$ rpki-client -vvf rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft File: F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft (raw, json) Hash identifier: mmvKQuYboE63KNklhz7ssoDn0e4WiIO6WhP2S+AOrtQ= Subject key identifier: 34:0A:F1:8B:B5:6B:AC:DD:EF:50:71:91:B6:AA:D9:A1:43:1D:31:3C Authority key identifier: F5:A8:75:F4:B1:94:D8:FE:EE:E6:58:64:23:80:16:F5:BA:01:1B:F3 Certificate issuer: /CN=F5A875F4B194D8FEEEE65864238016F5BA011BF3 Certificate serial: 0D465209BCD262526221E8F0EFFC7E4FFF6D317E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5A875F4B194D8FEEEE65864238016F5BA011BF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 03:01:24 +0000 Manifest this update: Wed 17 Jun 2026 02:56:24 +0000 Manifest next update: Thu 18 Jun 2026 03:01:24 +0000 Files and hashes: 1: F5A875F4B194D8FEEEE65864238016F5BA011BF3.crl (hash: tpd46uZC9H0rVhdxzUbG60h8Crzng5d04ooqfbbURX0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.crl rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5A875F4B194D8FEEEE65864238016F5BA011BF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:46:52:09:bc:d2:62:52:62:21:e8:f0:ef:fc:7e:4f:ff:6d:31:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A875F4B194D8FEEEE65864238016F5BA011BF3 Validity Not Before: Jun 17 02:56:24 2026 GMT Not After : Jun 18 03:01:24 2026 GMT Subject: CN=340AF18BB56BACDDEF507191B6AAD9A1431D313C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1d:40:f6:38:ba:51:b4:96:c1:b4:08:bd:f9: 92:28:f0:8c:e9:b9:3f:cb:97:43:93:43:69:8b:8f: e7:d0:4f:dc:5a:8d:29:82:43:47:ca:9e:a5:f4:6d: 0a:5f:c0:5d:8d:e7:6b:ac:27:f5:8b:12:24:a2:d3: ed:49:b8:bb:b3:4d:3d:10:61:e0:91:6d:41:97:99: 29:bf:cb:13:9f:26:54:97:8c:ca:3f:ab:e9:26:7b: e8:4e:6e:a7:cd:9b:e8:71:ea:c8:8f:e8:d8:5a:7d: 1a:d5:47:bf:61:f0:5d:52:6e:ba:bf:84:f3:46:64: 16:26:9f:1f:1a:00:be:ee:92:da:5a:0a:63:47:8c: 83:e5:a8:f1:2d:bf:95:b0:e5:99:3e:14:ce:49:03: 57:23:38:55:3b:7c:b2:b5:d2:39:d0:87:ee:3d:9d: cb:7d:b0:9a:bb:9d:86:2a:14:c8:d2:89:fe:df:bb: b8:1f:e3:ce:8b:4d:f7:3b:27:0f:05:28:f8:d0:30: 66:08:f6:ce:a9:ef:dc:c9:84:d4:6a:d7:69:d8:e1: 4b:4e:38:08:73:56:43:4e:20:a7:47:cb:dc:d1:bb: ab:49:ab:69:35:36:1e:fe:28:b4:ad:d4:a0:1e:b6: 39:72:72:8f:d0:ab:34:ee:e3:d1:64:6f:45:c9:06: 06:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0A:F1:8B:B5:6B:AC:DD:EF:50:71:91:B6:AA:D9:A1:43:1D:31:3C X509v3 Authority Key Identifier: keyid:F5:A8:75:F4:B1:94:D8:FE:EE:E6:58:64:23:80:16:F5:BA:01:1B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5A875F4B194D8FEEEE65864238016F5BA011BF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:f2:18:17:f9:28:41:62:ba:57:76:8f:69:dd:fa:89:bf:27: