$ rpki-client -vvf rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft File: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft (raw, json) Hash identifier: zSu3bnRqjtJgfEd7axgPYKlHClGtOkNiZcTlwW5le9Y= Subject key identifier: 5E:87:EE:6E:7A:5D:F1:69:F3:29:B4:A7:86:4C:9B:58:77:B2:BF:B1 Authority key identifier: 5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D Certificate issuer: /CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Certificate serial: 21A49B12AB2CC02AB33816A72DFE65D664915096 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 16:37:12 +0000 Manifest this update: Tue 28 Jul 2026 16:32:12 +0000 Manifest next update: Wed 29 Jul 2026 20:17:12 +0000 Files and hashes: 1: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl (hash: 2fm8tJJ5dgcWegSp6q96m6My/pWmqOvGfDOQovJB9Lo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a4:9b:12:ab:2c:c0:2a:b3:38:16:a7:2d:fe:65:d6:64:91:50:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Validity Not Before: Jul 28 16:32:12 2026 GMT Not After : Jul 29 20:17:12 2026 GMT Subject: CN=5E87EE6E7A5DF169F329B4A7864C9B5877B2BFB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a5:e7:7c:bd:b7:2c:a8:46:2e:ed:a0:f3:5e: b4:2c:c3:de:8c:5e:43:56:68:6e:4b:0c:40:b7:81: 26:6c:1f:fa:13:3f:29:a9:65:d2:4c:00:ab:52:5c: 16:cd:5f:83:b9:f9:18:fe:e0:3e:28:cd:f6:ee:86: 5e:0e:5e:b1:80:9f:1c:f7:e2:03:6f:6c:a6:13:00: 31:0e:91:73:38:99:4e:15:de:48:7c:21:7e:f8:57: 18:ff:60:76:fb:ba:44:28:af:db:50:aa:2e:b8:2e: c1:d5:3d:29:94:e3:0c:69:b5:4c:41:1f:ad:53:57: 1d:6d:fc:a0:23:a3:0b:27:d3:4f:ab:48:3b:2c:73: 04:89:08:5f:a4:45:1a:64:ef:49:6c:6b:45:f1:3a: f4:e8:3b:3b:38:21:3b:48:10:2c:d2:fe:4f:36:9c: 3c:e9:d3:17:32:5a:8d:58:65:95:f8:a9:e6:ff:e3: 69:d0:cc:c7:b3:dd:c2:18:3c:9d:63:c4:d7:e9:b9: 93:a8:f3:53:75:47:c3:9f:6d:eb:72:fb:03:f9:13: e5:bc:dd:71:96:7d:5b:76:4b:91:0f:3f:f6:8c:32: 6b:c0:ce:24:89:02:ea:28:a5:29:e9:f3:25:90:e0: cb:68:09:74:5c:d8:28:81:5e:1a:fe:aa:85:d8:35: 4b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:87:EE:6E:7A:5D:F1:69:F3:29:B4:A7:86:4C:9B:58:77:B2:BF:B1 X509v3 Authority Key Identifier: keyid:5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:88:23:1c:80:6b:f6:5e:8b:c5:a4:f1:aa:67:84:33:1d:59: 22:6b:db:c6:ae:14:bb:3c:a4:37:80:88:c7:75:c5:c0:e1:18: c2:d7:10:e7:3f:1c:85:58:f9:77:87:d1:d6:61:72:d1:fe:36: ca:3c:1c:39:69:81:6b:9d:b4:2e:39:cd:7f:a6:0f:ec:64:53: be:34:84:b9:68:89:92:cd:f3:c2:a6:f2:88:a2:7e:08:f4:d4: 3f:3b:1f:25:08:d9:d6:f3:ea:41:91:03:68:97:ce:a8:93:e0: 1d:31:50:56:c0:96:8e:98:94:2f:34:4a:54:ad:53:aa:65:5e: bf:63:b3:3e:18:3f:f8:bc:18:36:35:4a:52:9f:9f:17:a0:43: 84:c3:ce:fe:7c:a5:ab:9c:a5:76:c6:01:e6:fe:87:f5:94:2b: b2:35:3e:af:6d:bf:ca:f5:05:03:dc:e7:50:e7:f7:c1:8f:6e: f6:0a:72:88:e3:69:da:2d:ea:56:58:5e:e6:a3:31:fc:23:e6: 23:09:47:be:c0:ff:ff:7e:06:57:69:c6:aa:5d:cd:e2:e6:13: 9f:17:f1:de:f9:ef:92:de:36:a7:55:09:1b:ed:ac:e3:32:7b: cf:31:46:ed:d6:05:ff:2d:cb:a3:ce:e8:9f:d5:46:f1:e8:56: 3a:80:95:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIaSbEqsswCqzOBanLf5l1mSRUJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1 QTE2ODA0RDAeFw0yNjA3MjgxNjMyMTJaFw0yNjA3MjkyMDE3MTJaMDMxMTAvBgNV BAMTKDVFODdFRTZFN0E1REYxNjlGMzI5QjRBNzg2NEM5QjU4NzdCMkJGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkped8vbcsqEYu7aDzXrQsw96M XkNWaG5LDEC3gSZsH/oTPympZdJMAKtSXBbNX4O5+Rj+4D4ozfbuhl4OXrGAnxz3 4gNvbKYTADEOkXM4mU4V3kh8IX74Vxj/YHb7ukQor9tQqi64LsHVPSmU4wxptUxB H61TVx1t/KAjowsn00+rSDsscwSJCF+kRRpk70lsa0XxOvToOzs4ITtIECzS/k82 nDzp0xcyWo1YZZX4qeb/42nQzMez3cIYPJ1jxNfpuZOo81N1R8Ofbety+wP5E+W8 3XGWfVt2S5EPP/aMMmvAziSJAuoopSnp8yWQ4MtoCXRc2CiBXhr+qoXYNUv7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXofubnpd8WnzKbSnhkybWHeyv7EwHwYDVR0j BBgwFoAUX/ajp8MEnWezbNeWmR5c5FoWgE0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM3ZjE5NWEtMzY5ZS00NGJhLTgwY2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdD MzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1QTE2ODA0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RkY2QTNBN0MzMDQ5RDY3QjM2Q0Q3OTY5OTFFNUNFNDVBMTY4 MDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM3ZjE5NWEtMzY5ZS00NGJhLTgw Y2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVD RTQ1QTE2ODA0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANqIIxyAa/Zei8Wk8apnhDMdWSJr28auFLs8 pDeAiMd1xcDhGMLXEOc/HIVY+XeH0dZhctH+Nso8HDlpgWudtC45zX+mD+xkU740 hLloiZLN88Km8oiifgj01D87HyUI2dbz6kGRA2iXzqiT4B0xUFbAlo6YlC80SlSt U6plXr9jsz4YP/i8GDY1SlKfnxegQ4TDzv58paucpXbGAeb+h/WUK7I1Pq9tv8r1 BQPc51Dn98GPbvYKcojjadot6lZYXuajMfwj5iMJR77A//9+BldpxqpdzeLmE58X 8d7575LeNqdVCRvtrOMye88xRu3WBf8ty6PO6J/VRvHoVjqAlTI= -----END CERTIFICATE-----Generated at Tue Jul 28 22:26:34 2026 by rpki-client