$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft File: 5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft (raw, json) Hash identifier: KSelERNjnUwnkQSUPJlydzn+6j4DF9BD+/wQgtYM+4I= Subject key identifier: F6:2D:EB:37:11:82:5D:CE:22:F5:62:C9:5C:1B:B8:90:02:5D:FE:F7 Authority key identifier: 5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64 Certificate issuer: /CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564 Certificate serial: 1EE0EF4EC17AA0E84F6C27DDB59E813DF5E3C19F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 21:30:14 +0000 Manifest this update: Tue 16 Jun 2026 21:25:14 +0000 Manifest next update: Wed 17 Jun 2026 22:28:14 +0000 Files and hashes: 1: 5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl (hash: /Q1fVcWJPPNuaJlhEEWE6OI2yB12YWcwk+rtoRI9XUE=) 2: 3130332e3134322e38382e302f32332d3233203d3e20313339333638.roa (hash: 85nzKNKm1prDMlKjYCs/G3skXgXdFpd3BSx7AhsXh80=) 3: 3130332e3134322e38382e302f32342d3234203d3e20313339333638.roa (hash: tQktaum4KycUd3NVfEb+S8gEbr6uIhyBlDiFsL9oiH8=) 4: 3130332e3134322e38392e302f32342d3234203d3e20313339333638.roa (hash: 4JRcCjrbt6UQy9keTGtyxuVyA16nB/RDNc0x3IcBoFU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e0:ef:4e:c1:7a:a0:e8:4f:6c:27:dd:b5:9e:81:3d:f5:e3:c1:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564 Validity Not Before: Jun 16 21:25:14 2026 GMT Not After : Jun 17 22:28:14 2026 GMT Subject: CN=F62DEB3711825DCE22F562C95C1BB890025DFEF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:76:d7:ef:ad:d4:01:14:20:51:51:b9:73:b8: c7:79:ad:71:b8:c7:ef:c7:5e:e3:4a:cb:20:9d:c1: 8d:14:99:eb:e3:e8:26:e5:1c:aa:9b:08:76:16:0e: e6:2d:69:19:fd:27:fa:77:91:60:cb:d7:f0:34:c4: 60:67:b9:69:cd:ad:16:31:0e:98:33:d4:0a:c2:0b: e9:a1:16:46:63:d7:71:47:59:b8:de:c3:3c:2a:1f: b9:93:d7:8d:36:9b:4c:0c:9d:1d:f6:bf:2b:06:af: d9:76:f3:0b:c2:f1:6d:c1:68:96:1a:f6:e2:da:51: e0:bd:9f:50:72:e1:eb:c4:51:7d:b2:ec:07:ca:6f: d2:67:5e:f9:83:0a:ba:1a:bf:fd:46:34:42:df:d8: 5f:ae:bc:c4:a5:86:a7:6e:e2:4f:e5:af:a5:63:8e: a2:1c:d2:a0:50:c4:09:6f:98:08:4f:36:90:7c:91: 21:ff:36:30:cd:ea:cb:f9:fb:40:af:9a:9b:af:ab: a3:1d:8b:15:75:ce:8c:c9:80:e7:ed:1a:59:e0:f3: 15:26:88:c2:77:3f:16:70:01:28:da:ae:51:59:a2: 49:ec:5b:12:79:ef:94:6a:88:3e:c4:40:fb:15:68: e8:aa:0a:f9:d3:bf:16:90:d9:fd:3d:c3:de:b0:96: 0f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2D:EB:37:11:82:5D:CE:22:F5:62:C9:5C:1B:B8:90:02:5D:FE:F7 X509v3 Authority Key Identifier: keyid:5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d6:b2:87:45:e4:42:6a:53:29:d9:9c:67:1a:89:3a:c2:07: 