$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft File: 5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft (raw, json) Hash identifier: qdv0bq/YfDDKecdsqeoeMd/EBnGVTYGT7KacSC3AN6E= Subject key identifier: 43:C1:EE:D8:BB:ED:6C:F1:1C:50:84:37:56:25:8D:E1:D9:F6:15:CA Authority key identifier: 5F:13:D6:48:5B:05:8C:0C:1D:31:D7:0E:67:C5:C2:C5:B2:76:74:73 Certificate issuer: /CN=5F13D6485B058C0C1D31D70E67C5C2C5B2767473 Certificate serial: 1CED79897E8F34B13B2E2F9C82203D3B58E73640 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 22:44:08 +0000 Manifest this update: Mon 20 Jul 2026 22:39:08 +0000 Manifest next update: Wed 22 Jul 2026 01:32:08 +0000 Files and hashes: 1: 323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa (hash: KKf4Jl2OsQd3MJnMUlr/HfdddutYB5E1WPKkn8EgV+Y=) 2: 3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa (hash: x30oT/Lrnap20G4fAn+tMYY1/fn7+IpyTEVsCdXHJyU=) 3: 3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa (hash: qiIo+SN3MC7vwCLrsPjubqqbgVImtRMedDlPEjqNz+c=) 4: 5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl (hash: lpPT6DG4OfJrdRsq5Yol0FqzIUEzlEBLlVJhpAm2hcg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ed:79:89:7e:8f:34:b1:3b:2e:2f:9c:82:20:3d:3b:58:e7:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F13D6485B058C0C1D31D70E67C5C2C5B2767473 Validity Not Before: Jul 20 22:39:08 2026 GMT Not After : Jul 22 01:32:08 2026 GMT Subject: CN=43C1EED8BBED6CF11C50843756258DE1D9F615CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:61:c7:ed:a5:a2:92:f3:54:81:4a:95:7c:34: e6:41:cd:57:7e:64:1f:67:af:9f:76:e6:6e:57:95: 9d:ca:51:de:be:54:c2:d8:0b:9d:10:97:6a:5b:7e: 14:cb:64:95:a5:3e:95:34:f3:52:a9:db:9a:2a:28: d2:b0:23:c8:84:34:39:7f:1f:31:34:e6:9b:63:9e: 18:33:c1:40:13:e0:68:c3:27:38:3a:3e:94:7b:92: 13:15:0a:26:11:1f:a5:ae:d1:bf:df:58:06:a6:51: 5a:ad:b7:17:1d:38:7e:c2:37:4c:74:61:cc:77:c0: 81:dd:67:b6:55:21:ce:a8:6d:bb:03:cd:e3:34:0f: 47:01:d5:04:92:a9:6b:c6:de:66:07:31:b4:94:5d: e7:18:69:22:97:62:cd:42:7a:b3:e3:fc:19:d6:7f: 7c:98:29:f6:30:ed:c8:6c:68:41:b0:f6:c8:1c:96: 23:2e:b9:bb:b4:fa:e4:fb:ee:b6:33:e4:9c:93:b9: 51:a0:f1:0f:32:cc:44:e9:3e:fc:88:67:ae:b6:84: bd:78:2f:47:b1:22:49:06:b9:4f:a9:5f:8f:bc:e6: 73:a2:b5:00:97:a0:90:b2:0b:1f:b9:6e:dc:f2:50: 61:d0:cd:76:0b:db:90:88:78:38:ea:5d:b6:7d:41: 89:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C1:EE:D8:BB:ED:6C:F1:1C:50:84:37:56:25:8D:E1:D9:F6:15:CA X509v3 Authority Key Identifier: