$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft File: F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft (raw, json) Hash identifier: /0jmGlASJygwIyfn1kHrBhkBdH1IQfCKKHQxuvCGA7Q= Subject key identifier: DC:72:D8:6B:84:0B:1A:11:36:AF:29:AF:E9:F2:FF:0A:08:F9:D3:58 Authority key identifier: F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A Certificate issuer: /CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A Certificate serial: 2A2F688BB046E2489850A39D15BF4D641DEB631A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 03:26:16 +0000 Manifest this update: Tue 28 Jul 2026 03:21:16 +0000 Manifest next update: Wed 29 Jul 2026 04:25:16 +0000 Files and hashes: 1: F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl (hash: j1BoqO0ed/e75YECg9GK4RgZy57WzfM1pPGJHwJYIfc=) 2: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: noFGhrWS2shsN12iREyShnTzBgPrE7wgh7GcY82aKhc=) 3: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: pZiifrcLbDchRtYwQAPaQx4TCr202zft6iysN0v48zg=) 4: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: +u/9D9vfsyaLH2MwRf/oL8GHy2QY5reW5CdS1r9iLUo=) 5: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: cRnHdJ6ERY/gOe2MatEAOxOT41WEyNcMegmve8GczJo=) 6: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: +WK4iRrSPfnkrJEz8Gq8cT5bkygdZQkUoe49fePODB0=) 7: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: QWT8clnM0WSHO8g469pTliT/WCBN4Kmg5lPcdlpi8/s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 04:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:2f:68:8b:b0:46:e2:48:98:50:a3:9d:15:bf:4d:64:1d:eb:63:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A Validity Not Before: Jul 28 03:21:16 2026 GMT Not After : Jul 29 04:25:16 2026 GMT Subject: CN=DC72D86B840B1A1136AF29AFE9F2FF0A08F9D358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1a:3b:74:9a:10:d0:4a:6d:fc:75:ce:ea:ce: f9:09:7b:b7:b1:da:b9:83:74:54:41:c5:78:e4:0c: 6b:7b:3b:89:8b:03:58:18:1e:d5:5a:0b:71:f3:fc: 5d:37:95:a4:52:83:e8:e4:c3:b0:2f:6d:74:66:cd: 7d:9e:d8:26:8f:7b:e8:51:6a:80:43:7b:61:a3:89: f5:a1:5c:e4:e7:7e:95:70:ed:3e:e0:33:ef:e1:09: 98:de:ce:7f:ca:b6:9d:84:3f:52:68:3c:f7:aa:e7: cb:13:cb:81:9a:69:b3:be:c9:37:6b:de:18:ec:da: 0e:83:c3:32:4d:3f:e6:5c:e5:13:a2:8d:14:e3:57: 30:f0:bd:dc:43:d3:f1:ad:02:03:64:f4:f1:ad:03: cf:2d:2a:97:b1:65:48:c6:6c:6e:7b:cd:e9:88:c2: ba:71:16:d0:c6:5d:98:80:af:f3:8e:ca:fa:1a:79: 88:71:5c:3f:51:ac:ec:8d:a7:ca:15:50:25:d4:c3: fb:13:17:2d:b2:3e:8e:b6:07:d8:8b:67:51:fb:e8: 83:a2:54:05:f3:f9:5e:95:4e:0b:16:2f:b3:83:f4: 86:e8:7f:f0:2d:7b:fa:13:42:73:ba:2e:4d:93:39: 67:ad:72:07:35:9f:6b:63:71:39:b0:ea:7a:2d:bb: