$ rpki-client -vvf rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft File: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft (raw, json) Hash identifier: 53/SaE+Bnsg66PdnoyN79NYEkWlK/ylFexdafo9NhNU= Subject key identifier: 2B:3C:8F:95:32:4D:34:4B:6C:6B:65:2E:A7:77:C1:4E:6B:E9:4B:59 Authority key identifier: F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 Certificate issuer: /CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Certificate serial: 669D65F8BAB9DF21D5C6B8CB68A31FA760DEAB41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft Manifest number: 38 Signing time: Fri 12 Jun 2026 18:12:19 +0000 Manifest this update: Fri 12 Jun 2026 18:07:19 +0000 Manifest next update: Sat 13 Jun 2026 21:19:19 +0000 Files and hashes: 1: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: 03BuWy0OfURI+FKE0txZsH5LInMm2YyYlx6DInNWH9E=) 2: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: KrFgsVnJ/CPVgce61GzFtNxXXABIAjXPOpkQ6UBGiUQ=) 3: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl (hash: Er6Ao06Zyj+KE5y5PGDKKb2AdekJ8AeSP4cESy5GvzQ=) 4: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: ZdektWGBi3rfOIP5V7EV+AEsc9XAfei8AhQcCJZB3h0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 21:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:9d:65:f8:ba:b9:df:21:d5:c6:b8:cb:68:a3:1f:a7:60:de:ab:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Validity Not Before: Jun 12 18:07:19 2026 GMT Not After : Jun 13 21:19:19 2026 GMT Subject: CN=2B3C8F95324D344B6C6B652EA777C14E6BE94B59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c3:89:d1:04:18:13:0d:ee:bf:74:54:cb:4b: e8:4c:42:d9:34:99:7a:59:24:c0:8c:c9:20:86:b6: b9:96:4a:31:05:a9:14:4f:11:5c:27:ae:7b:a0:ae: 01:f6:85:3f:21:a7:b0:27:b0:f7:59:42:6b:29:01: 17:58:34:23:b1:ef:48:21:dd:9b:b4:82:b5:f2:fd: 68:e5:97:8f:17:be:99:ea:36:8e:71:64:56:db:cc: 55:d0:5a:24:98:18:6d:cf:9c:38:82:0c:66:93:8b: 5d:e2:81:42:83:33:5e:1d:ef:07:18:23:42:f3:82: 14:c2:59:93:78:89:41:8d:52:b0:6b:dd:8c:a9:05: 94:b6:3a:9d:30:52:64:ee:b7:d1:0f:a5:6f:9a:f7: 33:55:92:3d:6e:4d:5b:c9:1c:82:2f:68:af:9d:81: f8:ba:de:f5:06:5d:a3:42:43:45:ad:d1:25:25:38: 60:c7:c6:ea:70:7d:33:73:45:4f:9e:56:e4:cf:93: 82:73:04:6d:9b:80:43:1a:65:45:dd:22:75:9b:ee: 6f:80:97:09:51:10:ab:d7:8e:79:b0:ed:e1:e3:57: e1:f1:e5:8f:3d:fb:af:21:0f:a9:e2:af:a4:dc:b7: 3c:24:a3:70:74:48:bb:6f:27:95:bd:8b:7b:d5:23: 1b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3C:8F:95:32:4D:34:4B:6C:6B:65:2E:A7:77:C1:4E:6B:E9:4B:59 X509v3 