$ rpki-client -vvf rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft File: 5EC020FF41231134DE16F43F92714D434626A05B.mft (raw, json) Hash identifier: V0Sf/pPOdlmFA7h3qqZ92XNqOtrczbqvns8FwvFbRWw= Subject key identifier: 5D:76:BD:3F:0C:3E:CF:12:7E:BC:C1:EF:E2:6A:56:4E:66:7D:78:E1 Authority key identifier: 5E:C0:20:FF:41:23:11:34:DE:16:F4:3F:92:71:4D:43:46:26:A0:5B Certificate issuer: /CN=5EC020FF41231134DE16F43F92714D434626A05B Certificate serial: 43812ED2F4E12CFFD4B1016922B8326F70DE8A11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EC020FF41231134DE16F43F92714D434626A05B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 01:17:23 +0000 Manifest this update: Tue 21 Jul 2026 01:12:23 +0000 Manifest next update: Wed 22 Jul 2026 04:12:23 +0000 Files and hashes: 1: 5EC020FF41231134DE16F43F92714D434626A05B.crl (hash: Iy05cxN76n+Z1YKTce+Doaq/BQ/dch/8yfXZRATGV8Y=) 2: 323030313a6466303a373434303a3a2f34382d3438203d3e20313331313132.roa (hash: mxf66wCv3huHr7+y00gKhj0SFSiQHrPhglnN0dDJ4UY=) 3: 3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (hash: 7EVkvK54oj3Ks8SpMiOp0AT2jMsnJWuUCj85YBui5p0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.crl rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EC020FF41231134DE16F43F92714D434626A05B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:81:2e:d2:f4:e1:2c:ff:d4:b1:01:69:22:b8:32:6f:70:de:8a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC020FF41231134DE16F43F92714D434626A05B Validity Not Before: Jul 21 01:12:23 2026 GMT Not After : Jul 22 04:12:23 2026 GMT Subject: CN=5D76BD3F0C3ECF127EBCC1EFE26A564E667D78E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ba:46:bf:96:3c:5d:57:f4:ee:14:01:4d:83: 12:7b:cd:d1:ca:a2:a6:af:34:d8:fb:89:aa:22:b1: 7f:a3:bd:6a:b4:98:ad:2d:b8:f6:90:6b:61:56:0b: f1:e6:3d:0c:b6:95:a0:bf:84:64:34:69:00:80:dd: 62:5f:ca:15:64:08:04:26:b1:84:7e:a9:75:37:f6: fb:a5:d0:95:44:2b:30:20:b3:2e:27:d4:eb:e0:35: cb:24:1c:65:67:87:19:b3:dc:b5:3f:ca:ee:60:87: 3e:fe:27:f1:e0:db:50:2f:7f:5d:44:ee:e5:22:1d: 89:42:d7:42:e2:8e:34:6c:7b:ee:fa:b7:fc:cf:d7: 5d:78:a2:18:26:58:f9:33:24:99:61:43:4c:e1:2f: 8f:39:7b:94:cb:45:e4:56:d6:15:92:89:6a:40:9c: cb:8d:b8:9f:4d:ae:f8:e3:e8:81:42:ed:72:95:4f: 07:85:42:67:ce:b8:a1:6e:f0:dd:9c:45:60:ec:76: 1d:34:1b:78:9b:12:d5:21:12:82:30:36:cb:07:f0: df:88:a7:5d:96:a5:c7:c7:32:84:22:0e:4b:49:2b: 71:e6:98:17:30:0e:96:46:4a:dc:ef:e2:d0:50:48: 8f:09:22:47:8f:96:88:e9:27:9a:3a:c0:c0:75:b1: c1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:76:BD:3F:0C:3E:CF:12:7E:BC:C1:EF:E2:6A:56:4E:66:7D:78:E1 X509v3 Authority Key Identifier: