$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft File: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft (raw, json) Hash identifier: GHqw6xFo1Umrgre4yaQOIE85+SNPz+dwhB4ZdlCiGHI= Subject key identifier: B9:9F:56:33:CD:D0:9A:67:2F:F4:36:E3:AD:C9:F2:33:C1:37:35:CF Authority key identifier: 5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 Certificate issuer: /CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Certificate serial: 30352B9BB2630E48EF04DE91FE68D59DD72BC1DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 12:02:17 +0000 Manifest this update: Sun 02 Aug 2026 11:57:17 +0000 Manifest next update: Mon 03 Aug 2026 15:53:17 +0000 Files and hashes: 1: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: YDSkpFGq8xybThgooh1RThJN9W0fBsfNyr37Omd1f4w=) 2: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl (hash: JOscudHxKzHr51exFm/Qy29r6kXKLHydkVytVRr+KGE=) 3: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: FXO9CsmctV8fdA5KiII/rw/3Y+5l9AlF4P2ED3TDR8A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 15:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:35:2b:9b:b2:63:0e:48:ef:04:de:91:fe:68:d5:9d:d7:2b:c1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Validity Not Before: Aug 2 11:57:17 2026 GMT Not After : Aug 3 15:53:17 2026 GMT Subject: CN=B99F5633CDD09A672FF436E3ADC9F233C13735CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:47:e2:cb:61:03:7f:95:8b:d1:2d:7f:be: 91:8d:6e:25:d7:52:c9:23:35:27:e3:62:f5:48:b2: a8:ca:e6:07:df:ee:73:76:d0:27:4b:33:f1:3c:23: e6:56:76:e5:0c:37:cd:b5:73:8a:ad:ad:38:04:1f: 0d:bd:65:e9:8a:fd:a0:c1:41:17:4f:be:71:2d:92: 60:0b:b7:5a:05:17:fb:fa:78:62:35:51:19:ca:da: c2:7b:24:25:c5:4e:23:57:38:79:4c:2f:25:97:64: 91:4c:81:c6:75:ef:f5:ab:69:d9:6c:da:0d:2c:c9: 57:91:0f:a8:4c:9b:d4:5e:ce:4a:fe:71:c7:ef:af: f8:6b:46:19:ea:6b:73:82:65:34:4c:9e:21:ca:a0: d3:49:6b:d2:cc:a0:42:04:db:09:33:0c:cf:0d:fe: f8:21:fb:50:c1:e5:9b:be:00:40:28:8c:f7:9a:6b: 49:30:7c:cf:b7:49:20:86:73:b1:d8:b4:b7:43:a1: 1e:7e:47:36:47:eb:e4:0c:aa:44:2f:81:e9:8b:6e: f5:3d:a4:08:34:d4:8f:ed:90:70:ba:20:35:c0:51: 4d:32:3e:bd:dc:92:41:78:b4:f1:cf:9b:8c:ad:f3: 08:cc:93:c7:2e:2f:ea:e7:4e:13:97:5f:52:01:03: 36:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9F:56:33:CD:D0:9A:67:2F:F4:36:E3:AD:C9:F2:33:C1:37:35:CF X509v3 Authority Key Identifier: keyid:5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:13:da:eb:e4:5e:21:79:3e:97:af:d5:39:6e:5a:2f:ce:16: 