$ rpki-client -vvf rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft File: B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft (raw, json) Hash identifier: T1tTTuGB13ShKAtbB8eeuLB4T6Ke02eb3DdiWh2pD84= Subject key identifier: 74:0A:3C:E1:EB:AC:94:D5:0D:3A:A7:CB:05:43:79:E3:A9:06:BB:73 Authority key identifier: B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5 Certificate issuer: /CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5 Certificate serial: 7157E872844EF22E945190D300C025D02B27A8D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 09:18:56 +0000 Manifest this update: Sun 02 Aug 2026 09:13:56 +0000 Manifest next update: Mon 03 Aug 2026 12:53:56 +0000 Files and hashes: 1: B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl (hash: cIqTJ07NZ4tkdi/ZilpC91mxXRGSC5WBY71kAh5Etmw=) 2: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: hZL/hi6Qgsw4sgW/mhx3uNInW8MyX4I+jFDzsHcP8Z4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:57:e8:72:84:4e:f2:2e:94:51:90:d3:00:c0:25:d0:2b:27:a8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5 Validity Not Before: Aug 2 09:13:56 2026 GMT Not After : Aug 3 12:53:56 2026 GMT Subject: CN=740A3CE1EBAC94D50D3AA7CB054379E3A906BB73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b9:43:bb:5a:97:fd:53:25:1f:4e:94:18:4d: 5b:43:0d:44:a4:e8:d3:50:50:74:f6:69:72:e8:54: 96:a0:93:61:91:88:4f:a0:ac:3f:e2:d7:a5:a6:55: 13:3a:49:e0:00:ee:d3:09:16:2a:45:d0:50:fe:20: 64:9e:b9:f6:4a:38:7f:55:2a:60:09:1b:8f:6a:cb: 54:50:03:b2:56:88:ca:22:fb:0c:cb:30:0c:23:ee: d5:df:a6:77:6e:a4:70:2d:c6:eb:95:e3:d8:be:2c: dd:ab:a5:6a:99:22:63:dd:f7:d8:c9:73:f8:b2:a2: bf:96:cb:4d:17:74:5f:75:d0:78:2b:13:5a:52:b1: f8:c3:9b:49:a4:38:e9:6e:3b:d8:c4:82:5c:2f:0e: 0b:e6:95:4c:1a:75:26:fb:c7:9a:79:37:6b:77:d8: 54:ea:ef:54:c0:83:e6:b7:d3:12:08:04:25:31:d3: f2:cb:aa:39:17:39:56:74:1a:9d:c3:aa:05:f5:46: 53:b9:8a:ea:92:a4:2a:62:05:d1:c2:4d:71:75:fe: 0c:b8:7e:f4:24:80:f9:c8:82:64:ca:09:87:15:04: 03:33:11:63:95:0e:b2:f7:c4:78:07:3e:d5:ed:5e: 79:bc:b8:e4:3f:7a:d7:3c:b9:64:c4:72:62:e9:11: 40:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0A:3C:E1:EB:AC:94:D5:0D:3A:A7:CB:05:43:79:E3:A9:06:BB:73 X509v3 Authority Key Identifier: keyid:B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:83:3e:6c:2c:95:bf:0e:dc:10:03:21:2a:da:33:8f:c9:32: 61:a4:c8:33:b1:f8:14:3e:ee:3e:be:35:9b:18:26:73:ad:7c: 