$ rpki-client -vvf rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft File: 5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft (raw, json) Hash identifier: uko3al+EVHxu1WIaUGXP3HSCFfpiCE0Iz6mTeYsLWB4= Subject key identifier: 5B:54:01:2B:A2:04:43:D8:ED:C0:5B:D6:0E:1E:8E:C2:EE:68:4C:14 Authority key identifier: 5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1 Certificate issuer: /CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1 Certificate serial: 40F1278FAE2DB00124D44BDAC5160AE99DDD305E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft Manifest number: 3B Signing time: Mon 15 Jun 2026 08:06:07 +0000 Manifest this update: Mon 15 Jun 2026 08:01:07 +0000 Manifest next update: Tue 16 Jun 2026 12:04:07 +0000 Files and hashes: 1: 3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa (hash: ht3wys3Y4NKbvssKz7Sxlx9g755vgJKTzTjwYqhy56E=) 2: 5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl (hash: IdYZm3pOchx985of1obisDw1URmOJu+CQx9N8W9cmaQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f1:27:8f:ae:2d:b0:01:24:d4:4b:da:c5:16:0a:e9:9d:dd:30:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1 Validity Not Before: Jun 15 08:01:07 2026 GMT Not After : Jun 16 12:04:07 2026 GMT Subject: CN=5B54012BA20443D8EDC05BD60E1E8EC2EE684C14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:04:2e:d4:27:2b:d1:7e:df:7b:c6:63:ba:f9: e5:5b:a2:9d:ab:bb:dd:90:2c:36:c2:55:17:d1:f1: ce:5f:d9:86:d3:28:ac:94:0a:f6:4e:61:cd:77:3b: 8c:d0:93:7e:9e:84:d6:4a:9c:b9:d5:5c:a1:c1:07: 45:50:24:49:72:26:12:ed:1e:d7:85:07:94:0d:d4: 1b:be:32:c7:e2:d5:60:29:d9:dd:b6:a9:98:d0:c9: a2:d7:e9:08:45:af:61:84:ad:c4:73:14:cf:40:63: 00:3f:27:65:15:50:30:04:cb:44:c5:9a:cf:0f:64: 71:f7:9c:5b:15:22:f9:ed:38:7e:f2:2b:f0:bb:2e: 49:24:85:92:52:b7:95:e9:fe:e0:78:08:63:81:7e: bf:57:29:79:62:5e:51:9c:ad:d4:64:38:89:4c:be: 9a:7c:77:84:5d:db:79:b1:38:f1:27:91:56:32:9e: 1d:b5:de:5c:f1:8e:5f:d1:73:b2:ab:dc:5b:0c:06: 67:e0:98:c0:dd:6a:f8:78:32:44:17:1d:32:06:13: b2:a2:f8:46:a6:aa:97:12:f0:9c:6d:3c:b5:07:e0: 92:a2:7e:61:83:b4:6c:c2:aa:e5:c2:62:ca:e7:23: c3:77:2b:69:07:14:d6:40:1b:23:81:96:8d:8a:e5: 1c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:54:01:2B:A2:04:43:D8:ED:C0:5B:D6:0E:1E:8E:C2:EE:68:4C:14 X509v3 Authority Key Identifier: keyid:5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:9e:ee:4c:0d:05:1b:16:77:47:2d:85:db:40:44:a2:73:17: e6:ec:b9:c7:a4:4f:93:af:db:03:5c:40:1e:10:fe:72:02:4c: 