$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft File: F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft (raw, json) Hash identifier: 1XCPQyUsc568fODfccY2H9fHj3nSnpN0/Us2GNbVSos= Subject key identifier: CD:18:8E:52:B9:09:03:C3:69:DA:7A:40:F4:44:CF:8E:38:DC:99:D2 Authority key identifier: F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A Certificate issuer: /CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A Certificate serial: 7CFFD0B34DDA7236C0734C9A490FC0D7E6970B97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 05:15:16 +0000 Manifest this update: Sat 13 Jun 2026 05:10:16 +0000 Manifest next update: Sun 14 Jun 2026 07:54:16 +0000 Files and hashes: 1: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: QWT8clnM0WSHO8g469pTliT/WCBN4Kmg5lPcdlpi8/s=) 2: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: +WK4iRrSPfnkrJEz8Gq8cT5bkygdZQkUoe49fePODB0=) 3: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: +u/9D9vfsyaLH2MwRf/oL8GHy2QY5reW5CdS1r9iLUo=) 4: F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl (hash: ywxGTQHG+2D68EO/95oIyJctzbJhxOw/BmwJJN/+jWM=) 5: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: cRnHdJ6ERY/gOe2MatEAOxOT41WEyNcMegmve8GczJo=) 6: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: pZiifrcLbDchRtYwQAPaQx4TCr202zft6iysN0v48zg=) 7: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: noFGhrWS2shsN12iREyShnTzBgPrE7wgh7GcY82aKhc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 07:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ff:d0:b3:4d:da:72:36:c0:73:4c:9a:49:0f:c0:d7:e6:97:0b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A Validity Not Before: Jun 13 05:10:16 2026 GMT Not After : Jun 14 07:54:16 2026 GMT Subject: CN=CD188E52B90903C369DA7A40F444CF8E38DC99D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:54:b2:e4:36:23:25:ef:cc:a6:08:59:1b:bf: d3:95:e7:64:54:46:6d:5c:36:fe:8d:fc:f3:93:36: 88:72:b7:7e:c1:be:ea:8f:c6:8b:39:29:35:f5:de: 9d:28:7c:4e:23:10:e3:5d:04:32:3d:ee:2f:c6:bd: 39:c1:d9:1f:5c:24:c9:65:10:21:b2:c9:a8:00:c5: 8d:d0:99:f0:93:30:93:12:b5:12:6f:b6:55:9a:8b: b1:e3:50:67:98:6e:3e:eb:dd:c4:60:41:55:1d:db: be:05:15:73:f7:13:4d:b2:90:eb:23:20:3f:87:cf: 20:ea:07:7b:fe:17:46:e7:86:bd:01:06:87:9c:72: c2:5a:8b:0f:f9:b8:9d:1c:14:3d:a0:f1:e0:14:47: e2:ce:36:80:08:31:2a:ce:32:15:a6:76:28:08:56: dc:1d:1f:08:0a:72:1f:5a:d8:66:c9:de:44:bd:ce: b3:79:62:0e:59:b1:7a:27:9e:07:ee:3e:b9:7b:2a: 30:34:ac:c9:3c:5e:94:e7:e1:21:75:e1:85:49:b3: f8:3d:9a:94:d0:23:05:3b:1e:e1:89:7e:b6:c3:46: 8c:63:f4:6b:90:7d:d9:2c:9e:ac:4e:33:46:15:cf: 5a:4b:51:5b:f5:a1:1f:ed:53:0b:74:1d:c0:5f:a2: