$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft File: F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft (raw, json) Hash identifier: R1tAuJFwBpTk3tEKaUqmuEXeD83/9WkkUcR4AUdPhUU= Subject key identifier: 81:3F:83:19:08:2D:24:94:71:D1:43:45:6C:79:09:B6:09:D5:1F:26 Authority key identifier: F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A Certificate issuer: /CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A Certificate serial: 1608F6FBE8D4099A72E9622EA99BF616928E9BFD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 16:06:22 +0000 Manifest this update: Mon 20 Jul 2026 16:01:22 +0000 Manifest next update: Tue 21 Jul 2026 16:21:22 +0000 Files and hashes: 1: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: +WK4iRrSPfnkrJEz8Gq8cT5bkygdZQkUoe49fePODB0=) 2: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: noFGhrWS2shsN12iREyShnTzBgPrE7wgh7GcY82aKhc=) 3: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: cRnHdJ6ERY/gOe2MatEAOxOT41WEyNcMegmve8GczJo=) 4: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: pZiifrcLbDchRtYwQAPaQx4TCr202zft6iysN0v48zg=) 5: F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl (hash: uHiSpJWXuAjIpEoaND5ZxIMEtFYcrpGXBZzU0OhETmg=) 6: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: +u/9D9vfsyaLH2MwRf/oL8GHy2QY5reW5CdS1r9iLUo=) 7: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: QWT8clnM0WSHO8g469pTliT/WCBN4Kmg5lPcdlpi8/s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:08:f6:fb:e8:d4:09:9a:72:e9:62:2e:a9:9b:f6:16:92:8e:9b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A Validity Not Before: Jul 20 16:01:22 2026 GMT Not After : Jul 21 16:21:22 2026 GMT Subject: CN=813F8319082D249471D143456C7909B609D51F26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:18:94:b6:da:66:9a:ae:2e:6e:75:0b:ed: 6c:33:bc:8c:70:35:35:e1:ef:9b:38:be:cb:76:4c: a9:bb:24:ed:f2:3c:3d:21:62:30:96:bd:d5:66:a8: 4b:b1:b2:8d:8a:32:ee:c2:62:43:2c:91:60:b6:ee: 74:17:ee:cc:04:89:ec:72:ef:0b:82:d9:0d:f2:20: 18:31:e5:27:1d:2c:0f:cd:ca:23:ad:ad:0e:af:b2: 8f:2a:1a:d9:e5:52:f9:8e:98:e9:5a:40:09:df:87: cc:e0:00:39:c6:ed:04:9f:38:ba:7b:c5:30:bc:94: 52:df:74:fc:31:b7:f6:19:79:b3:ae:45:64:9b:ba: 12:f7:ba:81:a4:76:4a:72:bf:fa:a4:fc:59:63:a3: 5c:9a:ae:f2:d1:ca:19:29:4e:11:bc:12:9e:cf:79: ac:63:6a:68:a3:d9:4e:56:af:71:d8:c5:86:c2:8d: 90:aa:4c:8f:bf:93:1e:5e:8f:bc:1f:4a:b1:80:35: e7:e5:12:62:81:f7:2f:f2:e5:f3:a8:c3:d3:60:05: 00:3e:10:18:1f:b4:0b:94:e6:7d:06:2c:1d:a9:59: 2d:5e:90:0b:2e:bc:6c:30:81:18:20:32:c4:30:dd: a0:7a:03:dd:fd:20:6a:34:45:7b:3a:6e:48:01:fd: db:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3F:83:19:08:2D:24:94:71:D1:43:45:6C:79:09:B6:09:D5:1F:26 X509v3 Authority Key Identifier: keyid:F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:8a:4f:44:df:2b:12:fd:d9:06:74:c0:de:fa:a9:a0:1c:cf: 98:7f:d8:df:12:34:12:d7:78:a1:97:45:77:bb:dc:3e:d7:e8: ee:1f:b1:f4:74:02:ba:e1:a2:39:04:68:84:5f:32:8e:e1:9e: 65:2b:a2:cf:ff:9d:a4:a6:92:7d:47:7f:10:bc:9e:b1:e2:2c: 49:9e:fb:bf:fb:f4:9e:69:03:0a:b2:69:95:7f:d6:95:74:d2: 12:dd:0b:4e:66:2b:56:49:74:cb:f4:37:43:61:16:67:6a:ab: 5f:12:46:9d:e6:44:04:88:b7:62:85:cc:0d:59:08:79:53:96: 01:ea:df:d8:c9:2b:62:83:7b:7f:95:aa:a1:ca:70:ca:3a:1f: f1:31:c7:7e:f8:f8:eb:7e:84:67:d1:8c:fd:95:dd:cd:cd:b5: 2a:24:22:9f:f5:62:6c:61:95:ef:d2:87:a0:0c:2d:6f:15:1a: 2a:85:26:4f:68:cd:5b:f2:f2:0f:52:1c:95:61:11:cb:46:ce: 4b:52:52:ef:5a:67:2c:91:fa:de:ce:6b:e6:81:75:04:fa:be: b0:a1:6d:c0:a7:82:aa:8b:f3:7f:02:87:1e:b9:3e:70:06:7e: 02:d7:6e:e7:d4:f6:15:06:78:ae:1b:c5:c3:1c:85:e0:d6:5a: 26:71:f7:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFgj2++jUCZpy6WIuqZv2FpKOm/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVFMTMzQkNFNTAxNEI3QTc5QUU2RThFNDgwQkMzNUJE M0MzMTg3QTAeFw0yNjA3MjAxNjAxMjJaFw0yNjA3MjExNjIxMjJaMDMxMTAvBgNV BAMTKDgxM0Y4MzE5MDgyRDI0OTQ3MUQxNDM0NTZDNzkwOUI2MDlENTFGMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBRRiUttpmmq4ubnUL7WwzvIxw NTXh75s4vst2TKm7JO3yPD0hYjCWvdVmqEuxso2KMu7CYkMskWC27nQX7swEiexy 7wuC2Q3yIBgx5ScdLA/NyiOtrQ6vso8qGtnlUvmOmOlaQAnfh8zgADnG7QSfOLp7 xTC8lFLfdPwxt/YZebOuRWSbuhL3uoGkdkpyv/qk/Fljo1yarvLRyhkpThG8Ep7P eaxjamij2U5Wr3HYxYbCjZCqTI+/kx5ej7wfSrGANeflEmKB9y/y5fOow9NgBQA+ EBgftAuU5n0GLB2pWS1ekAsuvGwwgRggMsQw3aB6A939IGo0RXs6bkgB/dv9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgT+DGQgtJJRx0UNFbHkJtgnVHyYwHwYDVR0j BBgwFoAU9eEzvOUBS3p5rm6OSAvDW9PDGHowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNlNDUwMzktNmVkMC00ODNkLWExYjktYzRmNDg1NGM1Y2Y1LzAvRjVFMTMzQkNF NTAxNEI3QTc5QUU2RThFNDgwQkMzNUJEM0MzMTg3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNUUxMzNCQ0U1MDE0QjdBNzlBRTZFOEU0ODBCQzM1QkQzQzMx ODdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvRjVFMTMzQkNFNTAxNEI3QTc5QUU2RThFNDgwQkMz NUJEM0MzMTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2KT0TfKxL92QZ0wN76qaAcz5h/2N8SNBLX eKGXRXe73D7X6O4fsfR0ArrhojkEaIRfMo7hnmUros//naSmkn1HfxC8nrHiLEme +7/79J5pAwqyaZV/1pV00hLdC05mK1ZJdMv0N0NhFmdqq18SRp3mRASIt2KFzA1Z CHlTlgHq39jJK2KDe3+VqqHKcMo6H/Exx374+Ot+hGfRjP2V3c3NtSokIp/1Ymxh le/Sh6AMLW8VGiqFJk9ozVvy8g9SHJVhEctGzktSUu9aZyyR+t7Oa+aBdQT6vrCh bcCngqqL838Chx65PnAGfgLXbufU9hUGeK4bxcMcheDWWiZx97o= -----END CERTIFICATE-----Generated at Tue Jul 21 06:47:33 2026 by rpki-client