$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft File: 5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft (raw, json) Hash identifier: ng5ANc0cdNX60ifiXu8677qk4vHvAl8OIVl5VxYosw8= Subject key identifier: 0A:5D:C0:73:79:14:D3:00:14:C7:4E:E8:34:DD:86:18:B0:05:FD:81 Authority key identifier: 5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1 Certificate issuer: /CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1 Certificate serial: 416B10C8954356347D82F7B08DAA5FCA592D32C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:03:44 +0000 Manifest this update: Tue 16 Jun 2026 15:58:44 +0000 Manifest next update: Wed 17 Jun 2026 16:16:44 +0000 Files and hashes: 1: 5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl (hash: M076Pu6peyLyvg6jgkrbsHOiz0flMQCfPjIKaNUBgbE=) 2: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: yFzJDaOR3ALC9R9lcLlFWOcSjWJQYhCD//08bWWKhcU=) 3: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: CgpRUUxgJdvC2DaauFEj0ljqW/Af8HR5RmTcf5er/Ag=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 16:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:6b:10:c8:95:43:56:34:7d:82:f7:b0:8d:aa:5f:ca:59:2d:32:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1 Validity Not Before: Jun 16 15:58:44 2026 GMT Not After : Jun 17 16:16:44 2026 GMT Subject: CN=0A5DC0737914D30014C74EE834DD8618B005FD81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:25:0d:5c:6f:01:25:83:cf:97:44:ae:98:35: 1a:35:63:1c:16:2d:46:ba:aa:c5:c3:d9:37:71:97: 77:62:ca:fc:46:ed:44:f7:25:a4:b6:59:9f:6b:75: 87:ea:4d:0b:ab:1c:ac:34:56:c0:ce:c0:06:0b:b9: 01:bf:cf:76:e1:a8:c0:a8:95:a1:26:a5:60:cb:20: 93:6a:81:5c:0f:a4:4c:52:ed:3a:aa:78:0b:ad:d3: 82:5e:ef:00:0a:3f:3a:cd:10:5f:dd:3d:86:c8:73: b7:b1:d7:bb:50:46:28:b3:57:5f:f6:20:d3:a1:74: fb:a9:cc:ff:2d:db:df:7b:7e:e6:50:64:23:c4:9e: f0:12:a9:b8:13:37:3b:b0:13:74:c9:35:56:35:0e: 56:ab:34:7b:b2:bc:a3:6f:79:f0:47:f4:71:eb:2f: 41:f3:f0:ee:7e:94:c6:ea:40:dd:23:87:eb:f0:28: 33:b2:07:11:e8:c7:4f:91:d2:ff:43:46:55:8c:b4: 81:ca:97:1a:60:5c:d6:a1:64:fc:51:04:50:73:f0: d3:48:50:b0:7a:50:1c:84:44:97:54:e5:f7:7f:ae: 7c:4a:88:0d:f4:56:f6:1a:bd:d7:52:4c:a9:2f:b9: c4:10:85:3d:25:64:d6:11:7e:cd:f9:d8:14:9a:ff: 6b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5D:C0:73:79:14:D3:00:14:C7:4E:E8:34:DD:86:18:B0:05:FD:81 X509v3 Authority Key Identifier: keyid:5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:70:b3:86:c3:fa:23:56:05:fe:db:ac:96:e8:f8:e6:de:4c: 