$ rpki-client -vvf rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft File: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft (raw, json) Hash identifier: qfkFXf/qqMWBDfVR/RJoWBtE6Tpa6xqwFNNV/1ufU/o= Subject key identifier: E6:28:7E:FB:CE:80:1B:AA:0B:73:C0:CA:B1:5E:62:F1:CD:8A:9D:0C Authority key identifier: 5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D Certificate issuer: /CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Certificate serial: 10A42D8ED43FBA467B697B1B55C0ADC884CDEB8A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 05:51:03 +0000 Manifest this update: Sat 13 Jun 2026 05:46:03 +0000 Manifest next update: Sun 14 Jun 2026 06:53:03 +0000 Files and hashes: 1: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl (hash: nxZGX1FYUaQ+1bb1DlnsD00iJtWvQS70bX1PnhuSCLk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 06:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a4:2d:8e:d4:3f:ba:46:7b:69:7b:1b:55:c0:ad:c8:84:cd:eb:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Validity Not Before: Jun 13 05:46:03 2026 GMT Not After : Jun 14 06:53:03 2026 GMT Subject: CN=E6287EFBCE801BAA0B73C0CAB15E62F1CD8A9D0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:db:a0:fc:f7:8f:7c:b1:c5:6e:0e:83:b2:f7: 39:f8:10:51:72:2c:5f:fc:fa:2d:90:3f:7e:2a:72: c5:72:43:fa:76:f0:b4:cc:82:c9:01:7a:37:22:91: cd:12:04:f2:e0:98:bb:02:a2:73:ef:c1:dd:b0:82: 9f:99:43:9e:5d:f6:2a:ce:5c:e4:d8:85:5a:58:e2: 18:76:ac:24:f9:2f:d1:65:3c:8b:1d:a9:b8:3c:8d: 17:fc:b3:47:2a:37:b2:93:c1:60:11:14:5f:fc:b7: 33:58:ef:da:c5:73:d8:bb:35:ed:2b:4a:2d:02:c8: 18:c2:5c:76:9e:c6:28:88:eb:1f:f0:3d:5e:a2:92: 20:76:9b:ea:73:24:40:11:ca:ec:aa:4d:30:b9:d3: 38:9c:37:30:ac:92:28:ad:72:a6:a1:77:72:72:65: aa:d7:04:44:ec:54:56:7c:e3:66:13:e9:6a:a2:23: 2b:1e:3d:c2:8f:c1:98:29:99:93:46:26:67:c3:6b: 93:20:2c:40:3f:77:db:f4:8f:54:35:d9:df:62:45: b8:46:af:d0:d3:69:32:e9:15:05:b1:7e:64:88:3c: e4:45:a5:e1:c9:ca:9c:64:dc:9c:a2:b9:fb:81:a4: 93:04:3d:79:ca:a3:81:f6:82:1c:6d:8c:c3:fd:c4: 55:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:28:7E:FB:CE:80:1B:AA:0B:73:C0:CA:B1:5E:62:F1:CD:8A:9D:0C X509v3 Authority Key Identifier: keyid:5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:58:bb:07:b8:c9:3b:1a:71:3b:79:d3:34:3b:7b:11:fa:87: 5a:d7:e8:a4:ff:07:42:8e:db:61:78:0f:de:6d:6d:dc:3b:88: 1e:d6:44:d2:c1:ee:9e:36:23:7b:ae:59:01:ef:da:8a:e2:71: 52:a3:1e:e2:f8:6c:f9:65:11:4e:cf:1d:5b:56:6d:ab:e1:8b: 99:c3:78:fa:84:5c:fd:7d:b2:81:14:c9:b0:fb:51:51:9b:b0: 81:b9:dd:55:3f:8f:a8:62:05:34:80:e4:1a:9e:6c:3e:fb:5c: a7:aa:13:5c:2e:c2:ab:56:9e:77:ca:33:36:16:64:08:7e:af: 9e:ed:59:75:e3:dc:08:89:ec:77:34:6c:f9:ee:55:9a:be:60: 73:c5:25:ac:07:15:86:38:d0:04:73:74:af:ad:c6:b4:6f:8e: 01:6b:ff:ef:e5:ec:33:5d:90:f3:e9:a9:98:09:a8:e6:61:49: 4d:a7:6d:a7:f9:64:88:9a:ff:c2:f2:31:da:f3:41:be:93:b8: 12:66:2a:5b:93:99:76:7b:e9:12:42:d2:c1:6a:e5:65:ae:75: 40:9e:4d:5a:ed:41:ef:08:ce:e0:bb:63:13:bf:6f:e0:1d:2c: 0a:a6:1d:7c:ca:70:21:ac:33:88:b4:83:9a:3b:ac:bd:03:c2: 86:93:8c:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEKQtjtQ/ukZ7aXsbVcCtyITN64owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1 QTE2ODA0RDAeFw0yNjA2MTMwNTQ2MDNaFw0yNjA2MTQwNjUzMDNaMDMxMTAvBgNV BAMTKEU2Mjg3RUZCQ0U4MDFCQUEwQjczQzBDQUIxNUU2MkYxQ0Q4QTlEMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe26D89498scVuDoOy9zn4EFFy LF/8+i2QP34qcsVyQ/p28LTMgskBejcikc0SBPLgmLsConPvwd2wgp+ZQ55d9irO XOTYhVpY4hh2rCT5L9FlPIsdqbg8jRf8s0cqN7KTwWARFF/8tzNY79rFc9i7Ne0r Si0CyBjCXHaexiiI6x/wPV6ikiB2m+pzJEARyuyqTTC50zicNzCskiitcqahd3Jy ZarXBETsVFZ842YT6WqiIysePcKPwZgpmZNGJmfDa5MgLEA/d9v0j1Q12d9iRbhG r9DTaTLpFQWxfmSIPORFpeHJypxk3JyiufuBpJMEPXnKo4H2ghxtjMP9xFVvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ih++86AG6oLc8DKsV5i8c2KnQwwHwYDVR0j BBgwFoAUX/ajp8MEnWezbNeWmR5c5FoWgE0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM3ZjE5NWEtMzY5ZS00NGJhLTgwY2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdD MzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1QTE2ODA0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RkY2QTNBN0MzMDQ5RDY3QjM2Q0Q3OTY5OTFFNUNFNDVBMTY4 MDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM3ZjE5NWEtMzY5ZS00NGJhLTgw Y2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVD RTQ1QTE2ODA0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9Yuwe4yTsacTt50zQ7exH6h1rX6KT/B0KO 22F4D95tbdw7iB7WRNLB7p42I3uuWQHv2oricVKjHuL4bPllEU7PHVtWbavhi5nD ePqEXP19soEUybD7UVGbsIG53VU/j6hiBTSA5BqebD77XKeqE1wuwqtWnnfKMzYW ZAh+r57tWXXj3AiJ7Hc0bPnuVZq+YHPFJawHFYY40ARzdK+txrRvjgFr/+/l7DNd kPPpqZgJqOZhSU2nbaf5ZIia/8LyMdrzQb6TuBJmKluTmXZ76RJC0sFq5WWudUCe TVrtQe8IzuC7YxO/b+AdLAqmHXzKcCGsM4i0g5o7rL0DwoaTjI0= -----END CERTIFICATE-----Generated at Sat Jun 13 16:51:35 2026 by rpki-client