$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft File: E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft (raw, json) Hash identifier: I5y25AYkhLtmcwmwhUtRXeBkILLz1OJiIEjakG6hks0= Subject key identifier: C2:BC:7A:44:94:3D:10:9E:E3:89:68:3B:DA:BC:1C:E0:96:84:70:34 Authority key identifier: E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60 Certificate issuer: /CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60 Certificate serial: 4FB472CA59EFFC40786DAE5E681D297F7D4BD76F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 15:15:54 +0000 Manifest this update: Sun 02 Aug 2026 15:10:54 +0000 Manifest next update: Mon 03 Aug 2026 16:03:54 +0000 Files and hashes: 1: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: aDinqjPhgNq50kNy+lg2Iba0bDegBSFkr3DIakb0nTU=) 2: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: Q+Zpu9s7FFAblJfI/9bq1CU9BNldDzB+MO83xGJv/O8=) 3: E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl (hash: UBpG++4kCCobrP1p3HRBsO/Mrels/+lMHDkN0waQSTA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b4:72:ca:59:ef:fc:40:78:6d:ae:5e:68:1d:29:7f:7d:4b:d7:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60 Validity Not Before: Aug 2 15:10:54 2026 GMT Not After : Aug 3 16:03:54 2026 GMT Subject: CN=C2BC7A44943D109EE389683BDABC1CE096847034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3c:2d:25:d3:ed:0c:7a:e9:08:86:9f:aa:4a: 79:e8:f1:c1:70:f6:a7:e7:4a:ff:62:e2:c5:68:bb: 10:a6:a6:15:b0:3f:4c:36:67:af:26:32:4a:d1:12: 8a:ff:f0:b4:41:20:73:ce:d2:c8:0f:96:f9:6a:87: b9:c6:5b:ed:70:cd:6c:c8:65:6a:f1:a0:a5:bb:71: c3:86:56:51:0f:b9:d5:3c:0f:da:d7:57:84:2f:57: a6:b2:30:e5:29:29:a1:cd:c4:04:76:ed:1e:1e:f4: 92:e4:ae:a1:b8:96:4e:ac:45:fe:e0:7d:2b:41:4f: 58:4b:d6:a7:2e:09:12:98:02:01:23:2e:44:e4:b4: 94:2b:dc:2a:3b:03:70:ff:e5:df:1b:11:7c:95:c3: a0:96:1d:cf:7d:53:a4:a6:32:aa:2e:df:70:f7:39: f0:c9:7d:f4:a1:a7:63:6e:90:d2:45:ae:84:4e:3c: 45:db:44:d5:53:14:1e:c1:fc:3c:9e:b5:28:bd:cc: d1:6c:30:ad:85:24:61:be:97:61:4d:a3:c7:64:1b: 4b:81:8f:fe:20:5b:ca:f1:87:97:b9:19:29:0b:f2: 01:da:eb:48:5c:88:53:c2:d8:5f:7d:cb:6d:8e:60: 15:3f:71:03:ea:1d:fa:cc:8a:8b:99:f1:f5:bf:a7: f0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BC:7A:44:94:3D:10:9E:E3:89:68:3B:DA:BC:1C:E0:96:84:70:34 X509v3 Authority Key Identifier: keyid:E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f3:59:6e:99:71:f0:51:db:ff:a6:cc:b1:de:8c:68:ca:f6: 