$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft File: 5AE2131384B411127BE4CF7467B12F83CBAD9996.mft (raw, json) Hash identifier: zVz4G+SDqSDf6aaGI5Kicw/+PuOU2O+AAx8eWqtRka8= Subject key identifier: 49:BC:AC:4E:85:6A:DE:87:9C:1C:56:B0:01:79:3B:B9:20:7A:EA:E4 Authority key identifier: 5A:E2:13:13:84:B4:11:12:7B:E4:CF:74:67:B1:2F:83:CB:AD:99:96 Certificate issuer: /CN=5AE2131384B411127BE4CF7467B12F83CBAD9996 Certificate serial: 1A35056402C1C8279AE80441E05722F2D685DE86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:26:54 +0000 Manifest this update: Wed 17 Jun 2026 07:21:54 +0000 Manifest next update: Thu 18 Jun 2026 10:20:54 +0000 Files and hashes: 1: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: NmIt0iuskNCmt4uz1oIpjbFNHodPs9Y9zQPXOPslKF0=) 2: 5AE2131384B411127BE4CF7467B12F83CBAD9996.crl (hash: sTSmdm6h9WWc17iYdKXAHerYfYAVFH1GI2jXrVZEjqs=) 3: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: I0jTp/Lb+KlyYGeSMZScDem+MblcbAhoI37lZDiIvac=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.crl rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:35:05:64:02:c1:c8:27:9a:e8:04:41:e0:57:22:f2:d6:85:de:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE2131384B411127BE4CF7467B12F83CBAD9996 Validity Not Before: Jun 17 07:21:54 2026 GMT Not After : Jun 18 10:20:54 2026 GMT Subject: CN=49BCAC4E856ADE879C1C56B001793BB9207AEAE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:74:9f:6a:05:76:1e:90:ac:09:fc:e6:a5:59: 4e:36:69:5d:07:aa:75:be:bb:ce:62:b0:f6:14:14: fb:be:1f:84:0b:5a:08:e1:8f:43:55:93:b1:a5:a9: 17:5d:02:b0:12:73:fc:b7:26:d9:98:08:e0:c9:54: d5:75:68:79:9c:7c:8d:5f:e6:e7:dd:0e:06:6b:72: 05:3b:3f:18:e0:9c:53:5e:63:70:c8:5c:6f:ef:2e: 44:c8:35:6e:cb:18:e7:07:e6:69:06:06:e7:e3:f4: 37:f1:2e:18:dc:2d:e1:8c:78:fb:2c:67:5a:bb:af: 74:e8:b4:5d:1e:0a:1c:ca:36:43:67:59:c5:83:18: db:49:cc:12:5f:7d:91:0e:49:c8:a0:a6:6d:11:36: 7b:80:1a:47:bf:20:19:45:6a:82:b3:89:68:00:ba: d2:d7:e2:63:9e:8e:1d:6e:2e:be:fe:48:8e:d8:ef: 04:ee:13:04:06:39:23:8d:a0:b3:73:4e:bf:2c:7a: f7:64:3f:6b:2a:96:b3:39:93:ba:d8:ae:64:c8:82: dd:a9:5a:34:98:68:23:a7:b4:cb:d0:d0:27:fd:00: 5d:d3:84:ba:9e:68:a4:37:29:53:fa:85:a1:13:48: 13:dd:4f:73:f7:83:e8:dd:96:1f:b0:48:63:8c:f4: 53:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BC:AC:4E:85:6A:DE:87:9C:1C:56:B0:01:79:3B:B9:20:7A:EA:E4 X509v3 Authority Key Identifier: keyid:5A:E2:13:13:84:B4:11:12:7B:E4:CF:74:67:B1:2F:83:CB:AD:99:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d1:08:bd:3a:fe:53:72:c1:a6:50:af:5e:93:1f:c2:6d:48: 