$ rpki-client -vvf rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft File: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft (raw, json) Hash identifier: 47N4YPz9+gYTiLteRtx1ajVCGsTJfgsCtuvSt+z6ztM= Subject key identifier: 5A:14:E0:3F:A0:C2:65:BE:2F:F4:A5:44:C2:47:F4:F9:39:F0:8D:BE Authority key identifier: 5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 Certificate issuer: /CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Certificate serial: 02329D0C0C31FE62DF247A478ABE11D2E2EA00E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 05:54:29 +0000 Manifest this update: Sun 02 Aug 2026 05:49:29 +0000 Manifest next update: Mon 03 Aug 2026 07:23:29 +0000 Files and hashes: 1: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl (hash: 6J77efEWvqsN+sDUkccd50X/YRsBXkMFTSJDC1rbr4U=) 2: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: YzbPSpHu4Y/3sNkzMjgGkQaP8RKL2rlB1MRk9WcO/JU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:32:9d:0c:0c:31:fe:62:df:24:7a:47:8a:be:11:d2:e2:ea:00:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Validity Not Before: Aug 2 05:49:29 2026 GMT Not After : Aug 3 07:23:29 2026 GMT Subject: CN=5A14E03FA0C265BE2FF4A544C247F4F939F08DBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:13:0e:ca:83:fa:ec:9a:0b:33:b3:1e:0d:71: 6b:96:fe:36:1b:6f:ea:74:ec:c7:ac:29:65:7d:b1: ff:34:0d:3d:46:37:31:88:bf:d1:4d:ae:3f:bb:64: 1d:80:78:88:3c:c9:9d:bc:dc:12:6a:e4:cc:8b:d5: 1e:bd:f5:77:d8:df:c2:5a:96:26:0e:63:f9:d8:46: 40:ef:25:38:67:4c:25:52:fe:fe:7c:8e:34:4e:a8: 74:4c:29:47:16:2d:7b:19:53:62:b9:ba:71:29:3b: ef:11:f2:e2:a4:83:b9:82:95:41:22:05:1c:0b:2d: f4:42:b6:46:c2:7f:4b:34:dd:f8:74:5c:5d:a0:49: 39:53:70:fe:6d:26:e6:04:b0:a7:b6:24:30:c8:ca: f5:58:9f:84:d1:33:bb:1c:9a:42:18:bc:ab:a4:48: a0:71:60:4e:8f:75:2d:a6:71:9e:39:de:e9:db:8a: 85:23:02:4b:47:91:73:41:48:a9:91:21:f0:f1:09: ca:b0:66:27:6f:7e:50:ee:29:e2:44:c7:ea:86:67: b7:48:3c:e8:53:c4:d9:2e:41:42:62:83:46:00:25: 9b:a1:ad:08:50:3d:55:af:a8:09:6b:80:5b:91:68: ee:94:be:c6:5e:5b:5c:e4:9d:62:83:94:22:12:4c: b9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:14:E0:3F:A0:C2:65:BE:2F:F4:A5:44:C2:47:F4:F9:39:F0:8D:BE X509v3 Authority Key Identifier: keyid:5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2d:71:e1:a3:f5:00:16:40:62:7f:a9:19:39:e8:cf:08:f5: dd:ff:db:18:d2:00:34:24:75:0c:53:a5:30:c1:00:91:6e:59: 0f:19:b2:41:e4:3d:2d:f2:7a:4a:8b:cd:c4:6b:bb:5a:da:df: b7:8a:d4:c5:ca:4f:4d:05:41:6c:1c:c6:b8:3f:fe:cb:6d:85: 57:72:fb:4c:25:fa:48:6d:a9:9b:20:59:19:50:e2:87:df:1e: f9:85:3e:5c:2d:be:71:ec:cb:79:60:fe:24:ea:fa:a3:24:81: 4d:a0:3d:76:3b:16:22:45:69:a1:71:88:0b:d0:06:26:0a:51: 24:1c:fa:84:a9:78:6b:0f:94:34:8f:fb:cc:01:23:6f:55:3a: cf:d8:ad:d3:dc:a7:43:0e:a2:db:c1:f7:88:a6:12:f0:79:03: 7a:8f:24:a7:e1:a5:c9:8b:20:85:06:c9:02:55:5b:13:b9:c9: 04:0b:47:c5:70:57:c0:2e:a3:83:ff:9a:7e:05:c0:13:8e:c1: 73:22:42:d4:47:58:71:da:cb:31:d8:b8:47:f5:3c:20:27:d9: ab:bf:21:5d:5b:56:ee:d5:ea:3f:cd:d2:ac:ad:d7:f3:58:3f: d4:2f:8f:d6:6f:65:ce:21:cc:53:fe:70:e2:f7:19:db:65:da: 28:9a:85:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAjKdDAwx/mLfJHpHir4R0uLqAOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5 Q0NEN0RDNDAeFw0yNjA4MDIwNTQ5MjlaFw0yNjA4MDMwNzIzMjlaMDMxMTAvBgNV BAMTKDVBMTRFMDNGQTBDMjY1QkUyRkY0QTU0NEMyNDdGNEY5MzlGMDhEQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmEw7Kg/rsmgszsx4NcWuW/jYb b+p07MesKWV9sf80DT1GNzGIv9FNrj+7ZB2AeIg8yZ283BJq5MyL1R699XfY38Ja liYOY/nYRkDvJThnTCVS/v58jjROqHRMKUcWLXsZU2K5unEpO+8R8uKkg7mClUEi BRwLLfRCtkbCf0s03fh0XF2gSTlTcP5tJuYEsKe2JDDIyvVYn4TRM7scmkIYvKuk SKBxYE6PdS2mcZ453unbioUjAktHkXNBSKmRIfDxCcqwZidvflDuKeJEx+qGZ7dI POhTxNkuQUJig0YAJZuhrQhQPVWvqAlrgFuRaO6UvsZeW1zknWKDlCISTLnJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWhTgP6DCZb4v9KVEwkf0+Tnwjb4wHwYDVR0j BBgwFoAUX8aJ6rlB0uD0A/TY/nuIZJzNfcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlOGJjYzktNDNhMS00YmFiLWI2ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFC OTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5Q0NEN0RDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkM2ODlFQUI5NDFEMkUwRjQwM0Y0RDhGRTdCODg2NDlDQ0Q3 REM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4 NjQ5Q0NEN0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYtceGj9QAWQGJ/qRk56M8I9d3/2xjSADQk dQxTpTDBAJFuWQ8ZskHkPS3yekqLzcRru1ra37eK1MXKT00FQWwcxrg//stthVdy +0wl+khtqZsgWRlQ4offHvmFPlwtvnHsy3lg/iTq+qMkgU2gPXY7FiJFaaFxiAvQ BiYKUSQc+oSpeGsPlDSP+8wBI29VOs/YrdPcp0MOotvB94imEvB5A3qPJKfhpcmL IIUGyQJVWxO5yQQLR8VwV8Auo4P/mn4FwBOOwXMiQtRHWHHayzHYuEf1PCAn2au/ IV1bVu7V6j/N0qyt1/NYP9Qvj9ZvZc4hzFP+cOL3Gdtl2iiaha8= -----END CERTIFICATE-----Generated at Sun Aug 2 22:44:48 2026 by rpki-client