$ rpki-client -vvf rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft File: 5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft (raw, json) Hash identifier: v9ZP0Workt4bmP1MdlhNpx7lE7n3qg1OziIcYV3fK+Y= Subject key identifier: 3D:EA:5E:DC:60:F0:F2:20:31:49:42:A8:68:E6:DC:A2:4B:F9:12:41 Authority key identifier: 5E:25:E7:5E:AD:14:FB:9C:87:77:75:CF:A5:C7:68:C9:9B:F8:31:CB Certificate issuer: /CN=5E25E75EAD14FB9C877775CFA5C768C99BF831CB Certificate serial: 52AA5FC41CFEA7D22446B5FBBE4FD934CAB29FDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 08:43:30 +0000 Manifest this update: Wed 17 Jun 2026 08:38:30 +0000 Manifest next update: Thu 18 Jun 2026 09:31:30 +0000 Files and hashes: 1: 323030313a6466303a666534303a3a2f34382d3438203d3e20313439393133.roa (hash: Mx1Bs+uk4ORbPOJY3X4OSkdxpVJJ2TqdAiAI7XjMvYw=) 2: 3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa (hash: U6ZrAajnenCJBZYC9uBM6kAorfrc1n55yTDGAGbaXuI=) 3: 5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl (hash: wuy3eNMtaI80uwivcyvoqiyNcdpfkhdkqyA65IJpJJA=) 4: 3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (hash: GheubIEbC2RH3FMbulGJZm2AS1TBwHys9ZC8vY6htKI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:aa:5f:c4:1c:fe:a7:d2:24:46:b5:fb:be:4f:d9:34:ca:b2:9f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E25E75EAD14FB9C877775CFA5C768C99BF831CB Validity Not Before: Jun 17 08:38:30 2026 GMT Not After : Jun 18 09:31:30 2026 GMT Subject: CN=3DEA5EDC60F0F220314942A868E6DCA24BF91241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a6:11:f6:a0:df:a6:d4:de:08:eb:db:0c:47: 5f:28:20:eb:a2:6a:96:67:37:4f:89:4c:6e:dc:aa: 1b:41:36:da:50:ed:4d:10:ce:f4:4d:53:a9:15:6b: 66:9f:79:45:8c:ee:f8:03:ae:e8:86:b3:96:9d:9b: ae:26:40:64:ae:0f:ad:fa:4c:f9:a2:b4:e8:c6:78: 4b:74:a2:f7:99:2c:dc:81:b6:dd:ae:c8:90:ac:bf: 0c:6e:27:47:c0:6d:67:b2:5b:e1:21:6a:8f:71:58: 1d:49:7f:5a:5e:6c:da:0d:d1:dc:d3:20:e9:96:9c: 8e:c8:0c:6a:62:28:0b:e0:c7:40:44:da:35:39:99: 01:e9:db:25:b8:ee:c4:57:d5:32:87:93:40:78:5c: 8b:31:a9:cd:58:62:44:db:25:43:ec:7b:b9:ba:b3: b9:db:32:21:3d:6d:07:54:7b:5e:17:bc:b8:6f:d3: fa:06:85:bb:74:59:24:87:d2:34:49:7d:11:60:ad: f6:ae:f6:e6:3e:d2:50:6f:e0:8b:2e:cb:ff:e0:bf: 7b:47:b2:36:bc:1b:04:21:44:9a:6c:63:77:45:22: 08:0f:35:49:00:fa:9b:0d:5c:60:4a:63:b8:4b:0a: fd:bc:b7:8a:9a:92:d2:0c:9d:c2:f0:ef:0b:b6:ac: 4d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EA:5E:DC:60:F0:F2:20:31:49:42:A8:68:E6:DC:A2:4B:F9:12:41 X509v3 Authority Key Identifier: keyid:5E:25:E7:5E:AD:14:FB:9C:87:77:75:CF:A5:C7:68:C9:9B:F8:31:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b4:b8:f5:78:ca:2d:f4:90:ca:e4:fd:b9:4c:dd:17:c9:f2: 08:db:61:05:85:aa:e3:fd:70:1c:80:a0:6b:4c:95:d5:b8:97: 6d:3f:20:3a:68:80:0b:a4:4b:3c:b1:02:22:aa:46:38:9d:b9: a7:b1:60:a8:58:ef:8c:c4:71:47:30:a0:93:c9:a0:ee:23:32: b9:b2:57:1b:7b:c0:80:c6:44:5d:4d:61:d2:cf:58:13:d3:92: 0c:2a:15:29:58:55:1b:8e:ca:4b:65:da:4e:5b:2f:f3:a0:ec: 1f:d3:28:a4:b5:79:d6:58:9e:5d:2d:be:08:68:eb:ae:5e:5c: fe:9f:0f:cf:cd:ff:ef:27:de:1b:91:0f:4b:7a:80:2a:6e:9a: 76:45:8d:5f:22:9a:85:8c:85:45:98:93:b1:7f:a2:ac:68:46: 9c:8c:5a:f7:ef:c0:6d:1b:9b:05:40:94:63:5a:e3:67:ac:be: 51:2c:a8:fe:9e:d4:ab:6b:56:ab:96:de:35:bd:11:33:d9:3e: f0:53:ab:33:3e:6d:1d:c3:fc:56:a6:64:01:a8:9e:89:41:17: e9:ad:21:f4:c6:4f:59:c0:c5:1d:ac:06:aa:87:56:0d:3a:08: 7d:05:c8:f3:9b:16:f0:68:fc:9d:ba:ee:e8:de:7b:ba:e0:ee: 30:3c:52:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqpfxBz+p9IkRrX7vk/ZNMqyn9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUyNUU3NUVBRDE0RkI5Qzg3Nzc3NUNGQTVDNzY4Qzk5 QkY4MzFDQjAeFw0yNjA2MTcwODM4MzBaFw0yNjA2MTgwOTMxMzBaMDMxMTAvBgNV BAMTKDNERUE1RURDNjBGMEYyMjAzMTQ5NDJBODY4RTZEQ0EyNEJGOTEyNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsphH2oN+m1N4I69sMR18oIOui apZnN0+JTG7cqhtBNtpQ7U0QzvRNU6kVa2afeUWM7vgDruiGs5adm64mQGSuD636 TPmitOjGeEt0oveZLNyBtt2uyJCsvwxuJ0fAbWeyW+Ehao9xWB1Jf1pebNoN0dzT IOmWnI7IDGpiKAvgx0BE2jU5mQHp2yW47sRX1TKHk0B4XIsxqc1YYkTbJUPse7m6 s7nbMiE9bQdUe14XvLhv0/oGhbt0WSSH0jRJfRFgrfau9uY+0lBv4Isuy//gv3tH sja8GwQhRJpsY3dFIggPNUkA+psNXGBKY7hLCv28t4qaktIMncLw7wu2rE1NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPepe3GDw8iAxSUKoaObcokv5EkEwHwYDVR0j BBgwFoAUXiXnXq0U+5yHd3XPpcdoyZv4McswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg2ZDZiYTEtMWY3My00Nzc2LThhNmEtNGY0NTEyMDc5MmIxLzAvNUUyNUU3NUVB RDE0RkI5Qzg3Nzc3NUNGQTVDNzY4Qzk5QkY4MzFDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RTI1RTc1RUFEMTRGQjlDODc3Nzc1Q0ZBNUM3NjhDOTlCRjgz MUNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg2ZDZiYTEtMWY3My00Nzc2LThh NmEtNGY0NTEyMDc5MmIxLzAvNUUyNUU3NUVBRDE0RkI5Qzg3Nzc3NUNGQTVDNzY4 Qzk5QkY4MzFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEG0uPV4yi30kMrk/blM3RfJ8gjbYQWFquP9 cByAoGtMldW4l20/IDpogAukSzyxAiKqRjiduaexYKhY74zEcUcwoJPJoO4jMrmy Vxt7wIDGRF1NYdLPWBPTkgwqFSlYVRuOyktl2k5bL/Og7B/TKKS1edZYnl0tvgho 665eXP6fD8/N/+8n3huRD0t6gCpumnZFjV8imoWMhUWYk7F/oqxoRpyMWvfvwG0b mwVAlGNa42esvlEsqP6e1KtrVquW3jW9ETPZPvBTqzM+bR3D/FamZAGonolBF+mt IfTGT1nAxR2sBqqHVg06CH0FyPObFvBo/J267ujee7rg7jA8Up4= -----END CERTIFICATE-----Generated at Wed Jun 17 11:14:51 2026 by rpki-client