$ rpki-client -vvf rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft File: 5BD70FF0C393471CFAF795433474B327BD4832F9.mft (raw, json) Hash identifier: jQSlssAi6pyCZ3Ec3BqEDogboGuWi0JkJ5oTLeaVQvQ= Subject key identifier: 42:80:18:60:03:73:8A:F5:59:07:54:6B:11:59:78:10:AF:59:7A:79 Authority key identifier: 5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9 Certificate issuer: /CN=5BD70FF0C393471CFAF795433474B327BD4832F9 Certificate serial: 7BB598CB3C888DEE3CC0DC51230B25E4E63E4E8D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft Manifest number: 77 Signing time: Wed 29 Jul 2026 13:27:00 +0000 Manifest this update: Wed 29 Jul 2026 13:22:00 +0000 Manifest next update: Thu 30 Jul 2026 14:42:00 +0000 Files and hashes: 1: 5BD70FF0C393471CFAF795433474B327BD4832F9.crl (hash: goCelTuEsEioc6Dqy54vKeFUXEEU3/7VYFAo/lujk3Y=) 2: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: bBQLsVkx2CpNTLhQIb39ezRJZR+3VFuLJFWKGpnOARA=) 3: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: tdzqlaQf0fF4d+ZUvSQhNIWl0HYGOdoxh6aHUWDnZjg=) 4: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: kDdkImc9WCIWpXnaeyzXyBkOibkDgoSjiG8qhXynUZA=) 5: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: VRIdIq5putn/ECgQ5btezrubt1dqb54ZcZ8apLF1yIY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 14:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b5:98:cb:3c:88:8d:ee:3c:c0:dc:51:23:0b:25:e4:e6:3e:4e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD70FF0C393471CFAF795433474B327BD4832F9 Validity Not Before: Jul 29 13:22:00 2026 GMT Not After : Jul 30 14:42:00 2026 GMT Subject: CN=4280186003738AF55907546B11597810AF597A79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1d:c7:47:b7:f3:fd:aa:77:39:ad:b6:2a:8a: a8:98:52:7c:0c:c4:f1:67:00:b1:10:e4:34:55:ec: 9e:0c:cd:27:c6:2f:ba:06:f9:ca:01:51:87:72:80: 9f:a1:5b:a5:91:e7:65:78:66:e4:0e:70:a2:41:95: 3e:00:21:5c:0b:bd:44:6b:3e:c9:d9:0f:6f:ec:32: 36:50:79:cf:60:02:79:9d:6c:aa:f8:26:74:18:19: e2:7a:51:69:af:7a:d4:4e:de:2d:d4:46:10:3c:65: b0:98:d7:c5:45:e3:59:40:c9:ac:a0:25:f8:18:c2: a9:2a:6a:87:25:96:07:b2:b2:66:0e:2f:c8:7c:65: 91:26:c4:37:98:8a:0f:d3:22:ce:07:a2:0f:a6:ca: 3d:0e:e6:ae:de:e7:db:c4:be:7c:7d:bb:19:70:c2: fe:62:bb:1a:8b:4d:d5:f6:f2:74:9f:12:ea:5b:a4: c4:c2:66:82:a7:2d:0c:39:f8:19:d8:36:ab:c5:ba: b8:99:e3:46:9c:a7:f6:f2:3b:38:55:1f:a6:b3:ee: 99:86:3d:97:0d:15:af:f4:29:7b:11:9f:da:74:47: d3:81:2c:33:e3:0c:ea:d6:89:2c:ca:d0:cd:c8:11: 0e:66:f8:56:49:b2:72:40:a1:e3:84:8d:40:a4:3c: 17:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:80:18:60:03:73:8A:F5:59:07:54:6B:11:59:78:10:AF:59:7A:79 