$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft File: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft (raw, json) Hash identifier: PlN0mccHKhrRKnKPZWzMK2lff2Qyuy4sHvlm6vRcR2g= Subject key identifier: 86:A7:BE:68:45:3D:BA:16:AA:E3:AD:9E:1F:78:F8:A2:23:D8:E5:D0 Authority key identifier: 52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF Certificate issuer: /CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Certificate serial: 566F1021F67B83DA78E40301544F55BEDCA6C8B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft Manifest number: 39 Signing time: Fri 12 Jun 2026 22:48:00 +0000 Manifest this update: Fri 12 Jun 2026 22:43:00 +0000 Manifest next update: Sun 14 Jun 2026 02:41:00 +0000 Files and hashes: 1: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: s0qL2weEhTe4sBj4h3x5XjkUykXaQaRd3WPD4VdRPq0=) 2: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: Xm5n/XLcKtlX7vaWLbK2D/7cXu3TQ6c3pSXsVlfA9/0=) 3: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: NHw4QH7kx6gwhf24chR9MVQWVvSl6RuQvk3rMGt5qyQ=) 4: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl (hash: 5pfZDF43nV+Euved6ECRtWl1lX1N88h/8RaXYtqE/f8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 21:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:6f:10:21:f6:7b:83:da:78:e4:03:01:54:4f:55:be:dc:a6:c8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Validity Not Before: Jun 12 22:43:00 2026 GMT Not After : Jun 14 02:41:00 2026 GMT Subject: CN=86A7BE68453DBA16AAE3AD9E1F78F8A223D8E5D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:4b:7a:f6:72:2b:1e:40:56:ce:a3:ae:2e: 4c:28:5d:09:f0:89:47:c1:7a:3c:92:70:1d:f1:87: f0:1d:d9:81:6e:77:69:6d:46:c7:00:58:5d:2f:bb: d8:53:62:89:69:bc:d3:3a:25:98:78:7d:82:be:50: b2:d1:b3:a4:85:89:9b:30:c1:91:51:5e:25:cd:ec: 9d:b2:a6:9c:82:f9:3d:5f:7c:68:7a:17:25:3d:2e: ae:68:0e:2c:47:30:ec:f3:49:79:ca:80:9c:e5:8e: 30:c4:01:b1:bb:62:83:f1:06:71:0f:64:d8:53:bd: a0:fe:cc:e9:85:1f:0b:0a:19:51:34:b7:2f:a6:4c: df:fd:ea:a1:73:03:98:f5:4d:d9:50:21:03:5d:89: 60:0d:8d:3e:d2:44:3f:8b:69:e8:8e:27:19:1d:fe: a9:fa:7c:2d:7c:5e:95:d1:bc:5b:93:0b:40:2e:d5: 5b:84:9b:68:4a:c4:de:68:5f:22:0f:42:a8:95:3c: 64:2e:18:28:59:f3:52:28:54:23:11:76:6b:5e:36: a4:d4:79:19:97:cf:bc:f1:e4:bd:67:93:3a:cb:4d: 24:01:0f:c1:1c:bd:4b:12:c8:03:9c:80:07:ff:59: d9:74:bc:da:9c:19:46:49:4f:b3:86:b2:65:4f:53: 85:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A7:BE:68:45:3D:BA:16:AA:E3:AD:9E:1F:78:F8:A2:23:D8:E5:D0 X509v3 Authority Key Identifier: keyid:52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ee:9a:59:52:2e:c9:80:7c:e6:41:dc:0e:5b:52:1b:7b:29: 9e:4b:4e:56:67:6f:a5:42:23:24:07:18:79:21:5d:b3:1d:0b: ae:c3:d5:5a:dd:09:39:27:5f:a4:c3:b5:71:55:d5:c9:b2:0f: c0:8c:a8:aa:70:5f:f0:dc:ff:52:16:cd:75:60:72:87:98:24: 3b:32:35:33:e9:32:42:e4:a1:cd:62:3f:c7:94:8b:19:a3:b9: e0:f2:d4:32:ba:cf:ad:77:68:14:46:64:3e:88:0e:2e:be:f5: 01:d0:a0:60:cf:03:e4:5e:4b:64:6a:4c:28:cc:27:23:91:11: c0:dc:cb:69:2b:db:70:dd:af:00:6f:3a:79:c0:ba:32:a1:70: 77:e8:53:7e:91:ff:51:f0:10:e7:3f:db:25:39:81:c1:eb:ff: a8:5d:ec:42:dd:37:cf:55:95:b5:7c:08:1e:ff:b6:76:80:66: 3e:39:41:6c:bc:ef:84:41:66:6e:2d:53:76:3e:e0:5c:65:b4: f5:87:2c:c0:db:76:84:18:33:40:93:4b:06:80:63:d3:53:0f: 4e:00:6f:54:0a:46:4e:80:e4:d1:a4:72:0a:d0:56:15:2a:91: 8e:ff:14:2d:9e:a6:b4:aa:b4:87:c8:58:d7:f4:d5:0e:5c:40: 8c:1b:fb:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVm8QIfZ7g9p45AMBVE9VvtymyLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgx QTE2RjhERjAeFw0yNjA2MTIyMjQzMDBaFw0yNjA2MTQwMjQxMDBaMDMxMTAvBgNV BAMTKDg2QTdCRTY4NDUzREJBMTZBQUUzQUQ5RTFGNzhGOEEyMjNEOEU1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB60t69nIrHkBWzqOuLkwoXQnw iUfBejyScB3xh/Ad2YFud2ltRscAWF0vu9hTYolpvNM6JZh4fYK+ULLRs6SFiZsw wZFRXiXN7J2yppyC+T1ffGh6FyU9Lq5oDixHMOzzSXnKgJzljjDEAbG7YoPxBnEP ZNhTvaD+zOmFHwsKGVE0ty+mTN/96qFzA5j1TdlQIQNdiWANjT7SRD+LaeiOJxkd /qn6fC18XpXRvFuTC0Au1VuEm2hKxN5oXyIPQqiVPGQuGChZ81IoVCMRdmteNqTU eRmXz7zx5L1nkzrLTSQBD8EcvUsSyAOcgAf/Wdl0vNqcGUZJT7OGsmVPU4XZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhqe+aEU9uhaq462eH3j4oiPY5dAwHwYDVR0j BBgwFoAUUpf8C1LNT8fwbBZTENETyBoW+N8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2RkYmI3OWMtOWVhMi00N2YwLWI0NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1 MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgxQTE2RjhERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Mjk3RkMwQjUyQ0Q0RkM3RjA2QzE2NTMxMEQxMTNDODFBMTZG OERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEz QzgxQTE2RjhERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzumllSLsmAfOZB3A5bUht7KZ5LTlZnb6VC IyQHGHkhXbMdC67D1VrdCTknX6TDtXFV1cmyD8CMqKpwX/Dc/1IWzXVgcoeYJDsy NTPpMkLkoc1iP8eUixmjueDy1DK6z613aBRGZD6IDi6+9QHQoGDPA+ReS2RqTCjM JyOREcDcy2kr23DdrwBvOnnAujKhcHfoU36R/1HwEOc/2yU5gcHr/6hd7ELdN89V lbV8CB7/tnaAZj45QWy874RBZm4tU3Y+4FxltPWHLMDbdoQYM0CTSwaAY9NTD04A b1QKRk6A5NGkcgrQVhUqkY7/FC2eprSqtIfIWNf01Q5cQIwb+1w= -----END CERTIFICATE-----Generated at Sat Jun 13 12:41:58 2026 by rpki-client