNdMexKdyj5thaPEjO52 Ua/hAic3RGVIm2RpwNcPhKQlmIubRT3HMkh1XFbxx3Zaob+47XgBSCAPV7VjVBI7 DalkwCFjVeOvYiRNoX1zHs1p3E1IodI3TDqtBBNtuln2lVsl6fA0TBuXjNh5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT4uwmm87Rd9255kEoYXdRkFenT4wHwYDVR0j BBgwFoAUX3FSzuBP2vtKPkoPP9Ct+CLFzSQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgxNTU0NWMtYzk5Ni00NjBmLTkyZGQtNjI5NGFlYzkyYzUyLzAvNUY3MTUyQ0VF MDRGREFGQjRBM0U0QTBGM0ZEMEFERjgyMkM1Q0QyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjcxNTJDRUUwNEZEQUZCNEEzRTRBMEYzRkQwQURGODIyQzVD RDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvNUY3MTUyQ0VFMDRGREFGQjRBM0U0QTBGM0ZEMEFE RjgyMkM1Q0QyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXhQ+fUuZSCPghBVc1XLadznPiirI3Ik4nm i6levfLxTjFWkWK2/0RRtnjpZjVcOH3Eydhd++Ku0L0eMFm0oiC/g2646zOV78LK F6LrfB695ZafIqfZdebODmqkE3ukjoQENIBGNrSncizLrpvJaOjKP+aBID79qH2W MuF0U7anccBlKgVagiNBgZwLlpFPeWMpx+te7cL1UFI7DyUyaMrs85EZNK7wmNEm zAfgiLVkSRciThgG81Azdb7uNP52Ni/iQkW3cIWGqcjihLqw7yNGV/wawEkAz1Eu VNn7wPu/TqGcpvB/fYhiCNZJSVhG8dpDLI7FeTAokiFsVsQfMgY= -----END CERTIFICATE-----Generated at Tue Jul 21 06:49:39 2026 by rpki-client