$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft File: 5843958BB240779320D7F0C2B674ACF5EF6122BC.mft (raw, json) Hash identifier: //CH9tGOBaZH4WD1JLSdFfc4jeC2QBbXmjXy3DDBAio= Subject key identifier: E6:ED:A2:B3:F4:93:56:DD:47:29:10:31:B8:D2:4C:AB:67:58:12:94 Authority key identifier: 58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC Certificate issuer: /CN=5843958BB240779320D7F0C2B674ACF5EF6122BC Certificate serial: 7922844AE6CBD82F2BE93B68227BB61E65A1F812 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 14:19:03 +0000 Manifest this update: Tue 28 Jul 2026 14:14:03 +0000 Manifest next update: Wed 29 Jul 2026 16:57:03 +0000 Files and hashes: 1: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: yPK7GQUu85mTor59GtzCw8idVr6kmAEeffKza8nzEd8=) 2: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: jOCXET8yniqJ02iHiMoBI6iwGo2/5oUN4/jc3LtL0jQ=) 3: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: zO201tAVoPKGV/ct4ikI5lfPCjZ1ksaQX5GMEkLajwg=) 4: 5843958BB240779320D7F0C2B674ACF5EF6122BC.crl (hash: 37IJZzuQjQpT9jP2YuLhAxm9vWUnNDekg824y3Qe0a4=) 5: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: lVR5iCrB58ZGOeyqsgP1KQLwdS0WjCcfUKPYsWN8lxI=) 6: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: WeFmDyNsHJ6btvYfzDFQoJzW4vr0tmZoF+30o64Nsw4=) 7: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: bNdzrUkHylX3nBoyTDryEKwja6jOzq2DQP/kaLdB4H4=) 8: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: 3HeHx0erxEkjN9PtOgU3W6tKucWeXKE5FEYLyXwycJc=) 9: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: t3N8/NmkXItiVJAARc4CSYWSo+yW57apDjW3aqHeSkc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:22:84:4a:e6:cb:d8:2f:2b:e9:3b:68:22:7b:b6:1e:65:a1:f8:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5843958BB240779320D7F0C2B674ACF5EF6122BC Validity Not Before: Jul 28 14:14:03 2026 GMT Not After : Jul 29 16:57:03 2026 GMT Subject: CN=E6EDA2B3F49356DD47291031B8D24CAB67581294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:42:84:43:21:39:ba:8e:f2:2a:5d:dc:6f:56: d5:42:58:a0:ee:1e:2c:13:d6:2a:0c:66:9c:b8:39: cf:8d:8b:00:57:f3:e8:7b:7a:a0:47:14:1c:0f:3d: ef:ce:39:53:fb:93:85:15:fb:ad:1a:7a:d7:6d:ca: bb:9e:94:95:27:d0:ff:e7:14:e9:18:de:25:fd:af: 59:03:b4:ce:12:ca:40:37:e4:fc:a4:fc:d1:ed:ff: aa:03:58:17:07:76:32:5d:b9:e2:71:a8:7a:e9:ff: 74:28:19:4d:5a:a5:70:90:07:57:9a:66:80:a4:75: 25:6a:1f:76:ad:f8:cc:0d:36:57:63:cc:3d:23:72: 70:b1:49:7c:9c:de:a1:f1:a0:58:72:eb:ca:63:1e: 12:0b:9f:a3:81:9d:2f:75:4a:d7:ec:1a:eb:8a:97: 31:0f:7a:a5:98:4f:06:c5:38:36:3b:64:cf:08:e7: c9:93:33:19:34:69:6b:9b:2a:9a:0d:a1:7c:7e:8a: f7:64:b5:87:88:bc:e1:0f:2a:81:31:12:98:c7:ba: e4:a6:be:a9:ca:a5:0c:54:ce:8d:67:bf:e9:91:57: 0a:93:d0:b9:3d:a3:b6:e5:e3:07:31:c3:79:f7:4b: 