$ rpki-client -vvf rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft File: 5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft (raw, json) Hash identifier: EIW37ibPqI1Ibr29tyrerXUy61jKrQePC1UjTnVU0Lg= Subject key identifier: 19:36:7C:7C:71:A5:43:97:EF:CD:FC:6E:F6:AA:54:E0:C8:A1:4F:F1 Authority key identifier: 5E:31:28:90:2F:CA:3B:CE:9C:9F:EB:FB:26:4D:55:0A:D6:23:05:72 Certificate issuer: /CN=5E3128902FCA3BCE9C9FEBFB264D550AD6230572 Certificate serial: 3FA58841F9285B121A55255B24968D986D6A6EEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 03:06:34 +0000 Manifest this update: Wed 17 Jun 2026 03:01:34 +0000 Manifest next update: Thu 18 Jun 2026 04:55:34 +0000 Files and hashes: 1: 5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl (hash: +ChPPh2UbiduuTF+rkEBNexuj3qJ+1ZijCvPoCBh5JQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a5:88:41:f9:28:5b:12:1a:55:25:5b:24:96:8d:98:6d:6a:6e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E3128902FCA3BCE9C9FEBFB264D550AD6230572 Validity Not Before: Jun 17 03:01:34 2026 GMT Not After : Jun 18 04:55:34 2026 GMT Subject: CN=19367C7C71A54397EFCDFC6EF6AA54E0C8A14FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:79:18:bc:e4:8d:7f:24:16:d4:d8:27:6f:76: 2c:b2:2d:55:c9:5e:7b:65:77:83:6d:45:87:b6:ba: 0b:0b:5a:2f:a5:1d:79:68:90:1f:73:e1:d0:5d:bf: d7:58:82:5b:72:0c:26:da:0e:8c:4f:f8:0f:c0:c4: b0:b4:61:bd:b2:25:3a:24:ba:4e:be:a7:41:a8:a9: c1:39:6b:f2:ee:6c:43:0d:08:bc:28:ec:1e:0b:d2: 9a:35:e9:b8:9e:87:91:81:23:43:44:ae:6d:0b:64: f3:61:ac:ca:17:64:89:d2:c3:8d:90:03:0e:b3:38: 45:82:18:dd:c3:01:32:54:d1:35:da:9d:57:e0:80: c5:26:59:ba:49:16:0e:af:86:36:b4:85:59:49:ca: 9d:e5:5b:3f:cf:29:57:fa:41:f3:29:de:27:cc:01: 29:07:03:71:19:9c:d4:05:dd:e8:4b:e3:e9:16:f9: ab:7d:fc:14:7b:2d:77:17:e7:1f:42:e0:b3:b5:70: a3:88:8e:91:af:c9:4a:45:d1:2d:93:e5:d0:b2:66: 3c:06:e4:96:59:df:92:9c:f8:db:1e:43:e0:5f:d2: 03:91:34:af:31:0a:44:cf:c5:08:4e:fe:dc:b7:9b: a0:55:1f:bc:4a:9a:69:54:70:75:ed:86:67:8e:0e: 66:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:36:7C:7C:71:A5:43:97:EF:CD:FC:6E:F6:AA:54:E0:C8:A1:4F:F1 X509v3 Authority Key Identifier: keyid:5E:31:28:90:2F:CA:3B:CE:9C:9F:EB:FB:26:4D:55:0A:D6:23:05:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:f0:ed:ec:f9:e8:4b:c8:33:13:91:e1:d0:a6:4c:4f:82:73: c4:a7:09:ff:12:cd:aa:46:82:56:07:2c:d3:3e:c3:8b:37:84: b6:d7:54:3f:e7:2a:37:f1:6b:de:f4:e5:3c:c1:d1:93:a5:b4: d8:c4:5f:8e:0a:e2:c5:2d:13:df:e2:23:a7:2e:f7:72:00:4e: da:d8:cb:e9:58:71:ed:b8:0c:d4:bd:ee:e3:76:c1:98:35:ca: 01:62:b2:80:58:34:86:47:5a:de:0c:9c:f6:65:eb:2f:60:3b: d8:99:ab:00:2f:dc:57:c2:f9:9a:4a:9d:06:9a:2e:ef:ff:a8: a1:2e:d0:4b:8e:ae:fd:24:f6:ce:8a:b7:36:d2:5c:47:67:56: e8:d2:66:b8:22:3e:1e:9c:de:d5:35:d0:09:d7:a1:17:74:22: 16:92:64:77:54:e8:51:ec:c0:3e:93:cb:23:26:66:bf:64:bf: b8:c0:67:a2:d5:41:87:66:c6:76:74:55:4b:f5:cb:4b:1d:ea: bd:fe:94:e6:e7:c8:b1:3e:a2:60:4b:51:56:d7:aa:6b:d3:ca: fc:b9:c1:c8:0b:c1:44:a5:3e:b5:4e:7c:41:6b:52:97:7a:13: 53:2e:26:38:a2:ca:9c:78:44:c7:4e:30:5a:ef:99:e5:a1:36: 89:d8:52:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP6WIQfkoWxIaVSVbJJaNmG1qbuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMTI4OTAyRkNBM0JDRTlDOUZFQkZCMjY0RDU1MEFE NjIzMDU3MjAeFw0yNjA2MTcwMzAxMzRaFw0yNjA2MTgwNDU1MzRaMDMxMTAvBgNV BAMTKDE5MzY3QzdDNzFBNTQzOTdFRkNERkM2RUY2QUE1NEUwQzhBMTRGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXeRi85I1/JBbU2CdvdiyyLVXJ Xntld4NtRYe2ugsLWi+lHXlokB9z4dBdv9dYgltyDCbaDoxP+A/AxLC0Yb2yJTok uk6+p0GoqcE5a/LubEMNCLwo7B4L0po16bieh5GBI0NErm0LZPNhrMoXZInSw42Q Aw6zOEWCGN3DATJU0TXanVfggMUmWbpJFg6vhja0hVlJyp3lWz/PKVf6QfMp3ifM ASkHA3EZnNQF3ehL4+kW+at9/BR7LXcX5x9C4LO1cKOIjpGvyUpF0S2T5dCyZjwG 5JZZ35Kc+NseQ+Bf0gORNK8xCkTPxQhO/ty3m6BVH7xKmmlUcHXthmeODmalAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGTZ8fHGlQ5fvzfxu9qpU4MihT/EwHwYDVR0j BBgwFoAUXjEokC/KO86cn+v7Jk1VCtYjBXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGZiNWZmMzctMzk0YS00ZWJhLWE0NzAtMTBhZjM3Y2Y3NWRjLzAvNUUzMTI4OTAy RkNBM0JDRTlDOUZFQkZCMjY0RDU1MEFENjIzMDU3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RTMxMjg5MDJGQ0EzQkNFOUM5RkVCRkIyNjRENTUwQUQ2MjMw NTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvNUUzMTI4OTAyRkNBM0JDRTlDOUZFQkZCMjY0RDU1 MEFENjIzMDU3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANzw7ez56EvIMxOR4dCmTE+Cc8SnCf8SzapG glYHLNM+w4s3hLbXVD/nKjfxa9705TzB0ZOltNjEX44K4sUtE9/iI6cu93IATtrY y+lYce24DNS97uN2wZg1ygFisoBYNIZHWt4MnPZl6y9gO9iZqwAv3FfC+ZpKnQaa Lu//qKEu0EuOrv0k9s6KtzbSXEdnVujSZrgiPh6c3tU10AnXoRd0IhaSZHdU6FHs wD6TyyMmZr9kv7jAZ6LVQYdmxnZ0VUv1y0sd6r3+lObnyLE+omBLUVbXqmvTyvy5 wcgLwUSlPrVOfEFrUpd6E1MuJjiiypx4RMdOMFrvmeWhNonYUtc= -----END CERTIFICATE-----Generated at Wed Jun 17 10:31:34 2026 by rpki-client