98:4c:a0:f0:4c:6d:3e:af:fa:71:e1:68:3d:42:72:0c:29:3b: 9d:15:1c:12:7f:30:09:05:e9:75:a8:c2:5b:f1:e8:78:da:69: 10:a4:96:ea:04:0c:16:93:0e:d5:4d:80:5e:a1:ab:8b:c7:ab: 88:df:4a:e6:2c:f9:0d:a9:b1:a4:a1:fb:8c:d2:ae:1c:cc:7e: be:2e:4f:de:7c:bd:62:26:64:fb:13:cf:7f:ef:bc:bf:a5:7d: 99:af:43:81:e5:f2:38:ea:e0:ff:33:65:4d:70:ec:ba:e4:10: 08:f2:4c:e8:ee:2b:1e:0b:29:0f:87:aa:3d:4f:ed:9c:7a:ca: 0d:1a:34:6c:1c:19:08:aa:eb:31:34:d7:b3:33:15:de:e3:fe: 98:b8:c0:8c:a3:bb:98:5d:b7:b4:e4:4d:2d:c4:fc:58:b2:fe: 31:6d:e6:81:aa:a8:58:c9:49:96:d6:78:6c:1f:71:b7:0f:58: 93:30:b8:4f:38:56:c7:be:04:f3:44:f3:89:ac:78:eb:2d:04: ff:fe:74:76:fa:4b:e3:f0:0f:79:17:7a:01:b0:a2:49:cc:98: d6:09:b6:3f:3e:f8:2d:b8:47:15:85:71:23:fd:ed:16:a6:f8: 76:a7:e4:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGjUFZALByCea6ARB4Fci8taF3oYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMjEzMTM4NEI0MTExMjdCRTRDRjc0NjdCMTJGODND QkFEOTk5NjAeFw0yNjA2MTcwNzIxNTRaFw0yNjA2MTgxMDIwNTRaMDMxMTAvBgNV BAMTKDQ5QkNBQzRFODU2QURFODc5QzFDNTZCMDAxNzkzQkI5MjA3QUVBRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdJ9qBXYekKwJ/OalWU42aV0H qnW+u85isPYUFPu+H4QLWgjhj0NVk7GlqRddArASc/y3JtmYCODJVNV1aHmcfI1f 5ufdDgZrcgU7PxjgnFNeY3DIXG/vLkTINW7LGOcH5mkGBufj9DfxLhjcLeGMePss Z1q7r3TotF0eChzKNkNnWcWDGNtJzBJffZEOScigpm0RNnuAGke/IBlFaoKziWgA utLX4mOejh1uLr7+SI7Y7wTuEwQGOSONoLNzTr8sevdkP2sqlrM5k7rYrmTIgt2p WjSYaCOntMvQ0Cf9AF3ThLqeaKQ3KVP6haETSBPdT3P3g+jdlh+wSGOM9FNvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSbysToVq3oecHFawAXk7uSB66uQwHwYDVR0j BBgwFoAUWuITE4S0ERJ75M90Z7Evg8utmZYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQxOTZkNjUtMjFhOC00YjA0LWE5ZGUtNzI4M2ZiZTNjMWNiLzAvNUFFMjEzMTM4 NEI0MTExMjdCRTRDRjc0NjdCMTJGODNDQkFEOTk5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUUyMTMxMzg0QjQxMTEyN0JFNENGNzQ2N0IxMkY4M0NCQUQ5 OTk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvNUFFMjEzMTM4NEI0MTExMjdCRTRDRjc0NjdCMTJG ODNDQkFEOTk5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILRCL06/lNywaZQr16TH8JtSJhMoPBMbT6v +nHhaD1CcgwpO50VHBJ/MAkF6XWowlvx6HjaaRCkluoEDBaTDtVNgF6hq4vHq4jf SuYs+Q2psaSh+4zSrhzMfr4uT958vWImZPsTz3/vvL+lfZmvQ4Hl8jjq4P8zZU1w 7LrkEAjyTOjuKx4LKQ+Hqj1P7Zx6yg0aNGwcGQiq6zE017MzFd7j/pi4wIyju5hd t7TkTS3E/Fiy/jFt5oGqqFjJSZbWeGwfcbcPWJMwuE84Vse+BPNE84mseOstBP/+ dHb6S+PwD3kXegGwoknMmNYJtj8++C24RxWFcSP97Ram+Han5Gk= -----END CERTIFICATE-----Generated at Wed Jun 17 12:40:00 2026 by rpki-client