c6:f2:d4:91:40:83:61:c5:32:74:68:1f:61:83:54:de:d3:f4: 1b:e5:ca:36:60:8d:31:50:73:c7:5a:ca:89:d9:9b:df:ec:08: 0c:48:ad:71:74:da:41:7d:77:a4:0d:83:21:20:97:ab:08:95: bc:b5:34:2d:a9:fe:03:28:b4:20:95:5f:a4:33:1d:4b:64:31: 36:01:53:5b:5c:16:dd:64:6e:61:c6:96:4d:c5:e7:96:a0:54: 08:33:ae:8f:3a:dd:a2:52:a5:60:f7:f5:7c:3c:4b:c5:b9:d3: 56:23:14:72:b8:99:46:ee:c1:aa:47:70:59:7f:0e:67:32:5f: 9b:72:5f:9a:b9:fb:1a:9b:b0:eb:8d:05:61:36:c8:92:e6:07: 47:51:49:5f:65:65:39:86:0e:fe:9e:2b:de:07:3b:f9:67:76: 92:97:55:d2:d3:ae:21:ac:42:a7:a0:4a:f0:96:e3:02:68:31: d3:a2:a4:df:2e:b4:ab:0d:e3:e6:b4:24:52:1b:43:47:0a:f9: e6:4a:6d:13:99:e2:9b:4c:48:d5:63:69:35:17:91:ac:82:6d: 6a:b7:a3:f6:c1:c4:45:d0:6f:29:f4:aa:6d:d7:21:ed:9e:95: 14:11:33:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDUZSCbzSYlJiIejw7/x+T/9tMX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBODc1RjRCMTk0RDhGRUVFRTY1ODY0MjM4MDE2RjVC QTAxMUJGMzAeFw0yNjA2MTcwMjU2MjRaFw0yNjA2MTgwMzAxMjRaMDMxMTAvBgNV BAMTKDM0MEFGMThCQjU2QkFDRERFRjUwNzE5MUI2QUFEOUExNDMxRDMxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6HUD2OLpRtJbBtAi9+ZIo8Izp uT/Ll0OTQ2mLj+fQT9xajSmCQ0fKnqX0bQpfwF2N52usJ/WLEiSi0+1JuLuzTT0Q YeCRbUGXmSm/yxOfJlSXjMo/q+kme+hObqfNm+hx6siP6NhafRrVR79h8F1Sbrq/ hPNGZBYmnx8aAL7uktpaCmNHjIPlqPEtv5Ww5Zk+FM5JA1cjOFU7fLK10jnQh+49 nct9sJq7nYYqFMjSif7fu7gf486LTfc7Jw8FKPjQMGYI9s6p79zJhNRq12nY4UtO OAhzVkNOIKdHy9zRu6tJq2k1Nh7+KLSt1KAetjlyco/QqzTu49Fkb0XJBgYJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNArxi7VrrN3vUHGRtqrZoUMdMTwwHwYDVR0j BBgwFoAU9ah19LGU2P7u5lhkI4AW9boBG/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjUzNTg1MGUtNGJmYS00NTA0LWJiZWMtNmM2YjJjYzNiYTI5LzAvRjVBODc1RjRC MTk0RDhGRUVFRTY1ODY0MjM4MDE2RjVCQTAxMUJGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNUE4NzVGNEIxOTREOEZFRUVFNjU4NjQyMzgwMTZGNUJBMDEx QkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjUzNTg1MGUtNGJmYS00NTA0LWJi ZWMtNmM2YjJjYzNiYTI5LzAvRjVBODc1RjRCMTk0RDhGRUVFRTY1ODY0MjM4MDE2 RjVCQTAxMUJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbyGBf5KEFiuld2j2nd+om/J8by1JFAg2HF MnRoH2GDVN7T9BvlyjZgjTFQc8dayonZm9/sCAxIrXF02kF9d6QNgyEgl6sIlby1 NC2p/gMotCCVX6QzHUtkMTYBU1tcFt1kbmHGlk3F55agVAgzro863aJSpWD39Xw8 S8W501YjFHK4mUbuwapHcFl/DmcyX5tyX5q5+xqbsOuNBWE2yJLmB0dRSV9lZTmG Dv6eK94HO/lndpKXVdLTriGsQqegSvCW4wJoMdOipN8utKsN4+a0JFIbQ0cK+eZK bROZ4ptMSNVjaTUXkayCbWq3o/bBxEXQbyn0qm3XIe2elRQRM+s= -----END CERTIFICATE-----Generated at Wed Jun 17 10:53:09 2026 by rpki-client