$ rpki-client -vvf rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft File: 5FD95F455755676CB89A532D2F2A8301877C4AEC.mft (raw, json) Hash identifier: 5fIlOxjHCHUj/GSA9Wg+oH3cAO48tO8XvmKYy6OakbI= Subject key identifier: 30:12:F7:9C:F3:71:D0:BC:87:C3:AD:9D:76:5B:C4:3B:44:EF:97:22 Authority key identifier: 5F:D9:5F:45:57:55:67:6C:B8:9A:53:2D:2F:2A:83:01:87:7C:4A:EC Certificate issuer: /CN=5FD95F455755676CB89A532D2F2A8301877C4AEC Certificate serial: 41795517EC6B5386C8319C28CDE262E0000C9D49 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:04:08 +0000 Manifest this update: Wed 17 Jun 2026 04:59:08 +0000 Manifest next update: Thu 18 Jun 2026 05:58:08 +0000 Files and hashes: 1: 5FD95F455755676CB89A532D2F2A8301877C4AEC.crl (hash: nv0MCmVTiFAK/VObWS06o24Qf0ghtIIcNDz9tz+QSyM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.crl rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:79:55:17:ec:6b:53:86:c8:31:9c:28:cd:e2:62:e0:00:0c:9d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FD95F455755676CB89A532D2F2A8301877C4AEC Validity Not Before: Jun 17 04:59:08 2026 GMT Not After : Jun 18 05:58:08 2026 GMT Subject: CN=3012F79CF371D0BC87C3AD9D765BC43B44EF9722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:35:1f:2d:1e:97:1a:85:f5:df:e1:f4:a2: 86:8f:ec:8c:8e:75:ea:e8:86:66:2a:4b:6e:44:32: 7a:d2:b9:fd:13:46:59:12:12:c1:d2:5d:01:34:bf: cd:eb:4b:65:0a:75:7a:57:2e:84:f9:c2:69:3f:10: 59:89:97:62:25:17:29:7e:99:56:0a:9c:ac:ef:b4: e4:db:0c:a8:bb:49:69:c9:cf:25:7e:f7:e4:67:9c: 99:c1:41:66:7b:77:9f:45:68:74:92:af:10:6c:19: 91:a2:33:d6:cb:a4:6d:fc:ce:be:b9:f6:8f:34:cc: e9:55:8c:d4:fe:09:d7:a3:15:e6:1c:15:88:ba:16: 44:4b:7d:d3:1a:98:58:8f:c9:c3:69:f7:0d:01:15: 9c:67:99:a3:a3:6a:5a:f6:a4:e4:21:0a:0a:a5:75: 40:b6:2c:0a:29:b8:63:a9:31:ac:7c:59:0a:e6:3a: fe:cd:13:09:a2:ae:2b:75:0c:a4:1b:6c:a6:71:c7: d0:fb:29:63:8b:15:d7:f8:a5:4e:be:0c:61:a6:a4: 52:93:09:52:e8:f7:d0:0b:96:50:bd:ba:11:8b:15: 92:36:ae:6c:27:db:bc:f7:40:ca:d7:35:a6:c3:6c: 09:4a:53:3d:68:8b:35:3f:ca:6f:ad:d8:fe:aa:a1: 17:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:12:F7:9C:F3:71:D0:BC:87:C3:AD:9D:76:5B:C4:3B:44:EF:97:22 X509v3 Authority Key Identifier: keyid:5F:D9:5F:45:57:55:67:6C:B8:9A:53:2D:2F:2A:83:01:87:7C:4A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:05:b4:77:58:11:a2:c5:28:b4:1f:ce:87:42:10:6e:9a:62: 9e:0b:75:e5:95:fc:35:ec:ad:02:bf:de:81:52:1b:b5:2b:72: c3:3d:12:d6:16:89:ed:c6:f0:0b:e3:76:e6:7a:8c:45:00:d3: 93:47:41:83:57:59:0b:a4:48:3b:1c:c5:c1:06:19:71:dc:48: 2a:b7:1c:d6:88:ee:d7:d2:80:91:f0:b7:73:22:75:5b:d3:57: 4f:53:8e:5a:5c:31:e7:de:51:37:69:4d:9b:e8:11:38:44:2c: 49:0d:e3:ef:6e:12:0e:c9:95:f8:50:c7:00:29:73:77:7f:d8: 28:cb:68:88:53:99:6d:a3:5a:14:f5:2d:60:61:d2:65:36:78: 6c:ed:74:0f:8a:60:55:bf:45:18:b1:b0:53:f9:19:e4:d5:5c: 61:a5:17:eb:0f:7f:00:35:6c:89:8e:9d:27:fd:74:2f:f4:f1: e2:34:5b:d5:50:0f:c8:9b:2e:a9:29:fb:71:bd:c8:9c:1a:33: aa:53:a9:ac:bf:07:5d:85:a9:ff:b2:22:c5:b1:59:ad:d0:fb: 69:96:b8:9d:8c:61:fd:3c:14:dc:43:32:07:29:a7:3d:ca:da: b9:ab:d6:df:c2:a6:22:44:01:db:32:70:c0:7b:ba:12:db:ba: 0d:3d:79:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQXlVF+xrU4bIMZwozeJi4AAMnUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZEOTVGNDU1NzU1Njc2Q0I4OUE1MzJEMkYyQTgzMDE4 NzdDNEFFQzAeFw0yNjA2MTcwNDU5MDhaFw0yNjA2MTgwNTU4MDhaMDMxMTAvBgNV BAMTKDMwMTJGNzlDRjM3MUQwQkM4N0MzQUQ5RDc2NUJDNDNCNDRFRjk3MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEyDUfLR6XGoX13+H0ooaP7IyO derohmYqS25EMnrSuf0TRlkSEsHSXQE0v83rS2UKdXpXLoT5wmk/EFmJl2IlFyl+ mVYKnKzvtOTbDKi7SWnJzyV+9+RnnJnBQWZ7d59FaHSSrxBsGZGiM9bLpG38zr65 9o80zOlVjNT+CdejFeYcFYi6FkRLfdMamFiPycNp9w0BFZxnmaOjalr2pOQhCgql dUC2LAopuGOpMax8WQrmOv7NEwmirit1DKQbbKZxx9D7KWOLFdf4pU6+DGGmpFKT CVLo99ALllC9uhGLFZI2rmwn27z3QMrXNabDbAlKUz1oizU/ym+t2P6qoRdlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMBL3nPNx0LyHw62ddlvEO0TvlyIwHwYDVR0j BBgwFoAUX9lfRVdVZ2y4mlMtLyqDAYd8SuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJhOTdiMGItMzlhZS00YzJjLWIxM2ItMDFlMzk1YjdhMjRiLzAvNUZEOTVGNDU1 NzU1Njc2Q0I4OUE1MzJEMkYyQTgzMDE4NzdDNEFFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkQ5NUY0NTU3NTU2NzZDQjg5QTUzMkQyRjJBODMwMTg3N0M0 QUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvNUZEOTVGNDU1NzU1Njc2Q0I4OUE1MzJEMkYyQTgz MDE4NzdDNEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkFtHdYEaLFKLQfzodCEG6aYp4LdeWV/DXs rQK/3oFSG7UrcsM9EtYWie3G8AvjduZ6jEUA05NHQYNXWQukSDscxcEGGXHcSCq3 HNaI7tfSgJHwt3MidVvTV09TjlpcMefeUTdpTZvoEThELEkN4+9uEg7JlfhQxwAp c3d/2CjLaIhTmW2jWhT1LWBh0mU2eGztdA+KYFW/RRixsFP5GeTVXGGlF+sPfwA1 bImOnSf9dC/08eI0W9VQD8ibLqkp+3G9yJwaM6pTqay/B12Fqf+yIsWxWa3Q+2mW uJ2MYf08FNxDMgcppz3K2rmr1t/CpiJEAdsycMB7uhLbug09eRA= -----END CERTIFICATE-----Generated at Wed Jun 17 12:50:19 2026 by rpki-client