$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.mft File: F5C77B8E76386E06F7C5963580F72FFDB6260833.mft (raw, json) Hash identifier: mG3TNMt16l/XIxj7gyji0Sxi2VmTqn4A59YSkeLmS2A= Subject key identifier: E5:7D:94:6A:11:0E:F4:D4:88:40:4D:E9:11:07:CA:32:99:9B:98:24 Authority key identifier: F5:C7:7B:8E:76:38:6E:06:F7:C5:96:35:80:F7:2F:FD:B6:26:08:33 Certificate issuer: /CN=F5C77B8E76386E06F7C5963580F72FFDB6260833 Certificate serial: 3CC03459DC6EDB7E90AD28F8CDE697A5A77A4366 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5C77B8E76386E06F7C5963580F72FFDB6260833.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 18:09:04 +0000 Manifest this update: Mon 20 Jul 2026 18:04:04 +0000 Manifest next update: Tue 21 Jul 2026 20:08:04 +0000 Files and hashes: 1: 3130332e3231302e332e302f32342d3234203d3e20313530393935.roa (hash: tCQps77ttUsG2B2A/jlIdsatXSph5WwOuMOklCzgjjQ=) 2: 3130332e3231302e322e302f32332d3233203d3e20313530393935.roa (hash: mV8+z8wbwRTe9z/LKU+76l90oXuk9i0hW/AMDNlrHl4=) 3: 3130332e3231302e322e302f32342d3234203d3e20313530393935.roa (hash: joivasnFvxLt2RiLhnE95QqxHVQvNgax7JJNC23DuLI=) 4: F5C77B8E76386E06F7C5963580F72FFDB6260833.crl (hash: 3oGL4JoqrsCmsac8awDyvF9zInuihO7n1JTr2nAapK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.crl rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5C77B8E76386E06F7C5963580F72FFDB6260833.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c0:34:59:dc:6e:db:7e:90:ad:28:f8:cd:e6:97:a5:a7:7a:43:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5C77B8E76386E06F7C5963580F72FFDB6260833 Validity Not Before: Jul 20 18:04:04 2026 GMT Not After : Jul 21 20:08:04 2026 GMT Subject: CN=E57D946A110EF4D488404DE91107CA32999B9824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4b:39:0b:83:5b:bb:b2:3b:01:64:51:20:b4: 58:3f:e5:e6:25:4d:45:f0:82:87:07:0d:2a:47:b9: f1:73:45:82:0a:fb:ae:c0:97:0e:eb:c2:ea:e5:98: 64:8c:78:6e:42:1f:8a:67:a5:34:4a:93:d7:63:ec: fd:fb:68:e4:ec:9d:e6:03:c1:41:64:1d:b6:d2:15: df:40:89:20:d3:6e:b7:f5:48:06:eb:ae:76:51:45: 56:0b:60:62:d2:42:04:23:77:cb:66:36:fc:73:b2: 17:bf:c3:44:ba:eb:67:b0:83:c6:b3:56:b0:a3:59: d7:79:46:86:ce:ec:72:71:10:84:08:d1:00:0a:34: b2:b2:70:61:b3:08:59:31:03:79:78:d7:e5:a3:af: c0:42:3f:97:37:8c:f6:99:5b:a2:49:29:aa:9a:7b: 04:ae:a6:b8:9a:04:34:51:bb:fd:95:79:26:bd:ef: 27:d7:e2:61:e5:48:32:8d:44:34:85:18:7a:cc:e7: dd:e5:3e:26:38:21:ad:1e:bb:f8:f7:5a:b5:6f:59: 52:55:a4:23:1a:77:89:c2:92:46:66:b5:74:fa:eb: de:95:0b:68:82:63:5f:64:ac:02:38:ed:2d:37:2c: 9d:f6:bb:c2:55:bd:fb:27:31:63:3d:3d:53:a1:ce: af:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7D:94:6A:11:0E:F4:D4:88:40:4D:E9:11:07:CA:32:99:9B:98:24 X509v3 Authority Key Identifier: keyid:F5:C7:7B:8E:76:38:6E:06:F7:C5:96:35:80:F7:2F:FD:B6:26:08:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5C77B8E76386E06F7C5963580F72FFDB6260833.