$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft File: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft (raw, json) Hash identifier: 2NhixE1JJyaMaTETP5163DSlKTBeYNzdjNoAOOej+WM= Subject key identifier: 6F:C7:24:02:74:16:19:3B:A0:F8:17:0C:CD:7C:D8:EB:23:FC:94:F8 Authority key identifier: 5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 Certificate issuer: /CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Certificate serial: 64DA47FB77D799EA3578382F29FC9B385BE5EDD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:58:37 +0000 Manifest this update: Tue 16 Jun 2026 15:53:37 +0000 Manifest next update: Wed 17 Jun 2026 18:32:37 +0000 Files and hashes: 1: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: UIelaNmfU5flXZDJq0nsLusBExENtoFESIIlQRjCnSM=) 2: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: WS8lomwMTaspR/6nCKhD2CzQyU48KkvD9JTWAS0vGqs=) 3: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: EBT29i1PsqgcTeXQev4zG3xPyCKZ73fS930Tr0addJQ=) 4: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: 7DiSKTCfGBXxBlqPDk9dxpdFDrZ/cVVBzOWF8p4BC1M=) 5: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl (hash: apeZLIIYnfufxz9s4dkD9ReYtpTBCBItvT2Exe+JsrI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:da:47:fb:77:d7:99:ea:35:78:38:2f:29:fc:9b:38:5b:e5:ed:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Validity Not Before: Jun 16 15:53:37 2026 GMT Not After : Jun 17 18:32:37 2026 GMT Subject: CN=6FC724027416193BA0F8170CCD7CD8EB23FC94F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d9:ed:cf:04:12:dd:59:55:99:dd:bf:a8:bd: 7a:45:bb:7a:85:e1:f7:61:f7:09:f3:a0:e9:75:a0: 6c:7c:25:0d:df:73:ca:ce:6d:49:2b:ed:4a:31:21: d2:cc:82:a0:ec:37:a8:0f:eb:e4:bf:4a:27:da:56: c0:d1:db:3a:dc:50:b0:26:a2:97:3e:ab:51:53:8e: e1:d1:33:bc:c9:7c:d2:ff:ad:56:c7:53:c1:8e:d9: 76:71:cf:f2:f8:4c:d4:40:6a:5a:7b:3f:9d:3f:d8: f9:a8:e9:d6:f4:2b:b8:20:1b:64:a2:47:98:45:9c: a7:82:46:ee:ba:d0:2f:0f:f3:c8:75:d0:66:e1:a3: 63:f2:b8:da:fd:36:71:2f:c4:b5:2c:67:27:6f:f1: 67:6f:4f:35:31:33:1a:cb:04:98:1e:55:9d:9c:46: d9:c1:d2:c9:f0:ff:6a:34:09:89:ea:1e:ea:d2:e2: 44:e6:93:a2:3e:cf:34:5b:e0:68:43:83:b6:b3:d0: 2c:f9:03:89:b9:e1:ef:4d:4e:62:81:74:8b:eb:c1: e6:8b:63:81:f2:94:f3:f9:b3:37:4b:9d:11:68:89: a2:bd:91:eb:08:e7:2c:6a:93:77:62:05:17:d8:8c: 4c:f0:3c:0e:f1:70:12:71:77:83:08:52:29:c6:24: 54:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C7:24:02:74:16:19:3B:A0:F8:17:0C:CD:7C:D8:EB:23:FC:94:F8 X509v3 Authority Key Identifier: keyid:5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:33:37:1c:35:a3:0c:f6:97:6a:34:6a:81:cc:9a:d7:07:6a: 1d:db:f2:42:27:1d:f3:5e:a1:d8:aa:21:34:1b:0e:03:5b:36: ff:38:f4:c2:25:6d:fd:6d:fb:16:76:c1:c2:5b:da:de:5d:47: 8a:25:8e:80:e0:a7:9f:6c:46:78:36:bd:8f:9d:0b:e9:c4:e7: 43:8a:3a:04:0a:69:70:ca:3a:f6:f7:f2:85:a2:e4:ef:ff:8a: 8c:81:99:9b:99:f1:3e:93:66:10:ce:5a:6e:46:f9:f4:88:ba: 6a:dc:c1:dc:ca:8d:a2:c7:1f:7a:eb:f3:fc:63:f2:61:7d:57: 6a:ad:25:b0:bd:aa:f1:3e:42:08:59:72:b2:ae:5b:d1:91:45: b7:c6:47:1b:7c:f6:c6:a8:91:ae:59:d3:31:95:37:0d:ec:93: ad:a0:f1:de:4e:c9:36:46:d9:95:7d:a4:ad:c4:a4:c5:6e:0b: 13:2a:e2:e9:21:dd:f9:f5:37:ee:ff:e6:0d:24:50:20:3f:86: 9d:18:bf:9d:b5:39:44:21:a3:3f:72:40:6e:71:9f:f6:14:59: 07:ab:7a:63:e9:33:67:8b:3b:52:b1:ec:29:45:7f:e8:cd:6a: a8:b4:bc:fe:7b:83:ad:ee:a4:59:2f:74:e1:c8:c6:37:a1:f9: 26:3c:0d:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZNpH+3fXmeo1eDgvKfybOFvl7dcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAz OUE4M0ZGMzAeFw0yNjA2MTYxNTUzMzdaFw0yNjA2MTcxODMyMzdaMDMxMTAvBgNV BAMTKDZGQzcyNDAyNzQxNjE5M0JBMEY4MTcwQ0NEN0NEOEVCMjNGQzk0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX2e3PBBLdWVWZ3b+ovXpFu3qF 4fdh9wnzoOl1oGx8JQ3fc8rObUkr7UoxIdLMgqDsN6gP6+S/SifaVsDR2zrcULAm opc+q1FTjuHRM7zJfNL/rVbHU8GO2XZxz/L4TNRAalp7P50/2Pmo6db0K7ggG2Si R5hFnKeCRu660C8P88h10Gbho2PyuNr9NnEvxLUsZydv8WdvTzUxMxrLBJgeVZ2c RtnB0snw/2o0CYnqHurS4kTmk6I+zzRb4GhDg7az0Cz5A4m54e9NTmKBdIvrweaL Y4HylPP5szdLnRFoiaK9kesI5yxqk3diBRfYjEzwPA7xcBJxd4MIUinGJFTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb8ckAnQWGTug+BcMzXzY6yP8lPgwHwYDVR0j BBgwFoAUWhwKSWJIY5LuP5mK9tT/cDmoP/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzJmMjg4NzktNDg0NC00MmRlLWIyZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2 MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAzOUE4M0ZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTFDMEE0OTYyNDg2MzkyRUUzRjk5OEFGNkQ0RkY3MDM5QTgz RkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZG NzAzOUE4M0ZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgzNxw1owz2l2o0aoHMmtcHah3b8kInHfNe odiqITQbDgNbNv849MIlbf1t+xZ2wcJb2t5dR4oljoDgp59sRng2vY+dC+nE50OK OgQKaXDKOvb38oWi5O//ioyBmZuZ8T6TZhDOWm5G+fSIumrcwdzKjaLHH3rr8/xj 8mF9V2qtJbC9qvE+QghZcrKuW9GRRbfGRxt89saoka5Z0zGVNw3sk62g8d5OyTZG 2ZV9pK3EpMVuCxMq4ukh3fn1N+7/5g0kUCA/hp0Yv521OUQhoz9yQG5xn/YUWQer emPpM2eLO1Kx7ClFf+jNaqi0vP57g63upFkvdOHIxjeh+SY8DRw= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:39 2026 by rpki-client