$ rpki-client -vvf rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft File: 5BD70FF0C393471CFAF795433474B327BD4832F9.mft (raw, json) Hash identifier: ge5ka9R959l/VFQX44w85+KEjVxkZZwNaaCgWPAq78g= Subject key identifier: F0:E1:E1:A3:26:82:AF:0E:17:98:5F:3E:A7:61:A1:71:9D:91:A8:7D Authority key identifier: 5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9 Certificate issuer: /CN=5BD70FF0C393471CFAF795433474B327BD4832F9 Certificate serial: 20BC4A8C394B216402FCF8FEA28F051D0F6BB791 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 05:34:09 +0000 Manifest this update: Sun 02 Aug 2026 05:29:09 +0000 Manifest next update: Mon 03 Aug 2026 08:46:09 +0000 Files and hashes: 1: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: VRIdIq5putn/ECgQ5btezrubt1dqb54ZcZ8apLF1yIY=) 2: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: bBQLsVkx2CpNTLhQIb39ezRJZR+3VFuLJFWKGpnOARA=) 3: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: tdzqlaQf0fF4d+ZUvSQhNIWl0HYGOdoxh6aHUWDnZjg=) 4: 5BD70FF0C393471CFAF795433474B327BD4832F9.crl (hash: qVobWTzFmIHanHdTMJclKOj8kxviwK7Hsn5pA1WvXgI=) 5: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: kDdkImc9WCIWpXnaeyzXyBkOibkDgoSjiG8qhXynUZA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:bc:4a:8c:39:4b:21:64:02:fc:f8:fe:a2:8f:05:1d:0f:6b:b7:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD70FF0C393471CFAF795433474B327BD4832F9 Validity Not Before: Aug 2 05:29:09 2026 GMT Not After : Aug 3 08:46:09 2026 GMT Subject: CN=F0E1E1A32682AF0E17985F3EA761A1719D91A87D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:21:5d:20:bd:b6:1b:65:d4:53:81:90:a4:f5: 6d:2e:5e:dd:d0:db:6c:f0:f6:4e:de:b0:d3:ed:04: 51:39:52:93:37:a1:70:af:45:5b:a2:63:29:fb:23: 56:3b:ae:cb:e1:3d:e8:a2:df:a6:23:ec:dd:ab:0d: f4:c7:2a:30:2a:61:10:63:92:43:8a:62:a3:72:25: 99:a2:a8:ba:89:30:d6:21:3b:ba:e3:1c:b5:ce:51: 64:49:93:a0:76:c4:b3:21:48:76:2d:9b:3d:bc:5b: 3a:70:f1:7b:61:22:b2:cb:1a:15:cd:7f:0b:5e:24: de:f2:7e:46:a5:0b:2e:7b:81:16:34:36:8b:22:4a: 7a:11:93:54:7c:f5:85:31:6e:13:23:72:1c:6b:25: 4e:23:37:fc:4a:a0:32:18:26:20:63:86:a3:af:55: 90:ca:a2:75:b7:fd:16:8e:b5:78:c8:73:de:a5:77: 0c:cd:9a:fb:e0:bd:53:a1:30:6d:cc:3d:f0:35:35: b1:56:28:92:01:d3:9e:69:c6:85:84:26:5d:dd:28: bb:ee:d6:63:e5:e3:29:7c:40:56:54:85:f9:00:08: 4d:ac:aa:4a:14:fe:fb:b8:78:81:96:6e:7b:fb:63: 7b:d9:4b:67:04:3a:db:78:e5:78:09:73:03:8b:f2: e7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E1:E1:A3:26:82:AF:0E:17:98:5F:3E:A7:61:A1:71:9D:91:A8:7D X509v3 Authority Key Identifier: keyid:5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:6f:38:f8:f3:31:09:53:5b:5c:9b:75:7f:b1:a8:a5:bc:59: 6d:9d:71:27:68:60:52:66:34:99:86:4d:02:ee:1c:13:81:77: 59:08:4c:60:80:6f:7f:e6:d4:ac:33:95:b4:90:59:b4:4e:9a: c1:06:b2:d2:cf:38:b7:61:78:16:8e:bb:04:f6:c7:4c:33:14: 9c:ff:90:8f:68:c3:40:91:55:62:50:93:57:30:0d:49:93:3a: 1f:35:9f:68:10:fd:d6:10:96:2d:af:81:fb:cf:02:6a:6f:09: 99:f2:ba:29:8d:6f:3c:da:d8:7a:68:19:fd:f3:2a:09:50:23: 5b:c3:3e:d8:d6:bb:54:ab:93:d0:76:cd:04:d6:94:eb:e7:fc: 30:53:e1:52:54:3d:1f:76:c0:5f:39:98:3c:6f:2b:bf:e1:db: 37:15:e1:03:24:8a:e3:e5:d8:43:2b:a3:d5:56:42:1f:21:51: 23:0a:9d:d5:39:db:73:8e:04:a2:47:4b:c2:cb:44:d1:12:fa: bd:cd:78:24:57:83:03:5f:81:b5:71:f2:ba:b9:d5:84:8f:a4: bd:e7:59:62:b1:43:78:20:29:6a:8e:39:3a:c5:fa:18:44:c3: 54:e5:22:da:fe:d4:d1:cd:89:a8:69:8d:f4:d7:6a:1e:22:1a: 3f:3c:b9:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUILxKjDlLIWQC/Pj+oo8FHQ9rt5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJENzBGRjBDMzkzNDcxQ0ZBRjc5NTQzMzQ3NEIzMjdC RDQ4MzJGOTAeFw0yNjA4MDIwNTI5MDlaFw0yNjA4MDMwODQ2MDlaMDMxMTAvBgNV BAMTKEYwRTFFMUEzMjY4MkFGMEUxNzk4NUYzRUE3NjFBMTcxOUQ5MUE4N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFIV0gvbYbZdRTgZCk9W0uXt3Q 22zw9k7esNPtBFE5UpM3oXCvRVuiYyn7I1Y7rsvhPeii36Yj7N2rDfTHKjAqYRBj kkOKYqNyJZmiqLqJMNYhO7rjHLXOUWRJk6B2xLMhSHYtmz28Wzpw8XthIrLLGhXN fwteJN7yfkalCy57gRY0NosiSnoRk1R89YUxbhMjchxrJU4jN/xKoDIYJiBjhqOv VZDKonW3/RaOtXjIc96ldwzNmvvgvVOhMG3MPfA1NbFWKJIB055pxoWEJl3dKLvu 1mPl4yl8QFZUhfkACE2sqkoU/vu4eIGWbnv7Y3vZS2cEOtt45XgJcwOL8ufjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8OHhoyaCrw4XmF8+p2GhcZ2RqH0wHwYDVR0j BBgwFoAUW9cP8MOTRxz695VDNHSzJ71IMvkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkyNGZhOWEtZTVmMy00MjY1LTllMWQtODRlNDUzNTk2MWQwLzAvNUJENzBGRjBD MzkzNDcxQ0ZBRjc5NTQzMzQ3NEIzMjdCRDQ4MzJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkQ3MEZGMEMzOTM0NzFDRkFGNzk1NDMzNDc0QjMyN0JENDgz MkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvNUJENzBGRjBDMzkzNDcxQ0ZBRjc5NTQzMzQ3NEIz MjdCRDQ4MzJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxvOPjzMQlTW1ybdX+xqKW8WW2dcSdoYFJm NJmGTQLuHBOBd1kITGCAb3/m1KwzlbSQWbROmsEGstLPOLdheBaOuwT2x0wzFJz/ kI9ow0CRVWJQk1cwDUmTOh81n2gQ/dYQli2vgfvPAmpvCZnyuimNbzza2HpoGf3z KglQI1vDPtjWu1Srk9B2zQTWlOvn/DBT4VJUPR92wF85mDxvK7/h2zcV4QMkiuPl 2EMro9VWQh8hUSMKndU523OOBKJHS8LLRNES+r3NeCRXgwNfgbVx8rq51YSPpL3n WWKxQ3ggKWqOOTrF+hhEw1TlItr+1NHNiahpjfTXah4iGj88uQ0= -----END CERTIFICATE-----Generated at Mon Aug 3 01:46:14 2026 by rpki-client