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ea:fa:4d:2d:06:bb:2e:48:9e:b2:13:07:22:b4:8a:c2:73: 68:f3:71:54:56:77:d5:2b:55:98:06:e8:bb:24:a5:49:52:fa: a8:6f:a5:38:93:8b:c3:b9:7a:98:70:15:3c:b6:9e:cc:a8:c9: 38:03:d1:b2:95:1e:b9:68:37:e9:e5:d5:52:60:64:75:a3:a4: f7:1d:80:43:9a:f7:0a:95:cc:d9:84:e8:22:66:b5:26:c7:71: 53:81:2d:30:ee:32:a8:8d:a7:f4:aa:1f:ec:f3:93:1c:62:6d: 16:39:e8:30:fa:ea:e1:0d:82:1a:56:c5:bd:73:97:fb:00:22: ed:e3:05:a4:20:a1:9d:61:2f:d7:92:53:a0:c6:7a:5e:ce:12: 5a:86:d9:68:97:f5:cc:34:04:cb:96:02:65:b4:ff:87:7e:7a: 51:95:03:3f:1c:da:24:6e:26:2e:ef:ba:cb:8a:1f:8a:b3:ba: 34:17:d0:ce:9a:80:ed:7a:5e:51:fa:99:ac:57:00:4e:00:3d: 66:3d:e8:63:76:2c:9c:92:51:29:97:a5:e9:f7:de:40:85:19: 0e:98:b3:cc:d7:98:f4:b2:11:54:c8:98:b8:d8:15:eb:9b:54: 2d:e0:28:c8:fe:bc:3b:a2:9f:1d:82:c4:62:4d:57:91:d6:ca: e4:cf:00:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPMA0Wdxu236QrSj4zeaXpad6Q2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVDNzdCOEU3NjM4NkUwNkY3QzU5NjM1ODBGNzJGRkRC NjI2MDgzMzAeFw0yNjA3MjAxODA0MDRaFw0yNjA3MjEyMDA4MDRaMDMxMTAvBgNV BAMTKEU1N0Q5NDZBMTEwRUY0RDQ4ODQwNERFOTExMDdDQTMyOTk5Qjk4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOSzkLg1u7sjsBZFEgtFg/5eYl TUXwgocHDSpHufFzRYIK+67Alw7rwurlmGSMeG5CH4pnpTRKk9dj7P37aOTsneYD wUFkHbbSFd9AiSDTbrf1SAbrrnZRRVYLYGLSQgQjd8tmNvxzshe/w0S662ewg8az VrCjWdd5RobO7HJxEIQI0QAKNLKycGGzCFkxA3l41+Wjr8BCP5c3jPaZW6JJKaqa ewSupriaBDRRu/2VeSa97yfX4mHlSDKNRDSFGHrM593lPiY4Ia0eu/j3WrVvWVJV pCMad4nCkkZmtXT6696VC2iCY19krAI47S03LJ32u8JVvfsnMWM9PVOhzq+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5X2UahEO9NSIQE3pEQfKMpmbmCQwHwYDVR0j BBgwFoAU9cd7jnY4bgb3xZY1gPcv/bYmCDMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZjMzBjNzEtZGYyZC00ZmM3LWI0MzUtNzUxMWRmMjg3YTZiLzAvRjVDNzdCOEU3 NjM4NkUwNkY3QzU5NjM1ODBGNzJGRkRCNjI2MDgzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNUM3N0I4RTc2Mzg2RTA2RjdDNTk2MzU4MEY3MkZGREI2MjYw ODMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZjMzBjNzEtZGYyZC00ZmM3LWI0 MzUtNzUxMWRmMjg3YTZiLzAvRjVDNzdCOEU3NjM4NkUwNkY3QzU5NjM1ODBGNzJG RkRCNjI2MDgzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLq+k0tBrsuSJ6yEwcitIrCc2jzcVRWd9Ur VZgG6LskpUlS+qhvpTiTi8O5ephwFTy2nsyoyTgD0bKVHrloN+nl1VJgZHWjpPcd gEOa9wqVzNmE6CJmtSbHcVOBLTDuMqiNp/SqH+zzkxxibRY56DD66uENghpWxb1z l/sAIu3jBaQgoZ1hL9eSU6DGel7OElqG2WiX9cw0BMuWAmW0/4d+elGVAz8c2iRu Ji7vusuKH4qzujQX0M6agO16XlH6maxXAE4APWY96GN2LJySUSmXpen33kCFGQ6Y s8zXmPSyEVTImLjYFeubVC3gKMj+vDuinx2CxGJNV5HWyuTPAGM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:57:12 2026 by rpki-client