00:04:a9:e4:e4:6c:e1:c5:42:10:91:a5:01:c1:aa:27:7a:91: 59:41:70:31:9a:71:b2:98:cb:99:78:4b:8b:6e:b1:9e:d7:fb: 73:85:65:4b:50:44:1a:d3:eb:83:a3:4f:2d:f8:10:3b:80:88: 05:d3:57:50:c4:9a:b0:a2:37:59:65:5e:b1:72:03:1f:20:4d: eb:81:d8:a8:65:1e:f3:9c:f8:88:a3:b1:09:ef:ae:04:7f:f2: 64:d5:12:aa:4e:b7:5c:8b:54:64:ec:2f:2f:d0:ef:b0:3b:4d: 73:8f:2d:a6:e1:78:49:82:3d:7e:0b:1c:c8:37:55:76:ce:67: 4f:a8:27:53:63:8a:70:97:05:64:98:82:c6:91:55:1c:24:07: 04:30:5b:2e:e6:4c:a8:84:ee:f4:3f:ed:d5:78:c0:9a:c9:c9: 4a:f9:0f:71:a6:f1:b8:54:ec:1d:92:a1:74:c4:dc:bb:c5:4d: 9a:3d:88:0b:6f:df:8c:76:b4:9e:89:e3:12:d0:ce:94:d3:bc: f2:ac:f8:87:1d:4a:65:b8:39:44:13:3c:56:79:fe:71:12:5e: 53:c3:82:b6:2b:59:78:ea:e7:02:ca:ad:04:02:d5:3d:6c:24: 2e:30:41:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHuDvTsF6oOhPbCfdtZ6BPfXjwZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGNURCQjE0OEQwRjRFQUJCMUE3MDg3RDhDQUQ4N0ZC MkE5MTU2NDAeFw0yNjA2MTYyMTI1MTRaFw0yNjA2MTcyMjI4MTRaMDMxMTAvBgNV BAMTKEY2MkRFQjM3MTE4MjVEQ0UyMkY1NjJDOTVDMUJCODkwMDI1REZFRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvdtfvrdQBFCBRUblzuMd5rXG4 x+/HXuNKyyCdwY0Umevj6CblHKqbCHYWDuYtaRn9J/p3kWDL1/A0xGBnuWnNrRYx Dpgz1ArCC+mhFkZj13FHWbjewzwqH7mT1402m0wMnR32vysGr9l28wvC8W3BaJYa 9uLaUeC9n1By4evEUX2y7AfKb9JnXvmDCroav/1GNELf2F+uvMSlhqdu4k/lr6Vj jqIc0qBQxAlvmAhPNpB8kSH/NjDN6sv5+0Cvmpuvq6MdixV1zozJgOftGlng8xUm iMJ3PxZwASjarlFZoknsWxJ575RqiD7EQPsVaOiqCvnTvxaQ2f09w96wlg/TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9i3rNxGCXc4i9WLJXBu4kAJd/vcwHwYDVR0j BBgwFoAUXfXbsUjQ9Oq7GnCH2MrYf7KpFWQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWQ0OWQ0OWItZGFlYS00OGMwLThkNzctMTM3MzhiNzQ1NzcyLzAvNURGNURCQjE0 OEQwRjRFQUJCMUE3MDg3RDhDQUQ4N0ZCMkE5MTU2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81REY1REJCMTQ4RDBGNEVBQkIxQTcwODdEOENBRDg3RkIyQTkx NTY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWQ0OWQ0OWItZGFlYS00OGMwLThk NzctMTM3MzhiNzQ1NzcyLzAvNURGNURCQjE0OEQwRjRFQUJCMUE3MDg3RDhDQUQ4 N0ZCMkE5MTU2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDWsodF5EJqUynZnGcaiTrCBwAEqeTkbOHF QhCRpQHBqid6kVlBcDGacbKYy5l4S4tusZ7X+3OFZUtQRBrT64OjTy34EDuAiAXT V1DEmrCiN1llXrFyAx8gTeuB2KhlHvOc+IijsQnvrgR/8mTVEqpOt1yLVGTsLy/Q 77A7TXOPLabheEmCPX4LHMg3VXbOZ0+oJ1NjinCXBWSYgsaRVRwkBwQwWy7mTKiE 7vQ/7dV4wJrJyUr5D3Gm8bhU7B2SoXTE3LvFTZo9iAtv34x2tJ6J4xLQzpTTvPKs +IcdSmW4OUQTPFZ5/nESXlPDgrYrWXjq5wLKrQQC1T1sJC4wQQg= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:17 2026 by rpki-client