$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft File: 5109EC0B3BA28731E9E261F3B59F3600B563E644.mft (raw, json) Hash identifier: ksvNbq+QmV7AlRss0Ydnq6BxgBb6DLmVw2p3oDleG14= Subject key identifier: 6F:3E:F4:A7:06:0F:7C:62:44:CD:80:47:F6:2B:EC:9E:25:93:96:74 Authority key identifier: 51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44 Certificate issuer: /CN=5109EC0B3BA28731E9E261F3B59F3600B563E644 Certificate serial: 04460F2238529474E30D51216BC8D0A78A424F5F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 22:06:01 +0000 Manifest this update: Sat 13 Jun 2026 22:01:01 +0000 Manifest next update: Sun 14 Jun 2026 23:14:01 +0000 Files and hashes: 1: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: MF1opaQfJw+Iei/Le09BzIXkrXsDLiX2XTUMp350q1Q=) 2: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: Sxg6YyOUpBblg3g3D4oNcKxKaQWWwQAvP3gO95G7uko=) 3: 5109EC0B3BA28731E9E261F3B59F3600B563E644.crl (hash: 8Jq+5IeMwYwkLNKQn/u5xhH3+iCVfgLOFK8TGNmAwDI=) 4: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: WbqdW7MhiN2iDSZWaMRymz0suZjkKuhQk8kC3475/Ds=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:46:0f:22:38:52:94:74:e3:0d:51:21:6b:c8:d0:a7:8a:42:4f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5109EC0B3BA28731E9E261F3B59F3600B563E644 Validity Not Before: Jun 13 22:01:01 2026 GMT Not After : Jun 14 23:14:01 2026 GMT Subject: CN=6F3EF4A7060F7C6244CD8047F62BEC9E25939674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:41:6b:0c:00:28:0b:e9:a3:f2:6c:d6:10: b8:f5:57:f2:5f:22:09:0a:5b:7f:4d:78:05:15:9c: 73:43:7d:7f:e1:72:5f:6a:f0:59:b0:8d:3f:32:ff: 09:6d:a6:be:13:e7:b1:1d:96:51:b5:67:f3:d6:cf: 2e:83:02:f7:93:ec:3b:c4:65:73:a4:1b:4f:76:11: 29:79:e6:89:a6:8f:a3:6f:7b:73:34:61:42:15:b7: 73:ee:96:29:7f:44:f2:85:0e:d8:91:9e:29:1c:31: 40:06:e4:4c:1b:8f:20:f8:ec:ba:78:8d:8a:fa:f9: 28:6d:81:9b:8b:44:1f:db:1f:ed:bc:3b:6d:7a:f9: ec:bc:f5:58:4b:f6:fb:04:ea:e2:41:81:49:59:30: 75:bc:60:43:a6:e2:82:08:b8:51:e9:7d:e1:02:f1: 77:f7:89:45:69:39:d9:5d:cb:3d:61:5d:46:f9:bb: e4:f5:88:1f:b5:67:d3:30:43:18:d5:c1:b4:8d:af: b5:7b:b8:cf:24:b2:37:99:96:4d:92:83:72:27:2f: 7c:59:3e:f6:c3:9d:d7:aa:10:17:b9:94:9c:c4:a2: e3:36:95:81:4d:f2:74:29:b4:c7:1f:f9:9c:6d:dd: 67:56:d2:63:89:93:9a:9c:94:94:ca:75:b0:b1:9e: 41:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3E:F4:A7:06:0F:7C:62:44:CD:80:47:F6:2B:EC:9E:25:93:96:74 X509v3 Authority Key Identifier: keyid:51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:57:65:07:07:03:52:72:5a:f7:2a:45:04:ba:df:66:f1:cb: 