X509v3 Authority Key Identifier: keyid:5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:74:ff:18:d1:ed:c4:ef:26:9a:ee:b9:62:51:f5:81:36:57: ca:5a:44:73:90:a4:1c:1f:32:60:30:36:c6:f1:fe:ca:ac:91: 42:43:e5:ef:7c:cc:d8:07:11:c9:41:45:94:58:4c:36:96:0e: e5:60:f8:08:63:cd:0f:56:e6:e5:a9:c0:d9:78:f3:e6:a1:f5: 86:f9:cb:89:d5:84:9d:87:53:d4:d0:d8:f3:2b:31:e5:c5:e8: 1d:47:d9:63:ff:5d:e3:6f:64:14:da:f9:46:10:a0:25:93:09: 9c:24:19:df:d9:ae:b2:73:0b:58:62:cf:2e:28:1d:fb:12:3a: fc:c0:9a:c3:da:e4:c0:ba:2d:8e:30:85:b8:61:6a:e6:bd:14: 6e:65:4b:d1:cb:97:cd:df:aa:0d:1a:5a:47:1b:90:fd:37:b5: 6d:b6:5d:ff:58:4f:d8:4a:a2:0d:c4:d8:01:e2:14:ae:17:60: 01:fe:f9:15:44:88:5d:74:95:17:f5:64:ad:c6:07:4c:ab:8f: 89:4d:80:e2:30:80:4d:6c:31:08:70:17:03:d9:d1:ac:20:fd: 68:9f:a4:be:74:06:e9:18:5e:78:28:35:18:70:56:ec:a9:e1: 9e:18:51:0a:64:9b:62:a8:79:2b:c1:2a:70:c5:10:96:fa:18: bd:b8:7d:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe7WYyzyIje48wNxRIwsl5OY+To0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJENzBGRjBDMzkzNDcxQ0ZBRjc5NTQzMzQ3NEIzMjdC RDQ4MzJGOTAeFw0yNjA3MjkxMzIyMDBaFw0yNjA3MzAxNDQyMDBaMDMxMTAvBgNV BAMTKDQyODAxODYwMDM3MzhBRjU1OTA3NTQ2QjExNTk3ODEwQUY1OTdBNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkHcdHt/P9qnc5rbYqiqiYUnwM xPFnALEQ5DRV7J4MzSfGL7oG+coBUYdygJ+hW6WR52V4ZuQOcKJBlT4AIVwLvURr PsnZD2/sMjZQec9gAnmdbKr4JnQYGeJ6UWmvetRO3i3URhA8ZbCY18VF41lAyayg JfgYwqkqaocllgeysmYOL8h8ZZEmxDeYig/TIs4Hog+myj0O5q7e59vEvnx9uxlw wv5iuxqLTdX28nSfEupbpMTCZoKnLQw5+BnYNqvFuriZ40acp/byOzhVH6az7pmG PZcNFa/0KXsRn9p0R9OBLDPjDOrWiSzK0M3IEQ5m+FZJsnJAoeOEjUCkPBdXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQoAYYANzivVZB1RrEVl4EK9ZenkwHwYDVR0j BBgwFoAUW9cP8MOTRxz695VDNHSzJ71IMvkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkyNGZhOWEtZTVmMy00MjY1LTllMWQtODRlNDUzNTk2MWQwLzAvNUJENzBGRjBD MzkzNDcxQ0ZBRjc5NTQzMzQ3NEIzMjdCRDQ4MzJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkQ3MEZGMEMzOTM0NzFDRkFGNzk1NDMzNDc0QjMyN0JENDgz MkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvNUJENzBGRjBDMzkzNDcxQ0ZBRjc5NTQzMzQ3NEIz MjdCRDQ4MzJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHV0/xjR7cTvJpruuWJR9YE2V8paRHOQpBwf MmAwNsbx/sqskUJD5e98zNgHEclBRZRYTDaWDuVg+AhjzQ9W5uWpwNl48+ah9Yb5 y4nVhJ2HU9TQ2PMrMeXF6B1H2WP/XeNvZBTa+UYQoCWTCZwkGd/ZrrJzC1hizy4o HfsSOvzAmsPa5MC6LY4whbhhaua9FG5lS9HLl83fqg0aWkcbkP03tW22Xf9YT9hK og3E2AHiFK4XYAH++RVEiF10lRf1ZK3GB0yrj4lNgOIwgE1sMQhwFwPZ0awg/Wif pL50BukYXngoNRhwVuyp4Z4YUQpkm2KoeSvBKnDFEJb6GL24fak= -----END CERTIFICATE-----Generated at Wed Jul 29 15:00:36 2026 by rpki-client