$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft File: 5843958BB240779320D7F0C2B674ACF5EF6122BC.mft (raw, json) Hash identifier: LFuMHH9+QeRw2bOXtDA0AINNw71h5qNuIXaM8nAsjQg= Subject key identifier: 4E:43:91:2A:4A:78:A1:E6:95:59:80:BA:C5:80:B0:23:1E:21:F7:DA Authority key identifier: 58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC Certificate issuer: /CN=5843958BB240779320D7F0C2B674ACF5EF6122BC Certificate serial: 026C0EAD7E61B41D74F7E268924F8EE587E45AB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 11:53:58 +0000 Manifest this update: Sat 13 Jun 2026 11:48:58 +0000 Manifest next update: Sun 14 Jun 2026 12:29:58 +0000 Files and hashes: 1: 5843958BB240779320D7F0C2B674ACF5EF6122BC.crl (hash: drT9+37F5ldLNhxmJlN8imIxoAcpxOxG/l7TkUnahHM=) 2: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: yPK7GQUu85mTor59GtzCw8idVr6kmAEeffKza8nzEd8=) 3: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: bNdzrUkHylX3nBoyTDryEKwja6jOzq2DQP/kaLdB4H4=) 4: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: zO201tAVoPKGV/ct4ikI5lfPCjZ1ksaQX5GMEkLajwg=) 5: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: jOCXET8yniqJ02iHiMoBI6iwGo2/5oUN4/jc3LtL0jQ=) 6: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: 3HeHx0erxEkjN9PtOgU3W6tKucWeXKE5FEYLyXwycJc=) 7: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: lVR5iCrB58ZGOeyqsgP1KQLwdS0WjCcfUKPYsWN8lxI=) 8: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: t3N8/NmkXItiVJAARc4CSYWSo+yW57apDjW3aqHeSkc=) 9: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: WeFmDyNsHJ6btvYfzDFQoJzW4vr0tmZoF+30o64Nsw4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6c:0e:ad:7e:61:b4:1d:74:f7:e2:68:92:4f:8e:e5:87:e4:5a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5843958BB240779320D7F0C2B674ACF5EF6122BC Validity Not Before: Jun 13 11:48:58 2026 GMT Not After : Jun 14 12:29:58 2026 GMT Subject: CN=4E43912A4A78A1E6955980BAC580B0231E21F7DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e1:66:f8:f4:2a:f9:e9:0d:11:35:3d:8b:f4: b7:c8:29:b7:4e:68:c2:74:e9:9c:03:ac:24:ea:40: 51:07:10:74:69:d9:6c:3f:91:c4:82:51:bd:4a:36: 6c:86:34:08:04:2d:9d:7c:34:34:b2:12:6a:db:f7: a3:4a:f1:a8:85:1e:16:07:17:c6:0e:a4:a1:e9:f0: 78:1c:30:75:0e:f1:52:93:87:ae:dd:cc:de:11:b0: 18:04:9f:b1:0a:ae:df:ce:8f:3e:76:93:6e:73:ad: 08:1a:0a:a9:8c:44:51:7b:d6:59:3c:f4:4a:b4:bf: 30:ef:73:a7:44:7d:1f:b2:dd:4e:e5:a5:62:be:9f: eb:1c:f2:fd:de:6a:5f:49:16:80:86:49:69:45:43: b6:7e:2a:26:d4:ad:85:df:4c:a3:30:f6:ea:a5:3c: 23:91:a7:6e:01:5d:87:6a:eb:15:d9:11:5f:dd:bc: 13:4e:52:78:9d:02:60:43:c9:8c:c6:ea:a1:04:0c: fe:47:8c:35:b5:d3:9c:ab:e0:8c:a2:28:27:ed:eb: 87:eb:2e:3d:a1:f8:fb:87:52:72:d2:a3:d5:db:36: 68:fa:10:cb:86:5c:71:8d:28:8b:c2:ea:4c:57:20: 