4b:62:a9:b0:b4:a3:8c:a6:e4:13:b6:d2:b6:2f:12:4b:e4:c1: 06:d8:98:49:dd:00:f1:a0:fb:ef:8e:c8:bc:6b:2a:d4:e8:83: 8f:67:6f:5a:92:e3:37:32:e9:61:d3:37:83:54:f9:a2:36:e5: 9a:81:4b:03:2f:4f:bf:e5:98:9e:ea:84:d6:e5:e5:90:84:92: 41:a9:80:ed:f7:6b:2c:19:86:bb:7b:4e:84:d4:31:6b:a8:9a: 2b:d4:1d:70:99:9d:9e:f7:28:71:69:0e:46:17:28:5c:88:e5: 80:4b:3b:2d:51:bd:bb:5d:96:13:61:1a:94:42:74:5c:0b:58: 67:00:81:c0:97:fe:85:5e:3e:f2:24:01:30:70:67:0e:bd:61: 0d:78:7e:56:1b:af:73:6c:e6:00:c1:89:94:29:5d:bb:4e:45: 12:d9:92:6c:88:bd:42:ac:82:96:9a:32:9b:22:a5:c2:0d:a8: 27:0e:7d:68:83:7a:db:d5:9b:9a:15:a9:cc:14:6b:6e:3b:f9: 41:e1:9a:df:62:48:3f:b4:41:31:33:5e:3f:72:23:80:e5:47: d2:2e:a7:a1:e9:62:0b:5d:b3:5d:c1:d2:3e:e6:29:77:25:e2: 3e:c5:c1:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBEYPIjhSlHTjDVEha8jQp4pCT18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwOUVDMEIzQkEyODczMUU5RTI2MUYzQjU5RjM2MDBC NTYzRTY0NDAeFw0yNjA2MTMyMjAxMDFaFw0yNjA2MTQyMzE0MDFaMDMxMTAvBgNV BAMTKDZGM0VGNEE3MDYwRjdDNjI0NENEODA0N0Y2MkJFQzlFMjU5Mzk2NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nkFrDAAoC+mj8mzWELj1V/Jf IgkKW39NeAUVnHNDfX/hcl9q8FmwjT8y/wltpr4T57EdllG1Z/PWzy6DAveT7DvE ZXOkG092ESl55ommj6Nve3M0YUIVt3Pulil/RPKFDtiRnikcMUAG5EwbjyD47Lp4 jYr6+ShtgZuLRB/bH+28O216+ey89VhL9vsE6uJBgUlZMHW8YEOm4oIIuFHpfeEC 8Xf3iUVpOdldyz1hXUb5u+T1iB+1Z9MwQxjVwbSNr7V7uM8ksjeZlk2Sg3InL3xZ PvbDndeqEBe5lJzEouM2lYFN8nQptMcf+Zxt3WdW0mOJk5qclJTKdbCxnkFnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbz70pwYPfGJEzYBH9ivsniWTlnQwHwYDVR0j BBgwFoAUUQnsCzuihzHp4mHztZ82ALVj5kQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzliM2JiMzQtMTVlMi00NDg3LWI1MjctNmU3NTEyODZjZTdkLzAvNTEwOUVDMEIz QkEyODczMUU5RTI2MUYzQjU5RjM2MDBCNTYzRTY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTA5RUMwQjNCQTI4NzMxRTlFMjYxRjNCNTlGMzYwMEI1NjNF NjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvNTEwOUVDMEIzQkEyODczMUU5RTI2MUYzQjU5RjM2 MDBCNTYzRTY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRXZQcHA1JyWvcqRQS632bxy0tiqbC0o4ym 5BO20rYvEkvkwQbYmEndAPGg+++OyLxrKtTog49nb1qS4zcy6WHTN4NU+aI25ZqB SwMvT7/lmJ7qhNbl5ZCEkkGpgO33aywZhrt7ToTUMWuomivUHXCZnZ73KHFpDkYX KFyI5YBLOy1RvbtdlhNhGpRCdFwLWGcAgcCX/oVePvIkATBwZw69YQ14flYbr3Ns 5gDBiZQpXbtORRLZkmyIvUKsgpaaMpsipcINqCcOfWiDetvVm5oVqcwUa247+UHh mt9iSD+0QTEzXj9yI4DlR9Iup6HpYgtds13B0j7mKXcl4j7FwYM= -----END CERTIFICATE-----Generated at Sun Jun 14 04:45:36 2026 by rpki-client