2c:a8:10:56:f9:61:5d:4b:2a:00:aa:dd:c9:4a:ff: fe:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:ED:A2:B3:F4:93:56:DD:47:29:10:31:B8:D2:4C:AB:67:58:12:94 X509v3 Authority Key Identifier: keyid:58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d9:17:6c:3e:2d:71:e0:0c:5e:2b:c7:0f:dd:bc:84:20:37: b6:45:30:9f:eb:4c:87:b5:7e:0a:3d:d7:49:0a:32:fe:b2:de: 02:38:36:3a:76:b4:2c:54:4d:34:45:21:a2:8b:7b:07:7d:a5: 7c:60:96:e5:cf:ad:6f:f0:10:5e:70:99:b4:a5:64:01:c9:d6: 44:c4:70:b4:89:c5:3c:75:24:39:2d:11:ae:a7:04:85:e8:c6: 9a:d5:92:02:1e:c4:17:46:cd:44:5d:b2:a2:a4:8c:72:95:f5: c1:b5:16:52:58:54:cc:dd:0d:2b:e7:e8:dc:a0:ea:2b:db:97: 1f:c1:a7:83:9c:b1:f0:fc:6b:e4:8a:29:dc:67:eb:67:0b:72: 30:3a:94:9b:47:c2:6a:24:e8:e9:67:da:6f:04:74:03:3d:57: 48:6f:cc:98:d4:78:d7:b9:9f:0e:85:a7:1b:a3:9d:3d:8b:94: 05:74:85:32:5b:59:a1:0d:93:c1:d9:ae:83:4f:5c:c9:00:28: a5:1b:1d:ca:5d:f6:e0:6c:13:b2:ef:e8:87:6c:83:3e:ca:d9: de:c8:28:dd:6e:c8:a9:53:1f:bc:8b:e8:fb:54:55:ed:a3:32: d5:96:79:e8:4b:d0:c5:dd:27:bb:98:96:60:00:34:a6:d7:61: f4:a9:af:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeSKESubL2C8r6TtoInu2HmWh+BIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVF RjYxMjJCQzAeFw0yNjA3MjgxNDE0MDNaFw0yNjA3MjkxNjU3MDNaMDMxMTAvBgNV BAMTKEU2RURBMkIzRjQ5MzU2REQ0NzI5MTAzMUI4RDI0Q0FCNjc1ODEyOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRQoRDITm6jvIqXdxvVtVCWKDu HiwT1ioMZpy4Oc+NiwBX8+h7eqBHFBwPPe/OOVP7k4UV+60aetdtyruelJUn0P/n FOkY3iX9r1kDtM4SykA35Pyk/NHt/6oDWBcHdjJdueJxqHrp/3QoGU1apXCQB1ea ZoCkdSVqH3at+MwNNldjzD0jcnCxSXyc3qHxoFhy68pjHhILn6OBnS91StfsGuuK lzEPeqWYTwbFODY7ZM8I58mTMxk0aWubKpoNoXx+ivdktYeIvOEPKoExEpjHuuSm vqnKpQxUzo1nv+mRVwqT0Lk9o7bl4wcxw3n3SyyoEFb5YV1LKgCq3clK//6LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5u2is/STVt1HKRAxuNJMq2dYEpQwHwYDVR0j BBgwFoAUWEOVi7JAd5Mg1/DCtnSs9e9hIrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ5NWMxOWMtMzI2Mi00OGM3LWFmMDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJC MjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVFRjYxMjJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODQzOTU4QkIyNDA3NzkzMjBEN0YwQzJCNjc0QUNGNUVGNjEy MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ5NWMxOWMtMzI2Mi00OGM3LWFm MDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFD RjVFRjYxMjJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHZF2w+LXHgDF4rxw/dvIQgN7ZFMJ/rTIe1 fgo910kKMv6y3gI4Njp2tCxUTTRFIaKLewd9pXxgluXPrW/wEF5wmbSlZAHJ1kTE cLSJxTx1JDktEa6nBIXoxprVkgIexBdGzURdsqKkjHKV9cG1FlJYVMzdDSvn6Nyg 6ivblx/Bp4OcsfD8a+SKKdxn62cLcjA6lJtHwmok6Oln2m8EdAM9V0hvzJjUeNe5 nw6FpxujnT2LlAV0hTJbWaENk8HZroNPXMkAKKUbHcpd9uBsE7Lv6Idsgz7K2d7I KN1uyKlTH7yL6PtUVe2jMtWWeehL0MXdJ7uYlmAANKbXYfSpr6M= -----END CERTIFICATE-----Generated at Wed Jul 29 05:25:14 2026 by rpki-client