$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft File: 5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft (raw, json) Hash identifier: H24HDfJM4PKUNtQEWa0KoXDSoHr6f/BRiETHHYHiZTs= Subject key identifier: E8:54:8B:E5:46:C2:DF:FD:8E:87:F1:C6:40:C1:76:67:E6:F1:35:CE Authority key identifier: 5A:A9:4F:74:20:AA:22:63:29:E6:9A:E8:CD:2E:C0:CE:60:D8:77:6A Certificate issuer: /CN=5AA94F7420AA226329E69AE8CD2EC0CE60D8776A Certificate serial: 0B16CB89E9D7CB92C74B38C373DCC475A1E7B278 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 16:44:25 +0000 Manifest this update: Tue 16 Jun 2026 16:39:25 +0000 Manifest next update: Wed 17 Jun 2026 19:09:25 +0000 Files and hashes: 1: 5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl (hash: yQckwZ/5l2aoDCoxZmIjwG7DfvckR986F7NVMm/QHfs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:16:cb:89:e9:d7:cb:92:c7:4b:38:c3:73:dc:c4:75:a1:e7:b2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AA94F7420AA226329E69AE8CD2EC0CE60D8776A Validity Not Before: Jun 16 16:39:25 2026 GMT Not After : Jun 17 19:09:25 2026 GMT Subject: CN=E8548BE546C2DFFD8E87F1C640C17667E6F135CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:80:70:54:00:a6:69:95:bb:c4:21:f2:7e:75: 6b:7f:ff:9c:8a:7c:41:29:df:b7:fe:13:05:28:40: 7d:52:14:d1:78:eb:02:ae:39:e2:4f:d4:1e:7c:12: 09:67:ef:c8:1f:ae:e1:eb:77:a2:29:17:1c:88:d5: 0f:a0:08:67:63:56:75:f1:b8:28:13:e8:58:63:e7: e5:d3:4a:56:d6:11:fb:20:8f:63:ea:21:b4:9e:67: 3d:0f:5f:1b:ab:70:d9:5a:26:f5:b5:04:d1:84:17: 1c:e1:72:ab:8c:cf:06:60:c6:c5:0c:c0:a1:4c:8f: a9:d9:89:7f:e2:42:eb:d1:04:e1:3f:a7:80:ff:81: 36:c6:ee:81:b2:fc:51:55:8f:a2:8b:b8:fe:ca:e9: f4:73:67:7b:64:86:93:dc:a2:6c:f5:80:e2:85:db: a4:34:9b:5a:f9:97:4d:d3:9b:11:7d:73:a9:ac:bc: b4:e8:7e:98:c7:1f:67:33:6c:68:a6:02:1c:74:88: d5:7a:4e:7b:64:90:c1:8a:4c:6f:56:a7:94:75:d1: e2:fc:e0:02:6d:3a:13:3c:e3:a2:c7:91:3f:7b:34: fb:55:33:eb:b1:6c:00:c9:a0:3c:ec:ab:64:52:a6: 46:0b:f2:d3:cf:d1:bb:b3:a1:11:e5:77:8a:5c:75: 16:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:54:8B:E5:46:C2:DF:FD:8E:87:F1:C6:40:C1:76:67:E6:F1:35:CE X509v3 Authority Key Identifier: keyid:5A:A9:4F:74:20:AA:22:63:29:E6:9A:E8:CD:2E:C0:CE:60:D8:77:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:3e:97:76:10:aa:ad:f1:20:48:53:9c:92:d3:05:08:6c:c2: 1a:f6:02:e1:14:85:c0:22:77:ed:33:7e:94:86:d8:40:be:c4: 0f:29:a4:b5:c4:7c:9b:2a:49:bf:21:5d:20:d3:07:26:15:e2: ce:37:d2:e6:9a:1b:e8:13:59:08:59:b5:ff:03:c4:f4:7a:d7: ce:c3:6b:ef:3a:18:b0:61:08:70:3f:b7:af:8e:96:12:ca:d4: 11:37:f4:6a:c8:7d:56:b8:0b:35:95:b5:3b:79:e7:7c:56:c7: 88:70:1e:e7:b4:92:d7:5a:a2:aa:44:79:94:de:ae:d7:1a:59: f7:67:de:1e:04:f2:26:5d:cf:29:b9:6c:81:30:77:fb:9b:a0: d3:60:9f:a4:cd:5e:4a:59:73:1d:83:75:03:21:80:65:b6:d0: 4a:2e:c8:99:59:f8:e2:01:b9:e4:7b:39:81:7c:38:e4:8a:4b: 05:04:92:81:16:40:8f:dd:87:03:3b:25:57:a2:a6:99:75:26: 1f:c5:5f:fc:9e:06:22:11:7e:e8:57:6b:c2:7d:03:53:1c:0f: 78:29:8c:82:67:de:b8:97:dc:14:fb:3d:a5:5f:d2:9d:c5:27: ee:1c:91:62:cd:79:fb:83:76:50:47:e1:d0:d8:2b:e5:13:f7: 9b:9b:95:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxbLienXy5LHSzjDc9zEdaHnsngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFBOTRGNzQyMEFBMjI2MzI5RTY5QUU4Q0QyRUMwQ0U2 MEQ4Nzc2QTAeFw0yNjA2MTYxNjM5MjVaFw0yNjA2MTcxOTA5MjVaMDMxMTAvBgNV BAMTKEU4NTQ4QkU1NDZDMkRGRkQ4RTg3RjFDNjQwQzE3NjY3RTZGMTM1Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCugHBUAKZplbvEIfJ+dWt//5yK fEEp37f+EwUoQH1SFNF46wKuOeJP1B58Egln78gfruHrd6IpFxyI1Q+gCGdjVnXx uCgT6Fhj5+XTSlbWEfsgj2PqIbSeZz0PXxurcNlaJvW1BNGEFxzhcquMzwZgxsUM wKFMj6nZiX/iQuvRBOE/p4D/gTbG7oGy/FFVj6KLuP7K6fRzZ3tkhpPcomz1gOKF 26Q0m1r5l03TmxF9c6msvLTofpjHH2czbGimAhx0iNV6TntkkMGKTG9Wp5R10eL8 4AJtOhM846LHkT97NPtVM+uxbADJoDzsq2RSpkYL8tPP0buzoRHld4pcdRbVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6FSL5UbC3/2Oh/HGQMF2Z+bxNc4wHwYDVR0j BBgwFoAUWqlPdCCqImMp5prozS7AzmDYd2owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ1MDA4YTAtMGFjMy00OThlLThjYmYtZjMxMTJiOTFiZGY0LzAvNUFBOTRGNzQy MEFBMjI2MzI5RTY5QUU4Q0QyRUMwQ0U2MEQ4Nzc2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUE5NEY3NDIwQUEyMjYzMjlFNjlBRThDRDJFQzBDRTYwRDg3 NzZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ1MDA4YTAtMGFjMy00OThlLThj YmYtZjMxMTJiOTFiZGY0LzAvNUFBOTRGNzQyMEFBMjI2MzI5RTY5QUU4Q0QyRUMw Q0U2MEQ4Nzc2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALE+l3YQqq3xIEhTnJLTBQhswhr2AuEUhcAi d+0zfpSG2EC+xA8ppLXEfJsqSb8hXSDTByYV4s430uaaG+gTWQhZtf8DxPR6187D a+86GLBhCHA/t6+OlhLK1BE39GrIfVa4CzWVtTt553xWx4hwHue0ktdaoqpEeZTe rtcaWfdn3h4E8iZdzym5bIEwd/uboNNgn6TNXkpZcx2DdQMhgGW20EouyJlZ+OIB ueR7OYF8OOSKSwUEkoEWQI/dhwM7JVeippl1Jh/FX/yeBiIRfuhXa8J9A1McD3gp jIJn3riX3BT7PaVf0p3FJ+4ckWLNefuDdlBH4dDYK+UT95ublcE= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:30 2026 by rpki-client