$ rpki-client -vvf rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft File: 5D885821D2406437CDFEC04380E967515A67AECC.mft (raw, json) Hash identifier: lXL6n5gQ4DFjlhJsBHB+Bh2MdkyLHWAkPJU8KGua2cg= Subject key identifier: 2C:21:39:CC:2D:F0:84:D6:5A:BC:0F:EF:37:8D:06:BB:F5:0E:02:29 Authority key identifier: 5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC Certificate issuer: /CN=5D885821D2406437CDFEC04380E967515A67AECC Certificate serial: 2FC411B46DB86196C95E48DCE600A0963EFAC193 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 03:32:10 +0000 Manifest this update: Sun 14 Jun 2026 03:27:10 +0000 Manifest next update: Mon 15 Jun 2026 03:36:10 +0000 Files and hashes: 1: 5D885821D2406437CDFEC04380E967515A67AECC.crl (hash: jSqtEo5vNWMH3JYeyjsocwzSHbemnZZN2ehBsYGrQxc=) 2: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: K0RHUYKMgdp0wpj2LpgjeiPXy+duWorfZjM80sQwxyc=) 3: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (hash: L6gQCpLzy7aXDtfuVgbwQW0xcldnnRmpgqFEsdoAP3Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 03:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c4:11:b4:6d:b8:61:96:c9:5e:48:dc:e6:00:a0:96:3e:fa:c1:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D885821D2406437CDFEC04380E967515A67AECC Validity Not Before: Jun 14 03:27:10 2026 GMT Not After : Jun 15 03:36:10 2026 GMT Subject: CN=2C2139CC2DF084D65ABC0FEF378D06BBF50E0229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0f:97:40:f3:ac:47:31:70:4b:e3:3f:50:37: 22:a3:d5:73:8e:81:2d:9c:07:be:81:89:4c:04:56: 12:7b:8f:b8:18:e4:8e:94:c5:62:b6:05:22:ac:f0: d0:37:b7:8b:b2:d6:73:44:a0:85:00:72:1a:e7:94: cf:34:42:3a:29:b1:96:4a:4c:4d:96:c0:ed:b6:35: a2:d2:77:54:03:57:1a:00:f4:e8:c7:43:c7:ac:81: 0f:e7:9c:23:6d:3c:67:b7:47:54:7f:ee:b5:56:1d: cf:1c:e5:b6:04:18:52:e7:7f:15:4b:fc:73:c4:9c: c2:c8:78:14:cc:f9:6d:4e:67:62:9b:53:2d:ac:03: 53:02:d8:9b:0e:bf:00:25:e6:97:33:69:7c:32:24: 97:38:4f:51:cb:a9:bf:1f:22:f6:ce:0a:05:ea:56: 0d:bc:82:8d:cc:47:d3:86:6d:24:74:37:a5:37:41: 08:26:81:fd:a7:3c:b2:43:9a:71:67:6c:a3:b1:91: 73:d5:3f:d1:b0:d0:32:11:0c:c3:2b:c2:69:6d:28: c9:43:5a:89:2a:6b:dc:75:58:e9:8b:90:85:1a:fb: 31:61:23:cb:0e:04:46:63:fe:e7:68:60:2f:9d:03: 13:d1:71:e9:64:7e:aa:2e:f6:3e:81:f4:82:7e:d8: 0c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:21:39:CC:2D:F0:84:D6:5A:BC:0F:EF:37:8D:06:BB:F5:0E:02:29 X509v3 Authority Key Identifier: keyid:5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4b:4a:3c:a0:cc:0b:fa:c7:52:a9:90:19:37:5a:43:8c:7d: 