$ rpki-client -vvf rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft File: B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft (raw, json) Hash identifier: tivbPtRNiARThr2UZ1T+cqs1HCaqjV7m6swyomHEH58= Subject key identifier: 41:6B:B2:89:CB:18:8B:23:AC:50:4C:7F:03:9B:83:01:1B:4B:4E:61 Authority key identifier: B5:CF:A0:20:DD:4B:BF:D4:98:C5:E4:D8:4A:8D:63:09:73:87:49:CC Certificate issuer: /CN=B5CFA020DD4BBFD498C5E4D84A8D6309738749CC Certificate serial: 3479C7E71AEEC1913CF9BD9D7AB5745B527AB65D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 20:11:12 +0000 Manifest this update: Mon 20 Jul 2026 20:06:12 +0000 Manifest next update: Tue 21 Jul 2026 23:55:12 +0000 Files and hashes: 1: B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl (hash: 7Tfq8pEaWchefyEWgKqHX2BpRJ8PNdnfC8Ys+mjZ1Y0=) 2: 3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa (hash: KOBMUeuuJtkuzoTiB4FBFCyBVV1+45BqlCrbct7wq3M=) 3: 3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa (hash: xB0/WgkgeQpbT+DgIUgkpcHnnIC1tIl18yTmoTUITOQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:79:c7:e7:1a:ee:c1:91:3c:f9:bd:9d:7a:b5:74:5b:52:7a:b6:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CFA020DD4BBFD498C5E4D84A8D6309738749CC Validity Not Before: Jul 20 20:06:12 2026 GMT Not After : Jul 21 23:55:12 2026 GMT Subject: CN=416BB289CB188B23AC504C7F039B83011B4B4E61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f3:d3:a4:ed:cd:9d:4e:ac:cf:a7:b1:38:2d: 6a:92:68:84:ae:e2:71:e4:7d:19:b5:96:60:d7:3e: 56:24:7f:b6:a2:e3:78:e9:0b:3a:eb:76:8d:07:1c: 14:be:70:c2:b7:9a:ce:db:62:7c:e0:00:3b:cf:58: c2:77:ed:14:54:df:5a:33:b3:4c:49:e9:8d:ee:a6: 6f:d0:18:e8:d5:85:b7:ba:08:e2:47:fe:9a:fd:0f: 11:80:fc:22:9c:8b:e9:e1:5f:3f:04:d8:2c:7b:f2: 3e:5e:4b:52:d1:0a:2b:ed:8d:0b:12:67:9b:97:17: cb:50:5a:30:5a:a2:d6:1f:37:62:0e:b4:65:87:7a: 36:11:55:a3:ad:38:86:b9:d8:d3:56:60:62:30:9a: 13:9c:98:46:8b:13:5a:a5:5e:80:cb:bc:97:f5:d3: 5b:d2:88:8d:f9:4c:ff:c9:1e:34:6c:4a:7d:bb:af: a8:c4:c1:e6:3c:00:4f:3c:2d:44:dc:15:86:91:d3: 32:03:b3:79:ab:77:dd:f2:c6:35:6f:e4:8e:85:cb: 73:71:ef:04:95:88:0e:04:3c:1e:40:67:3f:ef:bd: 62:19:2c:d5:38:b7:29:51:59:65:00:64:80:6f:df: ad:a2:f5:2e:7f:e1:97:8a:ae:32:1e:b6:fa:5c:2f: c7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6B:B2:89:CB:18:8B:23:AC:50:4C:7F:03:9B:83:01:1B:4B:4E:61 X509v3 Authority Key Identifier: keyid:B5:CF:A0:20:DD:4B:BF:D4:98:C5:E4:D8:4A:8D:63:09:73:87:49:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:0b:3c:6a:56:1f:78:f9:4f:80:89:a1:f4:b9:62:23:3f:6b: