$ rpki-client -vvf rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft File: 5FF85953C6850E359467A581C3FE1AC78E529F2F.mft (raw, json) Hash identifier: ouNIvYu4QJItfFS6DJ0i8btNYNs2sWluo/SxRamej4g= Subject key identifier: 67:9D:C0:38:7F:A8:15:CD:2A:2B:E8:EB:23:24:4A:0C:7E:C2:88:72 Authority key identifier: 5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F Certificate issuer: /CN=5FF85953C6850E359467A581C3FE1AC78E529F2F Certificate serial: 0DD547B800955463F73484B64730F77AC3EC986B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 04:07:13 +0000 Manifest this update: Tue 28 Jul 2026 04:02:13 +0000 Manifest next update: Wed 29 Jul 2026 06:15:13 +0000 Files and hashes: 1: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: +qKLLz9ehRuOchJ8m6wI99oYtklf5Gx9ixqGHWMAzMw=) 2: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: AwkHb7HGSUt+TaaLZZEdADtv/v78j6fMphbiNKpRchs=) 3: 3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (hash: t97u2GqJ2jtckgSGR6Sjz6Jn9nKSQHkBxpLPsPLvaYM=) 4: 5FF85953C6850E359467A581C3FE1AC78E529F2F.crl (hash: HLypGn35BcB3UkMrgTRmMnrLB5oAYPqJDg/g/by4FYQ=) 5: 3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (hash: uTaNGo7IDdsOGs73zESne28tA+ZzMyK0wMRINMuXTcQ=) 6: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: MmVOOc/LuqFNSXqQ5IddobFw0Ch137C+avOoyFd6ZzY=) 7: 3131352e3136362e3131312e302f32342d3234203d3e203134363138.roa (hash: kPUK2GFDFYlKn9GXNmNAqFN8ChpgIluMw/CP+FmKw0o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 06:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d5:47:b8:00:95:54:63:f7:34:84:b6:47:30:f7:7a:c3:ec:98:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF85953C6850E359467A581C3FE1AC78E529F2F Validity Not Before: Jul 28 04:02:13 2026 GMT Not After : Jul 29 06:15:13 2026 GMT Subject: CN=679DC0387FA815CD2A2BE8EB23244A0C7EC28872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:2d:3e:31:67:8d:45:26:db:9f:7b:54:41: ae:05:b4:8d:9b:c4:ad:d8:35:87:01:50:99:98:30: 4a:76:e6:2a:cd:b4:b7:2d:9a:91:92:99:7a:bd:3e: 2c:16:28:cb:f7:8b:ad:f1:e9:2e:6f:cb:3d:ee:a5: 9b:38:90:81:6a:09:b4:11:e2:88:23:76:eb:ba:29: 47:fd:57:b7:56:58:5b:5f:f6:65:38:f1:6a:3c:9e: ef:33:93:a4:36:38:50:d4:c2:38:86:4c:73:17:4f: 99:4d:b8:ac:6d:ce:7e:30:db:70:2f:d7:fd:d9:0f: 15:c6:9c:0f:15:23:79:c0:53:02:ed:84:7b:39:ab: cf:a9:3e:09:26:dc:95:f1:00:d2:15:ba:ed:90:11: f6:08:97:19:ec:b0:a5:22:07:7d:44:c5:c4:69:5c: 1f:e6:88:7e:38:a6:7b:80:6e:18:8b:f0:a3:24:46: d0:be:84:ac:f6:e8:b9:ad:e0:83:c8:7a:d1:c5:77: 28:78:84:d8:41:29:bd:8a:3d:f1:d4:ee:a6:b0:76: 5a:39:e1:77:83:b3:dd:67:14:a5:48:e1:a3:37:81: 6b:05:a1:fc:3d:6d:7c:31:32:bc:c3:a0:fd:50:43: 6a:82:4e:f3:cd:26:dc:d2:a2:5a:aa:55:a5:1a:e7: 13:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9D:C0:38:7F:A8:15:CD:2A:2B:E8:EB:23:24:4A:0C:7E:C2:88:72 X509v3 Authority Key Identifier: keyid:5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ec:ef:ac:3f:94:88:f3:51:7b:e5:b6:91:6d:77:cd:e5:bb: 07:c8:fa:86:5a:6f:da:bb:bb:f3:83:88:0d:6d:fc:e0:be:61: 0c:7c:a9:16:bd:88:94:2d:10:e6:00:31:fc:22:c7:7c:2b:94: e6:8d:5f:c9:74:a8:62:4d:ed:f6:03:09:52:f9:c3:49:0b:74: 55:78:71:20:4c:43:77:07:26:e4:09:53:95:13:60:48:47:05: a4:bf:d9:ac:cd:49:bf:76:fe:8f:19:0b:f7:04:64:c8:0a:19: 6d:2a:44:d8:1b:fd:45:0a:7f:8e:ce:64:7f:23:38:a9:ba:fe: 16:15:65:c8:c9:ee:2e:61:be:97:0e:ba:b4:0f:32:93:b3:a0: b7:af:b6:72:e2:c8:fd:a9:82:f8:c3:fc:84:41:20:d9:8b:fb: 3e:25:80:ae:b2:fd:c1:4e:d6:0e:a8:ad:47:2b:2c:a8:c6:34: ad:7c:97:77:99:ff:0d:7c:87:9c:08:e5:3c:c4:10:9e:98:26: 93:80:35:19:13:94:74:fb:73:a2:c4:f3:2a:b4:c3:e1:15:7a: 8a:a7:0e:6f:34:61:db:f4:27:d1:08:2f:ec:49:41:a9:81:c8: 75:1d:55:a4:6c:a3:63:bb:c9:e0:fb:63:69:c5:95:94:51:9a: 8c:69:ee:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDdVHuACVVGP3NIS2RzD3esPsmGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4 RTUyOUYyRjAeFw0yNjA3MjgwNDAyMTNaFw0yNjA3MjkwNjE1MTNaMDMxMTAvBgNV BAMTKDY3OURDMDM4N0ZBODE1Q0QyQTJCRThFQjIzMjQ0QTBDN0VDMjg4NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXi0+MWeNRSbbn3tUQa4FtI2b xK3YNYcBUJmYMEp25irNtLctmpGSmXq9PiwWKMv3i63x6S5vyz3upZs4kIFqCbQR 4ogjduu6KUf9V7dWWFtf9mU48Wo8nu8zk6Q2OFDUwjiGTHMXT5lNuKxtzn4w23Av 1/3ZDxXGnA8VI3nAUwLthHs5q8+pPgkm3JXxANIVuu2QEfYIlxnssKUiB31ExcRp XB/miH44pnuAbhiL8KMkRtC+hKz26Lmt4IPIetHFdyh4hNhBKb2KPfHU7qawdlo5 4XeDs91nFKVI4aM3gWsFofw9bXwxMrzDoP1QQ2qCTvPNJtzSolqqVaUa5xP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ53AOH+oFc0qK+jrIyRKDH7CiHIwHwYDVR0j BBgwFoAUX/hZU8aFDjWUZ6WBw/4ax45Sny8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmRkNDdmNTYtZWM1My00MmViLTliOGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTND Njg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4RTUyOUYyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkY4NTk1M0M2ODUwRTM1OTQ2N0E1ODFDM0ZFMUFDNzhFNTI5 RjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFB Qzc4RTUyOUYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/s76w/lIjzUXvltpFtd83luwfI+oZab9q7 u/ODiA1t/OC+YQx8qRa9iJQtEOYAMfwix3wrlOaNX8l0qGJN7fYDCVL5w0kLdFV4 cSBMQ3cHJuQJU5UTYEhHBaS/2azNSb92/o8ZC/cEZMgKGW0qRNgb/UUKf47OZH8j OKm6/hYVZcjJ7i5hvpcOurQPMpOzoLevtnLiyP2pgvjD/IRBINmL+z4lgK6y/cFO 1g6orUcrLKjGNK18l3eZ/w18h5wI5TzEEJ6YJpOANRkTlHT7c6LE8yq0w+EVeoqn Dm80Ydv0J9EIL+xJQamByHUdVaRso2O7yeD7Y2nFlZRRmoxp7jM= -----END CERTIFICATE-----Generated at Tue Jul 28 22:56:02 2026 by rpki-client