$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft File: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft (raw, json) Hash identifier: cXobve+/Qa2BS1CBhNRHxALQ64M1n405dyTxJdXjiBI= Subject key identifier: 67:A9:A5:B9:09:90:60:B9:C7:D2:E5:EA:30:5D:D5:51:59:77:D3:C0 Authority key identifier: 5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 Certificate issuer: /CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Certificate serial: 0ADA50CEC239D6AD2E86E9ABF94253FA031ABA91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 03:31:27 +0000 Manifest this update: Tue 28 Jul 2026 03:26:27 +0000 Manifest next update: Wed 29 Jul 2026 05:56:27 +0000 Files and hashes: 1: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl (hash: imTjG+9U9v6oqe36N2fTx15oiH5Nwg28ujnlxTmoU0o=) 2: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: FXO9CsmctV8fdA5KiII/rw/3Y+5l9AlF4P2ED3TDR8A=) 3: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: YDSkpFGq8xybThgooh1RThJN9W0fBsfNyr37Omd1f4w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 05:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:da:50:ce:c2:39:d6:ad:2e:86:e9:ab:f9:42:53:fa:03:1a:ba:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Validity Not Before: Jul 28 03:26:27 2026 GMT Not After : Jul 29 05:56:27 2026 GMT Subject: CN=67A9A5B9099060B9C7D2E5EA305DD5515977D3C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:25:62:47:a1:78:90:bb:ee:9f:7c:3d:11: 11:de:5d:bf:21:5e:3e:2d:e6:e7:c5:be:ee:e0:25: 4a:a7:0a:86:40:a9:2e:6b:8b:6e:0e:21:c1:d4:2b: a1:80:ef:46:59:1c:f7:6e:46:d4:ba:d8:4b:62:f0: 2b:e8:98:4a:81:18:0d:09:35:b6:e1:92:f5:de:b2: a2:69:99:3e:13:50:0a:e2:09:aa:49:c0:03:d9:22: ab:7a:cb:d5:50:dc:54:14:f6:f7:76:fc:7d:24:5e: 1e:62:39:ff:d8:55:3e:62:06:48:ba:99:55:ca:aa: 00:d6:74:9d:4d:eb:80:85:4c:b0:b9:86:a6:33:95: 11:35:d0:0a:29:5a:57:60:05:d1:a0:3f:d0:0f:0d: 8f:34:86:4e:af:0b:c4:e6:47:31:0a:e1:84:a7:53: de:5a:54:b1:d0:0a:f4:05:a3:a2:ce:43:42:a7:92: 4e:06:4c:91:ab:c2:62:50:86:02:81:f2:5d:5f:6a: 4a:4f:6e:5a:2e:c4:e7:e9:14:1c:34:44:4b:09:b3: 67:46:7f:81:c8:ff:7f:51:4a:06:23:93:58:58:ef: fb:52:ad:96:8c:cb:6b:2b:ab:36:d8:f5:c8:e7:27: d6:f0:a9:44:76:97:d2:cf:2d:cf:f4:bf:1d:62:0c: 05:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A9:A5:B9:09:90:60:B9:C7:D2:E5:EA:30:5D:D5:51:59:77:D3:C0 X509v3 Authority Key Identifier: keyid:5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:53:bd:1f:7f:2f:2d:9c:9e:f5:9f:69:7e:2e:99:8d:25:c8: 