$ rpki-client -vvf rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft File: 5EC020FF41231134DE16F43F92714D434626A05B.mft (raw, json) Hash identifier: pjLDJ7lko7KuGhmRYb2uKcSdChxPxXsJTMHIQYfI5HU= Subject key identifier: 3A:88:15:30:09:27:F2:CC:0F:D5:07:D7:45:97:14:9E:8E:E8:B7:8E Authority key identifier: 5E:C0:20:FF:41:23:11:34:DE:16:F4:3F:92:71:4D:43:46:26:A0:5B Certificate issuer: /CN=5EC020FF41231134DE16F43F92714D434626A05B Certificate serial: 32EDAF88C321618ABF3E3FB8A40D1D12C62CCE3E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EC020FF41231134DE16F43F92714D434626A05B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:51:50 +0000 Manifest this update: Tue 16 Jun 2026 22:46:50 +0000 Manifest next update: Thu 18 Jun 2026 02:20:50 +0000 Files and hashes: 1: 5EC020FF41231134DE16F43F92714D434626A05B.crl (hash: w8xHC4w3fbuRlRmiNEVI9fcQ11xpu5/0nNDJDVAUcGs=) 2: 3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (hash: 7EVkvK54oj3Ks8SpMiOp0AT2jMsnJWuUCj85YBui5p0=) 3: 323030313a6466303a373434303a3a2f34382d3438203d3e20313331313132.roa (hash: mxf66wCv3huHr7+y00gKhj0SFSiQHrPhglnN0dDJ4UY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.crl rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EC020FF41231134DE16F43F92714D434626A05B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ed:af:88:c3:21:61:8a:bf:3e:3f:b8:a4:0d:1d:12:c6:2c:ce:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC020FF41231134DE16F43F92714D434626A05B Validity Not Before: Jun 16 22:46:50 2026 GMT Not After : Jun 18 02:20:50 2026 GMT Subject: CN=3A8815300927F2CC0FD507D74597149E8EE8B78E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d4:da:91:ac:e8:27:d3:c8:fe:eb:3b:28:9c: f8:56:0e:ce:45:5f:e9:c7:41:c0:f9:b9:2f:a4:49: 04:3c:f0:d0:72:eb:f9:2b:e6:db:79:c7:78:8a:71: e2:28:35:10:96:ee:3e:b4:8e:eb:0d:50:da:34:b1: c3:9b:78:cc:a5:20:6d:3d:e6:88:c1:c2:be:fd:30: a0:82:9e:2d:9d:c6:37:e8:59:52:2c:8c:5b:d5:68: 23:13:4b:bb:52:70:5a:22:a5:22:b4:12:36:5c:6e: ff:74:5d:02:f1:04:64:47:ff:ca:50:62:a9:0f:00: ea:cd:ee:99:ce:64:29:ba:3c:7f:fa:48:34:f1:55: 41:41:dd:4b:fe:c8:1f:13:0f:a9:8c:92:de:65:4b: 27:aa:79:28:5e:82:4d:25:a2:da:90:81:65:e1:6d: 91:03:97:d5:83:fe:45:de:15:3b:83:e7:e7:ee:02: 49:21:e4:8d:55:15:42:3d:b9:3d:b5:13:01:d8:0a: 39:71:88:ad:1f:6e:2c:9c:ce:b1:23:99:af:09:3e: 4b:27:73:74:04:83:ff:58:e7:76:97:8c:47:23:29: 9e:0e:a4:cb:f2:37:5d:11:23:9d:73:6c:45:64:b5: 99:c6:0a:42:4c:43:4e:fd:cf:8b:84:68:36:aa:01: cf:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:88:15:30:09:27:F2:CC:0F:D5:07:D7:45:97:14:9E:8E:E8:B7:8E X509v3 Authority Key Identifier: keyid:5E:C0:20:FF:41:23:11:34:DE:16:F4:3F:92:71:4D:43:46:26:A0:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EC020FF41231134DE16F43F92714D434626A05B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:0a:4e:54:c0:d8:6f:98:23:6a:e1:17:6c:6a:31:56:28:04: 11:20:47:bc:35:82:78:c2:a4:86:ab:5a:9a:af:63:13:9c:cd: 3e:6d:6b:ba:22:38:6f:c0:1e:07:ae:cb:0d:2e:4e:bf:cd:90: 15:19:b4:f5:b9:bf:e5:36:1a:eb:40:0c:2a:fc:1a:22:50:7a: 58:ef:f7:6c:6e:3d:f6:30:5a:29:78:b0:11:55:bc:2e:b5:25: 48:2d:c0:b5:96:65:49:fb:ba:dc:29:d3:ff:cd:4c:b2:71:d5: 78:98:21:1b:5a:b8:61:5d:02:fe:89:53:ae:c9:57:ea:58:fd: d9:61:d9:fc:d3:b4:1b:06:e0:a3:29:f9:13:e7:bc:09:a0:84: 57:38:42:9b:14:93:f7:92:54:5f:3a:80:fe:6f:7e:41:d7:8e: 20:5a:4e:ca:46:b3:72:50:2a:95:26:af:a6:a0:13:fc:ca:d3: 5f:4d:e3:03:51:72:9a:e2:fc:43:66:55:ec:e9:38:4f:e0:d7: 1b:4d:10:f2:14:99:6c:f8:86:48:28:f2:bb:f5:00:11:80:f1: 97:f1:90:7f:f5:e5:b8:9a:30:c6:b9:d1:dc:7e:f8:17:78:5e: 93:f8:1d:92:a9:b4:24:3d:f4:1b:a7:59:e6:76:51:8f:5e:4f: db:fa:84:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMu2viMMhYYq/Pj+4pA0dEsYszj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDMDIwRkY0MTIzMTEzNERFMTZGNDNGOTI3MTRENDM0 NjI2QTA1QjAeFw0yNjA2MTYyMjQ2NTBaFw0yNjA2MTgwMjIwNTBaMDMxMTAvBgNV BAMTKDNBODgxNTMwMDkyN0YyQ0MwRkQ1MDdENzQ1OTcxNDlFOEVFOEI3OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN1NqRrOgn08j+6zsonPhWDs5F X+nHQcD5uS+kSQQ88NBy6/kr5tt5x3iKceIoNRCW7j60jusNUNo0scObeMylIG09 5ojBwr79MKCCni2dxjfoWVIsjFvVaCMTS7tScFoipSK0EjZcbv90XQLxBGRH/8pQ YqkPAOrN7pnOZCm6PH/6SDTxVUFB3Uv+yB8TD6mMkt5lSyeqeShegk0lotqQgWXh bZEDl9WD/kXeFTuD5+fuAkkh5I1VFUI9uT21EwHYCjlxiK0fbiyczrEjma8JPksn c3QEg/9Y53aXjEcjKZ4OpMvyN10RI51zbEVktZnGCkJMQ079z4uEaDaqAc8/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOogVMAkn8swP1QfXRZcUno7ot44wHwYDVR0j BBgwFoAUXsAg/0EjETTeFvQ/knFNQ0YmoFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg3ZjhmODItMzdiYi00OTgzLTkzY2EtNWUwNjcwYWIwMmUzLzAvNUVDMDIwRkY0 MTIzMTEzNERFMTZGNDNGOTI3MTRENDM0NjI2QTA1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RUMwMjBGRjQxMjMxMTM0REUxNkY0M0Y5MjcxNEQ0MzQ2MjZB MDVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjg3ZjhmODItMzdiYi00OTgzLTkz Y2EtNWUwNjcwYWIwMmUzLzAvNUVDMDIwRkY0MTIzMTEzNERFMTZGNDNGOTI3MTRE NDM0NjI2QTA1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcKTlTA2G+YI2rhF2xqMVYoBBEgR7w1gnjC pIarWpqvYxOczT5ta7oiOG/AHgeuyw0uTr/NkBUZtPW5v+U2GutADCr8GiJQeljv 92xuPfYwWil4sBFVvC61JUgtwLWWZUn7utwp0//NTLJx1XiYIRtauGFdAv6JU67J V+pY/dlh2fzTtBsG4KMp+RPnvAmghFc4QpsUk/eSVF86gP5vfkHXjiBaTspGs3JQ KpUmr6agE/zK019N4wNRcpri/ENmVezpOE/g1xtNEPIUmWz4hkgo8rv1ABGA8Zfx kH/15biaMMa50dx++Bd4XpP4HZKptCQ99BunWeZ2UY9eT9v6hOw= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:45 2026 by rpki-client