keyid:5E:C0:20:FF:41:23:11:34:DE:16:F4:3F:92:71:4D:43:46:26:A0:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EC020FF41231134DE16F43F92714D434626A05B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8d:50:7c:8e:d5:a4:54:8e:00:b9:e1:5d:6b:5a:7d:73:d7: b6:4a:6d:e1:ca:da:3d:eb:81:cc:1c:88:80:0e:b0:b1:72:b3: 51:9f:d5:7e:08:f6:bb:16:75:a4:f9:14:82:8c:a3:1e:e7:14: 44:a4:49:6e:7f:52:47:ab:0c:c3:fd:3e:8c:76:df:69:7d:58: 29:c9:b3:24:a6:a8:fe:19:ff:7a:1b:11:c0:ad:9c:71:c7:08: 51:bc:04:ad:60:2e:6c:bf:58:24:83:ba:04:17:c9:d5:a4:5b: a8:58:7e:c9:72:5f:bb:67:4e:70:5f:f4:4f:81:85:ea:4b:a9: db:b4:2d:e0:5b:0d:44:0b:00:e4:c7:3d:10:be:a4:1a:66:03: cb:6b:ff:2d:1b:75:e7:b4:d7:11:0a:72:fb:40:fa:7f:d7:85: 56:d1:58:a9:31:75:ab:ee:03:98:b0:aa:28:8f:9f:2c:6f:45: 85:98:22:6f:75:1c:95:ad:54:16:9a:77:b2:3d:d5:6c:bf:e6: 6c:51:fa:2b:33:8d:63:c1:72:e1:65:8b:67:4a:d2:2e:5e:19: fb:74:b9:d7:b0:e2:2f:e3:8d:c9:d8:11:7e:64:d4:cc:3b:c9: b1:a7:34:09:64:22:6a:69:d0:d4:95:cc:bc:31:94:26:a1:40: ef:d4:9a:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4Eu0vThLP/UsQFpIrgyb3DeihEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDMDIwRkY0MTIzMTEzNERFMTZGNDNGOTI3MTRENDM0 NjI2QTA1QjAeFw0yNjA3MjEwMTEyMjNaFw0yNjA3MjIwNDEyMjNaMDMxMTAvBgNV BAMTKDVENzZCRDNGMEMzRUNGMTI3RUJDQzFFRkUyNkE1NjRFNjY3RDc4RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsuka/ljxdV/TuFAFNgxJ7zdHK oqavNNj7iaoisX+jvWq0mK0tuPaQa2FWC/HmPQy2laC/hGQ0aQCA3WJfyhVkCAQm sYR+qXU39vul0JVEKzAgsy4n1OvgNcskHGVnhxmz3LU/yu5ghz7+J/Hg21Avf11E 7uUiHYlC10LijjRse+76t/zP1114ohgmWPkzJJlhQ0zhL485e5TLReRW1hWSiWpA nMuNuJ9Nrvjj6IFC7XKVTweFQmfOuKFu8N2cRWDsdh00G3ibEtUhEoIwNssH8N+I p12WpcfHMoQiDktJK3HmmBcwDpZGStzv4tBQSI8JIkePlojpJ5o6wMB1scF5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXXa9Pww+zxJ+vMHv4mpWTmZ9eOEwHwYDVR0j BBgwFoAUXsAg/0EjETTeFvQ/knFNQ0YmoFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg3ZjhmODItMzdiYi00OTgzLTkzY2EtNWUwNjcwYWIwMmUzLzAvNUVDMDIwRkY0 MTIzMTEzNERFMTZGNDNGOTI3MTRENDM0NjI2QTA1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RUMwMjBGRjQxMjMxMTM0REUxNkY0M0Y5MjcxNEQ0MzQ2MjZB MDVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjg3ZjhmODItMzdiYi00OTgzLTkz Y2EtNWUwNjcwYWIwMmUzLzAvNUVDMDIwRkY0MTIzMTEzNERFMTZGNDNGOTI3MTRE NDM0NjI2QTA1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqNUHyO1aRUjgC54V1rWn1z17ZKbeHK2j3r gcwciIAOsLFys1Gf1X4I9rsWdaT5FIKMox7nFESkSW5/UkerDMP9Pox232l9WCnJ sySmqP4Z/3obEcCtnHHHCFG8BK1gLmy/WCSDugQXydWkW6hYfslyX7tnTnBf9E+B hepLqdu0LeBbDUQLAOTHPRC+pBpmA8tr/y0bdee01xEKcvtA+n/XhVbRWKkxdavu A5iwqiiPnyxvRYWYIm91HJWtVBaad7I91Wy/5mxR+iszjWPBcuFli2dK0i5eGft0 udew4i/jjcnYEX5k1Mw7ybGnNAlkImpp0NSVzLwxlCahQO/Umqw= -----END CERTIFICATE-----Generated at Tue Jul 21 06:59:55 2026 by rpki-client