$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft File: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft (raw, json) Hash identifier: thuIDlDWVY2xpSoYo9I+ecwplMHc8sv4GXsFhhho6gQ= Subject key identifier: 51:4D:D5:77:82:5B:75:A7:7A:F2:27:09:F9:CA:C4:7F:08:C1:30:AD Authority key identifier: 52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF Certificate issuer: /CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Certificate serial: 65D3F8DE8C2042A03CAEB77F2A665F3EFF8AF849 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 17:33:26 +0000 Manifest this update: Tue 28 Jul 2026 17:28:26 +0000 Manifest next update: Wed 29 Jul 2026 19:16:26 +0000 Files and hashes: 1: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl (hash: VfMl7uj7NGQ+WWx+qaXa9eY8FGJJNHQkYnrHhkh2Suw=) 2: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: Xm5n/XLcKtlX7vaWLbK2D/7cXu3TQ6c3pSXsVlfA9/0=) 3: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: s0qL2weEhTe4sBj4h3x5XjkUykXaQaRd3WPD4VdRPq0=) 4: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: NHw4QH7kx6gwhf24chR9MVQWVvSl6RuQvk3rMGt5qyQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d3:f8:de:8c:20:42:a0:3c:ae:b7:7f:2a:66:5f:3e:ff:8a:f8:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Validity Not Before: Jul 28 17:28:26 2026 GMT Not After : Jul 29 19:16:26 2026 GMT Subject: CN=514DD577825B75A77AF22709F9CAC47F08C130AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a2:80:10:31:cc:b6:a4:fb:b0:06:80:3f:03: e3:d9:84:e6:52:73:33:93:95:24:77:43:11:0b:f1: 5c:00:bf:cc:e5:74:0f:a2:56:16:d0:c6:9c:6e:6a: 01:0f:aa:79:c2:a5:01:79:19:f9:d6:aa:cf:73:9d: 9f:48:6b:1e:a8:b5:82:37:13:c5:68:bc:6b:cf:f9: 9b:5b:33:fc:f8:b5:59:d4:76:5f:98:f2:ed:8b:cf: 25:af:eb:79:20:9f:ef:ea:7b:1e:35:f5:c9:27:0c: a1:bb:4f:45:b9:9b:0b:c6:98:49:7c:52:9f:82:01: 07:f8:84:97:fa:c2:53:64:68:84:05:83:cb:59:6a: 69:94:ca:96:42:f3:18:fa:ab:6a:9d:69:c2:4a:03: 13:8f:32:6c:5d:08:35:9d:e9:cc:8d:0b:3c:b5:e6: 08:4e:bd:cb:82:ea:41:a8:80:5d:7a:7d:b0:05:37: b5:bb:70:54:82:7d:95:70:ba:71:78:09:20:02:10: e6:9b:d9:6a:f1:d6:e3:5c:7f:f4:89:20:41:f2:98: 6e:d7:a8:4d:30:9a:07:ee:02:e1:06:6b:09:c7:ed: 97:92:03:41:04:5c:9d:9f:2e:75:24:3d:74:57:93: f4:5d:b9:08:8e:c8:65:25:15:39:40:d2:29:a5:de: 20:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4D:D5:77:82:5B:75:A7:7A:F2:27:09:F9:CA:C4:7F:08:C1:30:AD X509v3 Authority Key Identifier: keyid:52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:9e:35:0f:1c:d4:7d:01:cd:bf:34:e3:55:6e:a3:ed:0a:44: e0:da:fe:02:ca:5c:77:7e:7d:5e:04:1c:cd:86:fc:36:f2:6a: d4:18:f7:79:c7:f8:d0:26:c7:bb:d2:47:eb:99:ea:f3:af:89: 4d:bf:22:0d:81:6f:ff:6b:04:dd:38:05:99:1a:a0:65:e2:15: a0:89:d9:ff:78:69:49:e3:97:48:f4:aa:d3:22:8c:ec:aa:34: 44:90:09:cd:01:e6:e8:6a:82:52:5f:dc:bf:8b:5c:87:66:bc: be:b6:6c:1a:53:69:3c:3b:38:61:da:3c:51:6f:50:4c:b6:ce: 93:a9:c2:b4:ad:6c:b7:40:0c:ca:13:06:dc:1b:f1:e8:8d:c5: 71:04:fe:71:15:19:b7:23:08:ac:77:a7:ab:e9:2e:8b:02:b7: 30:c2:bc:ec:39:fb:ee:5d:79:97:f0:94:2c:01:10:f9:d8:d8: 2e:13:c8:3f:83:60:eb:fc:83:06:8b:2e:5d:6d:91:f8:5f:82: 7a:74:0b:49:51:06:1b:0d:46:9e:ac:ec:25:8b:97:95:79:a7: 91:73:fd:b0:94:a5:17:ed:09:ff:e4:98:28:7b:b8:d5:f3:5d: 09:78:f8:41:71:d3:96:eb:fe:a7:71:bf:fb:3c:dc:e2:92:dd: 47:ab:2f:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZdP43owgQqA8rrd/KmZfPv+K+EkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgx QTE2RjhERjAeFw0yNjA3MjgxNzI4MjZaFw0yNjA3MjkxOTE2MjZaMDMxMTAvBgNV BAMTKDUxNERENTc3ODI1Qjc1QTc3QUYyMjcwOUY5Q0FDNDdGMDhDMTMwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLooAQMcy2pPuwBoA/A+PZhOZS czOTlSR3QxEL8VwAv8zldA+iVhbQxpxuagEPqnnCpQF5GfnWqs9znZ9Iax6otYI3 E8VovGvP+ZtbM/z4tVnUdl+Y8u2LzyWv63kgn+/qex419cknDKG7T0W5mwvGmEl8 Up+CAQf4hJf6wlNkaIQFg8tZammUypZC8xj6q2qdacJKAxOPMmxdCDWd6cyNCzy1 5ghOvcuC6kGogF16fbAFN7W7cFSCfZVwunF4CSACEOab2Wrx1uNcf/SJIEHymG7X qE0wmgfuAuEGawnH7ZeSA0EEXJ2fLnUkPXRXk/RduQiOyGUlFTlA0iml3iD7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUU3Vd4Jbdad68icJ+crEfwjBMK0wHwYDVR0j BBgwFoAUUpf8C1LNT8fwbBZTENETyBoW+N8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2RkYmI3OWMtOWVhMi00N2YwLWI0NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1 MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgxQTE2RjhERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Mjk3RkMwQjUyQ0Q0RkM3RjA2QzE2NTMxMEQxMTNDODFBMTZG OERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEz QzgxQTE2RjhERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSeNQ8c1H0Bzb8041Vuo+0KRODa/gLKXHd+ fV4EHM2G/DbyatQY93nH+NAmx7vSR+uZ6vOviU2/Ig2Bb/9rBN04BZkaoGXiFaCJ 2f94aUnjl0j0qtMijOyqNESQCc0B5uhqglJf3L+LXIdmvL62bBpTaTw7OGHaPFFv UEy2zpOpwrStbLdADMoTBtwb8eiNxXEE/nEVGbcjCKx3p6vpLosCtzDCvOw5++5d eZfwlCwBEPnY2C4TyD+DYOv8gwaLLl1tkfhfgnp0C0lRBhsNRp6s7CWLl5V5p5Fz /bCUpRftCf/kmCh7uNXzXQl4+EFx05br/qdxv/s83OKS3UerL0Q= -----END CERTIFICATE-----Generated at Wed Jul 29 00:21:28 2026 by rpki-client