$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft File: B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft (raw, json) Hash identifier: 3kAuaYk4kD8THNYuWcSsULqVQz9GTgL8lUUTNJnLs4M= Subject key identifier: B0:CA:2E:F6:D3:E9:20:C7:32:78:FE:F9:1E:41:E6:91:0A:5C:C7:1A Authority key identifier: B5:E7:F6:FF:0C:34:6A:48:8F:01:A9:EF:AA:BD:E1:51:1D:7E:6C:96 Certificate issuer: /CN=B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96 Certificate serial: 20C4F2E21FA51900AC453D47D71A24A92CC1DABA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 11:50:59 +0000 Manifest this update: Mon 20 Jul 2026 11:45:59 +0000 Manifest next update: Tue 21 Jul 2026 15:19:59 +0000 Files and hashes: 1: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (hash: 80JDffhOqKbZ05eh6nF84ipieFeMFx1jGKSA0CuNti4=) 2: B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.crl (hash: Y/6n/HROgohWi+75dq5bQ7gOqzV5TI3xIipRbIpsDCE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.crl rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c4:f2:e2:1f:a5:19:00:ac:45:3d:47:d7:1a:24:a9:2c:c1:da:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96 Validity Not Before: Jul 20 11:45:59 2026 GMT Not After : Jul 21 15:19:59 2026 GMT Subject: CN=B0CA2EF6D3E920C73278FEF91E41E6910A5CC71A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b5:f8:57:f9:27:b4:a2:05:35:a6:89:d4:2a: 5e:52:f6:ab:9f:81:f9:03:28:9d:3c:ee:89:bb:75: e1:67:35:3b:4b:3a:9b:92:a4:71:09:95:1c:b0:48: dd:06:1f:4f:72:56:40:b2:04:e1:02:f4:57:51:61: 3a:77:48:ab:f6:83:e3:6b:5b:53:38:94:de:07:84: 43:d1:aa:72:d0:52:eb:42:29:84:48:af:9e:51:43: f9:55:de:15:df:74:34:e7:52:eb:fc:29:5b:29:c9: 07:4b:76:22:d0:8d:2a:fb:98:ca:7c:61:48:a0:5a: 4d:80:3b:7b:5b:4d:a7:4b:6a:47:16:a5:29:75:3c: 7a:17:a7:2b:54:1d:61:66:80:19:e5:b1:c2:ae:40: f6:89:3b:69:8b:45:7d:e6:11:d3:61:cd:02:3c:66: 90:f9:17:c1:eb:d9:87:fe:d0:cc:7d:00:b4:a8:ab: 9c:10:63:e6:a2:9f:26:9a:fd:36:29:56:11:85:27: d7:b8:1e:dd:e8:e0:9d:2d:c3:06:c9:cb:da:59:98: 04:29:3a:06:9d:e0:11:4f:f6:c1:cc:26:7c:dc:d6: 54:65:3d:70:3b:2c:0d:0c:6f:2f:3f:3e:1f:1f:8c: 47:9c:f8:0b:21:84:69:bd:84:a0:38:3d:dc:c3:02: 9b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CA:2E:F6:D3:E9:20:C7:32:78:FE:F9:1E:41:E6:91:0A:5C:C7:1A X509v3 Authority Key Identifier: keyid:B5:E7:F6:FF:0C:34:6A:48:8F:01:A9:EF:AA:BD:E1:51:1D:7E:6C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:87:36:1a:c7:13:ce:35:6b:b1:ca:52:52:29:c1:c4:e6:d1: 