$ rpki-client -vvf rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft File: 5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft (raw, json) Hash identifier: OiRX+J8MxawPChRisfaASPzt7f12/fUudfDXnzLRPoM= Subject key identifier: 0B:A9:98:B5:0F:F6:4F:14:0F:9F:49:24:75:BF:3F:1B:F5:BB:C2:99 Authority key identifier: 5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 Certificate issuer: /CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Certificate serial: 4684A614463E6A10A13A66D2F008C1769F2AF071 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 01:22:50 +0000 Manifest this update: Wed 29 Jul 2026 01:17:50 +0000 Manifest next update: Thu 30 Jul 2026 04:52:50 +0000 Files and hashes: 1: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: P5BEjOqlnRhd5dHiMK0aXJooM/BcbKofscPw2JJ5bRQ=) 2: 3135372e32302e34352e302f32342d3234203d3e20313532333932.roa (hash: PIubzi7VZ2N4uYX3mam6XOmZc4gw31pwt2ndjjqEeIM=) 3: 5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl (hash: ekI4Q/6F2QyicVvsTuDXnl9ow78Ud+hrhbe9IxGRwcc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:84:a6:14:46:3e:6a:10:a1:3a:66:d2:f0:08:c1:76:9f:2a:f0:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Validity Not Before: Jul 29 01:17:50 2026 GMT Not After : Jul 30 04:52:50 2026 GMT Subject: CN=0BA998B50FF64F140F9F492475BF3F1BF5BBC299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b6:0e:67:43:57:1a:8d:6f:1a:95:64:b5:58: 5a:39:27:a5:67:35:71:07:83:c1:d0:b4:d6:54:ac: 61:80:38:82:62:68:52:c3:89:a3:bd:10:cb:42:1c: 6c:ba:8d:49:4d:ba:cb:b6:d6:83:2c:6b:59:05:40: e6:91:c5:67:da:e5:9b:da:02:77:f6:64:7d:50:87: a1:95:7c:16:27:c9:9a:9d:7c:e5:f6:11:26:0b:2e: bc:f0:95:71:4d:73:d9:b9:fd:02:fc:da:33:ce:b3: d3:4e:05:07:11:1b:99:99:3c:34:03:2d:14:5b:c5: e1:31:6a:40:4c:d8:aa:b2:b2:89:6d:9e:31:c2:1d: b2:82:0e:b6:c2:bd:5e:d6:70:d4:11:1c:40:dc:b5: 0b:98:b1:02:0e:29:9a:77:7e:2e:a2:c0:6c:2b:3a: 96:3a:6f:88:c7:99:af:b0:6a:86:4e:dd:20:76:ae: 23:b3:30:6a:c8:a2:49:6b:b2:bd:36:b1:c7:d7:33: 21:29:a7:5a:1c:f3:e0:27:4d:75:b8:30:7a:64:64: 4c:36:94:ce:ce:5b:a0:0d:00:12:9d:74:ed:43:26: 61:68:3c:5d:19:63:e9:75:6c:0a:81:83:a0:8f:70: cd:fa:ec:8a:74:8a:04:af:21:24:2d:40:b2:fd:19: ff:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A9:98:B5:0F:F6:4F:14:0F:9F:49:24:75:BF:3F:1B:F5:BB:C2:99 X509v3 Authority Key Identifier: keyid:5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:7b:a0:7b:63:c2:39:ec:df:5d:92:40:08:e8:08:8a:4f:da: 48:6d:7f:df:e5:34:4c:ac:ae:7c:b2:14:6a:a1:f7:b5:24:37: 6b:a8:b7:51:2b:77:82:75:8f:6b:7b:05:a4:ae:a8:7f:b2:77: f1:57:aa:61:28:a6:c7:57:6c:03:ca:62:86:c8:8c:7b:67:d7: f6:b5:13:db:76:c4:fb:65:2e:ba:98:1e:ae:d4:40:03:2e:40: 61:15:6b:02:42:56:b2:b4:89:8b:f8:8b:fb:05:4d:bc:3b:3c: a7:ba:27:3f:23:a1:8b:8e:55:ee:f9:3e:95:f9:59:7c:62:c6: de:84:08:1e:b4:3b:ca:bb:f7:7b:48:af:b8:27:00:34:23:4a: ee:93:e6:d4:b0:21:b6:21:f6:ac:e6:f7:21:53:7a:ae:df:0b: cc:a0:7d:01:8b:20:c0:ec:32:fa:28:86:9c:0c:06:3f:88:84: a2:b7:f3:17:02:b0:e1:c8:f3:02:eb:fc:ed:b0:89:46:ba:52: c0:f3:fe:cf:3f:fd:1a:6b:41:8c:88:f6:28:7c:4e:37:50:0f: e6:2a:f4:42:01:b3:1d:aa:44:7a:72:75:35:b2:15:59:90:59: 21:0b:a5:93:a8:30:17:55:41:23:ea:84:99:d9:35:b2:17:83: d5:5e:d5:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURoSmFEY+ahChOmbS8AjBdp8q8HEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNG RUFBQjkwOTAeFw0yNjA3MjkwMTE3NTBaFw0yNjA3MzAwNDUyNTBaMDMxMTAvBgNV BAMTKDBCQTk5OEI1MEZGNjRGMTQwRjlGNDkyNDc1QkYzRjFCRjVCQkMyOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQtg5nQ1cajW8alWS1WFo5J6Vn NXEHg8HQtNZUrGGAOIJiaFLDiaO9EMtCHGy6jUlNusu21oMsa1kFQOaRxWfa5Zva Anf2ZH1Qh6GVfBYnyZqdfOX2ESYLLrzwlXFNc9m5/QL82jPOs9NOBQcRG5mZPDQD LRRbxeExakBM2KqysoltnjHCHbKCDrbCvV7WcNQRHEDctQuYsQIOKZp3fi6iwGwr OpY6b4jHma+waoZO3SB2riOzMGrIoklrsr02scfXMyEpp1oc8+AnTXW4MHpkZEw2 lM7OW6ANABKddO1DJmFoPF0ZY+l1bAqBg6CPcM367Ip0igSvISQtQLL9Gf/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC6mYtQ/2TxQPn0kkdb8/G/W7wpkwHwYDVR0j BBgwFoAUWhwazsC2dAF/+4nyGGW6Y/6quQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU4OGRmZjctNmE5Mi00MjkzLTg4MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VD MEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNGRUFBQjkwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81QTFDMUFDRUMwQjY3NDAxN0ZGQjg5RjIxODY1QkE2M0ZFQUFC OTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJB NjNGRUFBQjkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABt7oHtjwjns312SQAjoCIpP2khtf9/lNEys rnyyFGqh97UkN2uot1Erd4J1j2t7BaSuqH+yd/FXqmEopsdXbAPKYobIjHtn1/a1 E9t2xPtlLrqYHq7UQAMuQGEVawJCVrK0iYv4i/sFTbw7PKe6Jz8joYuOVe75PpX5 WXxixt6ECB60O8q793tIr7gnADQjSu6T5tSwIbYh9qzm9yFTeq7fC8ygfQGLIMDs MvoohpwMBj+IhKK38xcCsOHI8wLr/O2wiUa6UsDz/s8//RprQYyI9ih8TjdQD+Yq 9EIBsx2qRHpydTWyFVmQWSELpZOoMBdVQSPqhJnZNbIXg9Ve1ck= -----END CERTIFICATE-----Generated at Wed Jul 29 12:51:30 2026 by rpki-client