$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft File: 5137BC6C642818ED44761CE24BD59136B86E9502.mft (raw, json) Hash identifier: yXA/GQNQWt5M+DbFGPHiBHjjFcBDO8pN0MKui6dSArI= Subject key identifier: CC:85:B9:35:93:EC:7D:83:26:79:E6:03:3C:39:3C:0B:CF:DA:FB:39 Authority key identifier: 51:37:BC:6C:64:28:18:ED:44:76:1C:E2:4B:D5:91:36:B8:6E:95:02 Certificate issuer: /CN=5137BC6C642818ED44761CE24BD59136B86E9502 Certificate serial: 3E5EE31E5F136FEC77472C22FDAF3A644FEB7B00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:34:14 +0000 Manifest this update: Tue 16 Jun 2026 16:29:14 +0000 Manifest next update: Wed 17 Jun 2026 17:52:14 +0000 Files and hashes: 1: 5137BC6C642818ED44761CE24BD59136B86E9502.crl (hash: qlWiChXJcJRlUvHnwcCGL8Cq4PcOOUawOwjtMPgJGWg=) 2: 3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa (hash: rnnGREcPzTzqU+DHtFpFgNVjo93sVnYIgoX5i3YQ96Y=) 3: 323430333a393530303a3a2f33322d3336203d3e2039363537.roa (hash: Bjupm6rpCAaMTeTPZ2eGuF40Rt3f9ZMn/qqAW7B+FsQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.crl rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:5e:e3:1e:5f:13:6f:ec:77:47:2c:22:fd:af:3a:64:4f:eb:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5137BC6C642818ED44761CE24BD59136B86E9502 Validity Not Before: Jun 16 16:29:14 2026 GMT Not After : Jun 17 17:52:14 2026 GMT Subject: CN=CC85B93593EC7D832679E6033C393C0BCFDAFB39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:fa:a5:ec:fd:5b:96:78:a7:6a:a1:bf:d4: f2:a3:be:6f:ea:d1:ad:16:50:ea:98:a7:75:ae:8a: a4:a7:64:5b:0c:d5:dd:bf:71:3a:f9:8e:aa:40:3f: ac:bc:18:a5:48:e9:f3:3b:8b:4a:f5:90:88:16:ec: b0:47:7b:c2:83:fe:30:d8:b4:1d:cd:65:e6:69:ef: 1e:76:44:2e:de:3c:c3:e1:26:3f:3d:28:a7:58:76: 98:7d:b0:26:a7:06:f8:1e:01:2a:13:be:2d:d1:b6: 34:3e:62:ad:76:0d:33:c7:e8:9d:5e:f7:a4:85:25: 6f:16:c0:19:be:b2:7e:0a:9f:5f:99:18:9f:60:d6: 04:84:05:23:a8:c8:e3:d7:37:1e:dc:01:e9:f0:3a: 34:fc:0e:bd:25:de:9f:79:ec:cb:e3:0d:86:5c:1f: b6:1f:2c:e4:13:05:bd:8c:96:42:30:80:57:17:6b: b2:6d:85:34:25:fb:9b:21:3e:68:9b:52:09:a2:3a: 03:e4:1e:07:53:b2:29:d2:2f:ca:80:17:96:b0:76: bd:c8:11:36:ed:cf:6f:55:8b:1b:6e:bb:22:b3:c0: c1:14:e7:72:6d:48:c1:15:96:f2:60:46:c6:01:7c: f5:21:6d:e3:d5:21:40:aa:2a:8a:61:4f:08:6b:bf: 06:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:85:B9:35:93:EC:7D:83:26:79:E6:03:3C:39:3C:0B:CF:DA:FB:39 X509v3 Authority Key Identifier: keyid:51:37:BC:6C:64:28:18:ED:44:76:1C:E2:4B:D5:91:36:B8:6E:95:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:16:2f:63:11:2f:17:49:9c:d9:2b:6c:07:af:9b:03:44:7e: 