$ rpki-client -vvf rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft File: 5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft (raw, json) Hash identifier: Xl1uXlQvJEhrcodUMCGT2+wUtzebDSmyZ5lVdxO91wQ= Subject key identifier: DB:6F:72:2F:1C:88:69:85:C1:6D:F9:57:44:DF:8A:EB:5B:8E:1D:79 Authority key identifier: 5D:59:59:C0:4A:DE:DB:A5:EB:17:E7:1F:95:F6:C4:02:5E:DE:CB:DB Certificate issuer: /CN=5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB Certificate serial: 3A7DFB39B5CC99E65F63151576382893EEFF7F11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:51:26 +0000 Manifest this update: Tue 02 Jun 2026 17:46:26 +0000 Manifest next update: Wed 03 Jun 2026 21:21:26 +0000 Files and hashes: 1: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: HU+tP0ePX+yD7/CYpvvWhY8DWw0D5TG8DRzaRiSU/0w=) 2: 5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl (hash: 3aGp5faXSNeQDY992TtiEq8Kc5DYFJkqyY5De3v37X4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 21:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:7d:fb:39:b5:cc:99:e6:5f:63:15:15:76:38:28:93:ee:ff:7f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB Validity Not Before: Jun 2 17:46:26 2026 GMT Not After : Jun 3 21:21:26 2026 GMT Subject: CN=DB6F722F1C886985C16DF95744DF8AEB5B8E1D79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bf:c7:33:13:60:70:6f:f9:39:1c:a4:fe:5d: e8:42:6e:81:ff:8f:ca:c6:e2:19:21:ac:36:ae:6d: b5:38:8e:fc:91:82:c4:a4:b6:4b:fb:ba:61:c8:89: 2b:62:b0:eb:b3:b2:37:6e:67:d5:02:20:ae:42:05: 71:10:03:24:f7:47:19:3c:84:15:d7:df:24:fe:90: 9a:1f:48:da:b6:b0:f4:60:1f:0b:e3:44:b8:5e:9e: fa:aa:9e:d4:50:e6:fc:03:2e:d1:ba:b5:fe:f5:af: 3b:c0:7c:e1:76:9c:4c:54:89:72:35:86:a1:4d:1c: e8:ae:80:a8:7c:ed:1e:32:10:e8:62:b2:74:33:19: ca:e6:c4:41:a0:2c:1f:57:c0:9b:81:15:ca:49:7b: b9:d8:19:2b:f2:22:ab:83:5e:c3:51:25:b1:e9:91: 75:a3:78:18:0a:c4:50:e8:56:60:84:e9:8f:84:19: 86:f1:2d:ff:ed:10:de:90:81:a2:30:fb:64:3d:73: a8:95:d3:1f:f2:1c:62:db:97:c4:0c:9c:66:f3:50: 35:96:dc:c4:29:a3:26:65:ff:55:0a:6f:43:6d:0b: 79:2a:b4:7c:93:b2:65:e5:69:ba:37:b6:f1:4e:73: 9f:b8:be:a0:d8:12:c8:e8:93:de:89:c1:55:f3:c4: af:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6F:72:2F:1C:88:69:85:C1:6D:F9:57:44:DF:8A:EB:5B:8E:1D:79 X509v3 Authority Key Identifier: keyid:5D:59:59:C0:4A:DE:DB:A5:EB:17:E7:1F:95:F6:C4:02:5E:DE:CB:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:7f:1a:3c:d7:38:d2:64:62:a7:ec:60:60:32:15:ed:2d:06: 