$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft File: 5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft (raw, json) Hash identifier: ZfN9hehUgFm0772BkQVLr1942BB1DfVgWBNtRk3YPBg= Subject key identifier: 0D:1F:E5:E6:5A:EE:87:64:16:88:2D:B3:44:91:04:A7:8E:58:A5:8E Authority key identifier: 5F:A8:87:D4:C4:22:96:4F:B6:8C:DD:87:7D:9A:B4:17:36:0C:2E:B5 Certificate issuer: /CN=5FA887D4C422964FB68CDD877D9AB417360C2EB5 Certificate serial: 157EB217ED050AE2425EC81C7F310DAF926495E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 12:52:28 +0000 Manifest this update: Mon 20 Jul 2026 12:47:28 +0000 Manifest next update: Tue 21 Jul 2026 15:29:28 +0000 Files and hashes: 1: 3130332e3133362e342e302f32322d3234203d3e203338333230.roa (hash: opi4UEK669uRcBpJCe+2Ayk5Lle5+nKJNqzpjbTh2ik=) 2: 5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl (hash: J0WBLBEYIeGSIUr022OGYQTehm9CtqOveJmuWf4d7hc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:7e:b2:17:ed:05:0a:e2:42:5e:c8:1c:7f:31:0d:af:92:64:95:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FA887D4C422964FB68CDD877D9AB417360C2EB5 Validity Not Before: Jul 20 12:47:28 2026 GMT Not After : Jul 21 15:29:28 2026 GMT Subject: CN=0D1FE5E65AEE876416882DB3449104A78E58A58E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:3e:c3:46:be:50:63:56:4c:05:43:3d:e7: 51:29:89:70:4d:31:52:75:cc:1e:cd:85:b1:e1:ef: 4d:f4:51:bc:3b:53:98:bf:38:60:38:93:53:ed:68: cf:8d:c2:c9:6e:eb:fd:83:33:c8:2d:a3:cc:0f:55: e7:c4:83:41:ab:76:ea:6d:c3:86:ff:b1:25:c0:d7: c6:06:aa:5f:1d:62:1e:5e:8a:30:39:cf:ef:12:72: 51:27:24:e3:41:b6:00:35:88:cb:7a:32:6d:19:8c: aa:c0:f7:11:e7:fd:ae:16:0d:67:05:e2:0d:a8:27: fb:a3:09:dd:41:e9:c1:e9:5c:f0:c9:a6:6f:e4:0d: 5d:12:d7:34:a2:6d:20:64:de:70:70:df:05:d5:7e: 3f:d1:96:bb:0c:2b:9f:98:17:24:a8:ac:81:ab:02: 2f:07:33:9d:21:13:79:db:65:ab:c6:41:cd:a8:6f: 06:a2:cb:cb:20:5d:d0:4d:e9:c9:b6:1e:9f:a2:9e: 95:8a:e6:69:17:80:9d:6f:e8:be:e2:b7:76:0a:99: 16:dd:25:df:72:31:b6:e5:72:70:7b:b5:85:4e:04: 70:30:c4:67:9d:74:ac:33:26:91:10:03:ed:38:d3: 63:d8:43:c7:05:29:79:79:2e:41:83:dd:52:76:8d: d1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1F:E5:E6:5A:EE:87:64:16:88:2D:B3:44:91:04:A7:8E:58:A5:8E X509v3 Authority Key Identifier: keyid:5F:A8:87:D4:C4:22:96:4F:B6:8C:DD:87:7D:9A:B4:17:36:0C:2E:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:11:d5:fd:e6:39:58:bd:e0:7d:0d:ed:6b:b7:65:de:9f:49: 36:dc:52:15:53:89:56:d6:56:36:d5:6b:11:94:b6:58:c3:48: e8:6c:a4:8d:6a:ff:60:6c:b8:8d:bf:77:74:37:d2:45:eb:28: 61:a0:52:88:2e:33:5e:84:0c:48:61:4e:69:c5:14:94:66:18: 13:17:43:e3:ae:44:82:23:d5:d2:a9:a4:2d:ef:2d:0f:6b:85: fd:6b:21:fd:c5:22:44:16:85:45:1f:75:6b:4f:79:57:5b:cd: 71:5d:7f:12:47:f4:f9:c7:50:2d:d9:ad:62:b6:e0:b6:5c:07: 2d:46:f9:35:5f:41:24:d0:d3:37:de:20:93:62:6a:f4:56:76: ae:cc:32:ee:bd:b4:68:00:4d:f5:05:22:1b:a9:fa:04:c0:6e: 17:f0:c8:fc:b0:aa:27:96:65:52:bf:26:6b:8d:03:36:9e:e2: a8:b0:fb:dd:10:c9:1a:fc:1e:ea:ad:c4:62:0b:e4:80:b6:78: 97:5d:2d:ac:d0:a8:d3:d3:2a:c2:99:0d:83:88:f5:aa:48:ad: 39:3d:6d:74:46:0d:6a:1e:d9:a9:6e:ca:22:2e:24:a6:79:f4: 00:68:b4:ab:b0:90:51:9c:93:41:67:52:8b:0d:0e:32:ee:c2: 94:91:b5:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFX6yF+0FCuJCXsgcfzENr5JkleEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZBODg3RDRDNDIyOTY0RkI2OENERDg3N0Q5QUI0MTcz NjBDMkVCNTAeFw0yNjA3MjAxMjQ3MjhaFw0yNjA3MjExNTI5MjhaMDMxMTAvBgNV BAMTKDBEMUZFNUU2NUFFRTg3NjQxNjg4MkRCMzQ0OTEwNEE3OEU1OEE1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+D7DRr5QY1ZMBUM951EpiXBN MVJ1zB7NhbHh7030Ubw7U5i/OGA4k1PtaM+Nwslu6/2DM8gto8wPVefEg0Grdupt w4b/sSXA18YGql8dYh5eijA5z+8SclEnJONBtgA1iMt6Mm0ZjKrA9xHn/a4WDWcF 4g2oJ/ujCd1B6cHpXPDJpm/kDV0S1zSibSBk3nBw3wXVfj/RlrsMK5+YFySorIGr Ai8HM50hE3nbZavGQc2obwaiy8sgXdBN6cm2Hp+inpWK5mkXgJ1v6L7it3YKmRbd Jd9yMbblcnB7tYVOBHAwxGeddKwzJpEQA+0402PYQ8cFKXl5LkGD3VJ2jdGHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDR/l5lruh2QWiC2zRJEEp45YpY4wHwYDVR0j BBgwFoAUX6iH1MQilk+2jN2HfZq0FzYMLrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM0NWMyMmMtMjc1Yi00Mjk1LWI0NTMtNjBhNzgzYjljNDJhLzAvNUZBODg3RDRD NDIyOTY0RkI2OENERDg3N0Q5QUI0MTczNjBDMkVCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkE4ODdENEM0MjI5NjRGQjY4Q0REODc3RDlBQjQxNzM2MEMy RUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM0NWMyMmMtMjc1Yi00Mjk1LWI0 NTMtNjBhNzgzYjljNDJhLzAvNUZBODg3RDRDNDIyOTY0RkI2OENERDg3N0Q5QUI0 MTczNjBDMkVCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQR1f3mOVi94H0N7Wu3Zd6fSTbcUhVTiVbW VjbVaxGUtljDSOhspI1q/2BsuI2/d3Q30kXrKGGgUoguM16EDEhhTmnFFJRmGBMX Q+OuRIIj1dKppC3vLQ9rhf1rIf3FIkQWhUUfdWtPeVdbzXFdfxJH9PnHUC3ZrWK2 4LZcBy1G+TVfQSTQ0zfeIJNiavRWdq7MMu69tGgATfUFIhup+gTAbhfwyPywqieW ZVK/JmuNAzae4qiw+90QyRr8HuqtxGIL5IC2eJddLazQqNPTKsKZDYOI9apIrTk9 bXRGDWoe2aluyiIuJKZ59ABotKuwkFGck0FnUosNDjLuwpSRtcQ= -----END CERTIFICATE-----Generated at Tue Jul 21 06:37:14 2026 by rpki-client