$ rpki-client -vvf rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft File: 5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft (raw, json) Hash identifier: yWEEjqQz1RNiDW/umVWwqH+tOZSDJSam/Kb9C33j0S8= Subject key identifier: D2:B8:4E:AD:70:BC:E5:A2:66:A1:3E:B8:8B:1C:C3:82:27:FF:F5:76 Authority key identifier: 5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 Certificate issuer: /CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Certificate serial: 3D8E30B5F76DEDF053E70654B8B34F188A5A1769 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 03:37:16 +0000 Manifest this update: Sun 14 Jun 2026 03:32:16 +0000 Manifest next update: Mon 15 Jun 2026 07:01:16 +0000 Files and hashes: 1: 3135372e32302e34352e302f32342d3234203d3e20313532333932.roa (hash: PIubzi7VZ2N4uYX3mam6XOmZc4gw31pwt2ndjjqEeIM=) 2: 5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl (hash: DlIqnSEWjetyTaeHSuO5jmck1kgvzQtKwxjzqJ8TJeg=) 3: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: P5BEjOqlnRhd5dHiMK0aXJooM/BcbKofscPw2JJ5bRQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 15:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:8e:30:b5:f7:6d:ed:f0:53:e7:06:54:b8:b3:4f:18:8a:5a:17:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Validity Not Before: Jun 14 03:32:16 2026 GMT Not After : Jun 15 07:01:16 2026 GMT Subject: CN=D2B84EAD70BCE5A266A13EB88B1CC38227FFF576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:49:58:a2:d1:4c:ac:18:b9:d9:1e:89:19: 22:a6:a4:5d:32:55:ea:18:00:f6:7d:42:94:e9:8e: 22:90:f3:bb:f6:61:00:1a:00:e9:d9:94:02:c3:1c: 44:3a:71:d3:36:67:f8:2b:83:f3:46:27:8b:ef:d1: c0:03:7b:b8:b7:7c:61:2d:19:b0:ed:1f:ac:68:0a: 31:e1:22:6d:5b:9c:2c:9e:da:c3:12:79:8f:a7:8e: 4f:ec:50:60:dd:94:76:c1:28:df:e7:f3:a8:d3:fa: 39:3f:ff:67:5e:db:5d:e7:54:4b:65:89:45:39:90: b0:8b:35:cf:78:43:7e:30:fd:25:11:ae:23:e6:56: 69:9a:0b:b5:28:a0:24:23:ab:f6:d9:4d:64:50:17: 9b:42:d2:62:bd:57:5d:b7:d9:b8:53:ea:bb:1a:9e: c8:b8:93:56:f4:f6:e3:eb:6c:8b:bc:60:31:96:d2: c8:2a:f1:f3:96:2f:1c:2f:55:ee:f4:72:ff:ff:e3: 65:ac:1f:bb:a5:30:42:58:9e:0d:ef:39:8c:39:cb: 74:35:5d:29:1e:18:ec:52:31:de:95:2d:df:f9:86: 53:95:a7:11:81:2f:25:28:ac:df:d8:8f:90:c2:a4: 02:62:f7:48:d0:da:ff:5d:df:ca:00:62:b2:41:23: 8a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B8:4E:AD:70:BC:E5:A2:66:A1:3E:B8:8B:1C:C3:82:27:FF:F5:76 X509v3 Authority Key Identifier: keyid:5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:91:85:8c:99:56:33:e0:f0:f7:31:c9:10:d3:be:af:b7:c5: f8:67:4f:c0:a7:50:1d:05:c6:9c:b5:61:bc:22:74:60:d9:35: f0:bf:37:c6:79:c1:3b:43:25:7a:02:b1:63:b7:99:3a:7d:ca: 2b:c9:80:34:1c:bc:3c:e4:4d:60:b1:c7:10:f8:03:b7:bc:96: b6:b7:e9:17:25:42:34:9f:14:d0:52:ee:c2:f9:a9:00:64:3d: 93:6f:18:f2:b9:4a:c6:07:1c:00:90:17:60:a6:a5:ec:f3:d3: d9:4e:64:34:5e:ee:b7:6d:df:a0:b3:b2:d1:10:45:fa:94:c8: 39:87:49:2c:06:54:56:57:19:85:2e:94:b0:77:26:98:b6:93: 2c:ef:72:29:2a:4d:9f:7c:53:3b:c1:a3:31:c5:3b:38:f4:be: 6d:1c:93:0e:52:d7:d5:82:8e:fb:1f:64:a1:26:58:d6:f6:46: bc:13:13:98:a8:12:4c:ec:3f:8f:cd:09:75:5f:59:f8:a6:bc: 78:99:00:56:87:43:3d:06:b2:d6:93:a6:6c:f9:85:89:35:a3: 22:32:b5:6f:77:00:fe:0c:79:1e:7e:5c:e5:1e:b6:46:dc:c5: 64:23:53:a0:84:bc:66:53:22:d8:19:28:df:15:bc:28:52:0d: 0a:13:49:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPY4wtfdt7fBT5wZUuLNPGIpaF2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNG RUFBQjkwOTAeFw0yNjA2MTQwMzMyMTZaFw0yNjA2MTUwNzAxMTZaMDMxMTAvBgNV BAMTKEQyQjg0RUFENzBCQ0U1QTI2NkExM0VCODhCMUNDMzgyMjdGRkY1NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8PUlYotFMrBi52R6JGSKmpF0y VeoYAPZ9QpTpjiKQ87v2YQAaAOnZlALDHEQ6cdM2Z/grg/NGJ4vv0cADe7i3fGEt GbDtH6xoCjHhIm1bnCye2sMSeY+njk/sUGDdlHbBKN/n86jT+jk//2de213nVEtl iUU5kLCLNc94Q34w/SURriPmVmmaC7UooCQjq/bZTWRQF5tC0mK9V1232bhT6rsa nsi4k1b09uPrbIu8YDGW0sgq8fOWLxwvVe70cv//42WsH7ulMEJYng3vOYw5y3Q1 XSkeGOxSMd6VLd/5hlOVpxGBLyUorN/Yj5DCpAJi90jQ2v9d38oAYrJBI4rFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0rhOrXC85aJmoT64ixzDgif/9XYwHwYDVR0j BBgwFoAUWhwazsC2dAF/+4nyGGW6Y/6quQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU4OGRmZjctNmE5Mi00MjkzLTg4MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VD MEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNGRUFBQjkwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81QTFDMUFDRUMwQjY3NDAxN0ZGQjg5RjIxODY1QkE2M0ZFQUFC OTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJB NjNGRUFBQjkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiRhYyZVjPg8PcxyRDTvq+3xfhnT8CnUB0F xpy1YbwidGDZNfC/N8Z5wTtDJXoCsWO3mTp9yivJgDQcvDzkTWCxxxD4A7e8lra3 6RclQjSfFNBS7sL5qQBkPZNvGPK5SsYHHACQF2Cmpezz09lOZDRe7rdt36CzstEQ RfqUyDmHSSwGVFZXGYUulLB3Jpi2kyzvcikqTZ98UzvBozHFOzj0vm0ckw5S19WC jvsfZKEmWNb2RrwTE5ioEkzsP4/NCXVfWfimvHiZAFaHQz0GstaTpmz5hYk1oyIy tW93AP4MeR5+XOUetkbcxWQjU6CEvGZTItgZKN8VvChSDQoTSYw= -----END CERTIFICATE-----Generated at Sun Jun 14 09:21:59 2026 by rpki-client