$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft File: 5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft (raw, json) Hash identifier: ThIN/rDHTTbm0cpNfNHzhdCGk8OjXY5uTGiJQ2EKge0= Subject key identifier: 6B:0E:86:B4:27:70:E8:6A:03:9D:C2:F1:9E:F6:47:D4:D2:C7:7F:A7 Authority key identifier: 5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5 Certificate issuer: /CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5 Certificate serial: 1444FA9EBDD61DDE138C95FDAB31CEEA6558D5F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 18:26:22 +0000 Manifest this update: Tue 16 Jun 2026 18:21:22 +0000 Manifest next update: Wed 17 Jun 2026 19:00:22 +0000 Files and hashes: 1: 3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa (hash: hB2D7K4UTkw5fpBq+t9X3VNB/1j6WvNNmkdz6+J5cvo=) 2: 5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl (hash: mX0CJVTFVqi6wLqJCtcWymNspRqzS2hGCWTUytWPe7w=) 3: 3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa (hash: /1UO8tVQ+wLCWDJC+/9ddMEbFB3CgcFjCBFNxuu9120=) 4: 323430363a353463303a383030303a3a2f33332d3333203d3e20313430343739.roa (hash: bIsAPyP9rDpPX3/Ob3Qv6l0T0cqP2nXkNSsYJzMdy0g=) 5: 323430363a353463303a3a2f33332d3333203d3e20313430343739.roa (hash: 2cV6nPzmY4kD2CJExVdWuMSGfjJCPD1xihnYeBD8ieA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:44:fa:9e:bd:d6:1d:de:13:8c:95:fd:ab:31:ce:ea:65:58:d5:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5 Validity Not Before: Jun 16 18:21:22 2026 GMT Not After : Jun 17 19:00:22 2026 GMT Subject: CN=6B0E86B42770E86A039DC2F19EF647D4D2C77FA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:29:0e:a5:15:19:88:cd:c9:f1:85:dd:15: 3d:e4:81:3d:80:92:38:31:d0:c1:66:4a:ee:02:8d: 3e:45:f3:d5:08:5f:c1:d3:bd:08:e1:fc:a8:f3:00: b7:74:30:63:16:3e:c4:5c:39:c4:47:78:39:19:21: c4:f7:78:df:6f:87:03:fc:bc:60:a8:5e:29:96:36: 36:1b:5a:eb:c2:c1:75:19:aa:11:eb:f2:fe:cd:a6: a6:82:f1:bb:c2:1a:a2:a9:93:20:ae:ee:b7:2c:77: e7:1f:bb:50:e2:7e:76:0f:00:be:10:e3:c3:a1:0e: 49:9d:86:a0:b9:cd:bd:b9:c8:b1:a0:3c:ec:cf:3a: e7:2b:9b:51:ca:8b:f8:ae:93:36:91:f2:9e:d6:39: 75:ac:8b:43:75:74:84:65:84:32:4b:27:2b:0f:52: 6a:84:c5:c6:1b:ef:85:ba:25:e8:3c:e7:a8:90:e8: 7d:b4:c2:99:fa:0e:04:58:46:67:12:a5:b6:f1:eb: f5:c6:ac:aa:d3:f5:59:24:ac:4c:a4:24:e6:f4:94: a6:46:f4:31:89:1d:9a:bf:2b:e8:bc:1a:cb:c7:b9: 10:d2:bb:c0:5a:5d:e5:61:4b:41:6f:6a:01:e3:36: 84:de:ac:53:c4:76:f1:a6:d6:f7:ff:2c:16:31:30: 1c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0E:86:B4:27:70:E8:6A:03:9D:C2:F1:9E:F6:47:D4:D2:C7:7F:A7 X509v3 Authority Key Identifier: keyid:5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:19:5e:f0:df:68:1b:38:f2:7b:c6:9a:24:9b:5c:54:9c:5f: 9c:c4:66:68:00:cc:29:a2:6e:31:4a:5e:36:63:93:26:1d:e4: cf:63:f4:7a:4b:f8:85:6c:e1:d1:5c:53:91:5c:f2:ab:e8:dc: 11:83:cf:16:4b:a3:c9:7c:df:73:36:e1:50:a8:72:03:74:2b: 02:1a:d0:25:b8:4e:d7:0b:ce:90:8a:ee:cd:4b:1b:61:71:c5: 4c:c1:cf:4f:5a:3d:7f:d7:2b:f5:a4:f2:e4:76:e0:cb:9d:09: 4f:d1:32:6d:11:aa:1b:f4:e1:3a:dc:8a:c1:69:59:79:0f:06: 96:92:6e:59:48:43:d0:e0:32:92:5e:a0:20:a9:15:93:87:25: 6f:6c:5e:07:c9:3f:5f:e2:4b:8c:cc:1a:38:f9:73:60:01:cd: 4b:54:1e:91:29:10:5a:6d:6b:93:a2:c5:5d:cd:ad:c0:22:56: 53:76:9b:88:e1:4b:42:5e:05:1f:57:c7:99:ce:37:26:30:63: 14:24:3f:d4:4c:88:79:29:ba:87:b1:3f:51:3f:2c:ed:7f:1d: 14:a6:1e:4d:3a:a1:2b:a1:97:11:95:58:c1:1b:e6:65:a7:e1: 41:43:9b:66:cf:b7:52:38:9b:1f:09:80:76:00:b8:4d:18:85: 7a:94:9e:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFET6nr3WHd4TjJX9qzHO6mVY1fkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCRURFOTgzQTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2QTdD NjA2M0ZCNTAeFw0yNjA2MTYxODIxMjJaFw0yNjA2MTcxOTAwMjJaMDMxMTAvBgNV BAMTKDZCMEU4NkI0Mjc3MEU4NkEwMzlEQzJGMTlFRjY0N0Q0RDJDNzdGQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xikOpRUZiM3J8YXdFT3kgT2A kjgx0MFmSu4CjT5F89UIX8HTvQjh/KjzALd0MGMWPsRcOcRHeDkZIcT3eN9vhwP8 vGCoXimWNjYbWuvCwXUZqhHr8v7NpqaC8bvCGqKpkyCu7rcsd+cfu1DifnYPAL4Q 48OhDkmdhqC5zb25yLGgPOzPOucrm1HKi/iukzaR8p7WOXWsi0N1dIRlhDJLJysP UmqExcYb74W6Jeg856iQ6H20wpn6DgRYRmcSpbbx6/XGrKrT9VkkrEykJOb0lKZG 9DGJHZq/K+i8GsvHuRDSu8BaXeVhS0FvagHjNoTerFPEdvGm1vf/LBYxMBwbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaw6GtCdw6GoDncLxnvZH1NLHf6cwHwYDVR0j BBgwFoAUX77emDpjIrmZpGq2qsz2p8YGP7UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGM3NjVkNTEtYjBiMS00MzVkLWE2NmItNjA0YzZlNWQyOWVmLzAvNUZCRURFOTgz QTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2QTdDNjA2M0ZCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkJFREU5ODNBNjMyMkI5OTlBNDZBQjZBQUNDRjZBN0M2MDYz RkI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGM3NjVkNTEtYjBiMS00MzVkLWE2 NmItNjA0YzZlNWQyOWVmLzAvNUZCRURFOTgzQTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2 QTdDNjA2M0ZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8ZXvDfaBs48nvGmiSbXFScX5zEZmgAzCmi bjFKXjZjkyYd5M9j9HpL+IVs4dFcU5Fc8qvo3BGDzxZLo8l833M24VCocgN0KwIa 0CW4TtcLzpCK7s1LG2FxxUzBz09aPX/XK/Wk8uR24MudCU/RMm0Rqhv04TrcisFp WXkPBpaSbllIQ9DgMpJeoCCpFZOHJW9sXgfJP1/iS4zMGjj5c2ABzUtUHpEpEFpt a5OixV3NrcAiVlN2m4jhS0JeBR9Xx5nONyYwYxQkP9RMiHkpuoexP1E/LO1/HRSm Hk06oSuhlxGVWMEb5mWn4UFDm2bPt1I4mx8JgHYAuE0YhXqUnhA= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:13 2026 by rpki-client