$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft File: 5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft (raw, json) Hash identifier: 9qOhxzdjbUEuLJooXaJY9I/loh1v+iGdcFU9vXXnfAE= Subject key identifier: C7:0A:E9:A0:A5:3B:75:65:79:3F:EA:F3:2B:3F:E5:87:8F:DF:AF:FC Authority key identifier: 5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D Certificate issuer: /CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D Certificate serial: 52309DB2D6E13AB3803BD189E53FE72F4E036837 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 19:05:04 +0000 Manifest this update: Mon 20 Jul 2026 19:00:04 +0000 Manifest next update: Tue 21 Jul 2026 19:36:04 +0000 Files and hashes: 1: 5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl (hash: B81Bkf5pJGSOeJ/oZOuz1FHhRchy7VEY09lBotxyiL8=) 2: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 03GjbFQLnGl1ayimN4oj+A3/RatUprwYfoHZREcuOgQ=) 3: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: efvSat7dwZI7/h9HiVLzn4AEIjGPLWmD8NmsCl2Z3eg=) 4: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: qU+T/ppZu7pLksCA/CM9lZkM5mfpYBVP5R9hFRPxoSA=) 5: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: GD5PKDcWrMo+jB6m0zjy8Pss+9lo2DQ/VB/jtC+zOzo=) 6: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: SLYwMEBT661dkmjDpYSCi8eFhdF8+h1KCwjAiRVXBbM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:30:9d:b2:d6:e1:3a:b3:80:3b:d1:89:e5:3f:e7:2f:4e:03:68:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D Validity Not Before: Jul 20 19:00:04 2026 GMT Not After : Jul 21 19:36:04 2026 GMT Subject: CN=C70AE9A0A53B7565793FEAF32B3FE5878FDFAFFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:08:ef:a5:f5:97:bf:d8:9c:56:70:cb:96: 50:c9:26:13:61:76:84:7d:53:c6:57:c9:4b:ff:9f: 84:f2:56:49:82:93:47:f2:a6:24:e1:9a:47:0e:ae: 97:aa:3e:94:69:1f:bd:c6:bf:61:c6:00:6a:41:ef: 75:b5:14:93:d5:0f:a1:fe:50:4d:6c:fc:f1:8c:b6: 49:84:58:bd:ec:f9:c7:2f:f4:37:3c:10:ae:fa:e2: 01:68:b9:93:44:f8:28:6c:42:91:cc:ec:69:7e:6c: 23:b7:1c:1e:30:a4:b9:6a:3b:61:d0:f4:cc:63:fe: ef:75:77:3e:dc:69:8f:71:b4:46:7f:3f:ab:c0:e4: c6:62:67:6b:d2:6c:7e:12:66:69:6e:21:2f:5c:4e: 6a:a3:1f:a4:c8:e0:d6:bc:d1:dc:49:82:c3:5d:c6: b4:08:5e:0a:c4:02:43:9d:ad:0e:7e:4b:3d:4b:2f: 4e:95:b7:1b:98:ae:97:d8:45:41:2b:5a:84:5d:de: 9b:fa:f0:b8:7e:63:db:cb:d1:28:32:3b:6a:6f:21: 58:64:55:7f:13:23:71:c6:3c:05:f7:8a:c7:51:54: 44:33:dd:a0:92:55:1f:ea:60:c9:65:84:e0:12:16: cb:72:94:8e:b4:f4:f8:0a:1c:51:98:af:61:ab:59: 10:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0A:E9:A0:A5:3B:75:65:79:3F:EA:F3:2B:3F:E5:87:8F:DF:AF:FC X509v3 Authority