$ rpki-client -vvf rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft File: 5D885821D2406437CDFEC04380E967515A67AECC.mft (raw, json) Hash identifier: 6Veo/aHJFnivSA4fy4kQDU7CgBWNbRhmCfmXn7BmdjU= Subject key identifier: DD:AD:EA:8E:EB:7F:27:49:0E:AB:66:3D:1E:67:47:35:8B:DE:34:43 Authority key identifier: 5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC Certificate issuer: /CN=5D885821D2406437CDFEC04380E967515A67AECC Certificate serial: 3B87AB2AA7545FCF8C5FFA38812949B384CF0572 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft Manifest number: 55 Signing time: Sat 04 Jul 2026 10:45:38 +0000 Manifest this update: Sat 04 Jul 2026 10:40:38 +0000 Manifest next update: Sun 05 Jul 2026 13:38:38 +0000 Files and hashes: 1: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: K0RHUYKMgdp0wpj2LpgjeiPXy+duWorfZjM80sQwxyc=) 2: 5D885821D2406437CDFEC04380E967515A67AECC.crl (hash: wrZmbfTHslrb0VNK5j4cTH8oc719XU7EWFbHanO94SE=) 3: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (hash: L6gQCpLzy7aXDtfuVgbwQW0xcldnnRmpgqFEsdoAP3Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Jul 2026 05:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:87:ab:2a:a7:54:5f:cf:8c:5f:fa:38:81:29:49:b3:84:cf:05:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D885821D2406437CDFEC04380E967515A67AECC Validity Not Before: Jul 4 10:40:38 2026 GMT Not After : Jul 5 13:38:38 2026 GMT Subject: CN=DDADEA8EEB7F27490EAB663D1E6747358BDE3443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0d:86:5e:5b:9c:11:c6:b1:c6:a9:24:2e:fe: 89:eb:49:39:c3:7b:ef:87:c9:61:54:35:79:c6:48: 88:dc:15:70:ab:20:9a:0d:22:73:ed:bf:a6:08:ca: d9:80:b3:f8:86:39:4c:5f:e5:ef:95:66:13:61:1a: 24:42:ee:f6:10:be:a2:28:05:86:f8:85:a7:3b:74: 16:92:90:2d:40:90:ae:95:16:ce:9e:16:71:20:2e: 41:aa:30:8f:23:b8:7b:d8:86:65:a4:ae:42:d6:6b: bb:2b:03:55:03:81:9f:70:37:39:fa:c0:57:e8:c9: cf:f8:f4:73:8f:03:e1:03:1d:fe:1a:4c:b3:3f:b4: b8:48:08:26:e7:7e:80:f5:66:bf:90:8b:69:5b:a4: e4:04:a7:b0:61:55:35:99:b0:c7:f8:ac:13:b0:13: d6:3d:9d:2e:a1:24:a6:dd:73:6d:49:bd:02:b4:aa: 36:ef:95:3d:7d:b5:9a:b1:7c:85:45:6e:43:5f:39: 53:c5:71:cf:37:a0:01:8f:7e:fa:66:b0:26:4e:b8: 32:59:f1:46:d3:52:ae:23:81:46:ed:63:36:83:0a: 64:2a:e4:68:e2:d5:02:61:a0:78:b4:38:8f:ae:e6: ad:2e:79:9a:b8:9b:a8:74:2e:ed:92:8b:51:5f:09: c1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AD:EA:8E:EB:7F:27:49:0E:AB:66:3D:1E:67:47:35:8B:DE:34:43 X509v3 Authority Key Identifier: keyid:5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e3:23:9e:44:17:ca:a7:3d:14:03:9d:01:dc:bb:f0:b1:87: 34:2c:3d:b7:37:de:82:89:8c:16:53:4d:ed:43:ac:9a:5a:ba: e0:87:61:a7:2e:65:8a:3f:47:e3:73:11:05:7a:bf:4d:c4:9d: 78:3c:78:77:f9:3d:eb:15:b6:5f:a0:c4:f4:01:51:15:76:d0: 11:61:8f:e7:f5:97:f3:a7:65:5b:04:78:3e:0b:66:f0:14:a9: bd:a3:10:b8:c0:9b:9a:f9:f9:15:d5:d6:c2:8c:56:27:5d:48: df:5f:eb:7e:12:94:ea:ff:c7:09:43:7b:e2:ef:88:6c:21:29: a3:aa:c7:ef:6b:0e:91:16:26:74:90:a6:ee:35:c9:65:8f:f3: b5:33:39:65:27:26:a3:f0:11:3b:d3:4d:20:bb:a3:22:ad:55: 55:7a:1a:26:08:b5:45:04:d8:f9:9d:72:c0:43:62:4c:de:3f: 3e:48:30:05:da:65:e0:53:a2:dc:97:03:04:69:fd:b2:d4:99: 1b:99:36:46:b8:fb:c3:49:b2:85:64:91:f7:a9:6e:63:62:fa: c0:26:c7:47:df:6b:28:16:8b:22:d4:df:db:02:f8:db:38:ad: b2:f4:c6:3c:80:3d:c9:ee:9f:2f:07:7a:14:46:af:23:da:b7: 17:c8:af:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO4erKqdUX8+MX/o4gSlJs4TPBXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ4ODU4MjFEMjQwNjQzN0NERkVDMDQzODBFOTY3NTE1 QTY3QUVDQzAeFw0yNjA3MDQxMDQwMzhaFw0yNjA3MDUxMzM4MzhaMDMxMTAvBgNV BAMTKEREQURFQThFRUI3RjI3NDkwRUFCNjYzRDFFNjc0NzM1OEJERTM0NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6DYZeW5wRxrHGqSQu/onrSTnD e++HyWFUNXnGSIjcFXCrIJoNInPtv6YIytmAs/iGOUxf5e+VZhNhGiRC7vYQvqIo BYb4hac7dBaSkC1AkK6VFs6eFnEgLkGqMI8juHvYhmWkrkLWa7srA1UDgZ9wNzn6 wFfoyc/49HOPA+EDHf4aTLM/tLhICCbnfoD1Zr+Qi2lbpOQEp7BhVTWZsMf4rBOw E9Y9nS6hJKbdc21JvQK0qjbvlT19tZqxfIVFbkNfOVPFcc83oAGPfvpmsCZOuDJZ 8UbTUq4jgUbtYzaDCmQq5Gji1QJhoHi0OI+u5q0ueZq4m6h0Lu2Si1FfCcF5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3a3qjut/J0kOq2Y9HmdHNYveNEMwHwYDVR0j BBgwFoAUXYhYIdJAZDfN/sBDgOlnUVpnrswwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM3Njk0YjctMzI1Ni00NjY2LWEzZmUtNmU4MmU3ODNiMWUxLzAvNUQ4ODU4MjFE MjQwNjQzN0NERkVDMDQzODBFOTY3NTE1QTY3QUVDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDg4NTgyMUQyNDA2NDM3Q0RGRUMwNDM4MEU5Njc1MTVBNjdB RUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvNUQ4ODU4MjFEMjQwNjQzN0NERkVDMDQzODBFOTY3 NTE1QTY3QUVDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzjI55EF8qnPRQDnQHcu/CxhzQsPbc33oKJ jBZTTe1DrJpauuCHYacuZYo/R+NzEQV6v03EnXg8eHf5PesVtl+gxPQBURV20BFh j+f1l/OnZVsEeD4LZvAUqb2jELjAm5r5+RXV1sKMViddSN9f634SlOr/xwlDe+Lv iGwhKaOqx+9rDpEWJnSQpu41yWWP87UzOWUnJqPwETvTTSC7oyKtVVV6GiYItUUE 2PmdcsBDYkzePz5IMAXaZeBTotyXAwRp/bLUmRuZNka4+8NJsoVkkfepbmNi+sAm x0ffaygWiyLU39sC+Ns4rbL0xjyAPcnuny8HehRGryPatxfIr7M= -----END CERTIFICATE-----Generated at Sat Jul 4 16:13:22 2026 by rpki-client