$ rpki-client -vvf rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft File: 5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft (raw, json) Hash identifier: Ja4rE1uZZgo9fq1qIiFoq1K5sIkiXOOsdp+QwdRmcF0= Subject key identifier: 96:D8:54:0A:A4:93:C1:84:A8:D5:E1:A9:4D:41:1D:2B:D7:CA:80:98 Authority key identifier: 5A:FE:24:D2:3E:36:25:48:4D:7D:9B:3E:BA:00:25:AA:9C:0E:EE:A2 Certificate issuer: /CN=5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2 Certificate serial: 0B91CC90D868CDA3B6D9A91BC47FCDF84CD2E77E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft Manifest number: 7E Signing time: Sun 02 Aug 2026 18:14:28 +0000 Manifest this update: Sun 02 Aug 2026 18:09:28 +0000 Manifest next update: Mon 03 Aug 2026 22:01:28 +0000 Files and hashes: 1: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: lTUq2TXc5o2FAnT0cBjbniSYESMJX3Ig96J0JouvM0I=) 2: 5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.crl (hash: /nVOfvRw6KsIS8Sd/+OITRB7taf9lbIFB5soHT5ySJ4=) 3: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: Fy9HvcnOOuartl2MyrCM5SQFmtu1CV6p6EtA15KIkk0=) 4: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: j3/lM2rV4nx+Cn6dsqDo2ERknLnpkGf86BWvcy+vYVs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.crl rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:91:cc:90:d8:68:cd:a3:b6:d9:a9:1b:c4:7f:cd:f8:4c:d2:e7:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2 Validity Not Before: Aug 2 18:09:28 2026 GMT Not After : Aug 3 22:01:28 2026 GMT Subject: CN=96D8540AA493C184A8D5E1A94D411D2BD7CA8098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:62:1d:2d:87:85:4b:01:3a:63:a1:21:16:2b: d7:f1:eb:53:ad:c3:f5:f0:8b:a7:61:50:00:d6:43: df:9c:2b:91:7d:81:68:e9:3c:ef:9a:6a:11:b5:71: 7f:2c:b1:53:92:e2:d4:e1:ba:23:5e:36:9c:8a:38: 75:98:d3:e4:4d:19:f4:aa:b1:99:c1:a2:5e:97:44: 2d:c7:ce:2e:72:90:2f:43:78:b9:83:49:1d:69:c7: 5a:66:c7:be:55:cf:a8:2d:6c:11:e7:96:7d:bb:d5: a0:ff:74:e0:86:04:c1:34:3b:3d:7a:ce:39:48:4c: 4b:a4:a1:75:1e:b5:50:6e:2f:24:53:04:b9:ce:4d: 72:9a:c5:23:e2:4e:bd:c2:d9:dc:e5:d5:e5:75:fd: 7b:9d:72:53:97:d8:a6:a3:69:6e:26:51:99:4b:b7: 70:b7:21:09:89:e0:dd:0b:d8:70:b4:c4:00:3d:ae: 6e:bd:8f:a7:29:53:77:f8:7e:bd:6a:a6:4b:15:f0: 54:c6:85:81:e3:72:9b:6e:67:4e:5c:13:e4:db:a2: ab:72:35:75:0e:9f:ba:e4:dc:df:f9:7d:25:e5:3e: 2b:92:6b:9d:20:90:be:f6:49:84:e5:fa:9c:6b:8b: b9:14:a1:50:7f:18:9c:80:cd:ce:48:70:e2:c0:28: e1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D8:54:0A:A4:93:C1:84:A8:D5:E1:A9:4D:41:1D:2B:D7:CA:80:98 X509v3 Authority Key Identifier: keyid:5A:FE:24:D2:3E:36:25:48:4D:7D:9B:3E:BA:00:25:AA:9C:0E:EE:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:2c:ab:c4:61:c6:9b:7c:bd:dc:a8:71:f7:5d:ba:d7:90:93: 40:fb:4f:73:a4:60:e1:da:9d:f8:57:ef:f9:b4:60:fa:df:b8: 8e:33:37:d4:7e:bc:10:df:b8:fe:0b:4d:38:e9:28:c7:cd:13: 3a:2c:b6:70:58:ed:3b:e5:f4:20:d8:d9:30:aa:4e:01:bd:19: fb:a5:9d:b8:c7:d1:95:86:60:be:d9:c9:0a:05:ee:d7:1f:9d: ee:99:71:95:54:3d:ea:13:7c:ec:10:13:4d:53:32:2a:b3:35: a5:14:37:71:e2:f5:28:f7:65:34:8c:a1:d3:b6:c0:42:49:a1: 4c:f7:68:d4:4b:0e:24:68:3a:76:08:f1:52:ab:87:e1:8a:18: f4:2f:1e:44:42:75:d1:bf:dd:52:5d:2a:f9:64:94:c8:7e:78: 51:bd:4d:78:d3:1a:b6:42:1d:cd:dd:54:bd:9c:49:95:ff:5e: a0:bb:27:19:c6:be:ad:39:9e:ce:4f:16:a7:ff:cc:94:df:ef: 4c:30:71:e4:22:85:33:56:19:94:97:78:81:dd:d0:80:9f:54: 41:6f:51:63:cd:53:5e:36:e7:8b:87:c6:10:6f:51:c5:18:4a: d6:52:73:ae:00:e1:1d:fc:5b:20:56:07:49:a5:49:fa:53:51: 33:85:c8:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC5HMkNhozaO22akbxH/N+EzS534wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFGRTI0RDIzRTM2MjU0ODREN0Q5QjNFQkEwMDI1QUE5 QzBFRUVBMjAeFw0yNjA4MDIxODA5MjhaFw0yNjA4MDMyMjAxMjhaMDMxMTAvBgNV BAMTKDk2RDg1NDBBQTQ5M0MxODRBOEQ1RTFBOTRENDExRDJCRDdDQTgwOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQYh0th4VLATpjoSEWK9fx61Ot w/Xwi6dhUADWQ9+cK5F9gWjpPO+aahG1cX8ssVOS4tThuiNeNpyKOHWY0+RNGfSq sZnBol6XRC3Hzi5ykC9DeLmDSR1px1pmx75Vz6gtbBHnln271aD/dOCGBME0Oz16 zjlITEukoXUetVBuLyRTBLnOTXKaxSPiTr3C2dzl1eV1/XudclOX2KajaW4mUZlL t3C3IQmJ4N0L2HC0xAA9rm69j6cpU3f4fr1qpksV8FTGhYHjcptuZ05cE+Tboqty NXUOn7rk3N/5fSXlPiuSa50gkL72SYTl+pxri7kUoVB/GJyAzc5IcOLAKOEpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlthUCqSTwYSo1eGpTUEdK9fKgJgwHwYDVR0j BBgwFoAUWv4k0j42JUhNfZs+ugAlqpwO7qIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MThkMWM0NDktOTc4Yy00ODQ1LWI4MjMtYjU5MjVhOTA1NDI3LzAvNUFGRTI0RDIz RTM2MjU0ODREN0Q5QjNFQkEwMDI1QUE5QzBFRUVBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81QUZFMjREMjNFMzYyNTQ4NEQ3RDlCM0VCQTAwMjVBQTlDMEVF RUEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvNUFGRTI0RDIzRTM2MjU0ODREN0Q5QjNFQkEwMDI1 QUE5QzBFRUVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgsq8Rhxpt8vdyocfdduteQk0D7T3OkYOHa nfhX7/m0YPrfuI4zN9R+vBDfuP4LTTjpKMfNEzostnBY7Tvl9CDY2TCqTgG9Gful nbjH0ZWGYL7ZyQoF7tcfne6ZcZVUPeoTfOwQE01TMiqzNaUUN3Hi9Sj3ZTSModO2 wEJJoUz3aNRLDiRoOnYI8VKrh+GKGPQvHkRCddG/3VJdKvlklMh+eFG9TXjTGrZC Hc3dVL2cSZX/XqC7JxnGvq05ns5PFqf/zJTf70wwceQihTNWGZSXeIHd0ICfVEFv UWPNU14254uHxhBvUcUYStZSc64A4R38WyBWB0mlSfpTUTOFyM8= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:51 2026 by rpki-client