Key Identifier: keyid:5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:df:bf:4d:70:b0:d1:d2:1a:98:95:9a:64:b2:6a:08:9a:62: 56:06:db:9a:a4:96:6b:ea:ae:c3:d3:a6:ac:9a:2e:07:d7:35: 22:a4:4c:d9:1e:d9:19:45:85:d1:f6:62:78:f2:8d:b6:25:87: 2e:11:d4:c0:91:2d:c1:3d:b9:05:c8:8f:c7:80:d9:75:66:14: 95:7d:0c:06:c8:8c:bb:a0:78:40:77:e3:32:62:c7:92:19:78: c3:cd:12:5b:94:0a:aa:e9:d8:a1:1f:d8:75:43:35:9f:fa:fa: 09:49:6d:b2:da:d5:86:40:fb:6e:4c:09:d2:18:7d:4e:cb:1d: 60:46:b6:f7:6c:90:cd:f9:fd:7a:a0:e8:46:5c:7d:bc:b7:a6: 2d:d9:49:16:19:5f:d2:5a:6b:c1:c2:ea:40:4e:a1:72:2e:e1: 67:1b:72:53:8e:47:8e:a2:22:86:97:e2:30:c9:6d:1c:8f:93: e4:5b:dc:e4:55:2d:08:5c:42:b3:2a:34:fc:9e:02:9d:25:a8: 38:94:e3:a2:6b:5a:82:94:b7:86:65:bd:d5:9a:5c:ae:0e:85: 17:a1:7d:a7:c3:c5:db:60:2a:97:76:94:90:4a:a7:7a:cf:27: d5:52:f3:c2:64:35:94:71:d3:64:63:56:5c:17:55:25:17:0d: 64:92:f0:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUjCdstbhOrOAO9GJ5T/nL04DaDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ3QkI2REJFQTAwRTcwMTc3OTg5MkFBNjg2Q0NCRjE5 NUEzRDIwRDAeFw0yNjA3MjAxOTAwMDRaFw0yNjA3MjExOTM2MDRaMDMxMTAvBgNV BAMTKEM3MEFFOUEwQTUzQjc1NjU3OTNGRUFGMzJCM0ZFNTg3OEZERkFGRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9QjvpfWXv9icVnDLllDJJhNh doR9U8ZXyUv/n4TyVkmCk0fypiThmkcOrpeqPpRpH73Gv2HGAGpB73W1FJPVD6H+ UE1s/PGMtkmEWL3s+ccv9Dc8EK764gFouZNE+ChsQpHM7Gl+bCO3HB4wpLlqO2HQ 9Mxj/u91dz7caY9xtEZ/P6vA5MZiZ2vSbH4SZmluIS9cTmqjH6TI4Na80dxJgsNd xrQIXgrEAkOdrQ5+Sz1LL06VtxuYrpfYRUErWoRd3pv68Lh+Y9vL0SgyO2pvIVhk VX8TI3HGPAX3isdRVEQz3aCSVR/qYMllhOASFstylI609PgKHFGYr2GrWRDJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxwrpoKU7dWV5P+rzKz/lh4/fr/wwHwYDVR0j BBgwFoAUXXu22+oA5wF3mJKqaGzL8ZWj0g0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmUyYzkyODUtYzA5YS00NTA2LWEzMjAtZmRhMWEwN2ZkOWVjLzAvNUQ3QkI2REJF QTAwRTcwMTc3OTg5MkFBNjg2Q0NCRjE5NUEzRDIwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDdCQjZEQkVBMDBFNzAxNzc5ODkyQUE2ODZDQ0JGMTk1QTNE MjBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmUyYzkyODUtYzA5YS00NTA2LWEz MjAtZmRhMWEwN2ZkOWVjLzAvNUQ3QkI2REJFQTAwRTcwMTc3OTg5MkFBNjg2Q0NC RjE5NUEzRDIwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLfv01wsNHSGpiVmmSyagiaYlYG25qklmvq rsPTpqyaLgfXNSKkTNke2RlFhdH2YnjyjbYlhy4R1MCRLcE9uQXIj8eA2XVmFJV9 DAbIjLugeEB34zJix5IZeMPNEluUCqrp2KEf2HVDNZ/6+glJbbLa1YZA+25MCdIY fU7LHWBGtvdskM35/Xqg6EZcfby3pi3ZSRYZX9Jaa8HC6kBOoXIu4WcbclOOR46i IoaX4jDJbRyPk+Rb3ORVLQhcQrMqNPyeAp0lqDiU46JrWoKUt4ZlvdWaXK4OhReh fafDxdtgKpd2lJBKp3rPJ9VS88JkNZRx02RjVlwXVSUXDWSS8PY= -----END CERTIFICATE-----Generated at Tue Jul 21 06:48:04 2026 by rpki-client