$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft File: 5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft (raw, json) Hash identifier: Zpnf5t8A46FwBiCcFFWj7QZ0NJjn4p0QoRbnlbg2L/0= Subject key identifier: 16:48:85:B8:29:CA:1C:F0:52:4E:5F:8F:F7:AA:A6:29:DF:8C:EE:4C Authority key identifier: 5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64 Certificate issuer: /CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564 Certificate serial: 1D7767CBDDA07207F89161FD32C8727CD925DF69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 17:28:04 +0000 Manifest this update: Mon 20 Jul 2026 17:23:04 +0000 Manifest next update: Tue 21 Jul 2026 19:23:04 +0000 Files and hashes: 1: 3130332e3134322e38382e302f32332d3233203d3e20313339333638.roa (hash: 85nzKNKm1prDMlKjYCs/G3skXgXdFpd3BSx7AhsXh80=) 2: 3130332e3134322e38382e302f32342d3234203d3e20313339333638.roa (hash: tQktaum4KycUd3NVfEb+S8gEbr6uIhyBlDiFsL9oiH8=) 3: 3130332e3134322e38392e302f32342d3234203d3e20313339333638.roa (hash: 4JRcCjrbt6UQy9keTGtyxuVyA16nB/RDNc0x3IcBoFU=) 4: 5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl (hash: 1d4+k6Lqt2+UshUpFJ0BvgjCR3mK1LXMPjr0pxKVNUw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:77:67:cb:dd:a0:72:07:f8:91:61:fd:32:c8:72:7c:d9:25:df:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564 Validity Not Before: Jul 20 17:23:04 2026 GMT Not After : Jul 21 19:23:04 2026 GMT Subject: CN=164885B829CA1CF0524E5F8FF7AAA629DF8CEE4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:de:49:4e:0a:e4:62:83:05:16:78:41:d6:fc: 1e:90:b2:9e:5e:ed:10:49:87:a2:1d:7e:9f:ef:a4: a5:3f:7b:09:5d:65:3c:02:3b:6e:e3:47:01:1d:bc: 5e:b9:76:26:6c:98:5e:cb:95:d8:b1:b4:f5:42:49: 83:f3:96:08:11:b7:c8:f4:a8:f8:9e:83:54:19:24: 06:10:24:33:e9:a2:cf:69:46:17:fc:cb:b0:06:e8: b6:24:fe:a0:7d:10:d2:d7:26:4d:ce:f3:75:6b:b3: ca:12:d3:50:3e:a1:21:0e:27:64:89:3e:1a:77:cf: 54:c4:96:f7:89:da:51:7a:b9:4a:16:36:7a:12:79: 5f:61:a7:a5:40:e0:a5:9f:8b:33:92:b9:ad:9f:84: 94:47:e5:12:e5:25:48:42:05:86:05:f5:8a:9c:73: 26:7d:9d:f2:24:da:18:ab:ac:1b:a3:48:fa:6e:7e: 41:66:77:bb:a6:45:eb:89:2e:60:0a:e8:e4:70:fc: bf:db:34:c0:39:73:b0:04:00:d2:99:e4:bd:7a:8c: 2f:9c:45:c1:d0:e2:e2:7d:fe:b1:1c:d6:75:f6:d9: 4c:25:f8:30:7c:fb:03:68:06:e1:2e:c9:f7:02:8e: 98:19:4c:14:da:fe:7d:f9:29:78:98:89:73:f9:03: 4a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:48:85:B8:29:CA:1C:F0:52:4E:5F:8F:F7:AA:A6:29:DF:8C:EE:4C X509v3 Authority Key Identifier: keyid:5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3d:63:26:50:06:6f:67:56:53:31:f6:5c:f1:f8:5d:8d:78: 