83:55:cf:01:68:e4:e2:05:f9:f3:28:17:a0:87:3b:fc:a1:01: 02:1d:b5:20:f0:67:1a:67:4d:61:1b:2c:28:64:a2:10:9b:bb: 39:31:40:55:f2:3d:1a:02:3d:89:57:74:53:7e:61:cc:3b:d3: 53:50:ef:5e:74:21:fc:e5:9c:5b:5d:bc:41:e4:dd:fe:4a:00: cc:14:55:ff:3b:12:3b:74:11:13:a2:76:40:e3:4b:65:ca:80: 6f:fd:aa:19:b8:d9:86:d5:1d:cf:0f:51:e2:f1:51:44:3d:5f: 9a:50:af:2a:84:de:d4:ce:e6:7b:9f:49:16:ac:2c:60:fc:be: 08:a7:fd:93:09:de:b0:7e:50:17:1b:0f:0d:75:1f:cf:6e:1a: e0:f6:9a:cb:a7:f0:e5:ef:85:fc:24:5c:0a:c5:f4:f9:cf:0f: c9:41:a2:89:df:04:bf:61:04:c3:8a:41:67:5d:e8:80:73:b0: dc:8d:1a:1e:2b:09:48:9e:6f:7d:41:30:2c:b7:d1:70:78:59: 54:c1:89:46:52:58:3d:09:0a:90:4d:9a:5c:33:84:bf:74:fa: 02:34:71:bd:5a:26:7b:3c:2c:51:33:af:4e:49:c4:74:97:41: 73:83:3d:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL8QRtG24YZbJXkjc5gCglj76wZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ4ODU4MjFEMjQwNjQzN0NERkVDMDQzODBFOTY3NTE1 QTY3QUVDQzAeFw0yNjA2MTQwMzI3MTBaFw0yNjA2MTUwMzM2MTBaMDMxMTAvBgNV BAMTKDJDMjEzOUNDMkRGMDg0RDY1QUJDMEZFRjM3OEQwNkJCRjUwRTAyMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtD5dA86xHMXBL4z9QNyKj1XOO gS2cB76BiUwEVhJ7j7gY5I6UxWK2BSKs8NA3t4uy1nNEoIUAchrnlM80QjopsZZK TE2WwO22NaLSd1QDVxoA9OjHQ8esgQ/nnCNtPGe3R1R/7rVWHc8c5bYEGFLnfxVL /HPEnMLIeBTM+W1OZ2KbUy2sA1MC2JsOvwAl5pczaXwyJJc4T1HLqb8fIvbOCgXq Vg28go3MR9OGbSR0N6U3QQgmgf2nPLJDmnFnbKOxkXPVP9Gw0DIRDMMrwmltKMlD Wokqa9x1WOmLkIUa+zFhI8sOBEZj/udoYC+dAxPRcelkfqou9j6B9IJ+2Ax1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULCE5zC3whNZavA/vN40Gu/UOAikwHwYDVR0j BBgwFoAUXYhYIdJAZDfN/sBDgOlnUVpnrswwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM3Njk0YjctMzI1Ni00NjY2LWEzZmUtNmU4MmU3ODNiMWUxLzAvNUQ4ODU4MjFE MjQwNjQzN0NERkVDMDQzODBFOTY3NTE1QTY3QUVDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDg4NTgyMUQyNDA2NDM3Q0RGRUMwNDM4MEU5Njc1MTVBNjdB RUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvNUQ4ODU4MjFEMjQwNjQzN0NERkVDMDQzODBFOTY3 NTE1QTY3QUVDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxLSjygzAv6x1KpkBk3WkOMfYNVzwFo5OIF +fMoF6CHO/yhAQIdtSDwZxpnTWEbLChkohCbuzkxQFXyPRoCPYlXdFN+Ycw701NQ 7150IfzlnFtdvEHk3f5KAMwUVf87Ejt0EROidkDjS2XKgG/9qhm42YbVHc8PUeLx UUQ9X5pQryqE3tTO5nufSRasLGD8vgin/ZMJ3rB+UBcbDw11H89uGuD2msun8OXv hfwkXArF9PnPD8lBoonfBL9hBMOKQWdd6IBzsNyNGh4rCUieb31BMCy30XB4WVTB iUZSWD0JCpBNmlwzhL90+gI0cb1aJns8LFEzr05JxHSXQXODPZQ= -----END CERTIFICATE-----Generated at Sun Jun 14 12:18:04 2026 by rpki-client