80:55:8d:56:92:02:5a:d8:fd:55:50:93:8e:22:0c:89:d5:01: 79:e2:fe:22:d4:25:f3:a7:14:e0:2b:f8:73:cd:ad:99:27:0e: b4:b6:55:15:3e:8c:7d:12:6c:7f:7d:66:81:b5:dd:d3:9f:41: 28:c4:54:50:ae:16:14:f3:b4:ff:82:ad:e6:10:01:67:d7:41: 2d:f5:9a:3e:7a:13:03:c2:e6:e0:c3:f3:08:45:23:db:9d:1a: e6:57:46:bd:d7:cc:4f:14:2b:64:33:bc:47:2c:ce:e3:b6:84: 8c:54:7d:ab:70:39:a8:ba:97:c0:3d:9a:32:7f:a9:2c:75:38: 2f:7e:ba:5b:55:ec:c5:6c:4e:ef:85:f3:cc:7f:f6:11:c0:f6: 90:05:37:bb:57:c5:5d:48:d5:4e:7c:ea:c5:6b:34:85:92:2f: d4:0c:e1:84:0d:37:ab:ce:d9:a2:27:c8:5a:78:36:19:ca:46: 4d:cb:f1:36:a4:59:28:36:62:db:55:27:0f:01:dc:35:ac:1c: 2a:26:c7:54:f2:3d:fc:6a:ac:e8:c4:0b:f6:86:31:59:38:92: 4f:41:64:33:51:39:2a:f6:39:c9:f6:36:c3:0c:be:f6:92:a7: 4e:60:55:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOn37ObXMmeZfYxUVdjgok+7/fxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ1OTU5QzA0QURFREJBNUVCMTdFNzFGOTVGNkM0MDI1 RURFQ0JEQjAeFw0yNjA2MDIxNzQ2MjZaFw0yNjA2MDMyMTIxMjZaMDMxMTAvBgNV BAMTKERCNkY3MjJGMUM4ODY5ODVDMTZERjk1NzQ0REY4QUVCNUI4RTFENzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSv8czE2Bwb/k5HKT+XehCboH/ j8rG4hkhrDaubbU4jvyRgsSktkv7umHIiStisOuzsjduZ9UCIK5CBXEQAyT3Rxk8 hBXX3yT+kJofSNq2sPRgHwvjRLhenvqqntRQ5vwDLtG6tf71rzvAfOF2nExUiXI1 hqFNHOiugKh87R4yEOhisnQzGcrmxEGgLB9XwJuBFcpJe7nYGSvyIquDXsNRJbHp kXWjeBgKxFDoVmCE6Y+EGYbxLf/tEN6QgaIw+2Q9c6iV0x/yHGLbl8QMnGbzUDWW 3MQpoyZl/1UKb0NtC3kqtHyTsmXlabo3tvFOc5+4vqDYEsjok96JwVXzxK/zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU229yLxyIaYXBbflXRN+K61uOHXkwHwYDVR0j BBgwFoAUXVlZwEre26XrF+cflfbEAl7ey9swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVlYWI0NDItNzQ4MC00NTgxLTgxZGQtMjNhMjAwNjE0MzgyLzAvNUQ1OTU5QzA0 QURFREJBNUVCMTdFNzFGOTVGNkM0MDI1RURFQ0JEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDU5NTlDMDRBREVEQkE1RUIxN0U3MUY5NUY2QzQwMjVFREVD QkRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVlYWI0NDItNzQ4MC00NTgxLTgx ZGQtMjNhMjAwNjE0MzgyLzAvNUQ1OTU5QzA0QURFREJBNUVCMTdFNzFGOTVGNkM0 MDI1RURFQ0JEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEN/GjzXONJkYqfsYGAyFe0tBoBVjVaSAlrY /VVQk44iDInVAXni/iLUJfOnFOAr+HPNrZknDrS2VRU+jH0SbH99ZoG13dOfQSjE VFCuFhTztP+CreYQAWfXQS31mj56EwPC5uDD8whFI9udGuZXRr3XzE8UK2QzvEcs zuO2hIxUfatwOai6l8A9mjJ/qSx1OC9+ultV7MVsTu+F88x/9hHA9pAFN7tXxV1I 1U586sVrNIWSL9QM4YQNN6vO2aInyFp4NhnKRk3L8TakWSg2YttVJw8B3DWsHCom x1TyPfxqrOjEC/aGMVk4kk9BZDNROSr2Ocn2NsMMvvaSp05gVQ0= -----END CERTIFICATE-----Generated at Wed Jun 3 03:49:45 2026 by rpki-client