$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft File: 5AE2131384B411127BE4CF7467B12F83CBAD9996.mft (raw, json) Hash identifier: WgF/a+aNz/YxZC5krRRamNDaTTuYc8vnEClg9ZKGGe0= Subject key identifier: E0:D5:F8:D3:7D:B1:37:81:AA:85:D2:B6:CC:43:B9:5F:87:D9:3C:27 Authority key identifier: 5A:E2:13:13:84:B4:11:12:7B:E4:CF:74:67:B1:2F:83:CB:AD:99:96 Certificate issuer: /CN=5AE2131384B411127BE4CF7467B12F83CBAD9996 Certificate serial: 55129DB3625A4A0380FEB4821106153E590EA4AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 15:46:04 +0000 Manifest this update: Mon 20 Jul 2026 15:41:04 +0000 Manifest next update: Tue 21 Jul 2026 19:03:04 +0000 Files and hashes: 1: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: NmIt0iuskNCmt4uz1oIpjbFNHodPs9Y9zQPXOPslKF0=) 2: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: I0jTp/Lb+KlyYGeSMZScDem+MblcbAhoI37lZDiIvac=) 3: 5AE2131384B411127BE4CF7467B12F83CBAD9996.crl (hash: FhrcAi8cilLTJq/DLAbVOzs2H27wxj0ceoOJy3U2YjM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.crl rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:12:9d:b3:62:5a:4a:03:80:fe:b4:82:11:06:15:3e:59:0e:a4:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE2131384B411127BE4CF7467B12F83CBAD9996 Validity Not Before: Jul 20 15:41:04 2026 GMT Not After : Jul 21 19:03:04 2026 GMT Subject: CN=E0D5F8D37DB13781AA85D2B6CC43B95F87D93C27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:0a:76:4f:c5:a6:19:21:4e:7b:ab:1c:c6: d4:55:20:43:39:73:98:dd:e9:fb:52:b4:8a:e7:1b: 67:1f:5f:58:f6:c1:1f:04:31:76:97:7f:6d:6d:13: 44:3e:2e:db:75:b6:39:27:31:ab:40:c0:f2:68:9f: 7e:48:fe:05:47:76:e8:97:92:b3:2e:73:aa:43:0c: 76:e3:a1:ce:a2:e7:16:21:b5:1a:df:30:c4:eb:ca: d3:58:e7:9f:0b:f4:53:5e:6f:7e:31:0e:06:6b:f3: 88:b7:42:50:d0:c9:99:3b:4c:8e:43:81:22:56:13: a2:00:ed:aa:bd:fd:69:58:42:fb:df:f5:ab:d5:28: 26:4b:c2:72:89:cf:b1:66:c7:93:ca:3e:b7:d8:3f: d7:a2:cc:45:af:42:23:ed:31:0e:4b:09:5e:ae:d5: 24:ec:34:08:d9:c1:ef:cd:3e:e7:ce:63:80:5e:37: 78:d8:71:a2:6c:78:4c:cc:f2:ee:f3:17:4e:9d:aa: 9c:73:b5:aa:b4:9a:a7:a6:67:5b:9c:65:b0:35:0d: 74:e4:3a:17:d4:a4:85:ff:cb:1e:d2:fc:80:d6:fc: c7:a7:a9:e2:b3:10:a3:95:86:03:4f:87:fa:27:cb: a8:87:6b:9e:54:74:3c:a1:4c:b5:68:90:b3:23:7f: 4a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D5:F8:D3:7D:B1:37:81:AA:85:D2:B6:CC:43:B9:5F:87:D9:3C:27 X509v3 Authority Key Identifier: keyid:5A:E2:13:13:84:B4:11:12:7B:E4:CF:74:67:B1:2F:83:CB:AD:99:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:a3:e0:bd:20:a4:8e:09:fa:ea:82:1b:cf:dc:f3:85:54:d6: ac:70:01:b1:65:ed:8d:7a:80:5b:88:45:b6:dd:ae:08:43:0a: e6:e1:b8:1a:20:1b:72:b3:dc:be:d0:5a:7b:2f:69:a6:d0:6d: 50:22:59:eb:d6:af:91:fc:07:a7:42:74:a7:dd:50:70:9a:fa: b8:4a:99:84:93:99:ac:80:78:b5:cd:c0:26:ea:ea:bb:04:80: 49:b9:17:e3:5d:5b:e4:f4:59:b8:9b:2f:87:c7:0a:dc:fb:c7: 7e:91:b5:6e:49:15:66:d3:c2:32:d9:0d:07:57:e5:2c:68:61: f4:71:f3:0f:0e:a0:ff:94:4b:c7:12:3a:a6:9a:c5:c6:b7:5f: 3c:ab:f2:52:04:6b:bb:bf:9f:12:f6:52:1d:65:f2:2b:a0:03: e5:39:dd:fd:f6:48:14:74:04:17:fd:3e:88:45:7c:2c:0a:65: 2e:8a:4b:5e:ed:73:53:11:21:2e:d8:8f:60:bb:d3:87:8f:10: 83:bc:b4:f7:96:d6:fe:d7:f7:ea:32:3b:65:0a:5b:05:0f:a4: 9d:e6:47:f7:41:6f:7c:0b:21:d1:83:6d:19:82:3d:44:81:b6: dd:9c:48:d7:ee:6e:3a:42:27:fc:06:a3:69:fe:2b:19:b0:47: 5c:1e:86:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVRKds2JaSgOA/rSCEQYVPlkOpKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMjEzMTM4NEI0MTExMjdCRTRDRjc0NjdCMTJGODND QkFEOTk5NjAeFw0yNjA3MjAxNTQxMDRaFw0yNjA3MjExOTAzMDRaMDMxMTAvBgNV BAMTKEUwRDVGOEQzN0RCMTM3ODFBQTg1RDJCNkNDNDNCOTVGODdEOTNDMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1nAp2T8WmGSFOe6scxtRVIEM5 c5jd6ftStIrnG2cfX1j2wR8EMXaXf21tE0Q+Ltt1tjknMatAwPJon35I/gVHduiX krMuc6pDDHbjoc6i5xYhtRrfMMTrytNY558L9FNeb34xDgZr84i3QlDQyZk7TI5D gSJWE6IA7aq9/WlYQvvf9avVKCZLwnKJz7Fmx5PKPrfYP9eizEWvQiPtMQ5LCV6u 1STsNAjZwe/NPufOY4BeN3jYcaJseEzM8u7zF06dqpxztaq0mqemZ1ucZbA1DXTk OhfUpIX/yx7S/IDW/MenqeKzEKOVhgNPh/ony6iHa55UdDyhTLVokLMjf0pzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4NX4032xN4GqhdK2zEO5X4fZPCcwHwYDVR0j BBgwFoAUWuITE4S0ERJ75M90Z7Evg8utmZYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQxOTZkNjUtMjFhOC00YjA0LWE5ZGUtNzI4M2ZiZTNjMWNiLzAvNUFFMjEzMTM4 NEI0MTExMjdCRTRDRjc0NjdCMTJGODNDQkFEOTk5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUUyMTMxMzg0QjQxMTEyN0JFNENGNzQ2N0IxMkY4M0NCQUQ5 OTk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvNUFFMjEzMTM4NEI0MTExMjdCRTRDRjc0NjdCMTJG ODNDQkFEOTk5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCj4L0gpI4J+uqCG8/c84VU1qxwAbFl7Y16 gFuIRbbdrghDCubhuBogG3Kz3L7QWnsvaabQbVAiWevWr5H8B6dCdKfdUHCa+rhK mYSTmayAeLXNwCbq6rsEgEm5F+NdW+T0WbibL4fHCtz7x36RtW5JFWbTwjLZDQdX 5SxoYfRx8w8OoP+US8cSOqaaxca3Xzyr8lIEa7u/nxL2Uh1l8iugA+U53f32SBR0 BBf9PohFfCwKZS6KS17tc1MRIS7Yj2C704ePEIO8tPeW1v7X9+oyO2UKWwUPpJ3m R/dBb3wLIdGDbRmCPUSBtt2cSNfubjpCJ/wGo2n+KxmwR1wehvk= -----END CERTIFICATE-----Generated at Tue Jul 21 06:26:41 2026 by rpki-client