$ rpki-client -vvf rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft File: 5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft (raw, json) Hash identifier: XtvfRY+N6Do3ExJ67rtPXk6ar018PTOWSvR17ncNRnI= Subject key identifier: FD:9A:56:73:D7:A0:19:7A:8E:05:12:14:01:C0:27:68:9A:50:4D:AE Authority key identifier: 5E:25:E7:5E:AD:14:FB:9C:87:77:75:CF:A5:C7:68:C9:9B:F8:31:CB Certificate issuer: /CN=5E25E75EAD14FB9C877775CFA5C768C99BF831CB Certificate serial: 2D9B9204C08FD50330114CFD7795CE17552B17A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 12:42:12 +0000 Manifest this update: Mon 20 Jul 2026 12:37:12 +0000 Manifest next update: Tue 21 Jul 2026 16:04:12 +0000 Files and hashes: 1: 323030313a6466303a666534303a3a2f34382d3438203d3e20313439393133.roa (hash: Mx1Bs+uk4ORbPOJY3X4OSkdxpVJJ2TqdAiAI7XjMvYw=) 2: 5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl (hash: yD79qOVhpo61nPFlik9WKoY60uB/u/cNg4/ygX7uiuc=) 3: 3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (hash: GheubIEbC2RH3FMbulGJZm2AS1TBwHys9ZC8vY6htKI=) 4: 3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa (hash: U6ZrAajnenCJBZYC9uBM6kAorfrc1n55yTDGAGbaXuI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:9b:92:04:c0:8f:d5:03:30:11:4c:fd:77:95:ce:17:55:2b:17:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E25E75EAD14FB9C877775CFA5C768C99BF831CB Validity Not Before: Jul 20 12:37:12 2026 GMT Not After : Jul 21 16:04:12 2026 GMT Subject: CN=FD9A5673D7A0197A8E05121401C027689A504DAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:f8:0a:58:1d:83:bf:a0:ff:4d:4c:b4:88: 88:4a:5b:41:3e:86:20:f9:d4:6b:40:47:f0:75:a7: c3:ae:20:61:a8:25:07:da:8f:43:d7:f4:54:b9:1d: 35:a1:e7:0c:a5:f6:70:6f:7a:d9:07:91:84:98:78: a7:b4:44:7c:a9:b5:a9:a3:8e:b3:ae:ed:0a:25:3e: a3:5e:89:8b:0e:71:67:51:00:6f:ed:9f:67:44:5d: f7:e3:b1:e6:6b:5a:6f:0c:cc:5f:b0:b6:40:67:a4: 47:0c:b4:81:b1:19:54:18:81:be:1b:ac:44:21:c9: c7:e3:6b:68:22:df:92:f7:91:86:9a:15:fb:53:32: e9:4e:a0:3b:2f:58:7f:a8:cf:11:e4:c3:c3:7c:6c: 60:d5:bc:41:5f:46:0d:c1:a5:b9:8e:52:e9:71:7e: 63:47:ee:35:5f:4c:98:ab:91:c5:31:38:04:3b:11: d5:4c:89:33:4f:4f:b6:68:12:64:56:5b:4b:14:5b: 64:90:64:9d:61:22:15:e8:64:1d:1a:9a:da:43:5d: 5e:0c:c2:24:aa:02:7f:38:0b:e6:03:9f:dd:bd:71: 94:77:ac:00:2b:bf:b9:a3:7c:91:e8:62:fd:77:59: c9:7a:77:ba:ae:59:ed:f1:cf:fe:8f:ef:7c:f0:45: 26:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9A:56:73:D7:A0:19:7A:8E:05:12:14:01:C0:27:68:9A:50:4D:AE X509v3 Authority Key Identifier: keyid:5E:25:E7:5E:AD:14:FB:9C:87:77:75:CF:A5:C7:68:C9:9B:F8:31:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:79:ff:e6:f9:64:8f:43:9d:a1:8e:76:a7:51:7e:2e:59:07: 5b:71:32:9b:09:aa:c7:5b:55:84:0c:d4:2e:99:ce:b4:33:42: 2a:dc:eb:dd:12:a7:c8:e1:2a:7e:26:9a:72:c3:a9:53:a5:38: 51:aa:ab:42:93:ab:59:3a:56:8e:fd:1c:ae:d8:30:a6:35:17: b3:44:0e:e5:74:03:bb:df:17:0e:3d:a3:4a:d0:a4:d8:00:e6: 7b:73:6f:d2:30:62:16:d5:75:04:06:ec:8c:ae:00:60:a0:97: 62:df:e0:4f:e9:d3:c4:3f:fe:3d:f2:13:db:a3:fc:0d:1f:a1: a6:38:86:af:d8:5d:92:0c:bf:ca:0a:fa:78:db:7c:18:37:0c: be:58:90:5f:98:5c:92:26:1e:52:68:ab:79:e4:64:b7:17:5e: 80:9e:7b:84:7f:c2:21:7d:8c:bd:b8:e7:eb:aa:af:7f:b0:38: 3b:be:d4:1f:86:a6:8d:53:9c:f3:62:69:20:60:27:89:2d:96: e5:04:3d:3b:83:99:02:ad:8c:6e:c2:27:fe:ba:97:e3:d5:8f: e8:50:f1:51:de:66:3c:37:df:0d:bb:3a:19:1b:23:26:00:36: 6e:9f:24:c8:dd:b6:cf:db:ee:4d:7b:a7:c7:9b:56:72:51:97: c2:09:0c:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZuSBMCP1QMwEUz9d5XOF1UrF6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUyNUU3NUVBRDE0RkI5Qzg3Nzc3NUNGQTVDNzY4Qzk5 QkY4MzFDQjAeFw0yNjA3MjAxMjM3MTJaFw0yNjA3MjExNjA0MTJaMDMxMTAvBgNV BAMTKEZEOUE1NjczRDdBMDE5N0E4RTA1MTIxNDAxQzAyNzY4OUE1MDREQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lfgKWB2Dv6D/TUy0iIhKW0E+ hiD51GtAR/B1p8OuIGGoJQfaj0PX9FS5HTWh5wyl9nBvetkHkYSYeKe0RHyptamj jrOu7QolPqNeiYsOcWdRAG/tn2dEXffjseZrWm8MzF+wtkBnpEcMtIGxGVQYgb4b rEQhycfja2gi35L3kYaaFftTMulOoDsvWH+ozxHkw8N8bGDVvEFfRg3BpbmOUulx fmNH7jVfTJirkcUxOAQ7EdVMiTNPT7ZoEmRWW0sUW2SQZJ1hIhXoZB0amtpDXV4M wiSqAn84C+YDn929cZR3rAArv7mjfJHoYv13Wcl6d7quWe3xz/6P73zwRSZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/ZpWc9egGXqOBRIUAcAnaJpQTa4wHwYDVR0j BBgwFoAUXiXnXq0U+5yHd3XPpcdoyZv4McswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg2ZDZiYTEtMWY3My00Nzc2LThhNmEtNGY0NTEyMDc5MmIxLzAvNUUyNUU3NUVB RDE0RkI5Qzg3Nzc3NUNGQTVDNzY4Qzk5QkY4MzFDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RTI1RTc1RUFEMTRGQjlDODc3Nzc1Q0ZBNUM3NjhDOTlCRjgz MUNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg2ZDZiYTEtMWY3My00Nzc2LThh NmEtNGY0NTEyMDc5MmIxLzAvNUUyNUU3NUVBRDE0RkI5Qzg3Nzc3NUNGQTVDNzY4 Qzk5QkY4MzFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGB5/+b5ZI9DnaGOdqdRfi5ZB1txMpsJqsdb VYQM1C6ZzrQzQirc690Sp8jhKn4mmnLDqVOlOFGqq0KTq1k6Vo79HK7YMKY1F7NE DuV0A7vfFw49o0rQpNgA5ntzb9IwYhbVdQQG7IyuAGCgl2Lf4E/p08Q//j3yE9uj /A0foaY4hq/YXZIMv8oK+njbfBg3DL5YkF+YXJImHlJoq3nkZLcXXoCee4R/wiF9 jL245+uqr3+wODu+1B+Gpo1TnPNiaSBgJ4ktluUEPTuDmQKtjG7CJ/66l+PVj+hQ 8VHeZjw33w27OhkbIyYANm6fJMjdts/b7k17p8ebVnJRl8IJDGs= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:50 2026 by rpki-client