bb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:18:8E:52:B9:09:03:C3:69:DA:7A:40:F4:44:CF:8E:38:DC:99:D2 X509v3 Authority Key Identifier: keyid:F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:4e:95:b3:7a:40:d6:b6:6b:4d:95:0d:c9:e5:bb:d0:96:85: 7b:c8:28:e7:93:03:e1:0c:f5:ea:7e:26:49:e4:1a:7f:71:32: cc:74:9a:fd:12:bf:64:ac:98:69:3d:63:d9:71:ee:bd:e4:90: 18:4e:d3:12:75:1a:c0:bc:a7:e0:84:2f:e3:f1:4d:6c:2a:69: c1:74:80:b7:b2:73:28:1c:8d:50:e3:a2:9c:ca:9e:cc:7a:0e: 67:48:ae:db:aa:96:3b:fb:b7:51:44:8b:14:9f:fd:3c:ac:35: 0d:ca:71:fd:42:25:64:52:b6:1e:05:1d:2e:18:33:3f:18:78: 11:00:e8:f3:8f:06:13:5e:32:95:6c:c0:4f:ce:63:5d:a6:58: 0f:2b:8d:92:00:bf:8c:c0:c2:14:34:7e:60:ba:54:8a:d7:b3: 15:cb:c0:ae:53:3e:0c:db:9b:49:e7:7c:3c:63:66:83:ba:3e: 26:83:ad:91:0e:dd:b8:ad:9c:eb:08:f1:a7:07:a7:dc:cc:c9: f7:9e:0b:98:ed:6b:99:4f:e0:bd:3b:3e:87:d6:58:57:fc:4a: 12:c2:5d:e8:12:86:fb:f7:18:f9:ec:66:f4:2a:d1:37:d3:2e: 7a:64:e4:35:53:58:50:77:ec:8b:93:79:5b:6b:5f:1b:e6:b5: ab:9f:9e:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfP/Qs03acjbAc0yaSQ/A1+aXC5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVFMTMzQkNFNTAxNEI3QTc5QUU2RThFNDgwQkMzNUJE M0MzMTg3QTAeFw0yNjA2MTMwNTEwMTZaFw0yNjA2MTQwNzU0MTZaMDMxMTAvBgNV BAMTKENEMTg4RTUyQjkwOTAzQzM2OURBN0E0MEY0NDRDRjhFMzhEQzk5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWVLLkNiMl78ymCFkbv9OV52RU Rm1cNv6N/POTNohyt37BvuqPxos5KTX13p0ofE4jEONdBDI97i/GvTnB2R9cJMll ECGyyagAxY3QmfCTMJMStRJvtlWai7HjUGeYbj7r3cRgQVUd274FFXP3E02ykOsj ID+HzyDqB3v+F0bnhr0BBoeccsJaiw/5uJ0cFD2g8eAUR+LONoAIMSrOMhWmdigI VtwdHwgKch9a2GbJ3kS9zrN5Yg5ZsXonngfuPrl7KjA0rMk8XpTn4SF14YVJs/g9 mpTQIwU7HuGJfrbDRoxj9GuQfdksnqxOM0YVz1pLUVv1oR/tUwt0HcBforvdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzRiOUrkJA8Np2npA9ETPjjjcmdIwHwYDVR0j BBgwFoAU9eEzvOUBS3p5rm6OSAvDW9PDGHowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNlNDUwMzktNmVkMC00ODNkLWExYjktYzRmNDg1NGM1Y2Y1LzAvRjVFMTMzQkNF NTAxNEI3QTc5QUU2RThFNDgwQkMzNUJEM0MzMTg3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNUUxMzNCQ0U1MDE0QjdBNzlBRTZFOEU0ODBCQzM1QkQzQzMx ODdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvRjVFMTMzQkNFNTAxNEI3QTc5QUU2RThFNDgwQkMz NUJEM0MzMTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpOlbN6QNa2a02VDcnlu9CWhXvIKOeTA+EM 9ep+JknkGn9xMsx0mv0Sv2SsmGk9Y9lx7r3kkBhO0xJ1GsC8p+CEL+PxTWwqacF0 gLeycygcjVDjopzKnsx6DmdIrtuqljv7t1FEixSf/TysNQ3Kcf1CJWRSth4FHS4Y Mz8YeBEA6POPBhNeMpVswE/OY12mWA8rjZIAv4zAwhQ0fmC6VIrXsxXLwK5TPgzb m0nnfDxjZoO6PiaDrZEO3bitnOsI8acHp9zMyfeeC5jta5lP4L07PofWWFf8ShLC XegShvv3GPnsZvQq0TfTLnpk5DVTWFB37IuTeVtrXxvmtaufnjw= -----END CERTIFICATE-----Generated at Sat Jun 13 16:37:08 2026 by rpki-client