$ rpki-client -vvf rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft File: 5FF85953C6850E359467A581C3FE1AC78E529F2F.mft (raw, json) Hash identifier: ZUaoESRqKl2rg8fajMcfGeXc/NRRLI9chnx5enjvtj0= Subject key identifier: C8:12:5F:04:9D:51:49:46:0C:9F:1D:74:66:97:86:20:D2:A8:02:EA Authority key identifier: 5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F Certificate issuer: /CN=5FF85953C6850E359467A581C3FE1AC78E529F2F Certificate serial: 6A8AA22A285577F4B4383E32FFA22AE03BFB11C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft Manifest number: 38 Signing time: Fri 12 Jun 2026 21:21:09 +0000 Manifest this update: Fri 12 Jun 2026 21:16:09 +0000 Manifest next update: Sun 14 Jun 2026 01:05:09 +0000 Files and hashes: 1: 5FF85953C6850E359467A581C3FE1AC78E529F2F.crl (hash: 243hdpGv2lIlUWZ+ZEQ4oG/pp9PuFm2sfINY4GoeUdE=) 2: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: MmVOOc/LuqFNSXqQ5IddobFw0Ch137C+avOoyFd6ZzY=) 3: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: AwkHb7HGSUt+TaaLZZEdADtv/v78j6fMphbiNKpRchs=) 4: 3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (hash: t97u2GqJ2jtckgSGR6Sjz6Jn9nKSQHkBxpLPsPLvaYM=) 5: 3131352e3136362e3131312e302f32342d3234203d3e203134363138.roa (hash: kPUK2GFDFYlKn9GXNmNAqFN8ChpgIluMw/CP+FmKw0o=) 6: 3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (hash: uTaNGo7IDdsOGs73zESne28tA+ZzMyK0wMRINMuXTcQ=) 7: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: +qKLLz9ehRuOchJ8m6wI99oYtklf5Gx9ixqGHWMAzMw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 20:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:8a:a2:2a:28:55:77:f4:b4:38:3e:32:ff:a2:2a:e0:3b:fb:11:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF85953C6850E359467A581C3FE1AC78E529F2F Validity Not Before: Jun 12 21:16:09 2026 GMT Not After : Jun 14 01:05:09 2026 GMT Subject: CN=C8125F049D5149460C9F1D7466978620D2A802EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:54:62:cf:ee:a4:dc:ee:db:e8:4f:70:43:9d: 5d:5b:22:ed:24:42:50:7c:70:8d:85:10:fe:80:35: e2:3b:a9:ca:cf:eb:ec:25:2c:c6:74:6b:52:a3:ca: 65:45:57:d5:f7:57:55:4b:39:4a:93:40:39:0b:42: b7:33:2a:58:82:01:64:26:52:32:85:c8:27:f2:b8: 1a:8a:dc:3f:65:a2:dd:e7:5c:aa:de:27:bc:63:cb: e0:d8:92:90:84:6d:c3:1a:09:d1:a6:8b:32:56:e0: f1:37:ab:59:05:59:33:4f:07:55:7d:57:93:de:7a: ef:51:2e:53:3a:95:ee:22:1d:cb:3a:76:73:b5:0d: b5:ec:9a:46:f0:10:c3:01:eb:3c:5d:a4:54:ba:78: 30:5f:12:20:27:c7:57:0f:1d:35:d7:23:4f:a9:c8: 3c:bd:b5:c4:6c:dc:6f:54:c8:96:2c:bf:0d:cf:49: b0:a0:94:6e:f0:e0:e3:3e:1a:c2:a1:e9:96:2e:c8: 5f:28:9c:9a:d1:fd:d1:53:fd:e8:41:0f:fe:b9:38: a8:ff:d2:15:88:e7:6b:75:e4:7c:a9:37:78:53:b0: bf:eb:1d:ec:4a:ad:e8:7a:eb:47:74:a3:66:da:c3: 