$ rpki-client -vvf rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft File: 5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft (raw, json) Hash identifier: XK+EqDzfySfVAsFOtStwdDY45UAkJ8jKVl1q6tcgeAc= Subject key identifier: 1A:1A:4C:BC:E2:FD:5F:B9:3A:44:A5:4E:EA:90:F6:42:5E:9A:E6:6A Authority key identifier: 5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24 Certificate issuer: /CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24 Certificate serial: 309FFD1B74D733328955D7383C716A6A9B2E25EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 01:04:13 +0000 Manifest this update: Wed 17 Jun 2026 00:59:13 +0000 Manifest next update: Thu 18 Jun 2026 01:58:13 +0000 Files and hashes: 1: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: hrwaL58bLcWsXLir3kxI1OkAj6GGFQmLA1ZKUXd0Ogs=) 2: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: jrMRupZddQA8qjBzuVH771xwK+1/f2hSGRy4MrlXlSc=) 3: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: swr4aEtGPRWs62gogwkO9Y1o8MbTFhHlDaee8r9gWcE=) 4: 5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl (hash: 96xTvN0UNXEo+NCk02KdZKiyLzkMPN34ZCOTKiKDBeA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:9f:fd:1b:74:d7:33:32:89:55:d7:38:3c:71:6a:6a:9b:2e:25:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24 Validity Not Before: Jun 17 00:59:13 2026 GMT Not After : Jun 18 01:58:13 2026 GMT Subject: CN=1A1A4CBCE2FD5FB93A44A54EEA90F6425E9AE66A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:4b:b0:25:47:8a:07:e2:5d:70:4a:72:da: 39:53:50:25:b8:5f:ef:f7:f6:dd:5f:8e:78:be:f0: dc:72:2b:31:d6:23:a6:a1:4d:13:59:0a:0e:9a:c6: ad:af:23:b3:83:ff:af:2d:2d:78:c8:c5:57:fc:94: 39:e0:45:c0:d6:63:f1:10:32:01:07:5f:90:c3:83: 02:1d:92:d3:94:32:a8:77:f5:d9:77:61:70:bb:8f: 16:2d:af:9c:a2:9b:24:c9:4c:2b:c8:97:22:99:c3: 52:3f:ac:4d:cb:6c:8f:ca:89:da:63:a2:22:5f:bb: 96:5b:49:8b:a7:05:d1:3a:53:2d:00:22:c0:4c:e6: 79:f4:ac:d5:d8:de:fe:29:10:36:df:09:2d:0a:a1: 78:46:45:b1:63:b7:01:25:de:40:3f:5c:0f:31:85: b4:90:65:c7:63:b2:28:85:d8:8e:16:90:a1:5c:f6: 2c:1b:bb:b8:b6:4e:d4:39:de:50:f2:3c:a6:1c:a4: 09:a0:8d:c2:79:3c:cd:1c:69:31:2f:9f:17:57:9b: c2:91:fb:a2:9c:2d:58:bc:31:46:4f:8f:dc:8f:a1: d3:0e:76:dc:7a:ab:a1:19:51:fa:ef:e4:6a:5b:19: 36:c4:15:d6:4d:b6:be:c0:85:f7:fc:6f:24:be:b6: 6f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1A:4C:BC:E2:FD:5F:B9:3A:44:A5:4E:EA:90:F6:42:5E:9A:E6:6A X509v3 Authority Key Identifier: keyid:5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f7:8d:67:b8:dd:9d:c0:45:63:a9:e7:3b:49:a8:b6:b6:db: bc:91:c0:f2:7d:aa:b1:33:a2:7f:d3:f0:50:71:9e:55:d3:95: 2f:16:08:0f:db:8b:e7:87:89:44:6c:55:25:ed:ea:07:6e:75: 8a:fe:96:14:05:e6:f8:25:51:f6:3f:26:a2:03:e1:f2:ba:0d: 3d:1e:48:e3:de:ed:63:80:3d:eb:a7:6e:e2:9e:50:8b:07:55: ca:57:0a:d2:55:82:91:a2:f0:07:3b:3c:41:c8:3a:08:e0:6d: b9:b0:87:51:08:94:c1:cb:6c:32:bb:12:2e:1e:0f:0d:d5:a3: 49:cf:74:02:28:dd:67:25:e1:7e:15:61:c0:9b:82:40:84:96: 82:2e:1a:76:79:bd:fd:dd:8a:ae:1e:64:2f:14:5a:77:f6:71: c2:f8:28:12:9f:de:d2:78:67:28:0f:c9:43:98:14:59:bd:a1: bc:d1:77:b2:02:b3:dc:95:1e:eb:db:2a:15:92:e5:4f:86:0c: 70:4c:3b:d1:e2:1c:c7:3a:53:d3:48:60:11:b6:0d:3e:84:86: e3:98:0d:e4:00:be:16:a2:15:e0:e6:28:42:57:10:ed:a2:35: 6f:99:8e:12:2d:e1:5b:e4:82:32:b9:f3:8a:27:33:35:e4:27: 77:76:c1:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMJ/9G3TXMzKJVdc4PHFqapsuJe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY3MTUyQ0VFMDRGREFGQjRBM0U0QTBGM0ZEMEFERjgy MkM1Q0QyNDAeFw0yNjA2MTcwMDU5MTNaFw0yNjA2MTgwMTU4MTNaMDMxMTAvBgNV BAMTKDFBMUE0Q0JDRTJGRDVGQjkzQTQ0QTU0RUVBOTBGNjQyNUU5QUU2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLUuwJUeKB+JdcEpy2jlTUCW4 X+/39t1fjni+8NxyKzHWI6ahTRNZCg6axq2vI7OD/68tLXjIxVf8lDngRcDWY/EQ MgEHX5DDgwIdktOUMqh39dl3YXC7jxYtr5yimyTJTCvIlyKZw1I/rE3LbI/Kidpj oiJfu5ZbSYunBdE6Uy0AIsBM5nn0rNXY3v4pEDbfCS0KoXhGRbFjtwEl3kA/XA8x hbSQZcdjsiiF2I4WkKFc9iwbu7i2TtQ53lDyPKYcpAmgjcJ5PM0caTEvnxdXm8KR +6KcLVi8MUZPj9yPodMOdtx6q6EZUfrv5GpbGTbEFdZNtr7Ahff8byS+tm/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGhpMvOL9X7k6RKVO6pD2Ql6a5mowHwYDVR0j BBgwFoAUX3FSzuBP2vtKPkoPP9Ct+CLFzSQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgxNTU0NWMtYzk5Ni00NjBmLTkyZGQtNjI5NGFlYzkyYzUyLzAvNUY3MTUyQ0VF MDRGREFGQjRBM0U0QTBGM0ZEMEFERjgyMkM1Q0QyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjcxNTJDRUUwNEZEQUZCNEEzRTRBMEYzRkQwQURGODIyQzVD RDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvNUY3MTUyQ0VFMDRGREFGQjRBM0U0QTBGM0ZEMEFE RjgyMkM1Q0QyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKX3jWe43Z3ARWOp5ztJqLa227yRwPJ9qrEz on/T8FBxnlXTlS8WCA/bi+eHiURsVSXt6gdudYr+lhQF5vglUfY/JqID4fK6DT0e SOPe7WOAPeunbuKeUIsHVcpXCtJVgpGi8Ac7PEHIOgjgbbmwh1EIlMHLbDK7Ei4e Dw3Vo0nPdAIo3Wcl4X4VYcCbgkCEloIuGnZ5vf3diq4eZC8UWnf2ccL4KBKf3tJ4 ZygPyUOYFFm9obzRd7ICs9yVHuvbKhWS5U+GDHBMO9HiHMc6U9NIYBG2DT6EhuOY DeQAvhaiFeDmKEJXEO2iNW+ZjhIt4VvkgjK584onMzXkJ3d2wR0= -----END CERTIFICATE-----Generated at Wed Jun 17 12:50:17 2026 by rpki-client