7d:82:7b:f8:21:55:b7:de:d8:33:00:19:18:a8:29:14:ac:0d: 52:ad:4a:b6:5f:93:3f:b2:1f:0c:e3:8d:8d:55:b6:5b:c5:39: b1:a2:3b:0a:3d:44:cf:0f:53:b5:ac:0f:ce:42:ac:c3:91:87: 85:6c:73:1a:de:46:d9:41:67:f8:1e:ee:a1:bc:0a:de:34:35: eb:ba:16:0f:7b:5c:37:33:28:9c:f2:43:09:2e:bf:21:9c:dc: 5d:dc:ca:70:4c:fd:e7:c5:d1:07:a5:86:5e:3b:42:19:28:c1: 60:a3:aa:cc:c3:a8:5c:ef:03:29:65:21:bc:f3:05:73:5d:5e: f2:de:8c:22:f8:27:d3:eb:b5:02:bd:bb:1e:a2:88:2f:f8:f7: c6:4e:02:75:1d:ae:b7:5c:dd:19:1a:51:7a:89:bc:c5:fb:05: 52:ae:30:88:03:2a:63:a7:90:cf:8a:0c:22:90:b8:a0:02:8b: 15:3e:b9:04:ef:af:f6:d8:ab:5d:f6:fc:e8:f0:d1:77:d6:af: 84:99:aa:ed:ec:11:d1:06:e2:e9:b3:f1:fd:70:24:5f:19:94: 33:99:e5:12:3b:42:f0:10:b5:ea:63:f2:37:a0:9a:b5:48:bb: 15:c2:cb:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCtpQzsI51q0uhumr+UJT+gMaupEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3NDQ1QzFFMTM3NkU0QTdCNDA0QkM1M0E3MUFDOTI3 RDJDMjIwNDAeFw0yNjA3MjgwMzI2MjdaFw0yNjA3MjkwNTU2MjdaMDMxMTAvBgNV BAMTKDY3QTlBNUI5MDk5MDYwQjlDN0QyRTVFQTMwNURENTUxNTk3N0QzQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/YyViR6F4kLvun3w9ERHeXb8h Xj4t5ufFvu7gJUqnCoZAqS5ri24OIcHUK6GA70ZZHPduRtS62Eti8CvomEqBGA0J NbbhkvXesqJpmT4TUAriCapJwAPZIqt6y9VQ3FQU9vd2/H0kXh5iOf/YVT5iBki6 mVXKqgDWdJ1N64CFTLC5hqYzlRE10AopWldgBdGgP9APDY80hk6vC8TmRzEK4YSn U95aVLHQCvQFo6LOQ0Knkk4GTJGrwmJQhgKB8l1fakpPblouxOfpFBw0REsJs2dG f4HI/39RSgYjk1hY7/tSrZaMy2srqzbY9cjnJ9bwqUR2l9LPLc/0vx1iDAU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ6mluQmQYLnH0uXqMF3VUVl308AwHwYDVR0j BBgwFoAUXHRFweE3bkp7QEvFOnGskn0sIgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM3MmVlM2MtZTE4MC00Mjk2LTlkYWQtOTUwMGVmZDk0ODkwLzAvNUM3NDQ1QzFF MTM3NkU0QTdCNDA0QkM1M0E3MUFDOTI3RDJDMjIwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Qzc0NDVDMUUxMzc2RTRBN0I0MDRCQzUzQTcxQUM5MjdEMkMy MjA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvNUM3NDQ1QzFFMTM3NkU0QTdCNDA0QkM1M0E3MUFD OTI3RDJDMjIwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZTvR9/Ly2cnvWfaX4umY0lyH2Ce/ghVbfe 2DMAGRioKRSsDVKtSrZfkz+yHwzjjY1VtlvFObGiOwo9RM8PU7WsD85CrMORh4Vs cxreRtlBZ/ge7qG8Ct40Neu6Fg97XDczKJzyQwkuvyGc3F3cynBM/efF0Qelhl47 QhkowWCjqszDqFzvAyllIbzzBXNdXvLejCL4J9PrtQK9ux6iiC/498ZOAnUdrrdc 3RkaUXqJvMX7BVKuMIgDKmOnkM+KDCKQuKACixU+uQTvr/bYq132/Ojw0XfWr4SZ qu3sEdEG4umz8f1wJF8ZlDOZ5RI7QvAQtepj8jegmrVIuxXCyzU= -----END CERTIFICATE-----Generated at Tue Jul 28 20:41:44 2026 by rpki-client