69:98:43:22:19:a3:9e:8e:78:f2:03:53:d3:74:dd: b5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:12:5F:04:9D:51:49:46:0C:9F:1D:74:66:97:86:20:D2:A8:02:EA X509v3 Authority Key Identifier: keyid:5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:29:48:5a:44:8a:2b:97:bb:f1:75:8e:72:0f:d5:88:e5:3c: b9:46:6d:78:c5:3b:c6:95:3c:57:7a:1c:3e:2e:3d:e3:c1:17: 53:a5:86:ca:65:86:e4:e2:13:b1:64:4a:2c:8a:d0:e6:17:ff: b3:e1:a8:e4:bd:f1:ee:2e:15:51:7a:6d:21:fe:03:b4:03:7a: 83:1e:a9:2c:e9:91:34:f7:20:49:dd:4f:1e:6d:1c:09:03:a6: 1a:80:34:c2:63:92:4b:1e:14:ec:bc:fe:50:e4:37:0a:cc:fb: 11:4b:ec:62:c3:74:6f:e0:6e:b3:96:75:8a:c4:22:a9:49:46: f3:c7:8e:f0:05:1f:32:ac:bf:82:68:68:45:75:e3:a2:de:e6: 35:d4:e7:f6:25:be:59:bc:2a:06:3a:61:b6:3e:ac:25:c5:c9: 66:b8:8d:41:e4:3b:ac:f5:41:f9:26:21:07:ba:c0:1c:de:1c: cd:ad:77:73:df:b8:e1:0a:bd:84:ae:f6:77:e3:e1:9a:25:95: d4:70:bd:55:46:e7:d4:03:d4:eb:6d:30:64:3a:8e:06:45:92: 07:0b:eb:e1:4a:86:bf:a8:c9:fd:fd:67:c6:15:1a:0c:31:da: be:2f:74:4a:96:a4:1c:34:88:11:c7:20:92:0a:14:e9:91:22: 5e:80:85:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaoqiKihVd/S0OD4y/6Iq4Dv7EcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4 RTUyOUYyRjAeFw0yNjA2MTIyMTE2MDlaFw0yNjA2MTQwMTA1MDlaMDMxMTAvBgNV BAMTKEM4MTI1RjA0OUQ1MTQ5NDYwQzlGMUQ3NDY2OTc4NjIwRDJBODAyRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoVGLP7qTc7tvoT3BDnV1bIu0k QlB8cI2FEP6ANeI7qcrP6+wlLMZ0a1KjymVFV9X3V1VLOUqTQDkLQrczKliCAWQm UjKFyCfyuBqK3D9lot3nXKreJ7xjy+DYkpCEbcMaCdGmizJW4PE3q1kFWTNPB1V9 V5Peeu9RLlM6le4iHcs6dnO1DbXsmkbwEMMB6zxdpFS6eDBfEiAnx1cPHTXXI0+p yDy9tcRs3G9UyJYsvw3PSbCglG7w4OM+GsKh6ZYuyF8onJrR/dFT/ehBD/65OKj/ 0hWI52t15HypN3hTsL/rHexKreh660d0o2baw2mYQyIZo56OePIDU9N03bWvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyBJfBJ1RSUYMnx10ZpeGINKoAuowHwYDVR0j BBgwFoAUX/hZU8aFDjWUZ6WBw/4ax45Sny8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmRkNDdmNTYtZWM1My00MmViLTliOGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTND Njg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4RTUyOUYyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkY4NTk1M0M2ODUwRTM1OTQ2N0E1ODFDM0ZFMUFDNzhFNTI5 RjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFB Qzc4RTUyOUYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEApSFpEiiuXu/F1jnIP1YjlPLlGbXjFO8aV PFd6HD4uPePBF1OlhsplhuTiE7FkSiyK0OYX/7PhqOS98e4uFVF6bSH+A7QDeoMe qSzpkTT3IEndTx5tHAkDphqANMJjkkseFOy8/lDkNwrM+xFL7GLDdG/gbrOWdYrE IqlJRvPHjvAFHzKsv4JoaEV146Le5jXU5/Ylvlm8KgY6YbY+rCXFyWa4jUHkO6z1 QfkmIQe6wBzeHM2td3PfuOEKvYSu9nfj4ZolldRwvVVG59QD1OttMGQ6jgZFkgcL 6+FKhr+oyf39Z8YVGgwx2r4vdEqWpBw0iBHHIJIKFOmRIl6AhdY= -----END CERTIFICATE-----Generated at Sat Jun 13 10:49:34 2026 by rpki-client