$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft File: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft (raw, json) Hash identifier: pGgm/yYn1tGJMhMCkG5fHQ0+tarD1B9o8letd6Ldak0= Subject key identifier: F0:6D:2F:37:9C:53:6C:80:12:B0:FB:91:EE:0E:C0:42:EB:30:5C:B2 Authority key identifier: 53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 Certificate issuer: /CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Certificate serial: 561DAE349F56D88F76FB20DD6F89B0E5A8E462B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 19:05:06 +0000 Manifest this update: Mon 20 Jul 2026 19:00:06 +0000 Manifest next update: Tue 21 Jul 2026 19:53:06 +0000 Files and hashes: 1: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl (hash: N+zuh2Bgv8mJO4KkNuIvyAdRpFvry7VPGYKmAEDH0Uc=) 2: 3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (hash: 1t9yzNFOj0CAbODcXUQcoM9eYOKr+Gim4y4R0hZm1ws=) 3: 3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa (hash: d/lQ7Oz9/jWtBq0Ck1NBYGMJFkT573cCc0+ynKJPdok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1d:ae:34:9f:56:d8:8f:76:fb:20:dd:6f:89:b0:e5:a8:e4:62:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Validity Not Before: Jul 20 19:00:06 2026 GMT Not After : Jul 21 19:53:06 2026 GMT Subject: CN=F06D2F379C536C8012B0FB91EE0EC042EB305CB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:96:64:c3:fb:72:28:b0:6b:3a:b0:02:a0: 82:b3:38:df:64:fd:a6:b3:0e:fa:c5:29:00:31:a3: ba:ab:2f:8b:35:28:a1:5b:cb:6c:7d:17:5e:7c:9f: 34:5f:20:da:44:02:a4:20:6d:a8:9c:32:b6:9d:6a: 5b:0a:fa:30:a1:6a:67:95:c7:21:d1:2d:24:ec:12: 26:c1:4c:c9:5d:74:ca:06:46:f5:a2:9d:8b:e3:77: af:31:dd:79:5b:7e:06:39:4d:e1:b3:43:90:a3:34: cd:24:5b:9a:f4:56:6a:ea:1a:dd:8b:f7:15:c8:b2: 84:12:53:83:ae:fc:d7:e0:ac:85:74:7d:af:52:1e: d4:ea:e3:f3:73:0e:03:c6:1d:a7:85:9d:ae:9e:2a: 88:9c:be:da:52:5d:86:51:ba:e6:78:51:b4:45:c7: a5:8a:d7:11:48:f0:d6:14:69:b5:92:24:3b:7c:2f: eb:a4:65:80:9d:af:d0:c4:93:79:12:ca:79:39:ff: 49:c2:29:1e:ab:a2:10:bf:09:2c:83:c4:dc:a1:6b: 2f:34:ff:18:58:b0:72:79:09:30:1a:57:93:8c:30: 98:06:d4:b6:18:6f:4f:da:3c:f0:b2:a6:bf:51:49: f3:4e:30:3b:64:4d:26:42:e8:2e:8f:53:88:bb:31: e6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6D:2F:37:9C:53:6C:80:12:B0:FB:91:EE:0E:C0:42:EB:30:5C:B2 X509v3 Authority Key Identifier: keyid:53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:c8:3b:e8:35:d8:34:bd:ab:e7:ef:c5:65:56:37:fc:4e:75: 