$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft File: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft (raw, json) Hash identifier: ZI3OvwSh7/kqyqmo+kGm1aE1XazcB56KvfL8271H5B0= Subject key identifier: 22:BD:0B:15:2B:14:E0:6D:AA:38:1E:CD:F7:29:42:BB:58:5F:4E:7E Authority key identifier: 52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF Certificate issuer: /CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Certificate serial: 4F0E5040A139BB95116CA96B9BB3421EDCAE6CD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 05:03:32 +0000 Manifest this update: Sun 02 Aug 2026 04:58:32 +0000 Manifest next update: Mon 03 Aug 2026 07:21:32 +0000 Files and hashes: 1: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: s0qL2weEhTe4sBj4h3x5XjkUykXaQaRd3WPD4VdRPq0=) 2: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: NHw4QH7kx6gwhf24chR9MVQWVvSl6RuQvk3rMGt5qyQ=) 3: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl (hash: KdBwcE8QyUVfKNf89pbyHvo5trkFIPI+xU6QW9c/+DU=) 4: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: Xm5n/XLcKtlX7vaWLbK2D/7cXu3TQ6c3pSXsVlfA9/0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:0e:50:40:a1:39:bb:95:11:6c:a9:6b:9b:b3:42:1e:dc:ae:6c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Validity Not Before: Aug 2 04:58:32 2026 GMT Not After : Aug 3 07:21:32 2026 GMT Subject: CN=22BD0B152B14E06DAA381ECDF72942BB585F4E7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:76:c6:89:0d:64:1c:30:f3:74:32:22:1a:05: 85:2a:e4:68:f9:79:68:c0:18:6b:93:89:74:a2:1a: 13:ce:55:1f:fd:fa:6b:a3:0e:fd:5e:73:aa:9d:a4: f3:82:c6:ea:9a:a5:7e:34:53:14:01:f0:b7:09:d8: f2:57:4c:a2:6d:1f:5c:ac:87:62:bc:a0:7c:85:8e: 06:72:3b:8d:1c:d9:ef:ec:a9:f9:78:7e:b2:27:30: 12:4f:96:47:f2:de:01:5a:a1:59:a5:de:70:dd:4b: 38:8d:55:b1:aa:88:c0:50:4c:68:34:84:ca:0b:57: df:01:bd:de:3a:ae:e9:b3:9e:f4:c2:f7:cd:eb:8c: 8f:f0:8b:3b:52:5a:00:3b:26:93:c8:c1:7d:38:e3: 3f:32:e9:d6:2d:c9:1d:86:d7:de:0d:8c:4a:d6:ab: ab:e0:33:f8:81:1e:cb:66:4a:12:43:a0:c1:9c:bd: aa:fd:ba:21:59:a6:f7:b0:8c:53:d8:c2:dc:23:cd: a4:d6:e0:c4:0d:95:43:dc:a6:24:47:a6:f0:a3:e3: f3:ad:d8:79:a0:b3:e2:c2:f2:07:a7:1b:cf:67:0a: 46:97:28:06:2c:f5:ba:3a:a2:3d:90:15:5e:09:81: 16:c0:93:bd:cd:30:e3:72:9b:1e:5f:04:d8:d1:88: 76:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BD:0B:15:2B:14:E0:6D:AA:38:1E:CD:F7:29:42:BB:58:5F:4E:7E X509v3 Authority Key Identifier: keyid:52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:74:0b:de:37:e4:7e:fb:bc:71:9f:e6:af:25:0a:01:a2:08: 25:ba:81:7c:2e:a8:2d:50:42:12:2d:03:03:fa:f5:63:c4:36: c7:be:c2:5c:eb:a5:01:6b:24:78:58:4c:d5:96:5d:bf:5c:2f: e6:ef:9b:4d:8d:dd:79:fd:b7:a8:27:1f:10:e5:18:8d:d1:e2: 80:cd:09:be:bd:e1:63:f1:1d:0c:2c:1c:57:25:39:35:37:91: d7:84:10:ea:6f:9f:e6:11:05:d8:a9:be:88:0c:28:2d:d6:77: ca:b0:96:61:06:3f:92:c8:a8:96:f5:73:61:3d:42:b2:6a:9e: 70:4d:cb:31:83:82:aa:09:70:2a:02:b3:33:1a:63:fa:52:3d: d9:e0:b4:ca:fa:21:5f:99:b0:c8:2d:4c:8f:74:7f:37:0f:13: 6d:5f:b3:32:a5:90:53:83:01:54:fc:3d:65:5a:e2:06:c3:87: aa:cc:c0:18:3a:69:d8:4f:f6:9c:cb:1f:bc:db:9d:a7:9b:46: c7:65:d6:a5:2a:63:b6:26:0e:54:30:f4:05:03:6f:75:56:8e: 3e:63:7d:e0:8c:d0:11:ea:c5:b2:55:a2:1c:2c:b1:9f:c5:f3: 94:c3:e5:b3:a4:dd:6b:df:dc:4f:fc:f0:1e:ae:3e:25:f6:31: 7e:1d:4b:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTw5QQKE5u5URbKlrm7NCHtyubNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgx QTE2RjhERjAeFw0yNjA4MDIwNDU4MzJaFw0yNjA4MDMwNzIxMzJaMDMxMTAvBgNV BAMTKDIyQkQwQjE1MkIxNEUwNkRBQTM4MUVDREY3Mjk0MkJCNTg1RjRFN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCldsaJDWQcMPN0MiIaBYUq5Gj5 eWjAGGuTiXSiGhPOVR/9+mujDv1ec6qdpPOCxuqapX40UxQB8LcJ2PJXTKJtH1ys h2K8oHyFjgZyO40c2e/sqfl4frInMBJPlkfy3gFaoVml3nDdSziNVbGqiMBQTGg0 hMoLV98Bvd46rumznvTC983rjI/wiztSWgA7JpPIwX044z8y6dYtyR2G194NjErW q6vgM/iBHstmShJDoMGcvar9uiFZpvewjFPYwtwjzaTW4MQNlUPcpiRHpvCj4/Ot 2Hmgs+LC8genG89nCkaXKAYs9bo6oj2QFV4JgRbAk73NMONymx5fBNjRiHanAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIr0LFSsU4G2qOB7N9ylCu1hfTn4wHwYDVR0j BBgwFoAUUpf8C1LNT8fwbBZTENETyBoW+N8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2RkYmI3OWMtOWVhMi00N2YwLWI0NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1 MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgxQTE2RjhERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Mjk3RkMwQjUyQ0Q0RkM3RjA2QzE2NTMxMEQxMTNDODFBMTZG OERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEz QzgxQTE2RjhERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIp0C9435H77vHGf5q8lCgGiCCW6gXwuqC1Q QhItAwP69WPENse+wlzrpQFrJHhYTNWWXb9cL+bvm02N3Xn9t6gnHxDlGI3R4oDN Cb694WPxHQwsHFclOTU3kdeEEOpvn+YRBdipvogMKC3Wd8qwlmEGP5LIqJb1c2E9 QrJqnnBNyzGDgqoJcCoCszMaY/pSPdngtMr6IV+ZsMgtTI90fzcPE21fszKlkFOD AVT8PWVa4gbDh6rMwBg6adhP9pzLH7zbnaebRsdl1qUqY7YmDlQw9AUDb3VWjj5j feCM0BHqxbJVohwssZ/F85TD5bOk3Wvf3E/88B6uPiX2MX4dS4s= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:44 2026 by rpki-client