41:6d:6f:b6:95:62:9c:c4:50:ac:56:b6:72:b9:85:79:01:6a: 92:23:e4:19:fc:5e:aa:f8:7d:dd:60:35:cd:b7:fa:27:94:f0: d4:e9:b8:08:8a:fc:ef:8e:67:1e:df:8e:f1:30:1e:49:cd:63: 39:cd:f3:34:bd:f6:90:dd:f3:cd:87:0d:17:4e:f8:e8:31:82: e0:20:38:07:3b:3c:ad:5d:bc:db:5f:b6:98:39:45:c8:cf:9b: fc:21:81:4e:ce:de:a7:87:06:e2:fb:5e:59:f0:f8:3f:02:f5: 9e:1b:fa:2e:2f:e0:f3:a4:3f:21:40:b6:38:75:8d:1c:6d:65: 42:24:09:d7:37:84:86:d0:41:3b:22:9b:83:c9:9e:9c:6b:7d: e0:50:08:c0:32:64:24:5e:e2:82:2d:8f:ff:09:03:a5:8c:bf: 27:e0:c3:df:7b:f6:22:75:15:5c:62:78:e7:be:60:7f:2f:a8: 70:98:8e:ef:c0:34:9b:31:90:7d:14:4a:f7:0a:bb:8d:9e:c3: 2e:44:99:aa:d8:0f:33:d2:56:e5:13:30:5d:d6:48:e6:a5:e6: 9c:bb:1f:86:b8:03:8d:fe:55:0b:76:82:15:a0:85:37:72:a9: c4:db:5f:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMTy4h+lGQCsRT1H1xokqSzB2rowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVFN0Y2RkYwQzM0NkE0ODhGMDFBOUVGQUFCREUxNTEx RDdFNkM5NjAeFw0yNjA3MjAxMTQ1NTlaFw0yNjA3MjExNTE5NTlaMDMxMTAvBgNV BAMTKEIwQ0EyRUY2RDNFOTIwQzczMjc4RkVGOTFFNDFFNjkxMEE1Q0M3MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmtfhX+Se0ogU1ponUKl5S9quf gfkDKJ087om7deFnNTtLOpuSpHEJlRywSN0GH09yVkCyBOEC9FdRYTp3SKv2g+Nr W1M4lN4HhEPRqnLQUutCKYRIr55RQ/lV3hXfdDTnUuv8KVspyQdLdiLQjSr7mMp8 YUigWk2AO3tbTadLakcWpSl1PHoXpytUHWFmgBnlscKuQPaJO2mLRX3mEdNhzQI8 ZpD5F8Hr2Yf+0Mx9ALSoq5wQY+ainyaa/TYpVhGFJ9e4Ht3o4J0twwbJy9pZmAQp Ogad4BFP9sHMJnzc1lRlPXA7LA0Mby8/Ph8fjEec+AshhGm9hKA4PdzDAptNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsMou9tPpIMcyeP75HkHmkQpcxxowHwYDVR0j BBgwFoAUtef2/ww0akiPAanvqr3hUR1+bJYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQzNWJmNzktZTg0YS00MGUwLThmZDQtZjE2OWMxODZiZThmLzAvQjVFN0Y2RkYw QzM0NkE0ODhGMDFBOUVGQUFCREUxNTExRDdFNkM5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNUU3RjZGRjBDMzQ2QTQ4OEYwMUE5RUZBQUJERTE1MTFEN0U2 Qzk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQzNWJmNzktZTg0YS00MGUwLThm ZDQtZjE2OWMxODZiZThmLzAvQjVFN0Y2RkYwQzM0NkE0ODhGMDFBOUVGQUFCREUx NTExRDdFNkM5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOHNhrHE841a7HKUlIpwcTm0UFtb7aVYpzE UKxWtnK5hXkBapIj5Bn8Xqr4fd1gNc23+ieU8NTpuAiK/O+OZx7fjvEwHknNYznN 8zS99pDd882HDRdO+OgxguAgOAc7PK1dvNtftpg5RcjPm/whgU7O3qeHBuL7Xlnw +D8C9Z4b+i4v4POkPyFAtjh1jRxtZUIkCdc3hIbQQTsim4PJnpxrfeBQCMAyZCRe 4oItj/8JA6WMvyfgw9979iJ1FVxieOe+YH8vqHCYju/ANJsxkH0USvcKu42ewy5E marYDzPSVuUTMF3WSOal5py7H4a4A43+VQt2ghWghTdyqcTbX0M= -----END CERTIFICATE-----Generated at Tue Jul 21 08:31:29 2026 by rpki-client