$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft File: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft (raw, json) Hash identifier: sffO8Ntn7GZJblK/HcRWDucQnm8kXR9XlX7LzBDiwgo= Subject key identifier: 92:AB:75:C0:15:58:23:C3:29:82:98:52:BC:93:08:79:0C:DD:5B:06 Authority key identifier: E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A Certificate issuer: /CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Certificate serial: 3051DAD1101FFCC696DD56755EF4A522A20D2A08 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 20:52:17 +0000 Manifest this update: Tue 28 Jul 2026 20:47:17 +0000 Manifest next update: Wed 29 Jul 2026 22:36:17 +0000 Files and hashes: 1: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl (hash: KOiKrrEECOpUAbwPUR9pOqrA94GS9cwCiL1c2BzoKVU=) 2: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: mmr69bHLezkQuiDZandeSB0qYXcAYeWx1GHP/ifPRTA=) 3: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: is5WdfvUY1KRmUVaEDtXvqlI2WCzItjy85jNK7qc29s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:51:da:d1:10:1f:fc:c6:96:dd:56:75:5e:f4:a5:22:a2:0d:2a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Validity Not Before: Jul 28 20:47:17 2026 GMT Not After : Jul 29 22:36:17 2026 GMT Subject: CN=92AB75C0155823C329829852BC9308790CDD5B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:92:59:50:fc:64:d6:99:7e:81:a8:43:51:e3: ff:66:e0:1e:5f:e7:20:df:71:75:29:97:14:88:a5: ea:52:eb:33:a1:48:35:1a:87:c1:99:cc:2e:a5:3c: d8:29:99:4f:ab:9d:ec:54:3b:40:08:31:4d:77:32: cd:15:99:ff:22:c2:c7:6c:3a:94:ab:1d:e7:c8:94: 15:49:05:e1:ea:04:30:64:41:e6:10:e6:f0:60:59: 8b:12:c3:c7:d4:09:66:bd:ae:d1:f8:07:48:54:80: 15:ed:32:94:aa:3c:a8:ff:d3:83:2e:82:f5:73:93: 11:af:f7:1b:73:22:08:0b:86:22:f8:1e:0d:b5:e0: e2:3f:1a:52:b6:b7:82:19:64:70:40:ef:72:4a:5c: 0c:b0:7f:07:a8:85:00:2d:49:e0:14:73:c6:92:f9: 16:f7:1a:63:5d:3e:8e:5e:0f:6d:4c:9a:0d:c4:be: e3:b8:01:51:a0:c9:0b:72:af:2a:50:cb:08:25:d4: d7:90:21:0e:38:d6:74:c9:bb:01:64:05:fd:a3:98: e3:11:a9:81:9d:41:1b:c6:00:10:1d:f0:d6:d6:67: 58:3f:a3:70:d6:b2:df:c1:d8:f8:49:f6:34:b0:5b: ab:6d:63:26:1d:d4:0a:55:91:35:18:a1:b7:b3:93: f4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AB:75:C0:15:58:23:C3:29:82:98:52:BC:93:08:79:0C:DD:5B:06 X509v3 Authority Key Identifier: keyid:E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:24:b3:bf:18:1e:68:b8:b0:c1:29:ea:ca:e9:54:65:95:e2: 34:a8:cb:a0:c3:de:13:05:88:32:47:3e:74:d2:63:0e:ac:db: 4f:a9:ee:e3:62:7a:eb:91:76:82:d1:80:76:87:cd:69:c1:1a: 31:54:c2:3e:06:ff:c6:ec:96:d4:3f:db:ca:81:c8:70:41:1b: 9f:4d:81:16:84:81:99:d7:cd:87:e2:6c:43:94:60:d6:5b:38: 8a:2c:4b:69:47:89:33:9a:d9:59:d5:b4:fb:89:a6:81:f7:01: 95:63:8e:0f:4f:9f:fe:ef:73:e7:81:b4:37:d1:33:c1:c2:dd: b1:dd:12:c7:bc:c5:a5:0f:91:a4:fb:e0:d7:3d:2a:ac:95:06: d9:fd:31:1f:96:7f:0f:12:25:bb:12:62:f0:9e:59:b4:83:14: 36:87:a8:48:83:3e:a7:3e:64:44:64:40:cf:62:2a:8b:d0:c9: dc:66:03:95:07:63:ae:03:9c:6e:89:82:33:8d:c3:0a:83:7d: 74:db:df:77:2f:74:4f:e0:2f:02:e9:44:28:45:66:db:4b:4f: c3:67:aa:fa:c4:50:13:1b:4c:24:d0:71:c5:87:4f:47:6e:33: 83:a1:2d:e4:b9:8e:f1:a5:af:15:b5:d0:ff:51:6b:fb:63:d9: 5a:a3:7e:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFHa0RAf/MaW3VZ1XvSlIqINKggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1RURC QkZCRTk2QTAeFw0yNjA3MjgyMDQ3MTdaFw0yNjA3MjkyMjM2MTdaMDMxMTAvBgNV BAMTKDkyQUI3NUMwMTU1ODIzQzMyOTgyOTg1MkJDOTMwODc5MENERDVCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1kllQ/GTWmX6BqENR4/9m4B5f 5yDfcXUplxSIpepS6zOhSDUah8GZzC6lPNgpmU+rnexUO0AIMU13Ms0Vmf8iwsds OpSrHefIlBVJBeHqBDBkQeYQ5vBgWYsSw8fUCWa9rtH4B0hUgBXtMpSqPKj/04Mu gvVzkxGv9xtzIggLhiL4Hg214OI/GlK2t4IZZHBA73JKXAywfweohQAtSeAUc8aS +Rb3GmNdPo5eD21Mmg3EvuO4AVGgyQtyrypQywgl1NeQIQ441nTJuwFkBf2jmOMR qYGdQRvGABAd8NbWZ1g/o3DWst/B2PhJ9jSwW6ttYyYd1ApVkTUYobezk/SLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkqt1wBVYI8MpgphSvJMIeQzdWwYwHwYDVR0j BBgwFoAU5QQ6BTu6W71l8RfDgKjl7bv76WowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUz QkJBNUJCRDY1RjExN0MzODBBOEU1RURCQkZCRTk2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNTA0M0EwNTNCQkE1QkJENjVGMTE3QzM4MEE4RTVFREJCRkJF OTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1 RURCQkZCRTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMks78YHmi4sMEp6srpVGWV4jSoy6DD3hMF iDJHPnTSYw6s20+p7uNieuuRdoLRgHaHzWnBGjFUwj4G/8bsltQ/28qByHBBG59N gRaEgZnXzYfibEOUYNZbOIosS2lHiTOa2VnVtPuJpoH3AZVjjg9Pn/7vc+eBtDfR M8HC3bHdEse8xaUPkaT74Nc9KqyVBtn9MR+Wfw8SJbsSYvCeWbSDFDaHqEiDPqc+ ZERkQM9iKovQydxmA5UHY64DnG6JgjONwwqDfXTb33cvdE/gLwLpRChFZttLT8Nn qvrEUBMbTCTQccWHT0duM4OhLeS5jvGlrxW10P9Ra/tj2Vqjfsc= -----END CERTIFICATE-----Generated at Wed Jul 29 07:52:16 2026 by rpki-client