8b:f3:66:4d:65:8d:4c:cb:88:13:80:99:5f:f5:cd:70:70:00: 36:c2:f5:1c:59:ed:7f:13:19:51:5b:ec:cd:30:83:db:11:a2: 81:7b:e3:71:75:cc:ca:f8:3a:0e:ea:ba:8d:d7:9f:b9:12:6d: c5:b1:c6:f5:16:69:5d:78:9c:3f:f4:8f:e8:1a:1c:d3:78:0b: 10:57:22:a4:dc:2b:34:c1:c6:9a:ab:6a:1e:f1:cb:07:ac:01: 6a:bc:66:a2:f1:f5:e8:4d:ca:28:bd:34:ae:91:d8:fb:0f:4c: 23:d3:59:49:05:3b:78:fe:dd:a0:b1:63:e7:4b:ba:78:22:95: 83:83:95:55:90:b7:20:cd:ed:42:cf:52:f1:c9:48:0d:91:e6: 9e:db:94:35:12:09:9d:97:0f:c8:63:7c:b6:50:bf:30:3b:a4: 0d:03:d6:5f:3d:eb:d5:1b:99:50:ee:ee:09:c3:9b:ae:a7:9c: da:9b:f2:79:55:0e:9f:f0:ae:0d:08:2d:cd:e5:b3:1f:b9:6c: 9d:a1:1b:4f:e0:bb:fa:cd:b9:1c:9c:cb:f6:0a:17:33:0f:d8: 8b:f3:a5:0f:35:55:b4:92:8e:5c:f0:74:18:6c:ae:27:32:f0: 29:67:1a:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQWsQyJVDVjR9gvewjapfylktMsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVEMEZDOURFM0M1QkYwRjI2NDFGQkM4MkUwMzUzM0FE NUE2QzVDMTAeFw0yNjA2MTYxNTU4NDRaFw0yNjA2MTcxNjE2NDRaMDMxMTAvBgNV BAMTKDBBNURDMDczNzkxNEQzMDAxNEM3NEVFODM0REQ4NjE4QjAwNUZEODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJQ1cbwElg8+XRK6YNRo1YxwW LUa6qsXD2Tdxl3diyvxG7UT3JaS2WZ9rdYfqTQurHKw0VsDOwAYLuQG/z3bhqMCo laEmpWDLIJNqgVwPpExS7TqqeAut04Je7wAKPzrNEF/dPYbIc7ex17tQRiizV1/2 INOhdPupzP8t2997fuZQZCPEnvASqbgTNzuwE3TJNVY1DlarNHuyvKNvefBH9HHr L0Hz8O5+lMbqQN0jh+vwKDOyBxHox0+R0v9DRlWMtIHKlxpgXNahZPxRBFBz8NNI ULB6UByERJdU5fd/rnxKiA30VvYavddSTKkvucQQhT0lZNYRfs352BSa/2uVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCl3Ac3kU0wAUx07oNN2GGLAF/YEwHwYDVR0j BBgwFoAUXtD8nePFvw8mQfvILgNTOtWmxcEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJkNjZkMTAtYjg1Ny00YmVmLTkzOTUtNDVkNWFiMmM0NGY5LzAvNUVEMEZDOURF M0M1QkYwRjI2NDFGQkM4MkUwMzUzM0FENUE2QzVDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RUQwRkM5REUzQzVCRjBGMjY0MUZCQzgyRTAzNTMzQUQ1QTZD NUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNUVEMEZDOURFM0M1QkYwRjI2NDFGQkM4MkUwMzUz M0FENUE2QzVDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFws4bD+iNWBf7brJbo+ObeTIvzZk1ljUzL iBOAmV/1zXBwADbC9RxZ7X8TGVFb7M0wg9sRooF743F1zMr4Og7quo3Xn7kSbcWx xvUWaV14nD/0j+gaHNN4CxBXIqTcKzTBxpqrah7xywesAWq8ZqLx9ehNyii9NK6R 2PsPTCPTWUkFO3j+3aCxY+dLungilYODlVWQtyDN7ULPUvHJSA2R5p7blDUSCZ2X D8hjfLZQvzA7pA0D1l8969UbmVDu7gnDm66nnNqb8nlVDp/wrg0ILc3lsx+5bJ2h G0/gu/rNuRycy/YKFzMP2IvzpQ81VbSSjlzwdBhsricy8ClnGuc= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:03 2026 by rpki-client