3b:4f:54:9c:78:da:2f:2b:10:44:92:1e:43:17:e5:96:a1:f3: d8:b9:ef:da:b1:16:74:13:aa:e1:10:99:ba:07:93:1c:2c:94: f7:3f:5f:88:42:e2:1f:99:14:94:3c:6f:0b:9b:06:6c:d6:26: 4a:cf:14:c6:f4:aa:35:cd:46:29:2c:4b:ea:a0:50:25:2d:4a: b1:df:ad:2a:2c:c4:ef:b9:69:66:f8:5d:a3:06:2d:40:e0:5f: 89:c5:11:03:9d:4f:b0:db:03:84:dc:f6:e8:e6:87:92:06:5a: be:86:92:b4:ab:5d:68:9d:3f:83:7d:9b:e6:66:20:38:07:d5: b1:9b:f6:1e:2c:f3:91:f2:76:b2:5e:06:4e:d3:63:78:ad:82: f8:20:ef:6e:81:94:2c:cf:ea:e3:ef:73:bb:72:9a:48:ff:3a: 63:dd:f2:17:5e:7a:1f:6f:07:ea:ab:e2:07:96:42:4f:f5:a5: e8:54:e0:85:fa:fc:c2:e2:68:37:9f:af:2c:bc:03:b4:e0:50: 62:d5:5c:a6:60:bf:bd:24:39:73:67:e0:ed:e7:57:4b:ca:9d: c8:6e:fd:a6:65:2f:de:67:48:2e:06:41:6b:d8:d4:85:a7:2c: fa:b0:37:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMDUrm7JjDkjvBN6R/mjVndcrwd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3NDQ1QzFFMTM3NkU0QTdCNDA0QkM1M0E3MUFDOTI3 RDJDMjIwNDAeFw0yNjA4MDIxMTU3MTdaFw0yNjA4MDMxNTUzMTdaMDMxMTAvBgNV BAMTKEI5OUY1NjMzQ0REMDlBNjcyRkY0MzZFM0FEQzlGMjMzQzEzNzM1Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRykfiy2EDf5WL0S1/vpGNbiXX UskjNSfjYvVIsqjK5gff7nN20CdLM/E8I+ZWduUMN821c4qtrTgEHw29ZemK/aDB QRdPvnEtkmALt1oFF/v6eGI1URnK2sJ7JCXFTiNXOHlMLyWXZJFMgcZ17/Wradls 2g0syVeRD6hMm9Rezkr+ccfvr/hrRhnqa3OCZTRMniHKoNNJa9LMoEIE2wkzDM8N /vgh+1DB5Zu+AEAojPeaa0kwfM+3SSCGc7HYtLdDoR5+RzZH6+QMqkQvgemLbvU9 pAg01I/tkHC6IDXAUU0yPr3ckkF4tPHPm4yt8wjMk8cuL+rnThOXX1IBAzbBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuZ9WM83Qmmcv9DbjrcnyM8E3Nc8wHwYDVR0j BBgwFoAUXHRFweE3bkp7QEvFOnGskn0sIgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM3MmVlM2MtZTE4MC00Mjk2LTlkYWQtOTUwMGVmZDk0ODkwLzAvNUM3NDQ1QzFF MTM3NkU0QTdCNDA0QkM1M0E3MUFDOTI3RDJDMjIwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Qzc0NDVDMUUxMzc2RTRBN0I0MDRCQzUzQTcxQUM5MjdEMkMy MjA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvNUM3NDQ1QzFFMTM3NkU0QTdCNDA0QkM1M0E3MUFD OTI3RDJDMjIwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUT2uvkXiF5Ppev1TluWi/OFjtPVJx42i8r EESSHkMX5Zah89i579qxFnQTquEQmboHkxwslPc/X4hC4h+ZFJQ8bwubBmzWJkrP FMb0qjXNRiksS+qgUCUtSrHfrSosxO+5aWb4XaMGLUDgX4nFEQOdT7DbA4Tc9ujm h5IGWr6GkrSrXWidP4N9m+ZmIDgH1bGb9h4s85HydrJeBk7TY3itgvgg726BlCzP 6uPvc7tymkj/OmPd8hdeeh9vB+qr4geWQk/1pehU4IX6/MLiaDefryy8A7TgUGLV XKZgv70kOXNn4O3nV0vKnchu/aZlL95nSC4GQWvY1IWnLPqwNyo= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:38 2026 by rpki-client