Authority Key Identifier: keyid:F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e6:da:b1:1f:ab:a7:27:81:1a:84:c8:19:4f:96:81:a7:df: 32:8a:fe:e4:36:e7:66:b1:57:b4:7a:be:67:02:e3:57:0e:c2: 47:20:6d:e4:4f:83:11:a6:b9:8e:49:0b:a4:05:5a:ff:eb:4d: e4:d0:16:78:20:e6:ce:06:a3:df:70:93:7e:c5:7c:9a:9b:9d: a6:4b:7e:bb:11:be:85:ef:cd:cb:37:b8:87:a6:1b:de:a8:f7: b7:df:da:ad:ef:f9:f6:8c:8b:e7:9c:e0:19:ba:39:3c:73:3e: b8:a6:2d:3d:e4:3c:11:9f:dd:53:1e:5c:2a:6e:1a:31:cc:74: 1f:3d:c4:b1:af:9b:c4:e5:6c:ee:ed:2d:86:5f:fa:ab:f8:e0: 76:5e:80:5a:87:cc:7f:80:bf:aa:eb:d9:b4:e6:4d:93:f4:92: c9:80:98:a0:df:8a:03:e7:ca:4c:96:af:5a:11:72:e3:09:67: 67:17:56:b4:ef:ad:0f:43:0f:47:f4:6a:4c:0f:44:36:bf:38: b1:f8:dd:be:f7:62:e8:6d:c3:4d:3c:02:c7:4c:be:eb:3a:25: 82:0d:94:63:6f:5d:e2:bb:75:c8:93:1b:e4:1a:c6:ed:4c:9b: cb:a2:de:ee:a4:62:ab:06:5e:5c:50:94:f1:64:e5:65:82:ce: 18:d2:4d:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZp1l+Lq53yHVxrjLaKMfp2Deq0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3Q0Qx RkUxRUFGNjAeFw0yNjA2MTIxODA3MTlaFw0yNjA2MTMyMTE5MTlaMDMxMTAvBgNV BAMTKDJCM0M4Rjk1MzI0RDM0NEI2QzZCNjUyRUE3NzdDMTRFNkJFOTRCNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWw4nRBBgTDe6/dFTLS+hMQtk0 mXpZJMCMySCGtrmWSjEFqRRPEVwnrnugrgH2hT8hp7AnsPdZQmspARdYNCOx70gh 3Zu0grXy/Wjll48XvpnqNo5xZFbbzFXQWiSYGG3PnDiCDGaTi13igUKDM14d7wcY I0LzghTCWZN4iUGNUrBr3YypBZS2Op0wUmTut9EPpW+a9zNVkj1uTVvJHIIvaK+d gfi63vUGXaNCQ0Wt0SUlOGDHxupwfTNzRU+eVuTPk4JzBG2bgEMaZUXdInWb7m+A lwlREKvXjnmw7eHjV+Hx5Y89+68hD6nir6Tctzwko3B0SLtvJ5W9i3vVIxuvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKzyPlTJNNEtsa2Uup3fBTmvpS1kwHwYDVR0j BBgwFoAU9bXUbF3OhEcHwNeJYDl3zR/h6vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY5ZjhhYTgtODk3MS00ZTUxLThiNTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1 RENFODQ0NzA3QzBENzg5NjAzOTc3Q0QxRkUxRUFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNUI1RDQ2QzVEQ0U4NDQ3MDdDMEQ3ODk2MDM5NzdDRDFGRTFF QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3 Q0QxRkUxRUFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzm2rEfq6cngRqEyBlPloGn3zKK/uQ252ax V7R6vmcC41cOwkcgbeRPgxGmuY5JC6QFWv/rTeTQFngg5s4Go99wk37FfJqbnaZL frsRvoXvzcs3uIemG96o97ff2q3v+faMi+ec4Bm6OTxzPrimLT3kPBGf3VMeXCpu GjHMdB89xLGvm8TlbO7tLYZf+qv44HZegFqHzH+Av6rr2bTmTZP0ksmAmKDfigPn ykyWr1oRcuMJZ2cXVrTvrQ9DD0f0akwPRDa/OLH43b73Yuhtw008AsdMvus6JYIN lGNvXeK7dciTG+Qaxu1Mm8ui3u6kYqsGXlxQlPFk5WWCzhjSTTw= -----END CERTIFICATE-----Generated at Sat Jun 13 12:41:55 2026 by rpki-client