keyid:5F:13:D6:48:5B:05:8C:0C:1D:31:D7:0E:67:C5:C2:C5:B2:76:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:02:e1:d6:3c:36:48:4f:c8:9a:4c:34:e6:3e:9a:2b:90:4f: 86:da:50:9d:28:9b:dc:68:f1:9d:74:4e:31:66:73:44:b3:ea: a2:8d:4b:a6:b2:4a:0f:f0:6f:94:64:43:62:c9:92:a4:c5:d8: b2:a8:6f:6a:0a:23:1d:02:22:98:e0:ad:34:ba:29:b0:17:d3: 94:eb:91:69:73:26:22:e9:94:14:a0:02:fa:9f:f7:65:89:e8: 39:1d:7e:7c:a1:68:50:8a:45:5a:98:10:22:3a:01:eb:01:3e: c2:74:20:ef:d7:60:34:64:60:2e:a1:ad:5e:8b:2a:0d:50:8c: 57:08:72:16:ad:1a:ce:aa:7c:52:ef:0f:fa:8a:54:9c:17:90: 0e:cf:5b:cf:e9:33:6d:e3:57:39:a2:c3:c2:25:7a:3a:df:d1: 3f:c2:ca:b8:72:88:6c:17:da:3c:41:df:6d:6a:f7:86:8f:e6: 86:43:10:6f:f4:8f:76:b7:17:47:44:33:ef:d7:d3:ff:f8:c5: bd:91:9a:8a:b3:6b:04:3b:f8:37:69:39:c8:53:09:48:e1:c0: b0:90:5e:81:24:0e:97:17:96:b3:0b:a4:3d:9d:69:24:27:49: 8d:07:9a:94:8c:96:d2:8e:f2:fb:72:44:50:a1:d4:99:ba:cd: 75:ab:d5:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHO15iX6PNLE7Li+cgiA9O1jnNkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxM0Q2NDg1QjA1OEMwQzFEMzFENzBFNjdDNUMyQzVC Mjc2NzQ3MzAeFw0yNjA3MjAyMjM5MDhaFw0yNjA3MjIwMTMyMDhaMDMxMTAvBgNV BAMTKDQzQzFFRUQ4QkJFRDZDRjExQzUwODQzNzU2MjU4REUxRDlGNjE1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDYcftpaKS81SBSpV8NOZBzVd+ ZB9nr5925m5XlZ3KUd6+VMLYC50Ql2pbfhTLZJWlPpU081Kp25oqKNKwI8iENDl/ HzE05ptjnhgzwUAT4GjDJzg6PpR7khMVCiYRH6Wu0b/fWAamUVqttxcdOH7CN0x0 Ycx3wIHdZ7ZVIc6obbsDzeM0D0cB1QSSqWvG3mYHMbSUXecYaSKXYs1CerPj/BnW f3yYKfYw7chsaEGw9sgcliMuubu0+uT77rYz5JyTuVGg8Q8yzETpPvyIZ662hL14 L0exIkkGuU+pX4+85nOitQCXoJCyCx+5btzyUGHQzXYL25CIeDjqXbZ9QYlDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ8Hu2LvtbPEcUIQ3ViWN4dn2FcowHwYDVR0j BBgwFoAUXxPWSFsFjAwdMdcOZ8XCxbJ2dHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E3NWI3NDEtODQ2YS00MzMwLTk2NTktMDVmZmU4MjY5OGVlLzAvNUYxM0Q2NDg1 QjA1OEMwQzFEMzFENzBFNjdDNUMyQzVCMjc2NzQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjEzRDY0ODVCMDU4QzBDMUQzMUQ3MEU2N0M1QzJDNUIyNzY3 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E3NWI3NDEtODQ2YS00MzMwLTk2 NTktMDVmZmU4MjY5OGVlLzAvNUYxM0Q2NDg1QjA1OEMwQzFEMzFENzBFNjdDNUMy QzVCMjc2NzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsC4dY8NkhPyJpMNOY+miuQT4baUJ0om9xo 8Z10TjFmc0Sz6qKNS6aySg/wb5RkQ2LJkqTF2LKob2oKIx0CIpjgrTS6KbAX05Tr kWlzJiLplBSgAvqf92WJ6DkdfnyhaFCKRVqYECI6AesBPsJ0IO/XYDRkYC6hrV6L Kg1QjFcIchatGs6qfFLvD/qKVJwXkA7PW8/pM23jVzmiw8Ilejrf0T/CyrhyiGwX 2jxB321q94aP5oZDEG/0j3a3F0dEM+/X0//4xb2RmoqzawQ7+DdpOchTCUjhwLCQ XoEkDpcXlrMLpD2daSQnSY0HmpSMltKO8vtyRFCh1Jm6zXWr1V0= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:45 2026 by rpki-client