$ rpki-client -vvf rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft File: 5B4C702133C87BA4BC2E55E712270969ABE45A51.mft (raw, json) Hash identifier: rk/JpNjw/MELAEYJ5P0eLxpk9fdVbCtwDtjSVpMwHGc= Subject key identifier: AD:76:D3:4E:1B:EA:04:F8:E0:20:AB:5F:9C:99:98:09:54:B7:9D:7F Authority key identifier: 5B:4C:70:21:33:C8:7B:A4:BC:2E:55:E7:12:27:09:69:AB:E4:5A:51 Certificate issuer: /CN=5B4C702133C87BA4BC2E55E712270969ABE45A51 Certificate serial: 7076DFA503D047D42A67AD940F1B8BBF52B9DB2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:16:43 +0000 Manifest this update: Wed 17 Jun 2026 07:11:43 +0000 Manifest next update: Thu 18 Jun 2026 09:35:43 +0000 Files and hashes: 1: 5B4C702133C87BA4BC2E55E712270969ABE45A51.crl (hash: 22wfD7NBkv7LoCCJ2lBfmwlUBhato6rvEcCMgn41YLs=) 2: 3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa (hash: Vkq3URZ932rcZk4u78E4tOq6/4bheSUZYPRHTmwP30Y=) 3: 3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa (hash: sLHnpPIHUxO29WSb75hs0N2E96R8Wj78zUMN4pLDvZ4=) 4: 3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa (hash: BHukqw3OCwpT8gyX9jofbrVK6NJ8azV8C28UZNn4k40=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.crl rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:76:df:a5:03:d0:47:d4:2a:67:ad:94:0f:1b:8b:bf:52:b9:db:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B4C702133C87BA4BC2E55E712270969ABE45A51 Validity Not Before: Jun 17 07:11:43 2026 GMT Not After : Jun 18 09:35:43 2026 GMT Subject: CN=AD76D34E1BEA04F8E020AB5F9C99980954B79D7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:04:72:b9:17:71:53:9b:ba:ba:be:14:1e:32: ce:3b:48:b7:79:f5:ff:ac:ae:9e:dc:96:bd:e9:cf: 3d:bb:cf:09:28:41:22:6f:e8:f4:54:24:d9:34:35: 2d:a5:c4:62:c9:39:d5:98:c0:c4:63:2a:62:7e:b0: 15:08:6f:aa:28:b2:2d:d6:93:f6:9e:fa:cf:1d:a9: 05:30:c4:3d:7c:ab:e7:a5:25:8b:1c:ae:b8:9b:8d: 31:86:60:66:d4:74:e1:16:3c:0e:fe:cc:ef:c9:6b: fc:0a:64:e8:52:17:1b:3b:cc:c4:39:37:18:47:ac: c0:38:8f:eb:c8:4e:85:00:63:d8:70:5b:29:fe:8c: b5:e6:4d:93:45:3b:89:6e:02:a8:02:df:0f:65:ad: f5:c9:46:91:f3:37:86:c1:89:54:70:85:b0:7f:ca: 62:94:bb:d8:b1:0f:cd:19:b2:b0:fe:8a:fe:55:36: b1:39:e8:7b:33:87:af:8f:32:88:d8:11:2a:20:46: 3c:50:de:fc:b1:ec:79:66:ad:93:cf:da:b0:6c:ac: fa:58:9d:41:9e:19:6b:2a:74:88:a0:cf:88:32:24: b4:7b:b6:b9:7f:c7:ec:89:6f:8b:37:e1:8e:a7:58: e1:7e:d5:34:72:90:db:9e:11:26:4a:3e:f9:00:e9: c3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:76:D3:4E:1B:EA:04:F8:E0:20:AB:5F:9C:99:98:09:54:B7:9D:7F X509v3 Authority Key Identifier: keyid:5B:4C:70:21:33:C8:7B:A4:BC:2E:55:E7:12:27:09:69:AB:E4:5A:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:83:3f:38:d9:c0:a6:be:30:78:c7:8f:ca:ce:81:5c:a1:8e: b8:7a:ff:70:53:f7:81:e3:96:e4:35:0f:a4:5e:93:1b:5b:04: 29:18:f4:cc:b8:d2:aa:73:82:63:f1:e3:e5:00:26:0f:30:43: 12:b7:ef:c9:4f:8e:84:ab:72:4c:2e:8e:ec:5c:a2:35:56:92: 30:84:f8:bb:9d:0f:f4:53:09:d6:09:95:e5:c3:92:0b:35:a3: 40:74:b5:88:32:9d:f2:a1:26:2e:93:9e:36:77:aa:af:85:ee: a5:a1:48:28:f6:f0:44:97:e7:f8:42:54:d2:a4:b0:47:f4:08: 6a:e2:36:7f:14:dd:8a:0b:77:76:8d:4e:c9:c4:16:d4:d7:1f: 48:79:76:83:65:44:71:bd:d6:71:8b:11:89:67:1f:a9:a4:c6: 85:6c:d3:e8:5f:40:42:77:c8:10:4e:2d:1d:15:53:66:14:f4: ae:f4:11:31:de:33:ae:9f:7c:3d:dc:b2:95:01:a0:37:c4:dc: 6f:94:e6:04:65:66:31:b3:98:6c:12:ab:04:d9:0a:96:c9:84: cb:96:14:96:64:2e:01:70:0c:d2:aa:ec:f0:17:a4:c8:5c:b5: f1:09:47:04:e8:fa:93:9e:39:07:46:65:be:7c:a3:77:42:67: dd:b8:2c:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcHbfpQPQR9QqZ62UDxuLv1K52y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI0QzcwMjEzM0M4N0JBNEJDMkU1NUU3MTIyNzA5NjlB QkU0NUE1MTAeFw0yNjA2MTcwNzExNDNaFw0yNjA2MTgwOTM1NDNaMDMxMTAvBgNV BAMTKEFENzZEMzRFMUJFQTA0RjhFMDIwQUI1RjlDOTk5ODA5NTRCNzlEN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABHK5F3FTm7q6vhQeMs47SLd5 9f+srp7clr3pzz27zwkoQSJv6PRUJNk0NS2lxGLJOdWYwMRjKmJ+sBUIb6oosi3W k/ae+s8dqQUwxD18q+elJYscrribjTGGYGbUdOEWPA7+zO/Ja/wKZOhSFxs7zMQ5 NxhHrMA4j+vIToUAY9hwWyn+jLXmTZNFO4luAqgC3w9lrfXJRpHzN4bBiVRwhbB/ ymKUu9ixD80ZsrD+iv5VNrE56Hszh6+PMojYESogRjxQ3vyx7HlmrZPP2rBsrPpY nUGeGWsqdIigz4gyJLR7trl/x+yJb4s34Y6nWOF+1TRykNueESZKPvkA6cNPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrXbTThvqBPjgIKtfnJmYCVS3nX8wHwYDVR0j BBgwFoAUW0xwITPIe6S8LlXnEicJaavkWlEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDE0ZTA0ZmEtNzE4OC00ZjRmLTgxYmItMzMwMzg5Zjg3MDE1LzAvNUI0QzcwMjEz M0M4N0JBNEJDMkU1NUU3MTIyNzA5NjlBQkU0NUE1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QjRDNzAyMTMzQzg3QkE0QkMyRTU1RTcxMjI3MDk2OUFCRTQ1 QTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDE0ZTA0ZmEtNzE4OC00ZjRmLTgx YmItMzMwMzg5Zjg3MDE1LzAvNUI0QzcwMjEzM0M4N0JBNEJDMkU1NUU3MTIyNzA5 NjlBQkU0NUE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+DPzjZwKa+MHjHj8rOgVyhjrh6/3BT94Hj luQ1D6RekxtbBCkY9My40qpzgmPx4+UAJg8wQxK378lPjoSrckwujuxcojVWkjCE +LudD/RTCdYJleXDkgs1o0B0tYgynfKhJi6TnjZ3qq+F7qWhSCj28ESX5/hCVNKk sEf0CGriNn8U3YoLd3aNTsnEFtTXH0h5doNlRHG91nGLEYlnH6mkxoVs0+hfQEJ3 yBBOLR0VU2YU9K70ETHeM66ffD3cspUBoDfE3G+U5gRlZjGzmGwSqwTZCpbJhMuW FJZkLgFwDNKq7PAXpMhctfEJRwTo+pOeOQdGZb58o3dCZ924LI4= -----END CERTIFICATE-----Generated at Wed Jun 17 11:14:22 2026 by rpki-client