$ rpki-client -vvf rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft File: 5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft (raw, json) Hash identifier: UyR+Ydut4QvjypVh88XVBW4LJUjl01mXM9Wej9/1sxg= Subject key identifier: FB:DB:CF:1B:56:66:3A:65:D5:C4:87:18:A2:3F:2B:2A:18:0A:80:3F Authority key identifier: 5A:C7:FD:C1:38:0E:98:33:9F:28:DB:DC:57:B2:1E:7D:2F:95:A0:C0 Certificate issuer: /CN=5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0 Certificate serial: 0CDF318B01DA5A3794F928B9F4D9837D260C31A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 21:20:02 +0000 Manifest this update: Tue 16 Jun 2026 21:15:02 +0000 Manifest next update: Wed 17 Jun 2026 22:48:02 +0000 Files and hashes: 1: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: KmWWkFu4uWgTsq2Hfq2FHIMCUvYeIO46DVlLY6UTkvU=) 2: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: fc+4JU1Tpp/1O31vstVFMWqbX3rMZmX9kGoVnJ5dzDQ=) 3: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: 4g4u+OEshRSiXLYJx+dZnyPxCHcmqZ8djxIy4N3tcCM=) 4: 5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl (hash: yJCivjc5e8zdUuvsYP5K0j9A8eEzt8nJohDKG2WcqK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:df:31:8b:01:da:5a:37:94:f9:28:b9:f4:d9:83:7d:26:0c:31:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0 Validity Not Before: Jun 16 21:15:02 2026 GMT Not After : Jun 17 22:48:02 2026 GMT Subject: CN=FBDBCF1B56663A65D5C48718A23F2B2A180A803F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:a1:16:cd:70:03:ba:8d:27:10:29:fe:0d: 1c:b5:c0:9b:65:85:24:cf:61:b8:4f:ce:ba:46:ce: d4:88:9e:ca:86:32:a3:2c:ce:ae:4a:b6:a0:e2:c7: f6:02:8b:1f:8d:a3:15:d3:aa:eb:42:92:cb:10:0c: fd:a3:6c:86:eb:1f:f3:78:a1:1c:a2:54:0f:7d:3e: 04:0d:d2:a9:60:41:02:d5:58:a0:78:7d:c6:27:5d: 2c:6c:ae:ff:6e:ac:c6:ee:d1:1f:33:c2:c5:1f:eb: b1:b2:3d:f8:fa:4f:43:d5:b7:23:3f:f9:53:14:3b: 47:a0:08:7b:f0:00:ff:c3:1e:99:ba:c7:bc:96:f5: e1:1c:44:01:bf:8d:d9:d8:22:d4:45:d1:67:e2:8a: 67:04:9e:7c:bb:7f:d5:c2:25:b2:91:90:ee:4a:de: ce:4e:d4:a4:02:98:b5:3c:d8:da:09:64:3b:fc:71: 78:a0:f4:dd:94:6b:10:77:64:c9:15:73:4a:16:97: 59:1f:49:ed:83:db:d4:d8:da:42:25:88:a7:fa:a6: 47:4f:02:80:c6:26:6b:78:a5:59:80:b7:d9:ec:61: 37:f8:cb:08:e5:0e:4b:cf:e7:be:9e:b1:fd:6d:dc: 09:02:48:d5:cd:ab:23:ab:4e:38:99:d2:a9:80:a1: 9f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DB:CF:1B:56:66:3A:65:D5:C4:87:18:A2:3F:2B:2A:18:0A:80:3F X509v3 Authority Key Identifier: keyid:5A:C7:FD:C1:38:0E:98:33:9F:28:DB:DC:57:B2:1E:7D:2F:95:A0:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:9e:66:a8:1f:da:dd:8c:e7:a2:b1:48:d8:f4:ba:61:9c:58: 