$ rpki-client -vvf rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft File: 5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft (raw, json) Hash identifier: K5mjFjdHfAPtwK2kNnDEOtcu1yg0OtqQiTTZDkDOCVE= Subject key identifier: 2C:16:79:67:A8:4E:53:7D:64:3C:FB:2F:A9:53:12:64:01:6C:90:38 Authority key identifier: 5B:78:39:D3:FA:2F:BC:37:45:20:65:6B:0E:BD:B7:87:43:B9:68:ED Certificate issuer: /CN=5B7839D3FA2FBC374520656B0EBDB78743B968ED Certificate serial: 21814EF619319F392D040A2B4C277A320B3B1714 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:16:11 +0000 Manifest this update: Tue 16 Jun 2026 22:11:11 +0000 Manifest next update: Wed 17 Jun 2026 22:19:11 +0000 Files and hashes: 1: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: 7rg8BQPn02cWQCL5uHjDLR1BDjr+8xgU8r0m19XIL1o=) 2: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: aOlWVzlvXbOa4KHfHqYRVq472gGuD+dyeTRVu2qUTbc=) 3: 5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl (hash: 12T1APXss1ct23nYcI6mHhCSD8i+NDERmdaLC2jlCw4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:81:4e:f6:19:31:9f:39:2d:04:0a:2b:4c:27:7a:32:0b:3b:17:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B7839D3FA2FBC374520656B0EBDB78743B968ED Validity Not Before: Jun 16 22:11:11 2026 GMT Not After : Jun 17 22:19:11 2026 GMT Subject: CN=2C167967A84E537D643CFB2FA9531264016C9038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:a0:7f:80:38:9e:a2:d6:76:20:fd:78:34: 8c:c2:11:f5:5e:f0:df:13:c8:a6:bb:3f:91:57:09: e6:91:55:f1:d3:49:c9:8a:9e:3d:de:dc:c7:81:7a: 03:52:54:94:03:fa:ec:2e:88:9e:71:ca:6f:d1:a0: 95:75:46:eb:bf:4f:40:95:d4:5a:fc:e2:30:15:37: 1c:1c:73:a8:c2:c8:07:63:3e:21:c8:bc:df:31:1a: fd:33:64:6b:3c:d3:39:af:e4:fe:3b:df:87:64:df: 38:62:1a:8a:3c:50:93:dd:36:2b:05:d0:65:27:41: 62:50:1d:aa:2e:99:29:ae:a3:84:2d:fc:a6:4d:5a: 45:62:d0:00:e8:52:6e:0a:88:c1:73:dc:22:37:ee: f9:bb:f6:6b:bf:b3:45:e5:3e:13:17:c6:9b:49:5f: 73:d6:a5:d4:52:3b:57:de:ca:15:52:44:3f:39:4a: 57:b9:1e:8d:6e:15:a1:4d:4f:b4:9c:dd:03:81:c0: 49:9d:ea:6e:00:35:b3:d6:d6:f5:6e:49:1b:10:f8: de:8b:22:6d:34:0c:e9:57:8c:bd:fc:9f:97:31:fe: f7:f7:26:0a:58:a6:a1:35:ef:3d:db:af:57:20:8c: ce:0f:1c:e5:e0:fd:20:1f:70:7c:73:2e:96:7c:ec: ea:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:16:79:67:A8:4E:53:7D:64:3C:FB:2F:A9:53:12:64:01:6C:90:38 X509v3 Authority Key Identifier: keyid:5B:78:39:D3:FA:2F:BC:37:45:20:65:6B:0E:BD:B7:87:43:B9:68:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:8e:03:fd:77:1a:24:87:15:a8:57:2e:16:7b:05:86:63:0b: d2:93:bc:b8:85:59:80:2b:9c:0c:b1:6f:9b:c4:b7:9f:3e:16: aa:ff:d1:9a:a5:5c:c1:f0:1a:90:e9:5d:6d:e9:f1:03:d9:a6: 17:b9:75:ad:24:75:68:e2:5b:b7:e9:36:c1:12:91:64:45:e7: 7e:18:6b:9a:ad:14:8b:ce:69:a2:36:42:f9:ec:9f:82:cb:90: f5:d2:35:db:61:de:59:eb:4e:78:e5:ab:43:5e:4a:e2:3d:c7: 96:24:82:4c:12:0a:8a:0b:0d:e2:48:41:93:35:37:4d:df:15: cb:62:b3:80:8b:b6:e4:dc:f1:86:18:d5:f2:34:3e:c4:53:3d: 5c:cb:22:c7:f0:86:08:fe:0a:1c:b4:41:e9:59:cb:ee:8f:70: b9:bf:8c:43:2c:ba:e7:6b:df:ec:6f:13:b9:0d:73:51:cb:fc: c7:79:91:e4:9d:b2:c2:a3:7d:4a:db:c3:26:b2:3f:1a:5c:b9: e0:b1:bc:9e:9a:5f:d0:8d:42:4d:e0:1b:18:8d:7e:03:9a:b6: f1:7a:b8:2c:b7:3a:bf:48:5b:3f:ba:e0:89:87:c5:0d:95:6a: 49:eb:de:57:13:86:96:fd:70:75:97:ab:f4:58:7b:38:f2:3f: 34:ce:fa:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIYFO9hkxnzktBAorTCd6Mgs7FxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI3ODM5RDNGQTJGQkMzNzQ1MjA2NTZCMEVCREI3ODc0 M0I5NjhFRDAeFw0yNjA2MTYyMjExMTFaFw0yNjA2MTcyMjE5MTFaMDMxMTAvBgNV BAMTKDJDMTY3OTY3QTg0RTUzN0Q2NDNDRkIyRkE5NTMxMjY0MDE2QzkwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr1aB/gDieotZ2IP14NIzCEfVe 8N8TyKa7P5FXCeaRVfHTScmKnj3e3MeBegNSVJQD+uwuiJ5xym/RoJV1Ruu/T0CV 1Fr84jAVNxwcc6jCyAdjPiHIvN8xGv0zZGs80zmv5P4734dk3zhiGoo8UJPdNisF 0GUnQWJQHaoumSmuo4Qt/KZNWkVi0ADoUm4KiMFz3CI37vm79mu/s0XlPhMXxptJ X3PWpdRSO1feyhVSRD85Sle5Ho1uFaFNT7Sc3QOBwEmd6m4ANbPW1vVuSRsQ+N6L Im00DOlXjL38n5cx/vf3JgpYpqE17z3br1cgjM4PHOXg/SAfcHxzLpZ87OpTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULBZ5Z6hOU31kPPsvqVMSZAFskDgwHwYDVR0j BBgwFoAUW3g50/ovvDdFIGVrDr23h0O5aO0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjljNTMyN2YtMTBmZC00Y2YwLTg1MWMtMGNmY2QzYzNjNjk3LzAvNUI3ODM5RDNG QTJGQkMzNzQ1MjA2NTZCMEVCREI3ODc0M0I5NjhFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Qjc4MzlEM0ZBMkZCQzM3NDUyMDY1NkIwRUJEQjc4NzQzQjk2 OEVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNUI3ODM5RDNGQTJGQkMzNzQ1MjA2NTZCMEVCREI3 ODc0M0I5NjhFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKiOA/13GiSHFahXLhZ7BYZjC9KTvLiFWYAr nAyxb5vEt58+Fqr/0ZqlXMHwGpDpXW3p8QPZphe5da0kdWjiW7fpNsESkWRF534Y a5qtFIvOaaI2Qvnsn4LLkPXSNdth3lnrTnjlq0NeSuI9x5YkgkwSCooLDeJIQZM1 N03fFctis4CLtuTc8YYY1fI0PsRTPVzLIsfwhgj+Chy0QelZy+6PcLm/jEMsuudr 3+xvE7kNc1HL/Md5keSdssKjfUrbwyayPxpcueCxvJ6aX9CNQk3gGxiNfgOatvF6 uCy3Or9IWz+64ImHxQ2Vaknr3lcThpb9cHWXq/RYezjyPzTO+sA= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:11 2026 by rpki-client