6f:6a:e0:0c:c8:72:5e:10:fa:f1:39:46:a1:90:b8:37:ea:b4: aa:89:23:03:79:a7:af:cd:96:23:2a:72:a7:3b:95:b9:7e:f7: 5b:70:e4:f2:9c:82:af:a6:10:59:43:6d:b6:b1:72:9a:f3:b5: d2:df:7a:c5:3f:62:0f:9b:e3:2f:c4:86:65:8c:e5:a9:85:8f: ab:e7:8b:42:0d:e7:da:35:2b:dd:aa:90:4d:11:87:b1:84:0d: 9a:aa:65:63:cf:72:95:39:ac:de:87:b6:11:e8:d9:a5:2e:38: aa:dd:43:57:08:4a:32:a0:df:64:0c:63:58:c4:9d:a4:f6:6c: 72:ae:e1:76:4f:92:ed:f3:57:53:7b:8b:5c:eb:23:b4:2a:cc: 6d:ae:48:42:24:8d:37:9d:7d:e4:c0:b7:92:dc:82:0a:e8:02: eb:8e:9a:19:3f:41:e0:d9:36:fd:b9:d4:d3:d1:96:ef:98:de: cc:54:a3:30:51:3f:b1:83:57:17:87:c5:8b:ab:42:94:25:9b: 1e:1b:d8:50:2a:67:39:c2:bb:0a:59:1a:0b:44:79:a4:27:52: 54:c7:94:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQPEnj64tsAEk1EvaxRYK6Z3dMF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJCMTJDMzFEMzZFNTVDRkQ2QUY5NDRDQTRFNzY3RTBC OURCOUJGMTAeFw0yNjA2MTUwODAxMDdaFw0yNjA2MTYxMjA0MDdaMDMxMTAvBgNV BAMTKDVCNTQwMTJCQTIwNDQzRDhFREMwNUJENjBFMUU4RUMyRUU2ODRDMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBC7UJyvRft97xmO6+eVbop2r u92QLDbCVRfR8c5f2YbTKKyUCvZOYc13O4zQk36ehNZKnLnVXKHBB0VQJElyJhLt HteFB5QN1Bu+Msfi1WAp2d22qZjQyaLX6QhFr2GErcRzFM9AYwA/J2UVUDAEy0TF ms8PZHH3nFsVIvntOH7yK/C7LkkkhZJSt5Xp/uB4CGOBfr9XKXliXlGcrdRkOIlM vpp8d4Rd23mxOPEnkVYynh213lzxjl/Rc7Kr3FsMBmfgmMDdavh4MkQXHTIGE7Ki +EamqpcS8JxtPLUH4JKifmGDtGzCquXCYsrnI8N3K2kHFNZAGyOBlo2K5RxNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW1QBK6IEQ9jtwFvWDh6Owu5oTBQwHwYDVR0j BBgwFoAUW7EsMdNuVc/Wr5RMpOdn4Lnbm/EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTliOTNlMWMtNWYyYS00M2E5LTk5ZjEtZmRkMDQwMmY5NDZlLzAvNUJCMTJDMzFE MzZFNTVDRkQ2QUY5NDRDQTRFNzY3RTBCOURCOUJGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkIxMkMzMUQzNkU1NUNGRDZBRjk0NENBNEU3NjdFMEI5REI5 QkYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTliOTNlMWMtNWYyYS00M2E5LTk5 ZjEtZmRkMDQwMmY5NDZlLzAvNUJCMTJDMzFEMzZFNTVDRkQ2QUY5NDRDQTRFNzY3 RTBCOURCOUJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCe7kwNBRsWd0cthdtARKJzF+bsucekT5Ov 2wNcQB4Q/nICTG9q4AzIcl4Q+vE5RqGQuDfqtKqJIwN5p6/NliMqcqc7lbl+91tw 5PKcgq+mEFlDbbaxcprztdLfesU/Yg+b4y/EhmWM5amFj6vni0IN59o1K92qkE0R h7GEDZqqZWPPcpU5rN6HthHo2aUuOKrdQ1cISjKg32QMY1jEnaT2bHKu4XZPku3z V1N7i1zrI7QqzG2uSEIkjTedfeTAt5LcggroAuuOmhk/QeDZNv251NPRlu+Y3sxU ozBRP7GDVxeHxYurQpQlmx4b2FAqZznCuwpZGgtEeaQnUlTHlAc= -----END CERTIFICATE-----Generated at Mon Jun 15 19:38:34 2026 by rpki-client