$ rpki-client -vvf rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft File: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft (raw, json) Hash identifier: qfyEhkT+8JSq3xZJ4m8TkrOAEuF4PqjUyak9lgCHXPM= Subject key identifier: 7C:48:A7:0D:3C:7E:15:59:0A:AD:C4:16:F2:34:4E:2D:B1:B7:7D:D1 Authority key identifier: 5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D Certificate issuer: /CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Certificate serial: 651529DDEE1BE5F0E9DBD728C71D2794EB4AFA3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft Manifest number: 7A Signing time: Sun 02 Aug 2026 08:48:20 +0000 Manifest this update: Sun 02 Aug 2026 08:43:20 +0000 Manifest next update: Mon 03 Aug 2026 09:39:20 +0000 Files and hashes: 1: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl (hash: 6tOQVKp1xP6FaXA64v9yMGq1N7B+TVNZOT/OYcBUEF0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:15:29:dd:ee:1b:e5:f0:e9:db:d7:28:c7:1d:27:94:eb:4a:fa:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Validity Not Before: Aug 2 08:43:20 2026 GMT Not After : Aug 3 09:39:20 2026 GMT Subject: CN=7C48A70D3C7E15590AADC416F2344E2DB1B77DD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:6b:2a:8d:4e:04:6a:fa:e3:2c:85:72:18: 38:d6:1b:57:fb:31:01:84:3f:a7:2c:1e:b4:9e:a7: 82:04:09:31:1a:56:53:8b:a2:7b:00:9a:63:6a:4e: 88:56:f1:60:4e:38:91:5d:67:b4:17:67:55:06:d3: 6c:6a:0d:23:e5:18:83:a8:81:a4:20:32:08:ac:22: 66:7f:ae:5a:c2:e2:d2:71:28:93:dc:cd:2a:6b:1e: 93:df:0a:e4:54:93:04:99:49:3f:d6:00:c4:44:10: 89:e8:08:b3:ce:9d:77:13:db:c2:9f:74:4e:8e:9a: 74:25:81:61:3f:7e:8b:fe:c1:36:30:6c:1e:f7:fe: cd:29:ab:78:14:10:e3:df:1f:18:c8:07:12:e8:b1: ea:80:05:cf:00:8e:8f:eb:88:91:14:b8:d4:dc:71: f3:58:36:e7:de:f4:65:b4:0e:93:8f:43:33:54:b9: 17:82:bd:65:80:59:b7:39:96:c8:44:d7:52:e7:aa: ca:82:92:5a:b4:d6:be:27:34:37:fe:18:eb:4d:05: c0:86:33:59:5f:f4:07:ed:16:18:c1:77:0c:8b:9c: 61:e0:7a:b8:6a:91:36:ef:64:9d:34:4b:99:3b:07: 7f:d1:50:7b:2f:3a:45:80:b7:4f:08:af:95:64:5c: c5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:48:A7:0D:3C:7E:15:59:0A:AD:C4:16:F2:34:4E:2D:B1:B7:7D:D1 X509v3 Authority Key Identifier: keyid:5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a2:10:c8:7c:19:94:0b:2b:04:ad:67:5a:f4:0f:71:a1:91: 83:86:d7:1e:25:e2:2e:2e:a0:36:74:d1:29:d3:09:d9:fa:a0: e3:23:fd:ed:97:fa:69:88:71:57:42:d6:ed:b3:fd:17:3a:6b: 58:ab:78:4d:33:82:e5:3d:06:d8:4a:24:0e:cb:c7:c4:f3:9f: 2a:17:57:e2:48:78:6b:11:a8:ec:80:66:f8:4e:d7:2a:e3:9b: 39:b3:fa:40:a9:46:3a:e1:4c:27:67:8f:5f:92:1e:bf:f4:f1: 02:c5:8a:7e:cf:6c:54:01:0a:ea:91:1b:3f:2c:47:6a:45:9b: 64:52:bd:94:b4:eb:08:d9:43:4d:1d:d5:67:ef:e1:a2:90:e9: 05:a7:04:b5:4a:e5:05:ac:f4:55:b8:20:08:c4:32:9a:ce:f6: 2e:3c:36:aa:ce:22:f3:8f:f0:c9:fc:3b:9f:54:16:c1:9f:dd: 1a:b8:ae:da:e1:d9:90:a5:0b:85:97:48:3c:73:57:61:97:da: e4:ce:54:23:64:28:dd:95:83:13:b5:a4:ef:ef:f3:b8:7c:b9: b4:52:d6:65:76:aa:0a:bc:ad:c9:5e:71:c6:02:f9:18:bb:db: ea:5d:ae:ed:7c:ed:52:de:ab:2b:f4:a1:67:fd:40:2e:df:ee: 75:65:cd:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZRUp3e4b5fDp29coxx0nlOtK+j8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1 QTE2ODA0RDAeFw0yNjA4MDIwODQzMjBaFw0yNjA4MDMwOTM5MjBaMDMxMTAvBgNV BAMTKDdDNDhBNzBEM0M3RTE1NTkwQUFEQzQxNkYyMzQ0RTJEQjFCNzdERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjbWsqjU4EavrjLIVyGDjWG1f7 MQGEP6csHrSep4IECTEaVlOLonsAmmNqTohW8WBOOJFdZ7QXZ1UG02xqDSPlGIOo gaQgMgisImZ/rlrC4tJxKJPczSprHpPfCuRUkwSZST/WAMREEInoCLPOnXcT28Kf dE6OmnQlgWE/fov+wTYwbB73/s0pq3gUEOPfHxjIBxLoseqABc8Ajo/riJEUuNTc cfNYNufe9GW0DpOPQzNUuReCvWWAWbc5lshE11LnqsqCklq01r4nNDf+GOtNBcCG M1lf9AftFhjBdwyLnGHgerhqkTbvZJ00S5k7B3/RUHsvOkWAt08Ir5VkXMU/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfEinDTx+FVkKrcQW8jROLbG3fdEwHwYDVR0j BBgwFoAUX/ajp8MEnWezbNeWmR5c5FoWgE0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM3ZjE5NWEtMzY5ZS00NGJhLTgwY2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdD MzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1QTE2ODA0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RkY2QTNBN0MzMDQ5RDY3QjM2Q0Q3OTY5OTFFNUNFNDVBMTY4 MDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM3ZjE5NWEtMzY5ZS00NGJhLTgw Y2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVD RTQ1QTE2ODA0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+iEMh8GZQLKwStZ1r0D3GhkYOG1x4l4i4u oDZ00SnTCdn6oOMj/e2X+mmIcVdC1u2z/Rc6a1ireE0zguU9BthKJA7Lx8TznyoX V+JIeGsRqOyAZvhO1yrjmzmz+kCpRjrhTCdnj1+SHr/08QLFin7PbFQBCuqRGz8s R2pFm2RSvZS06wjZQ00d1Wfv4aKQ6QWnBLVK5QWs9FW4IAjEMprO9i48NqrOIvOP 8Mn8O59UFsGf3Rq4rtrh2ZClC4WXSDxzV2GX2uTOVCNkKN2VgxO1pO/v87h8ubRS 1mV2qgq8rcleccYC+Ri72+pdru187VLeqyv0oWf9QC7f7nVlzSY= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:52 2026 by rpki-client