54:e5:be:07:33:5e:e6:77:bd:8f:93:52:da:09:de: ed:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:43:91:2A:4A:78:A1:E6:95:59:80:BA:C5:80:B0:23:1E:21:F7:DA X509v3 Authority Key Identifier: keyid:58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:70:75:df:c3:fe:68:a6:5a:87:65:d5:7b:c6:b2:04:10:1d: 48:1d:9b:15:f9:27:2d:5f:5a:22:c2:74:11:20:1b:77:97:a5: 43:98:5a:33:36:d1:ee:3b:1e:36:f5:7b:f4:b1:63:8b:82:1b: 5d:f1:5b:9d:d9:2b:f2:53:73:30:0c:07:3a:56:58:22:c1:70: 7a:4d:18:d3:f3:e9:88:b0:2d:45:63:8c:b9:36:80:16:4a:75: 01:83:a6:a6:6a:7d:0a:b0:00:6a:2a:1e:21:ea:ec:97:49:d4: ce:42:77:7a:25:16:3f:fd:c7:a9:bc:4f:e8:ba:cd:17:95:cf: f7:d5:85:50:94:1c:67:78:97:22:07:ee:57:f0:57:f8:c1:3a: 5a:0e:37:5b:97:70:da:d7:4a:69:4b:c5:9b:0f:bd:46:7c:ae: 18:a1:fd:76:39:b1:fd:35:b1:50:2e:88:ed:4a:a6:48:50:8c: 6b:97:e0:4a:5d:8f:75:90:86:a1:26:48:29:e1:38:b6:d2:0b: 25:cf:ae:cb:52:f4:75:ce:7c:36:b3:ff:30:b4:b5:d5:bd:5a: c3:4d:d7:3e:97:92:d3:1e:cf:3f:bb:a8:71:fd:02:cb:16:12: fb:ed:21:80:b9:c2:32:31:ae:cb:b5:71:a1:86:69:e2:32:5f: c3:0d:b4:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAmwOrX5htB109+Jokk+O5YfkWrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVF RjYxMjJCQzAeFw0yNjA2MTMxMTQ4NThaFw0yNjA2MTQxMjI5NThaMDMxMTAvBgNV BAMTKDRFNDM5MTJBNEE3OEExRTY5NTU5ODBCQUM1ODBCMDIzMUUyMUY3REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv4Wb49Cr56Q0RNT2L9LfIKbdO aMJ06ZwDrCTqQFEHEHRp2Ww/kcSCUb1KNmyGNAgELZ18NDSyEmrb96NK8aiFHhYH F8YOpKHp8HgcMHUO8VKTh67dzN4RsBgEn7EKrt/Ojz52k25zrQgaCqmMRFF71lk8 9Eq0vzDvc6dEfR+y3U7lpWK+n+sc8v3eal9JFoCGSWlFQ7Z+KibUrYXfTKMw9uql PCORp24BXYdq6xXZEV/dvBNOUnidAmBDyYzG6qEEDP5HjDW105yr4IyiKCft64fr Lj2h+PuHUnLSo9XbNmj6EMuGXHGNKIvC6kxXIFTlvgczXuZ3vY+TUtoJ3u2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTkORKkp4oeaVWYC6xYCwIx4h99owHwYDVR0j BBgwFoAUWEOVi7JAd5Mg1/DCtnSs9e9hIrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ5NWMxOWMtMzI2Mi00OGM3LWFmMDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJC MjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVFRjYxMjJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODQzOTU4QkIyNDA3NzkzMjBEN0YwQzJCNjc0QUNGNUVGNjEy MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ5NWMxOWMtMzI2Mi00OGM3LWFm MDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFD RjVFRjYxMjJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdwdd/D/mimWodl1XvGsgQQHUgdmxX5Jy1f WiLCdBEgG3eXpUOYWjM20e47Hjb1e/SxY4uCG13xW53ZK/JTczAMBzpWWCLBcHpN GNPz6YiwLUVjjLk2gBZKdQGDpqZqfQqwAGoqHiHq7JdJ1M5Cd3olFj/9x6m8T+i6 zReVz/fVhVCUHGd4lyIH7lfwV/jBOloON1uXcNrXSmlLxZsPvUZ8rhih/XY5sf01 sVAuiO1KpkhQjGuX4Epdj3WQhqEmSCnhOLbSCyXPrstS9HXOfDaz/zC0tdW9WsNN 1z6XktMezz+7qHH9AssWEvvtIYC5wjIxrsu1caGGaeIyX8MNtIA= -----END CERTIFICATE-----Generated at Sun Jun 14 01:59:53 2026 by rpki-client