96:db:94:37:b7:e9:69:17:82:e9:23:3d:9e:4a:0e:c1:2c:01: 48:e7:60:f6:0d:aa:c0:f5:8f:13:39:fa:e5:34:54:61:ad:39: b7:85:43:27:51:c8:08:89:6f:f4:a8:15:4d:97:c5:7e:c4:b9: a3:b6:40:7c:80:ab:ef:62:5d:cc:45:58:76:af:c4:fd:e1:30: 10:c7:37:8c:cf:4f:e6:d7:81:7b:86:9c:75:a6:d7:67:4c:46: 45:68:db:54:d7:04:91:7c:c7:9e:3f:0f:89:d9:cb:e9:31:6c: 37:fe:0c:d1:88:a3:14:1a:a9:25:1f:a7:94:35:c4:66:a4:e8: 1d:f2:96:90:06:59:05:c5:12:26:1b:02:8e:5e:b4:e9:a6:2e: 61:a3:9e:3e:16:c9:f9:03:59:ee:c3:fa:74:cd:85:40:9d:6c: 2e:76:72:3d:e8:7c:9f:fe:4d:c1:67:8d:7b:17:b6:91:55:21: 34:41:2d:3d:15:16:a8:81:b1:ee:ae:dd:71:63:3d:5a:03:68: 28:20:e6:f4:1c:5a:18:1d:28:71:06:06:35:72:4e:fd:c0:01: bf:db:0f:56:12:41:a0:8b:3d:46:bf:8c:c7:4e:0e:a0:52:cb: d7:dc:76:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHXdny92gcgf4kWH9MshyfNkl32kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGNURCQjE0OEQwRjRFQUJCMUE3MDg3RDhDQUQ4N0ZC MkE5MTU2NDAeFw0yNjA3MjAxNzIzMDRaFw0yNjA3MjExOTIzMDRaMDMxMTAvBgNV BAMTKDE2NDg4NUI4MjlDQTFDRjA1MjRFNUY4RkY3QUFBNjI5REY4Q0VFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3klOCuRigwUWeEHW/B6Qsp5e 7RBJh6Idfp/vpKU/ewldZTwCO27jRwEdvF65diZsmF7LldixtPVCSYPzlggRt8j0 qPieg1QZJAYQJDPpos9pRhf8y7AG6LYk/qB9ENLXJk3O83Vrs8oS01A+oSEOJ2SJ Php3z1TElveJ2lF6uUoWNnoSeV9hp6VA4KWfizOSua2fhJRH5RLlJUhCBYYF9Yqc cyZ9nfIk2hirrBujSPpufkFmd7umReuJLmAK6ORw/L/bNMA5c7AEANKZ5L16jC+c RcHQ4uJ9/rEc1nX22Uwl+DB8+wNoBuEuyfcCjpgZTBTa/n35KXiYiXP5A0rHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFkiFuCnKHPBSTl+P96qmKd+M7kwwHwYDVR0j BBgwFoAUXfXbsUjQ9Oq7GnCH2MrYf7KpFWQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWQ0OWQ0OWItZGFlYS00OGMwLThkNzctMTM3MzhiNzQ1NzcyLzAvNURGNURCQjE0 OEQwRjRFQUJCMUE3MDg3RDhDQUQ4N0ZCMkE5MTU2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81REY1REJCMTQ4RDBGNEVBQkIxQTcwODdEOENBRDg3RkIyQTkx NTY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWQ0OWQ0OWItZGFlYS00OGMwLThk NzctMTM3MzhiNzQ1NzcyLzAvNURGNURCQjE0OEQwRjRFQUJCMUE3MDg3RDhDQUQ4 N0ZCMkE5MTU2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJs9YyZQBm9nVlMx9lzx+F2NeJbblDe36WkX gukjPZ5KDsEsAUjnYPYNqsD1jxM5+uU0VGGtObeFQydRyAiJb/SoFU2XxX7EuaO2 QHyAq+9iXcxFWHavxP3hMBDHN4zPT+bXgXuGnHWm12dMRkVo21TXBJF8x54/D4nZ y+kxbDf+DNGIoxQaqSUfp5Q1xGak6B3ylpAGWQXFEiYbAo5etOmmLmGjnj4WyfkD We7D+nTNhUCdbC52cj3ofJ/+TcFnjXsXtpFVITRBLT0VFqiBse6u3XFjPVoDaCgg 5vQcWhgdKHEGBjVyTv3AAb/bD1YSQaCLPUa/jMdODqBSy9fcdos= -----END CERTIFICATE-----Generated at Tue Jul 21 06:49:59 2026 by rpki-client