$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft File: 5A5DD73D891416196AA5239D921D189D149B622B.mft (raw, json) Hash identifier: LX2EHi/syeOqbP605OzxcKZrPhtxqvvxCKk3JJJGPQw= Subject key identifier: BF:B9:B3:9C:42:DB:D0:E6:1D:85:73:72:6A:5F:57:A0:7A:D0:CB:35 Authority key identifier: 5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B Certificate issuer: /CN=5A5DD73D891416196AA5239D921D189D149B622B Certificate serial: 0D595E879994505DFC66CB64962C31E096B9039B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 10:47:31 +0000 Manifest this update: Sat 13 Jun 2026 10:42:31 +0000 Manifest next update: Sun 14 Jun 2026 12:56:31 +0000 Files and hashes: 1: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: LUrz0HzKQn3BDSTwVj0zPYkXFEJEXJ4mzlthepJ39U0=) 2: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: qFviTkAJdjhBsY+4vQ6F1D24Kw3W6hG5KcLt5OTgeis=) 3: 5A5DD73D891416196AA5239D921D189D149B622B.crl (hash: CfkpwgdLLno+ujYTowgjorNJM3AvsXyr7uwToaRPoN4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:59:5e:87:99:94:50:5d:fc:66:cb:64:96:2c:31:e0:96:b9:03:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A5DD73D891416196AA5239D921D189D149B622B Validity Not Before: Jun 13 10:42:31 2026 GMT Not After : Jun 14 12:56:31 2026 GMT Subject: CN=BFB9B39C42DBD0E61D8573726A5F57A07AD0CB35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:1d:f9:b2:54:ff:18:e1:6e:eb:ef:68:50: 88:dc:f5:72:af:7a:13:90:ca:b6:c5:57:3e:72:da: fe:5a:7b:a3:1c:ae:ad:8a:39:f5:be:20:73:dd:44: e2:bd:a8:fa:17:f4:7f:f5:50:13:4b:f0:b6:fe:75: 4b:5e:3c:1f:16:1a:4d:ca:6d:d8:90:fa:38:50:f0: 52:9b:c9:d7:7e:04:36:f8:0a:5b:4c:51:21:2f:13: 37:f6:d3:41:d8:d2:35:29:8b:f7:c6:bd:d1:54:69: 57:2d:ed:33:dd:d7:89:4f:9f:18:39:44:94:90:e3: 47:fe:3b:c2:9c:20:fe:c9:17:90:dd:27:66:f2:1b: b2:6c:35:14:21:e6:26:d6:d9:f4:2b:b2:9e:cd:54: b0:7a:7f:da:28:15:ef:6b:84:9e:2b:78:ce:7b:1b: bb:36:67:56:07:df:f4:5d:62:3b:4a:91:b9:f6:1a: fb:e1:1d:03:00:56:e8:57:96:92:dc:41:94:68:e6: 75:dd:5c:1b:43:43:17:17:ac:f1:ae:1b:22:89:5a: b4:7a:9b:54:85:84:05:0d:bf:0f:23:95:20:9f:ae: 1e:6b:d7:61:52:09:c7:6d:14:04:43:22:70:37:33: 4a:33:27:2f:15:de:d4:60:75:2f:7c:ec:1e:f0:99: 47:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B9:B3:9C:42:DB:D0:E6:1D:85:73:72:6A:5F:57:A0:7A:D0:CB:35 X509v3 Authority Key Identifier: keyid:5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:b2:b0:23:0d:6c:fa:88:b2:91:07:84:7d:a1:54:5f:bb:22: dd:e4:b4:63:96:ce:31:0e:3d:2b:ab:2f:75:cf:43:d9:d2:16: 39:16:a0:a3:80:9f:f1:6f:3d:db:87:22:37:f3:dd:2f:42:37: d5:22:f7:fa:a9:dd:bd:55:07:58:db:76:8e:f1:e9:d8:39:22: 84:30:b3:ca:31:03:42:2f:c8:5e:26:36:dc:23:e5:9d:20:cf: 7a:2a:a2:f9:08:3e:62:6c:1b:8f:df:b0:74:f6:84:37:4c:9b: ed:29:e3:d9:c9:f1:6a:35:b9:1d:c4:75:46:39:6e:50:d4:e1: 2a:de:11:65:64:0e:75:6d:a8:dc:c6:92:e9:44:df:66:d8:19: 27:94:e4:2b:23:1c:fd:e0:04:c4:e2:6b:d2:af:f7:72:b9:b6: 3a:7e:14:da:c3:de:fc:4c:8b:0a:3b:32:7e:e1:7c:44:15:4c: 64:c2:bb:b2:f3:e6:f3:44:45:b7:a4:c5:d9:be:db:9c:81:f4: b1:c5:95:51:fc:63:2a:d1:ed:ec:e1:3c:fe:c1:e3:ca:3b:9f: cb:61:d2:b7:e7:01:1f:f7:f7:50:26:44:92:10:fb:20:e5:3d: ae:5c:52:77:69:d3:01:c2:d3:75:12:67:03:50:71:f7:65:52: ba:8a:68:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDVleh5mUUF38Zstkliwx4Ja5A5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE1REQ3M0Q4OTE0MTYxOTZBQTUyMzlEOTIxRDE4OUQx NDlCNjIyQjAeFw0yNjA2MTMxMDQyMzFaFw0yNjA2MTQxMjU2MzFaMDMxMTAvBgNV BAMTKEJGQjlCMzlDNDJEQkQwRTYxRDg1NzM3MjZBNUY1N0EwN0FEMENCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3h35slT/GOFu6+9oUIjc9XKv ehOQyrbFVz5y2v5ae6Mcrq2KOfW+IHPdROK9qPoX9H/1UBNL8Lb+dUtePB8WGk3K bdiQ+jhQ8FKbydd+BDb4CltMUSEvEzf200HY0jUpi/fGvdFUaVct7TPd14lPnxg5 RJSQ40f+O8KcIP7JF5DdJ2byG7JsNRQh5ibW2fQrsp7NVLB6f9ooFe9rhJ4reM57 G7s2Z1YH3/RdYjtKkbn2GvvhHQMAVuhXlpLcQZRo5nXdXBtDQxcXrPGuGyKJWrR6 m1SFhAUNvw8jlSCfrh5r12FSCcdtFARDInA3M0ozJy8V3tRgdS987B7wmUfFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv7mznELb0OYdhXNyal9XoHrQyzUwHwYDVR0j BBgwFoAUWl3XPYkUFhlqpSOdkh0YnRSbYiswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE2M2I3ZDctZWE4My00YmU5LWIyZmMtYjMwZWIwYjQ0ZDBhLzAvNUE1REQ3M0Q4 OTE0MTYxOTZBQTUyMzlEOTIxRDE4OUQxNDlCNjIyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTVERDczRDg5MTQxNjE5NkFBNTIzOUQ5MjFEMTg5RDE0OUI2 MjJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvNUE1REQ3M0Q4OTE0MTYxOTZBQTUyMzlEOTIxRDE4 OUQxNDlCNjIyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASysCMNbPqIspEHhH2hVF+7It3ktGOWzjEO PSurL3XPQ9nSFjkWoKOAn/FvPduHIjfz3S9CN9Ui9/qp3b1VB1jbdo7x6dg5IoQw s8oxA0IvyF4mNtwj5Z0gz3oqovkIPmJsG4/fsHT2hDdMm+0p49nJ8Wo1uR3EdUY5 blDU4SreEWVkDnVtqNzGkulE32bYGSeU5CsjHP3gBMTia9Kv93K5tjp+FNrD3vxM iwo7Mn7hfEQVTGTCu7Lz5vNERbekxdm+25yB9LHFlVH8YyrR7ezhPP7B48o7n8th 0rfnAR/391AmRJIQ+yDlPa5cUndp0wHC03USZwNQcfdlUrqKaO4= -----END CERTIFICATE-----Generated at Sat Jun 13 23:12:30 2026 by rpki-client