8b:de:41:b7:0f:5f:81:f3:09:53:4f:d4:0c:cb:9a:0a:6b:54: 74:62:19:11:32:a6:72:b5:8b:ee:82:34:a3:f3:be:22:54:50: bf:f8:9a:fc:7f:0b:f6:e7:8a:17:4e:6a:ea:90:60:56:2f:f5: 23:28:14:a5:71:21:40:b9:94:ea:9f:61:0e:e0:0e:51:9c:fe: 57:0f:70:78:76:dd:b9:3b:c9:56:a6:cd:d2:83:74:eb:77:f1: 86:61:a3:7b:1c:38:7a:68:6f:2b:c3:52:3a:2f:7f:49:7a:a5: 15:1c:a7:5e:4f:5c:e6:70:1f:0d:37:83:3a:2b:7d:8b:d8:25: f6:7c:7a:85:9b:48:a7:79:3a:d2:33:fe:57:ef:f6:fe:39:7c: 86:e2:5f:05:e6:8e:01:2e:32:58:22:ad:53:ec:b8:c9:28:6d: df:5b:51:08:ae:e5:6f:08:b0:32:e5:b3:44:aa:9d:9d:a5:14: 34:e9:b9:6d:d9:04:03:9c:2c:34:7a:0c:c1:24:98:6a:53:cd: 15:af:85:42:f4:42:17:37:b5:e7:85:aa:ce:3b:66:95:70:85: 68:ac:be:fb:a2:6d:a4:d8:1a:bb:b0:01:65:bf:08:50:21:8b: ed:f3:bf:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT7Ryylnv/EB4ba5eaB0pf31L128wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVGNkY5RTVERDlEMzRCREEwOEM0NTMxQkE3MDg3NjFB MzVBREU2MDAeFw0yNjA4MDIxNTEwNTRaFw0yNjA4MDMxNjAzNTRaMDMxMTAvBgNV BAMTKEMyQkM3QTQ0OTQzRDEwOUVFMzg5NjgzQkRBQkMxQ0UwOTY4NDcwMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9PC0l0+0MeukIhp+qSnno8cFw 9qfnSv9i4sVouxCmphWwP0w2Z68mMkrREor/8LRBIHPO0sgPlvlqh7nGW+1wzWzI ZWrxoKW7ccOGVlEPudU8D9rXV4QvV6ayMOUpKaHNxAR27R4e9JLkrqG4lk6sRf7g fStBT1hL1qcuCRKYAgEjLkTktJQr3Co7A3D/5d8bEXyVw6CWHc99U6SmMqou33D3 OfDJffShp2NukNJFroROPEXbRNVTFB7B/DyetSi9zNFsMK2FJGG+l2FNo8dkG0uB j/4gW8rxh5e5GSkL8gHa60hciFPC2F99y22OYBU/cQPqHfrMiouZ8fW/p/CZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwrx6RJQ9EJ7jiWg72rwc4JaEcDQwHwYDVR0j BBgwFoAU5fb55d2dNL2gjEUxunCHYaNa3mAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMwMWZkNDQtOGNkNi00ZDlmLTliZDEtODM2N2FkOWNkOWVhLzAvRTVGNkY5RTVE RDlEMzRCREEwOEM0NTMxQkE3MDg3NjFBMzVBREU2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNUY2RjlFNUREOUQzNEJEQTA4QzQ1MzFCQTcwODc2MUEzNUFE RTYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMwMWZkNDQtOGNkNi00ZDlmLTli ZDEtODM2N2FkOWNkOWVhLzAvRTVGNkY5RTVERDlEMzRCREEwOEM0NTMxQkE3MDg3 NjFBMzVBREU2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTzWW6ZcfBR2/+mzLHejGjK9oveQbcPX4Hz CVNP1AzLmgprVHRiGREypnK1i+6CNKPzviJUUL/4mvx/C/bnihdOauqQYFYv9SMo FKVxIUC5lOqfYQ7gDlGc/lcPcHh23bk7yVamzdKDdOt38YZho3scOHpobyvDUjov f0l6pRUcp15PXOZwHw03gzorfYvYJfZ8eoWbSKd5OtIz/lfv9v45fIbiXwXmjgEu MlgirVPsuMkobd9bUQiu5W8IsDLls0SqnZ2lFDTpuW3ZBAOcLDR6DMEkmGpTzRWv hUL0Qhc3teeFqs47ZpVwhWisvvuibaTYGruwAWW/CFAhi+3zv10= -----END CERTIFICATE-----Generated at Sun Aug 2 22:43:07 2026 by rpki-client