$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft File: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft (raw, json) Hash identifier: Y+ZIpl5G7Bt+yz5yUlYJSCZmXOwVdhj5bgThHFKOzxI= Subject key identifier: AD:FA:29:33:EE:AE:20:C6:E9:41:A9:B4:25:2F:20:60:C0:B7:49:B8 Authority key identifier: E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A Certificate issuer: /CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Certificate serial: 2FEC501ACDDA04F97CE7E6DAEA3EC01AF10B4153 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 05:59:41 +0000 Manifest this update: Sun 02 Aug 2026 05:54:41 +0000 Manifest next update: Mon 03 Aug 2026 09:27:41 +0000 Files and hashes: 1: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: is5WdfvUY1KRmUVaEDtXvqlI2WCzItjy85jNK7qc29s=) 2: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl (hash: vTrI9ut25SnQFuk1+42fcIvCdDfHngmO48uqQ3KTUgI=) 3: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: mmr69bHLezkQuiDZandeSB0qYXcAYeWx1GHP/ifPRTA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ec:50:1a:cd:da:04:f9:7c:e7:e6:da:ea:3e:c0:1a:f1:0b:41:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Validity Not Before: Aug 2 05:54:41 2026 GMT Not After : Aug 3 09:27:41 2026 GMT Subject: CN=ADFA2933EEAE20C6E941A9B4252F2060C0B749B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cd:c5:40:09:bc:fe:59:0d:03:b2:3e:38:5c: 97:43:d2:1f:1c:af:a7:42:33:b0:90:95:f8:a0:e3: 85:17:90:6d:ab:15:c8:d7:e2:79:93:b4:4b:b3:fd: 78:01:d0:e7:03:d5:59:31:e6:1f:2d:b0:96:0a:af: e5:7c:85:b6:6b:9f:cc:d3:b2:26:f8:19:66:bf:6f: cb:bb:95:46:ee:a5:1a:2b:56:9d:bd:f1:8d:e0:45: 0b:8b:3e:00:63:25:4d:35:80:fa:86:97:bb:fd:48: 2c:57:2d:c9:be:c3:21:db:ad:60:c1:e3:01:53:9f: ef:5f:7e:ab:8f:1a:9e:09:b8:8a:6f:73:93:0a:a3: 5f:d3:24:29:0b:ca:75:a4:c3:dd:89:0e:0b:a2:35: 6c:53:07:7f:08:96:6d:dc:f2:b7:e6:5d:4d:c8:c4: b0:02:07:e5:24:6b:15:00:25:95:26:ae:fb:42:93: b4:90:77:af:fe:25:09:20:90:00:a0:1b:1e:3a:26: 1b:56:85:4f:da:64:cc:f4:78:1c:37:28:89:36:24: 78:d2:1e:5d:83:ad:49:cd:eb:be:92:81:ba:bb:07: de:af:88:2e:fd:5c:76:28:0e:05:64:d6:22:5f:b9: a6:e1:88:84:95:b0:a5:9e:f0:0b:00:2e:bb:c4:af: 3e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FA:29:33:EE:AE:20:C6:E9:41:A9:B4:25:2F:20:60:C0:B7:49:B8 X509v3 Authority Key Identifier: keyid:E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:1f:e2:ec:d8:61:6e:dd:4f:de:45:30:9e:af:61:45:ee:c0: 06:55:53:47:d5:bb:f6:38:4b:b3:00:10:66:71:88:a1:36:c9: c2:40:fd:95:78:cb:cf:ed:82:9e:0c:15:85:d0:2b:a5:2b:b1: 77:f7:cf:da:fa:e4:45:18:d0:4a:66:a1:b2:1a:d1:ba:60:fd: b7:e4:cb:c4:95:a7:19:7b:54:3e:a5:bb:26:b7:bc:e7:99:d3: c1:82:bb:45:54:1e:fc:cd:96:bc:47:7b:b5:bf:17:ec:e2:a8: 23:ef:95:d9:f5:84:e0:90:54:7f:12:98:43:46:e7:22:e9:ed: c6:ef:ea:ad:ee:ee:e3:2a:c3:7d:60:fa:11:ee:7f:f6:7e:98: eb:d6:00:d2:b7:b2:77:59:80:1c:5b:19:87:be:69:3c:55:23: 80:00:69:a5:14:73:bc:67:3f:ac:6b:c2:b3:ec:26:30:61:e6: 79:bd:9b:0a:7e:ce:34:10:bc:2b:0b:a0:fa:b2:c9:50:1e:04: de:e3:63:82:ad:eb:f3:94:f5:30:10:8b:1d:71:42:ee:0f:1c: 2f:42:7a:ca:91:c5:54:6f:6e:c5:db:96:c6:c3:6f:70:29:46: 9c:0f:11:38:b8:d7:72:8f:93:91:a1:26:a7:ce:77:bf:cd:ee: 44:fa:a5:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+xQGs3aBPl85+ba6j7AGvELQVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1RURC QkZCRTk2QTAeFw0yNjA4MDIwNTU0NDFaFw0yNjA4MDMwOTI3NDFaMDMxMTAvBgNV BAMTKEFERkEyOTMzRUVBRTIwQzZFOTQxQTlCNDI1MkYyMDYwQzBCNzQ5QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLzcVACbz+WQ0Dsj44XJdD0h8c r6dCM7CQlfig44UXkG2rFcjX4nmTtEuz/XgB0OcD1Vkx5h8tsJYKr+V8hbZrn8zT sib4GWa/b8u7lUbupRorVp298Y3gRQuLPgBjJU01gPqGl7v9SCxXLcm+wyHbrWDB 4wFTn+9ffquPGp4JuIpvc5MKo1/TJCkLynWkw92JDguiNWxTB38Ilm3c8rfmXU3I xLACB+UkaxUAJZUmrvtCk7SQd6/+JQkgkACgGx46JhtWhU/aZMz0eBw3KIk2JHjS Hl2DrUnN676Sgbq7B96viC79XHYoDgVk1iJfuabhiISVsKWe8AsALrvErz5hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrfopM+6uIMbpQam0JS8gYMC3SbgwHwYDVR0j BBgwFoAU5QQ6BTu6W71l8RfDgKjl7bv76WowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUz QkJBNUJCRDY1RjExN0MzODBBOEU1RURCQkZCRTk2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNTA0M0EwNTNCQkE1QkJENjVGMTE3QzM4MEE4RTVFREJCRkJF OTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1 RURCQkZCRTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8f4uzYYW7dT95FMJ6vYUXuwAZVU0fVu/Y4 S7MAEGZxiKE2ycJA/ZV4y8/tgp4MFYXQK6UrsXf3z9r65EUY0EpmobIa0bpg/bfk y8SVpxl7VD6luya3vOeZ08GCu0VUHvzNlrxHe7W/F+ziqCPvldn1hOCQVH8SmENG 5yLp7cbv6q3u7uMqw31g+hHuf/Z+mOvWANK3sndZgBxbGYe+aTxVI4AAaaUUc7xn P6xrwrPsJjBh5nm9mwp+zjQQvCsLoPqyyVAeBN7jY4Kt6/OU9TAQix1xQu4PHC9C esqRxVRvbsXblsbDb3ApRpwPETi413KPk5GhJqfOd7/N7kT6pU4= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:35 2026 by rpki-client