08:74:76:06:3c:f4:43:d8:fb:d6:e4:b3:97:be:6d:ee:25:4c: 8a:5d:f7:a8:37:e2:1f:ac:9b:6c:d0:2d:e0:f9:8a:e5:be:16: e5:8b:80:b7:f8:a6:75:e4:60:1b:b3:47:25:7f:1d:4e:37:4f: 19:f7:99:cb:7d:e1:65:13:99:57:95:43:21:3f:3e:e2:6b:d0: 76:d8:ab:9e:3e:1f:87:7d:de:65:f5:38:ea:1b:19:11:60:4e: 4c:54:a8:56:90:b2:62:39:a6:20:8c:d6:63:79:ed:f5:a4:26: a3:a2:a9:1a:d7:f9:f6:c0:31:4a:2c:52:fc:c6:63:f1:2b:12: 49:4e:f7:d6:8d:e7:aa:91:e7:54:60:9d:90:31:83:03:d4:7b: d9:77:d0:83:96:c5:4f:66:0a:02:06:be:18:84:ef:f6:72:36: 73:99:ec:3a:a1:a6:ac:9f:a6:c0:21:d2:ed:4e:b8:45:9b:52: 34:3c:60:4b:0d:43:af:7e:48:e8:d3:f3:22:4f:52:9b:15:50: 88:39:cc:e2:7f:3a:67:c1:63:1c:14:57:2f:e9:c6:ca:bb:17: 24:2d:4c:5c:80:d7:a6:a4:18:96:90:78:b0:77:db:5e:95:bd: e6:5f:ca:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDN8xiwHaWjeU+Si59NmDfSYMMaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDN0ZEQzEzODBFOTgzMzlGMjhEQkRDNTdCMjFFN0Qy Rjk1QTBDMDAeFw0yNjA2MTYyMTE1MDJaFw0yNjA2MTcyMjQ4MDJaMDMxMTAvBgNV BAMTKEZCREJDRjFCNTY2NjNBNjVENUM0ODcxOEEyM0YyQjJBMTgwQTgwM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC956EWzXADuo0nECn+DRy1wJtl hSTPYbhPzrpGztSInsqGMqMszq5KtqDix/YCix+NoxXTqutCkssQDP2jbIbrH/N4 oRyiVA99PgQN0qlgQQLVWKB4fcYnXSxsrv9urMbu0R8zwsUf67GyPfj6T0PVtyM/ +VMUO0egCHvwAP/DHpm6x7yW9eEcRAG/jdnYItRF0WfiimcEnny7f9XCJbKRkO5K 3s5O1KQCmLU82NoJZDv8cXig9N2UaxB3ZMkVc0oWl1kfSe2D29TY2kIliKf6pkdP AoDGJmt4pVmAt9nsYTf4ywjlDkvP576esf1t3AkCSNXNqyOrTjiZ0qmAoZ/HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+9vPG1ZmOmXVxIcYoj8rKhgKgD8wHwYDVR0j BBgwFoAUWsf9wTgOmDOfKNvcV7IefS+VoMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTNiODU4ZjYtZGUyMC00MTIxLWJjZWEtOTA3NmVkY2NjMDk3LzAvNUFDN0ZEQzEz ODBFOTgzMzlGMjhEQkRDNTdCMjFFN0QyRjk1QTBDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUM3RkRDMTM4MEU5ODMzOUYyOERCREM1N0IyMUU3RDJGOTVB MEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTNiODU4ZjYtZGUyMC00MTIxLWJj ZWEtOTA3NmVkY2NjMDk3LzAvNUFDN0ZEQzEzODBFOTgzMzlGMjhEQkRDNTdCMjFF N0QyRjk1QTBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWeZqgf2t2M56KxSNj0umGcWAh0dgY89EPY +9bks5e+be4lTIpd96g34h+sm2zQLeD5iuW+FuWLgLf4pnXkYBuzRyV/HU43Txn3 mct94WUTmVeVQyE/PuJr0HbYq54+H4d93mX1OOobGRFgTkxUqFaQsmI5piCM1mN5 7fWkJqOiqRrX+fbAMUosUvzGY/ErEklO99aN56qR51RgnZAxgwPUe9l30IOWxU9m CgIGvhiE7/ZyNnOZ7DqhpqyfpsAh0u1OuEWbUjQ8YEsNQ69+SOjT8yJPUpsVUIg5 zOJ/OmfBYxwUVy/pxsq7FyQtTFyA16akGJaQeLB3216VveZfys4= -----END CERTIFICATE-----Generated at Wed Jun 17 09:19:53 2026 by rpki-client