$ rpki-client -vvf rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft File: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft (raw, json) Hash identifier: pEckNT5u7YMdkVYSBCdGg3rEOq7+e0Z5bxVan2fm6Hk= Subject key identifier: FF:93:88:2C:B9:24:BD:2B:2A:A0:E2:4D:8C:9B:E1:E9:EF:A8:E2:9F Authority key identifier: F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 Certificate issuer: /CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Certificate serial: 2FB86A42C15A6501FEEF3FDB3B3C76A358713346 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 10:50:12 +0000 Manifest this update: Tue 28 Jul 2026 10:45:12 +0000 Manifest next update: Wed 29 Jul 2026 14:49:12 +0000 Files and hashes: 1: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: 03BuWy0OfURI+FKE0txZsH5LInMm2YyYlx6DInNWH9E=) 2: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl (hash: b/wZO3kz4jZujcFDLns+KRZo/NjI2I4UVQiC1tibANQ=) 3: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: KrFgsVnJ/CPVgce61GzFtNxXXABIAjXPOpkQ6UBGiUQ=) 4: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: ZdektWGBi3rfOIP5V7EV+AEsc9XAfei8AhQcCJZB3h0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b8:6a:42:c1:5a:65:01:fe:ef:3f:db:3b:3c:76:a3:58:71:33:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Validity Not Before: Jul 28 10:45:12 2026 GMT Not After : Jul 29 14:49:12 2026 GMT Subject: CN=FF93882CB924BD2B2AA0E24D8C9BE1E9EFA8E29F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1c:60:79:c5:3f:7d:2d:d7:0a:51:11:29:87: b8:ca:6f:e1:d2:ac:d9:6b:68:90:ec:2a:95:d4:1e: d0:88:90:a4:8a:f8:08:7c:58:71:ce:1a:d4:b0:cb: 15:2c:f3:56:34:8d:25:5c:b2:fa:b2:1d:73:a9:57: 2e:46:30:8e:f5:ac:99:65:2a:a5:b4:4a:47:8e:da: 7b:fe:2c:cb:42:df:71:17:0b:cb:59:65:23:68:aa: 72:d1:51:6b:f0:29:e7:dc:5f:e2:08:12:b5:eb:9a: 60:4d:e7:81:a4:c4:8e:3b:ec:4f:c1:b7:db:0f:fb: 34:6d:15:23:7d:18:bd:6d:0f:4c:4a:7c:ea:99:54: a1:2c:dd:39:c4:cb:61:5a:1c:d0:c5:e9:8c:43:10: 42:23:28:c7:cc:96:e6:97:ac:62:0c:01:db:08:fb: ff:81:24:7e:b8:8f:1e:d9:0f:00:56:b8:ca:7a:4b: 69:94:11:27:90:a1:87:6b:8c:0a:cf:59:79:7a:49: 19:a7:3a:4f:d1:92:92:e5:e0:e2:12:5c:83:33:c8: 7d:a7:e7:7d:6f:ba:8e:92:ee:0f:a7:08:0a:85:63: 28:f7:95:b1:8f:d0:7c:c7:e9:64:42:5a:2c:96:08: 20:96:45:92:11:65:b9:d3:63:ad:86:45:0c:44:66: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:93:88:2C:B9:24:BD:2B:2A:A0:E2:4D:8C:9B:E1:E9:EF:A8:E2:9F X509v3 Authority Key Identifier: keyid:F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9c:c6:75:a0:d5:ab:83:9b:fe:a9:5e:a6:18:34:fe:69:e8: b6:77:f0:2a:b0:c4:98:2f:7a:d3:9c:64:69:39:00:b8:90:11: 83:23:fe:45:8b:8b:a1:54:54:a1:32:b1:b6:73:6d:85:e9:e6: 0c:ed:d3:f9:3f:fd:66:45:c7:d0:ff:d4:d8:74:69:32:41:85: 7c:d5:b7:ed:7d:a2:4e:fd:d3:72:c3:ae:31:a4:b8:0b:04:21: 7b:0e:52:64:51:61:d3:fc:43:2d:d3:d5:fc:76:ba:2c:8f:5a: 2a:76:43:11:66:6a:e9:e1:92:ea:ea:f8:4a:b1:06:e0:0d:24: 7a:3e:e8:1e:e6:a3:22:7d:3c:29:f1:73:5a:04:95:9b:70:c8: 85:3d:fd:91:42:2b:fa:11:68:67:38:7d:44:0d:bc:7e:2a:de: 6e:bc:eb:39:d1:b9:05:44:02:98:a1:fe:cf:be:41:72:c3:ab: 3f:01:83:9b:18:db:e2:9c:35:17:6c:bc:f5:c3:73:79:41:12: 36:af:a0:23:e4:38:b2:6c:6a:f9:02:e2:e6:38:2d:07:db:d1: 6b:59:c4:0c:37:f2:4f:66:6c:b3:e5:7b:3e:77:71:10:1a:6f: bf:3a:4b:64:6d:2c:07:0d:46:8b:de:ef:99:d2:fc:4b:51:2a: 95:96:ea:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL7hqQsFaZQH+7z/bOzx2o1hxM0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3Q0Qx RkUxRUFGNjAeFw0yNjA3MjgxMDQ1MTJaFw0yNjA3MjkxNDQ5MTJaMDMxMTAvBgNV BAMTKEZGOTM4ODJDQjkyNEJEMkIyQUEwRTI0RDhDOUJFMUU5RUZBOEUyOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaHGB5xT99LdcKUREph7jKb+HS rNlraJDsKpXUHtCIkKSK+Ah8WHHOGtSwyxUs81Y0jSVcsvqyHXOpVy5GMI71rJll KqW0SkeO2nv+LMtC33EXC8tZZSNoqnLRUWvwKefcX+IIErXrmmBN54GkxI477E/B t9sP+zRtFSN9GL1tD0xKfOqZVKEs3TnEy2FaHNDF6YxDEEIjKMfMluaXrGIMAdsI +/+BJH64jx7ZDwBWuMp6S2mUESeQoYdrjArPWXl6SRmnOk/RkpLl4OISXIMzyH2n 531vuo6S7g+nCAqFYyj3lbGP0HzH6WRCWiyWCCCWRZIRZbnTY62GRQxEZifJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/5OILLkkvSsqoOJNjJvh6e+o4p8wHwYDVR0j BBgwFoAU9bXUbF3OhEcHwNeJYDl3zR/h6vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY5ZjhhYTgtODk3MS00ZTUxLThiNTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1 RENFODQ0NzA3QzBENzg5NjAzOTc3Q0QxRkUxRUFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNUI1RDQ2QzVEQ0U4NDQ3MDdDMEQ3ODk2MDM5NzdDRDFGRTFF QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3 Q0QxRkUxRUFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+cxnWg1auDm/6pXqYYNP5p6LZ38CqwxJgv etOcZGk5ALiQEYMj/kWLi6FUVKEysbZzbYXp5gzt0/k//WZFx9D/1Nh0aTJBhXzV t+19ok7903LDrjGkuAsEIXsOUmRRYdP8Qy3T1fx2uiyPWip2QxFmaunhkurq+Eqx BuANJHo+6B7moyJ9PCnxc1oElZtwyIU9/ZFCK/oRaGc4fUQNvH4q3m686znRuQVE Apih/s++QXLDqz8Bg5sY2+KcNRdsvPXDc3lBEjavoCPkOLJsavkC4uY4LQfb0WtZ xAw38k9mbLPlez53cRAab786S2RtLAcNRove75nS/EtRKpWW6oI= -----END CERTIFICATE-----Generated at Tue Jul 28 21:42:11 2026 by rpki-client