$ rpki-client -vvf rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft File: 5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft (raw, json) Hash identifier: 17jBWU4ufQ8PNTjXo7nvXBVmLQ7tjsJlz0cL6FXB6j8= Subject key identifier: 28:4A:E9:69:D8:C5:9A:60:4C:5F:BB:A6:FA:6F:A2:E7:F7:11:B6:E2 Authority key identifier: 5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24 Certificate issuer: /CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24 Certificate serial: 66DC33034265FA09B9ED1B96EFD8D77094B08D29 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 12:20:14 +0000 Manifest this update: Tue 02 Jun 2026 12:15:14 +0000 Manifest next update: Wed 03 Jun 2026 15:18:14 +0000 Files and hashes: 1: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: hrwaL58bLcWsXLir3kxI1OkAj6GGFQmLA1ZKUXd0Ogs=) 2: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: swr4aEtGPRWs62gogwkO9Y1o8MbTFhHlDaee8r9gWcE=) 3: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: jrMRupZddQA8qjBzuVH771xwK+1/f2hSGRy4MrlXlSc=) 4: 5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl (hash: WATl4exMxqe2iJJTT7M1mFAo2KqPZyKgL/igXkFUWPA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:dc:33:03:42:65:fa:09:b9:ed:1b:96:ef:d8:d7:70:94:b0:8d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24 Validity Not Before: Jun 2 12:15:14 2026 GMT Not After : Jun 3 15:18:14 2026 GMT Subject: CN=284AE969D8C59A604C5FBBA6FA6FA2E7F711B6E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6d:ae:01:7c:0f:39:4d:75:0e:d8:49:bd:00: 0e:55:4e:b1:a7:5f:4d:3b:cb:05:9d:17:3d:1d:e3: 1a:32:f5:9c:81:86:0a:94:1e:98:d6:78:47:c0:85: eb:60:a6:86:b1:8d:fb:b3:67:b7:7a:7a:a7:67:e4: de:bb:dc:06:95:a6:16:8c:99:19:6a:8f:e7:3a:6c: fd:28:32:f9:6f:87:64:db:51:5a:4d:02:44:92:0e: b6:c7:56:bc:0e:27:7d:f3:85:a0:57:b9:74:c3:a4: c4:c9:c2:6b:b9:a1:c9:50:87:ad:de:39:b9:df:c4: 35:ca:aa:d3:4a:65:85:b3:d2:16:dd:d0:07:db:13: 66:f3:ff:30:00:a9:ca:94:c2:bd:1d:b4:dc:68:33: ee:77:5d:4d:b2:29:df:4b:43:c3:c0:88:35:78:81: 08:66:5e:9c:69:dc:c5:9e:34:e1:ce:24:7f:82:41: a5:55:86:c0:3b:53:e8:e0:2f:ab:46:e7:5d:6c:49: 9c:03:07:73:fb:98:3e:d8:59:98:e4:a2:e1:da:24: 80:36:82:f1:df:86:62:06:60:19:8c:60:73:f5:1f: 99:28:b6:5d:4d:93:cc:fd:41:ae:a1:40:46:54:a2: e4:74:13:51:1d:8f:66:40:de:5d:45:10:d2:35:da: 29:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4A:E9:69:D8:C5:9A:60:4C:5F:BB:A6:FA:6F:A2:E7:F7:11:B6:E2 X509v3 Authority Key Identifier: keyid:5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2e:61:7e:a6:e7:9a:c7:f9:60:1a:6a:92:69:ac:57:75:5d: c4:ab:14:f1:3a:85:d2:bf:66:e0:73:0c:7f:4d:1c:5d:db:2f: ad:3a:f3:f1:f6:1b:ed:dd:57:76:48:10:79:51:43:e7:85:af: 7f:e0:b4:c5:5a:91:74:30:35:48:fa:76:61:63:24:a5:5c:0f: 1f:d1:95:6a:c4:cb:d4:a9:22:97:e2:d3:f8:78:4e:49:83:83: 2a:15:de:3c:4e:6f:58:ab:ff:af:99:8d:b0:c5:cf:c7:2f:16: b6:00:d7:97:00:bc:1a:26:00:6e:04:8d:35:19:b2:86:de:76: 6d:c4:4b:d2:3e:49:c3:34:16:0c:e2:55:1a:00:a0:24:59:a1: a2:f5:d5:a5:40:b9:aa:ce:60:3e:fe:be:9a:89:c1:b8:49:43: 1c:e2:d9:c0:3f:87:27:da:86:82:05:b0:bb:b9:f4:34:92:13: cf:8e:30:f7:5a:18:c9:4a:b2:d2:09:85:44:07:18:6c:0e:ee: da:f2:f0:95:1a:54:20:49:b0:7e:dc:ff:c4:5c:da:99:11:9b: 10:c3:6f:43:a8:6d:97:a0:59:bd:de:6f:02:0d:d9:a8:25:d9: fa:1e:eb:d0:27:95:a2:76:35:bf:93:12:c1:74:e7:0b:c4:d7: b2:cf:b0:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtwzA0Jl+gm57RuW79jXcJSwjSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY3MTUyQ0VFMDRGREFGQjRBM0U0QTBGM0ZEMEFERjgy MkM1Q0QyNDAeFw0yNjA2MDIxMjE1MTRaFw0yNjA2MDMxNTE4MTRaMDMxMTAvBgNV BAMTKDI4NEFFOTY5RDhDNTlBNjA0QzVGQkJBNkZBNkZBMkU3RjcxMUI2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClba4BfA85TXUO2Em9AA5VTrGn X007ywWdFz0d4xoy9ZyBhgqUHpjWeEfAhetgpoaxjfuzZ7d6eqdn5N673AaVphaM mRlqj+c6bP0oMvlvh2TbUVpNAkSSDrbHVrwOJ33zhaBXuXTDpMTJwmu5oclQh63e ObnfxDXKqtNKZYWz0hbd0AfbE2bz/zAAqcqUwr0dtNxoM+53XU2yKd9LQ8PAiDV4 gQhmXpxp3MWeNOHOJH+CQaVVhsA7U+jgL6tG511sSZwDB3P7mD7YWZjkouHaJIA2 gvHfhmIGYBmMYHP1H5kotl1Nk8z9Qa6hQEZUouR0E1Edj2ZA3l1FENI12inFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKErpadjFmmBMX7um+m+i5/cRtuIwHwYDVR0j BBgwFoAUX3FSzuBP2vtKPkoPP9Ct+CLFzSQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgxNTU0NWMtYzk5Ni00NjBmLTkyZGQtNjI5NGFlYzkyYzUyLzAvNUY3MTUyQ0VF MDRGREFGQjRBM0U0QTBGM0ZEMEFERjgyMkM1Q0QyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjcxNTJDRUUwNEZEQUZCNEEzRTRBMEYzRkQwQURGODIyQzVD RDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvNUY3MTUyQ0VFMDRGREFGQjRBM0U0QTBGM0ZEMEFE RjgyMkM1Q0QyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsuYX6m55rH+WAaapJprFd1XcSrFPE6hdK/ ZuBzDH9NHF3bL6068/H2G+3dV3ZIEHlRQ+eFr3/gtMVakXQwNUj6dmFjJKVcDx/R lWrEy9SpIpfi0/h4TkmDgyoV3jxOb1ir/6+ZjbDFz8cvFrYA15cAvBomAG4EjTUZ sobedm3ES9I+ScM0FgziVRoAoCRZoaL11aVAuarOYD7+vpqJwbhJQxzi2cA/hyfa hoIFsLu59DSSE8+OMPdaGMlKstIJhUQHGGwO7try8JUaVCBJsH7c/8Rc2pkRmxDD b0OobZegWb3ebwIN2agl2foe69AnlaJ2Nb+TEsF05wvE17LPsLI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:22 2026 by rpki-client