f7:82:05:13:d0:02:71:07:21:4f:af:22:09:56:e8:7b:9e:ba: a8:62:e6:9a:e6:ac:d5:9c:4a:c7:fd:24:73:8f:0d:be:0b:b3: e0:dc:a0:6c:44:05:1d:3a:e3:b6:70:f7:a7:08:9d:ee:ba:8f: f7:cb:08:29:ab:a8:0b:1f:82:33:0b:f4:bf:d3:d0:84:ef:34: 0b:01:c1:9d:28:bb:7d:26:69:7f:ca:88:06:da:92:16:4c:e8: e9:c4:cf:d1:b2:8c:19:5c:00:1b:7a:67:d4:75:b9:20:92:4b: 11:96:31:d7:cd:52:f1:bf:64:16:7e:22:17:34:0f:24:fd:9f: 2e:48:2c:00:9f:97:7c:c5:d2:81:2e:42:30:2a:3b:f1:70:fb: 32:89:27:01:78:bb:24:5a:ee:ad:e9:8f:ff:f8:b0:df:f3:36: 3f:38:98:fd:64:06:31:b9:b3:32:ae:35:53:90:27:f9:41:42: eb:51:af:cb:77:54:0f:b6:fa:f0:b0:d6:55:79:0e:ff:34:18: cc:95:41:90:cf:50:8e:fd:3f:d5:8f:3e:20:4f:c8:72:45:aa: 23:a3:54:ff:c4:5d:d3:27:c5:a4:9c:94:7d:ae:ec:48:35:c3: 42:68:e2:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNHnH5xruwZE8+b2derV0W1J6tl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRkEwMjBERDRCQkZENDk4QzVFNEQ4NEE4RDYzMDk3 Mzg3NDlDQzAeFw0yNjA3MjAyMDA2MTJaFw0yNjA3MjEyMzU1MTJaMDMxMTAvBgNV BAMTKDQxNkJCMjg5Q0IxODhCMjNBQzUwNEM3RjAzOUI4MzAxMUI0QjRFNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI89Ok7c2dTqzPp7E4LWqSaISu 4nHkfRm1lmDXPlYkf7ai43jpCzrrdo0HHBS+cMK3ms7bYnzgADvPWMJ37RRU31oz s0xJ6Y3upm/QGOjVhbe6COJH/pr9DxGA/CKci+nhXz8E2Cx78j5eS1LRCivtjQsS Z5uXF8tQWjBaotYfN2IOtGWHejYRVaOtOIa52NNWYGIwmhOcmEaLE1qlXoDLvJf1 01vSiI35TP/JHjRsSn27r6jEweY8AE88LUTcFYaR0zIDs3mrd93yxjVv5I6Fy3Nx 7wSViA4EPB5AZz/vvWIZLNU4tylRWWUAZIBv362i9S5/4ZeKrjIetvpcL8cHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQWuyicsYiyOsUEx/A5uDARtLTmEwHwYDVR0j BBgwFoAUtc+gIN1Lv9SYxeTYSo1jCXOHScwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGEwZmJiNTUtMWRkOC00ZjhiLWI4OTAtNGEyYzBhMDExMWRiLzAvQjVDRkEwMjBE RDRCQkZENDk4QzVFNEQ4NEE4RDYzMDk3Mzg3NDlDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNUNGQTAyMERENEJCRkQ0OThDNUU0RDg0QThENjMwOTczODc0 OUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGEwZmJiNTUtMWRkOC00ZjhiLWI4 OTAtNGEyYzBhMDExMWRiLzAvQjVDRkEwMjBERDRCQkZENDk4QzVFNEQ4NEE4RDYz MDk3Mzg3NDlDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJALPGpWH3j5T4CJofS5YiM/a/eCBRPQAnEH IU+vIglW6Hueuqhi5prmrNWcSsf9JHOPDb4Ls+DcoGxEBR0647Zw96cIne66j/fL CCmrqAsfgjML9L/T0ITvNAsBwZ0ou30maX/KiAbakhZM6OnEz9GyjBlcABt6Z9R1 uSCSSxGWMdfNUvG/ZBZ+Ihc0DyT9ny5ILACfl3zF0oEuQjAqO/Fw+zKJJwF4uyRa 7q3pj//4sN/zNj84mP1kBjG5szKuNVOQJ/lBQutRr8t3VA+2+vCw1lV5Dv80GMyV QZDPUI79P9WPPiBPyHJFqiOjVP/EXdMnxaSclH2u7Eg1w0Jo4pA= -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:52 2026 by rpki-client