e5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:72:D8:6B:84:0B:1A:11:36:AF:29:AF:E9:F2:FF:0A:08:F9:D3:58 X509v3 Authority Key Identifier: keyid:F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:50:61:06:6c:c2:0c:d7:fe:40:ce:e8:ec:f5:a9:4d:15:df: 9a:32:53:66:15:58:17:a0:6b:ec:47:dc:ce:bf:ad:d5:a8:2d: 3b:b4:a7:a0:f3:6b:12:15:e0:3c:8d:02:a8:eb:77:fa:b6:a2: 39:ff:7d:7a:5b:66:96:be:db:1b:b2:06:20:cb:ea:d2:a8:86: b1:6e:7f:ca:9b:12:30:2b:96:a5:51:90:84:de:d6:e6:31:89: 17:a5:62:06:68:37:8e:7c:8c:fe:41:76:92:6f:57:92:5d:c9: de:ea:ff:17:7e:4c:d9:74:2a:09:1c:f7:23:10:ab:fa:d4:de: e0:c7:2f:6b:4f:f0:86:be:cb:80:ea:8d:6d:cc:1d:49:ca:82: 9f:ea:bb:10:36:4a:25:67:51:53:7c:c6:09:0e:24:cd:13:74: 8b:77:75:2f:29:7f:70:dd:99:0e:04:40:16:43:f0:71:9a:a3: cb:e2:4e:ed:19:b5:5d:d4:cf:4d:ca:fa:19:fc:d5:df:fd:d1: c4:b7:3d:2e:68:a2:39:3f:ff:70:b3:c8:54:bb:91:34:ef:b2: cb:fe:c1:2d:9b:98:e3:5d:3a:16:f1:df:ba:18:62:4b:04:d3: dd:42:07:58:36:20:99:83:4e:d8:dc:35:a3:c7:80:89:c6:e6: 11:13:7e:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKi9oi7BG4kiYUKOdFb9NZB3rYxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVFMTMzQkNFNTAxNEI3QTc5QUU2RThFNDgwQkMzNUJE M0MzMTg3QTAeFw0yNjA3MjgwMzIxMTZaFw0yNjA3MjkwNDI1MTZaMDMxMTAvBgNV BAMTKERDNzJEODZCODQwQjFBMTEzNkFGMjlBRkU5RjJGRjBBMDhGOUQzNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzGjt0mhDQSm38dc7qzvkJe7ex 2rmDdFRBxXjkDGt7O4mLA1gYHtVaC3Hz/F03laRSg+jkw7AvbXRmzX2e2CaPe+hR aoBDe2GjifWhXOTnfpVw7T7gM+/hCZjezn/Ktp2EP1JoPPeq58sTy4GaabO+yTdr 3hjs2g6DwzJNP+Zc5ROijRTjVzDwvdxD0/GtAgNk9PGtA88tKpexZUjGbG57zemI wrpxFtDGXZiAr/OOyvoaeYhxXD9RrOyNp8oVUCXUw/sTFy2yPo62B9iLZ1H76IOi VAXz+V6VTgsWL7OD9Ibof/Ate/oTQnO6Lk2TOWetcgc1n2tjcTmw6notu+WbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3HLYa4QLGhE2rymv6fL/Cgj501gwHwYDVR0j BBgwFoAU9eEzvOUBS3p5rm6OSAvDW9PDGHowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNlNDUwMzktNmVkMC00ODNkLWExYjktYzRmNDg1NGM1Y2Y1LzAvRjVFMTMzQkNF NTAxNEI3QTc5QUU2RThFNDgwQkMzNUJEM0MzMTg3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNUUxMzNCQ0U1MDE0QjdBNzlBRTZFOEU0ODBCQzM1QkQzQzMx ODdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvRjVFMTMzQkNFNTAxNEI3QTc5QUU2RThFNDgwQkMz NUJEM0MzMTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpQYQZswgzX/kDO6Oz1qU0V35oyU2YVWBeg a+xH3M6/rdWoLTu0p6DzaxIV4DyNAqjrd/q2ojn/fXpbZpa+2xuyBiDL6tKohrFu f8qbEjArlqVRkITe1uYxiRelYgZoN458jP5BdpJvV5Jdyd7q/xd+TNl0Kgkc9yMQ q/rU3uDHL2tP8Ia+y4DqjW3MHUnKgp/quxA2SiVnUVN8xgkOJM0TdIt3dS8pf3Dd mQ4EQBZD8HGao8viTu0ZtV3Uz03K+hn81d/90cS3PS5oojk//3CzyFS7kTTvssv+ wS2bmONdOhbx37oYYksE091CB1g2IJmDTtjcNaPHgInG5hETfrE= -----END CERTIFICATE-----Generated at Tue Jul 28 19:55:53 2026 by rpki-client