7f:36:e5:97:72:b0:60:b9:1d:c8:68:2b:06:d7:96:ff:a9:f7: 60:35:87:31:03:07:4b:db:e3:ab:10:b1:9d:12:ed:cf:97:cd: 82:c0:fb:b8:6f:11:a8:12:e6:46:f0:f2:cc:5f:fd:f0:89:bb: 4a:60:37:2f:a5:6d:cf:6c:94:53:45:70:34:30:83:b0:ca:a4: b4:ab:c7:5b:9c:83:45:b1:ef:d6:be:3c:22:8f:32:9c:6c:4b: 0d:96:44:65:2a:b0:38:1e:41:9f:12:b5:33:49:6f:46:70:a6: 21:10:3d:eb:f1:21:97:0f:8d:2b:8f:09:e5:50:c4:00:04:68: f4:52:9b:e8:d6:3d:e0:82:97:9b:d4:05:73:ed:41:98:01:34: 77:3c:c3:33:f7:b3:90:b7:61:74:5b:dc:56:8a:60:2e:cb:d7: 79:fc:a7:d0:3d:09:12:4f:ef:8f:a2:43:05:c6:7d:cf:5e:19: 14:0f:2f:cd:a2:e3:cc:f3:25:e7:6e:f5:65:f8:c3:96:66:5c: 07:1c:03:d6:80:25:80:26:02:74:80:f5:ec:ff:7d:e8:4d:88: 13:df:cd:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcVfocoRO8i6UUZDTAMAl0CsnqNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBRTdENzlCMjI5NTY1REI1QTlDNEU3NENEMDM4RTUz Rjk4NEJGNTAeFw0yNjA4MDIwOTEzNTZaFw0yNjA4MDMxMjUzNTZaMDMxMTAvBgNV BAMTKDc0MEEzQ0UxRUJBQzk0RDUwRDNBQTdDQjA1NDM3OUUzQTkwNkJCNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuuUO7Wpf9UyUfTpQYTVtDDUSk 6NNQUHT2aXLoVJagk2GRiE+grD/i16WmVRM6SeAA7tMJFipF0FD+IGSeufZKOH9V KmAJG49qy1RQA7JWiMoi+wzLMAwj7tXfpndupHAtxuuV49i+LN2rpWqZImPd99jJ c/iyor+Wy00XdF910HgrE1pSsfjDm0mkOOluO9jEglwvDgvmlUwadSb7x5p5N2t3 2FTq71TAg+a30xIIBCUx0/LLqjkXOVZ0Gp3DqgX1RlO5iuqSpCpiBdHCTXF1/gy4 fvQkgPnIgmTKCYcVBAMzEWOVDrL3xHgHPtXtXnm8uOQ/etc8uWTEcmLpEUAlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdAo84euslNUNOqfLBUN546kGu3MwHwYDVR0j BBgwFoAUta59ebIpVl21qcTnTNA45T+YS/UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzhjNzM5NmMtNGJiZS00YzZlLThmNTAtNDQyYzIwNWUwNzBjLzAvQjVBRTdENzlC MjI5NTY1REI1QTlDNEU3NENEMDM4RTUzRjk4NEJGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNUFFN0Q3OUIyMjk1NjVEQjVBOUM0RTc0Q0QwMzhFNTNGOTg0 QkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzhjNzM5NmMtNGJiZS00YzZlLThm NTAtNDQyYzIwNWUwNzBjLzAvQjVBRTdENzlCMjI5NTY1REI1QTlDNEU3NENEMDM4 RTUzRjk4NEJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2DPmwslb8O3BADISraM4/JMmGkyDOx+BQ+ 7j6+NZsYJnOtfH825ZdysGC5HchoKwbXlv+p92A1hzEDB0vb46sQsZ0S7c+XzYLA +7hvEagS5kbw8sxf/fCJu0pgNy+lbc9slFNFcDQwg7DKpLSrx1ucg0Wx79a+PCKP MpxsSw2WRGUqsDgeQZ8StTNJb0ZwpiEQPevxIZcPjSuPCeVQxAAEaPRSm+jWPeCC l5vUBXPtQZgBNHc8wzP3s5C3YXRb3FaKYC7L13n8p9A9CRJP74+iQwXGfc9eGRQP L82i48zzJedu9WX4w5ZmXAccA9aAJYAmAnSA9ez/fehNiBPfzUE= -----END CERTIFICATE-----Generated at Sun Aug 2 15:50:52 2026 by rpki-client