$ rpki-client -vvf rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft File: 5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft (raw, json) Hash identifier: A9r5L1tDp4cJNXJgVR/c16ltkSP6OkTkHeQkhAEOJ1I= Subject key identifier: C8:C2:B5:2D:DB:00:AA:99:A4:A1:2B:F9:63:08:AC:2B:72:D3:D3:F6 Authority key identifier: 56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B Certificate issuer: /CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B Certificate serial: 16AB0DE37D4284D0821604FC46E0E9961CED45D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 15:15:23 +0000 Manifest this update: Mon 20 Jul 2026 15:10:23 +0000 Manifest next update: Tue 21 Jul 2026 17:13:23 +0000 Files and hashes: 1: 5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl (hash: 3SN9/GUpcX8pd3wiMaMvyIuJUc0c51gKH6WcvIZwvm0=) 2: 3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (hash: Wb6gH+JiAvO+ARbeGk8L44agijONRst7EWLeoO4CUoU=) 3: 3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (hash: tFFR6+x+fpHHrNjo8i5wrXGQVmpCIjPUzPsVU8CszYg=) 4: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (hash: PFdBLc9JDIxArwgoU/YzuObUbGI99im6tjm/eoPLbM8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ab:0d:e3:7d:42:84:d0:82:16:04:fc:46:e0:e9:96:1c:ed:45:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B Validity Not Before: Jul 20 15:10:23 2026 GMT Not After : Jul 21 17:13:23 2026 GMT Subject: CN=C8C2B52DDB00AA99A4A12BF96308AC2B72D3D3F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:99:35:8b:1e:f4:3e:48:82:91:2d:0a:97:08: 47:9b:19:31:e2:86:a3:3a:40:d6:af:39:61:9b:b0: af:38:44:cd:90:db:9d:75:4b:d2:7d:1e:42:ee:ff: 02:f2:5b:0a:3d:e9:52:48:fe:a6:70:fc:c8:ec:a6: 23:60:78:35:64:15:f3:3b:4b:20:4f:f6:cd:af:12: ce:ca:b1:ee:46:b5:32:87:ec:da:81:71:41:c4:13: df:64:51:b9:c4:69:77:57:1b:e9:35:8b:6e:87:89: c7:cc:a7:04:38:c2:a1:c2:af:92:53:59:41:ad:a0: ef:87:26:fd:a3:92:21:a1:ac:e7:ca:a0:b0:32:8d: ac:84:70:7c:ae:c5:e6:5a:20:0f:ba:9d:46:81:86: 33:05:92:3a:ff:f9:44:93:e4:78:1d:bf:97:83:13: 2e:e4:1c:7d:03:af:38:bc:33:b4:a0:31:67:6c:c9: a8:f0:75:08:66:ae:d9:45:7f:e1:af:ff:52:3c:97: 12:1b:f8:53:2a:f5:73:c4:3e:4d:fb:58:88:4e:c0: f0:a4:6a:6e:b0:ae:87:02:b1:ea:ba:a6:04:89:f4: 3d:8f:82:f2:96:8a:60:d5:e5:c8:9f:33:41:19:38: a2:f9:47:8b:b2:f3:3a:c7:8e:9c:8b:38:3d:7a:f6: 6a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C2:B5:2D:DB:00:AA:99:A4:A1:2B:F9:63:08:AC:2B:72:D3:D3:F6 X509v3 Authority Key Identifier: keyid:56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:28:aa:e6:a0:89:44:20:f3:0b:06:e7:76:06:85:de:ac:fd: 