45:df:6d:ef:a3:9e:93:14:bc:cd:75:f8:65:24:e3:0a:ff:68: 2c:b7:58:4a:9a:6c:8f:8b:43:d0:1a:2a:cf:b8:3a:51:cb:2f: c7:48:17:1c:82:f6:09:e8:48:41:38:5c:e9:9b:90:0f:2f:9a: 07:4b:2d:92:dd:ef:79:64:fa:a6:9d:b2:20:bc:57:a8:97:62: 15:2a:a5:06:30:69:9d:38:01:60:2e:66:df:69:2c:3b:37:d5: be:ab:9a:3c:9f:b2:c5:db:5b:af:3f:58:66:47:0c:ff:df:cc: 27:ee:c3:e2:6a:5b:e7:c2:b1:b2:c1:08:c3:a0:23:fb:41:6a: fa:bd:51:fd:07:0a:8c:94:a1:22:d2:a8:d1:fd:50:75:04:fd: 17:44:69:32:83:ab:06:73:cd:ec:e6:b3:f6:c4:b2:9d:9f:82: b5:7c:e6:ab:3e:4f:56:b5:10:f9:e2:d8:02:8e:7a:19:ce:90: 68:56:f6:c0:07:8a:e9:e0:92:11:ad:05:6f:78:cf:e8:9f:8f: 88:98:3b:86:96:b0:96:19:48:a6:c9:2d:5f:09:df:37:d5:82: ae:64:4f:6a:63:4d:fd:97:e5:6e:45:b9:1e:81:42:59:3a:25: de:ad:86:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPl7jHl8Tb+x3Rywi/a86ZE/rewAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzN0JDNkM2NDI4MThFRDQ0NzYxQ0UyNEJENTkxMzZC ODZFOTUwMjAeFw0yNjA2MTYxNjI5MTRaFw0yNjA2MTcxNzUyMTRaMDMxMTAvBgNV BAMTKENDODVCOTM1OTNFQzdEODMyNjc5RTYwMzNDMzkzQzBCQ0ZEQUZCMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLPPql7P1blninaqG/1PKjvm/q 0a0WUOqYp3WuiqSnZFsM1d2/cTr5jqpAP6y8GKVI6fM7i0r1kIgW7LBHe8KD/jDY tB3NZeZp7x52RC7ePMPhJj89KKdYdph9sCanBvgeASoTvi3RtjQ+Yq12DTPH6J1e 96SFJW8WwBm+sn4Kn1+ZGJ9g1gSEBSOoyOPXNx7cAenwOjT8Dr0l3p957MvjDYZc H7YfLOQTBb2MlkIwgFcXa7JthTQl+5shPmibUgmiOgPkHgdTsinSL8qAF5awdr3I ETbtz29VixtuuyKzwMEU53JtSMEVlvJgRsYBfPUhbePVIUCqKophTwhrvwbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzIW5NZPsfYMmeeYDPDk8C8/a+zkwHwYDVR0j BBgwFoAUUTe8bGQoGO1EdhziS9WRNrhulQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhmNmJlYjgtZTRlOC00ZTM5LTgyNzUtMWM2ZDc3YzNlZWY4LzAvNTEzN0JDNkM2 NDI4MThFRDQ0NzYxQ0UyNEJENTkxMzZCODZFOTUwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTM3QkM2QzY0MjgxOEVENDQ3NjFDRTI0QkQ1OTEzNkI4NkU5 NTAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhmNmJlYjgtZTRlOC00ZTM5LTgy NzUtMWM2ZDc3YzNlZWY4LzAvNTEzN0JDNkM2NDI4MThFRDQ0NzYxQ0UyNEJENTkx MzZCODZFOTUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4WL2MRLxdJnNkrbAevmwNEfkXfbe+jnpMU vM11+GUk4wr/aCy3WEqabI+LQ9AaKs+4OlHLL8dIFxyC9gnoSEE4XOmbkA8vmgdL LZLd73lk+qadsiC8V6iXYhUqpQYwaZ04AWAuZt9pLDs31b6rmjyfssXbW68/WGZH DP/fzCfuw+JqW+fCsbLBCMOgI/tBavq9Uf0HCoyUoSLSqNH9UHUE/RdEaTKDqwZz zezms/bEsp2fgrV85qs+T1a1EPni2AKOehnOkGhW9sAHiungkhGtBW94z+ifj4iY O4aWsJYZSKbJLV8J3zfVgq5kT2pjTf2X5W5FuR6BQlk6Jd6thqs= -----END CERTIFICATE-----Generated at Wed Jun 17 11:49:16 2026 by rpki-client