$ rpki-client -vvf rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft File: 5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft (raw, json) Hash identifier: Qt2EwYYH5ujDdMDA3ZbSDfOC7tBCrfs4+KinwKewss4= Subject key identifier: F3:30:25:A0:9E:C7:1E:70:3D:8C:D9:80:FC:FF:E4:FF:44:29:E5:D6 Authority key identifier: 5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 Certificate issuer: /CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Certificate serial: 52680D80383523039585C765AAE18FB21F9191AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 10:20:11 +0000 Manifest this update: Sun 02 Aug 2026 10:15:11 +0000 Manifest next update: Mon 03 Aug 2026 12:20:11 +0000 Files and hashes: 1: 3135372e32302e34352e302f32342d3234203d3e20313532333932.roa (hash: PIubzi7VZ2N4uYX3mam6XOmZc4gw31pwt2ndjjqEeIM=) 2: 5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl (hash: LCCiW2okAgntRK0JhE1ToKHs+o9xAl45CrK3/jTwDUQ=) 3: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: P5BEjOqlnRhd5dHiMK0aXJooM/BcbKofscPw2JJ5bRQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 12:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:68:0d:80:38:35:23:03:95:85:c7:65:aa:e1:8f:b2:1f:91:91:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Validity Not Before: Aug 2 10:15:11 2026 GMT Not After : Aug 3 12:20:11 2026 GMT Subject: CN=F33025A09EC71E703D8CD980FCFFE4FF4429E5D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3b:46:64:24:42:f9:15:76:6e:ef:df:8d:7d: 02:93:a1:88:b3:c3:bc:ad:ed:16:4c:46:17:7d:a9: eb:0a:d0:c3:43:89:3f:43:67:ea:10:77:24:ef:7a: e0:15:02:01:24:e0:16:17:e5:95:a0:b9:e4:08:c4: da:08:be:6c:3f:1a:01:0b:54:56:69:3b:11:ee:64: 75:fa:8c:10:00:9a:2a:ee:f6:21:90:2d:82:de:03: 33:3f:75:a6:a3:99:37:05:cf:83:1d:27:9c:8a:e9: 0a:4b:98:9f:51:de:39:64:db:17:68:95:1d:b3:e2: 75:ca:25:9f:b5:13:5c:ef:22:ea:9b:27:0c:ed:98: ec:73:11:7d:28:f1:7b:21:cf:3b:64:f8:a9:17:24: f9:7c:f6:c5:af:ef:da:59:e8:c3:79:b2:df:e1:5a: 07:10:a1:5a:94:9f:b1:b1:08:08:69:93:dd:e4:ca: 8c:56:73:57:56:0d:26:9f:05:e7:39:f9:68:6e:b2: a9:a1:c3:72:ff:72:d5:44:6c:4a:0a:0c:01:4b:72: 05:a2:81:f1:1c:fe:9d:ff:d6:64:1d:c6:3b:42:f0: 20:32:f7:d3:4c:23:b8:5a:ce:ee:40:91:b1:3c:6c: 1a:37:22:a6:3e:41:57:f6:af:0e:8c:84:75:f7:e7: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:30:25:A0:9E:C7:1E:70:3D:8C:D9:80:FC:FF:E4:FF:44:29:E5:D6 X509v3 Authority Key Identifier: keyid:5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d6:33:9e:3b:62:af:79:2c:c2:33:cf:ed:ae:a5:a8:d6:9d: c9:9a:ca:65:58:ca:df:6d:27:25:c4:88:a8:b5:89:ba:40:0d: 01:7e:f8:2d:17:40:9e:7b:8b:30:02:1c:bd:1d:97:07:c2:3c: 82:6e:56:a5:ef:f3:d9:94:87:22:cc:97:bd:be:fe:6c:75:ef: c0:4b:d7:a3:d5:ca:ee:4b:e4:dd:51:88:c4:cc:ce:a1:21:c1: 95:8f:13:20:92:e9:f5:14:57:51:78:39:29:00:6e:04:0d:93: c0:8c:c5:0f:dd:c3:6d:c7:42:c7:87:63:f1:e4:e2:ef:b3:c8: b9:5b:50:76:60:80:7d:e7:bc:8c:e3:6a:cd:cb:de:1d:9c:6a: 0d:87:9e:39:4b:bf:e6:8f:2e:a3:1f:11:7d:4e:f2:6a:89:ff: 68:bc:c2:47:93:dd:95:b3:b3:5d:1b:e9:59:a1:1f:ad:0c:ff: 4f:8d:ad:3e:0d:2e:10:42:d8:ba:35:58:41:5e:fe:10:a2:ae: 11:31:ef:a4:53:df:0b:99:27:c4:09:dd:6a:38:ef:46:a1:2f: 24:ba:91:de:67:dd:33:1b:62:f3:80:16:3f:f5:dc:71:bb:f6: 02:76:3a:17:44:9c:0e:bc:09:d5:99:66:26:47:c5:c8:4d:eb: e9:16:18:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUmgNgDg1IwOVhcdlquGPsh+Rka4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNG RUFBQjkwOTAeFw0yNjA4MDIxMDE1MTFaFw0yNjA4MDMxMjIwMTFaMDMxMTAvBgNV BAMTKEYzMzAyNUEwOUVDNzFFNzAzRDhDRDk4MEZDRkZFNEZGNDQyOUU1RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnO0ZkJEL5FXZu79+NfQKToYiz w7yt7RZMRhd9qesK0MNDiT9DZ+oQdyTveuAVAgEk4BYX5ZWgueQIxNoIvmw/GgEL VFZpOxHuZHX6jBAAmiru9iGQLYLeAzM/daajmTcFz4MdJ5yK6QpLmJ9R3jlk2xdo lR2z4nXKJZ+1E1zvIuqbJwztmOxzEX0o8Xshzztk+KkXJPl89sWv79pZ6MN5st/h WgcQoVqUn7GxCAhpk93kyoxWc1dWDSafBec5+Whusqmhw3L/ctVEbEoKDAFLcgWi gfEc/p3/1mQdxjtC8CAy99NMI7hazu5AkbE8bBo3IqY+QVf2rw6MhHX350FRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8zAloJ7HHnA9jNmA/P/k/0Qp5dYwHwYDVR0j BBgwFoAUWhwazsC2dAF/+4nyGGW6Y/6quQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU4OGRmZjctNmE5Mi00MjkzLTg4MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VD MEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNGRUFBQjkwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81QTFDMUFDRUMwQjY3NDAxN0ZGQjg5RjIxODY1QkE2M0ZFQUFC OTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJB NjNGRUFBQjkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPWM547Yq95LMIzz+2upajWncmaymVYyt9t JyXEiKi1ibpADQF++C0XQJ57izACHL0dlwfCPIJuVqXv89mUhyLMl72+/mx178BL 16PVyu5L5N1RiMTMzqEhwZWPEyCS6fUUV1F4OSkAbgQNk8CMxQ/dw23HQseHY/Hk 4u+zyLlbUHZggH3nvIzjas3L3h2cag2HnjlLv+aPLqMfEX1O8mqJ/2i8wkeT3ZWz s10b6VmhH60M/0+NrT4NLhBC2Lo1WEFe/hCirhEx76RT3wuZJ8QJ3Wo470ahLyS6 kd5n3TMbYvOAFj/13HG79gJ2OhdEnA68CdWZZiZHxchN6+kWGF8= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:40 2026 by rpki-client