89:d8:ab:5a:09:fa:c7:bc:04:30:df:9c:11:2c:a2:d5:a3:17: 55:75:a7:63:2e:88:f1:9e:2e:54:c0:9c:94:3b:1f:25:53:83: 04:1a:cf:d6:08:57:31:ef:d2:4c:d7:95:3c:b4:9a:7d:34:24: 23:43:24:4e:84:92:d0:3e:45:49:45:6b:79:76:8d:03:65:01: 81:b6:d0:2e:ec:9d:9c:54:99:65:ae:59:da:42:01:82:3d:3e: ef:9c:76:23:c9:25:97:cb:d3:99:24:6a:00:3e:48:b2:1c:ec: f8:1a:58:90:6d:a7:ab:ad:75:98:41:ce:59:ed:1f:51:2b:b3: 2c:d5:dc:c7:26:f7:83:22:36:3a:3b:74:d4:44:bd:ea:08:c9: fc:08:35:fc:d8:97:33:3e:ca:cd:5d:1b:f1:4f:fd:37:8b:0c: cb:a5:9c:50:fa:af:32:b1:b2:eb:fb:41:0a:2f:28:14:be:97: 0e:c6:19:c5:7a:19:69:39:cc:15:50:25:da:57:c5:0c:3d:4e: 45:a7:5b:6b:49:8a:db:ef:79:e2:19:a0:ae:da:24:4d:10:66: 58:23:f0:f4:b5:51:0e:6b:f2:93:54:71:a1:bd:33:50:64:f2: 94:0b:0a:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVh2uNJ9W2I92+yDdb4mw5ajkYrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMwMEQwRUVDN0EyMUFBRkFENjFCNkU0MDgyOENCQkE3 QzAzQzg0OTAeFw0yNjA3MjAxOTAwMDZaFw0yNjA3MjExOTUzMDZaMDMxMTAvBgNV BAMTKEYwNkQyRjM3OUM1MzZDODAxMkIwRkI5MUVFMEVDMDQyRUIzMDVDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzn5Zkw/tyKLBrOrACoIKzON9k /aazDvrFKQAxo7qrL4s1KKFby2x9F158nzRfINpEAqQgbaicMradalsK+jChameV xyHRLSTsEibBTMlddMoGRvWinYvjd68x3XlbfgY5TeGzQ5CjNM0kW5r0VmrqGt2L 9xXIsoQSU4Ou/NfgrIV0fa9SHtTq4/NzDgPGHaeFna6eKoicvtpSXYZRuuZ4UbRF x6WK1xFI8NYUabWSJDt8L+ukZYCdr9DEk3kSynk5/0nCKR6rohC/CSyDxNyhay80 /xhYsHJ5CTAaV5OMMJgG1LYYb0/aPPCypr9RSfNOMDtkTSZC6C6PU4i7MeZdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8G0vN5xTbIASsPuR7g7AQuswXLIwHwYDVR0j BBgwFoAUUwDQ7seiGq+tYbbkCCjLunwDyEkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFiM2MwM2QtMmUyZS00ODk3LTg2OWItMjFjZTQ4NjAxNjE5LzAvNTMwMEQwRUVD N0EyMUFBRkFENjFCNkU0MDgyOENCQkE3QzAzQzg0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzAwRDBFRUM3QTIxQUFGQUQ2MUI2RTQwODI4Q0JCQTdDMDND ODQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFiM2MwM2QtMmUyZS00ODk3LTg2 OWItMjFjZTQ4NjAxNjE5LzAvNTMwMEQwRUVDN0EyMUFBRkFENjFCNkU0MDgyOENC QkE3QzAzQzg0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfIO+g12DS9q+fvxWVWN/xOdYnYq1oJ+se8 BDDfnBEsotWjF1V1p2MuiPGeLlTAnJQ7HyVTgwQaz9YIVzHv0kzXlTy0mn00JCND JE6EktA+RUlFa3l2jQNlAYG20C7snZxUmWWuWdpCAYI9Pu+cdiPJJZfL05kkagA+ SLIc7PgaWJBtp6utdZhBzlntH1ErsyzV3Mcm94MiNjo7dNREveoIyfwINfzYlzM+ ys1dG/FP/TeLDMulnFD6rzKxsuv7QQovKBS+lw7GGcV6GWk5zBVQJdpXxQw9TkWn W2tJitvveeIZoK7aJE0QZlgj8PS1UQ5r8pNUcaG9M1Bk8pQLCg0= -----END CERTIFICATE-----Generated at Tue Jul 21 06:15:59 2026 by rpki-client