7b:a7:0e:db:f1:e4:be:57:3d:e5:21:b7:bb:05:c5:26:87:19: ea:fc:10:cc:33:d9:05:41:a0:8b:44:20:5b:c4:9a:2b:df:cf: 44:b8:70:16:36:09:e4:0a:12:4b:5d:6a:18:4f:46:b3:d4:02: 9f:a4:20:1f:51:1d:d1:11:53:9f:42:ae:42:ad:4d:74:71:33: 82:cb:87:20:e4:5d:56:bc:21:d6:6b:b8:ba:82:1e:de:ac:c0: 41:7a:26:e5:2f:e5:d0:cc:fe:56:76:c3:2c:2e:29:fb:af:ab: ec:04:a0:a5:f3:f1:a9:3e:c3:78:41:c7:bd:f1:f1:b4:93:7b: 74:1a:36:00:40:51:1c:47:b7:35:36:ad:74:80:fd:e7:4d:6b: 82:4b:45:0d:43:45:8c:3d:35:7d:53:e4:13:97:e2:77:b7:08: 15:44:56:a4:dc:06:36:f5:e8:06:e1:e1:40:ad:ec:eb:8b:a6: 56:cd:74:83:6c:2e:11:ec:89:01:7a:f5:c1:a8:df:94:d0:1f: b3:f0:e7:47:f8:1a:19:bb:75:0f:27:bc:f1:95:3b:2f:56:0d: 15:0f:27:b7:1d:d4:ff:9d:2b:f3:e9:b7:57:2d:4e:96:68:d4: 18:c0:c4:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqsN431ChNCCFgT8RuDplhztRdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2M0IyOTcwNUZGOUQyRDcyMDhDRDM5NEM1NzY3RDVB Mjg5OUYxQjAeFw0yNjA3MjAxNTEwMjNaFw0yNjA3MjExNzEzMjNaMDMxMTAvBgNV BAMTKEM4QzJCNTJEREIwMEFBOTlBNEExMkJGOTYzMDhBQzJCNzJEM0QzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVmTWLHvQ+SIKRLQqXCEebGTHi hqM6QNavOWGbsK84RM2Q2511S9J9HkLu/wLyWwo96VJI/qZw/MjspiNgeDVkFfM7 SyBP9s2vEs7Kse5GtTKH7NqBcUHEE99kUbnEaXdXG+k1i26HicfMpwQ4wqHCr5JT WUGtoO+HJv2jkiGhrOfKoLAyjayEcHyuxeZaIA+6nUaBhjMFkjr/+UST5Hgdv5eD Ey7kHH0Drzi8M7SgMWdsyajwdQhmrtlFf+Gv/1I8lxIb+FMq9XPEPk37WIhOwPCk am6wrocCseq6pgSJ9D2PgvKWimDV5cifM0EZOKL5R4uy8zrHjpyLOD169mq7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyMK1LdsAqpmkoSv5YwisK3LT0/YwHwYDVR0j BBgwFoAUVmOylwX/nS1yCM05TFdn1aKJnxswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIyN2IxNzYtNGMxNy00MjQ0LWJhZGYtZjQ5NmJjYjE1ZTIwLzAvNTY2M0IyOTcw NUZGOUQyRDcyMDhDRDM5NEM1NzY3RDVBMjg5OUYxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NjYzQjI5NzA1RkY5RDJENzIwOENEMzk0QzU3NjdENUEyODk5 RjFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIyN2IxNzYtNGMxNy00MjQ0LWJh ZGYtZjQ5NmJjYjE1ZTIwLzAvNTY2M0IyOTcwNUZGOUQyRDcyMDhDRDM5NEM1NzY3 RDVBMjg5OUYxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUoquagiUQg8wsG53YGhd6s/XunDtvx5L5X PeUht7sFxSaHGer8EMwz2QVBoItEIFvEmivfz0S4cBY2CeQKEktdahhPRrPUAp+k IB9RHdERU59CrkKtTXRxM4LLhyDkXVa8IdZruLqCHt6swEF6JuUv5dDM/lZ2wywu Kfuvq+wEoKXz8ak+w3hBx73x8bSTe3QaNgBAURxHtzU2rXSA/edNa4JLRQ1DRYw9 NX1T5BOX4ne3CBVEVqTcBjb16Abh4UCt7OuLplbNdINsLhHsiQF69cGo35TQH7Pw 50f4Ghm7dQ8nvPGVOy9WDRUPJ7cd1P+dK/Ppt1ctTpZo1BjAxAY= -----END CERTIFICATE-----Generated at Tue Jul 21 06:44:12 2026 by rpki-client