
$ rpki-client -vvf rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft
File: 5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft (raw, json)
Hash identifier: c/nO9Do365iCROX7++cVe9Tnbc9iCOuBFcxvW56LFhM=
Subject key identifier: 0E:C8:43:A8:0F:06:24:0A:2F:E4:66:B8:4E:F7:B4:50:AC:E1:BF:CA
Authority key identifier: 5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73
Certificate issuer: /CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73
Certificate serial: 3B4EB482413D953E0E0BD435335C6212F5809DE3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 13:26:28 +0000
Manifest this update: Tue 02 Jun 2026 13:21:28 +0000
Manifest next update: Wed 03 Jun 2026 13:31:28 +0000
Files and hashes: 1: 323430363a323063303a3a2f33342d3438203d3e20313430343233.roa (hash: oHO/mBu6n4LBvzlkBxlFTrrfD03ZECOXoWTm30eVx0k=)
2: 323430363a323063303a323030303a3a2f33362d3438203d3e20313430343233.roa (hash: v8QPabhItaizBB9pxD/wXN2gHGs8Wr8CE7BFeI6GwE4=)
3: 323430363a323063303a343030303a3a2f33352d3438203d3e20313430343233.roa (hash: +z1Vecq5CLuGAdagNlNI4DXOKOFp6RCrAgPHXZAdHr4=)
4: 323430363a323063303a333030303a3a2f33362d3438203d3e20313430343233.roa (hash: homieSZF5V1szau7ki2ssr0BNZ6bnwvtWUmv3xC0MNs=)
5: 323430363a323063303a633030303a3a2f33352d3438203d3e20313430343233.roa (hash: zJID4VrLvSmsXC10H7Jvv0iurKDtvflqhWXxcqX2uc4=)
6: 323430363a323063303a363030303a3a2f33352d3438203d3e20313430343233.roa (hash: Wa4kWI19R9UmknDYtwAX+VAmJObZ9NpX4+ik16tpP54=)
7: 323430363a323063303a633030303a3a2f33342d3438203d3e20313430343233.roa (hash: UoKoT0AWKyCX6Qyu5lXiV/BppxCSvFKim20tn0jYad4=)
8: 323430363a323063303a323030303a3a2f33352d3438203d3e20313430343233.roa (hash: endKgrHDArNl7n+5PXQ+sWzCHjXcMSDERSN2h7iF7rg=)
9: 323430363a323063303a383030303a3a2f33352d3438203d3e20313430343233.roa (hash: wDyLhmWZnJb6tcvP+n4reZF/nWVRgISHasE8lo6DHLQ=)
10: 323430363a323063303a383030303a3a2f33332d3438203d3e20313430343233.roa (hash: Jpk6crOmL/vZ1AkXCiKQEhlEo1ezNIVJ147ItGt4nOA=)
11: 323430363a323063303a633030303a3a2f33362d3438203d3e20313430343233.roa (hash: O26iKy+IbamMb8dOfM2Up0KjTJ3/5jGRdX+82frwV5o=)
12: 323430363a323063303a653030303a3a2f33352d3438203d3e20313430343233.roa (hash: vSoD+ZxS07y9yYkbUD3TtKiwko1Tc9P4St2wGL0SBpA=)
13: 323430363a323063303a363030303a3a2f33362d3438203d3e20313430343233.roa (hash: A/2SBhwflgcOv2ntZgcS5A11DoU+6wXindltGumWW9Y=)
14: 323430363a323063303a613030303a3a2f33352d3438203d3e20313430343233.roa (hash: V084rJqfvZtG41FSKmZ9pBoqwj5IFxfsdNqBfJnQAhw=)
15: 323430363a323063303a623030303a3a2f33362d3438203d3e20313430343233.roa (hash: Qu0WeBsayWlL0KhGEWpL1G9oYoQmkPpX0w0R35hatac=)
16: 323430363a323063303a663030303a3a2f33362d3438203d3e20313430343233.roa (hash: Cp0PKl9JjhWDgnLWIVDlqxmFictuLsZeLOz3cpbATsI=)
17: 3130332e3135312e3232322e302f32332d3234203d3e20313430343233.roa (hash: cciiyj+y4OlkS8Qqa/VW1UIxWzCV7pDTrlh0fEZH44U=)
18: 3130332e3135312e3232332e302f32342d3234203d3e20313430343233.roa (hash: zQDfW1NxwBHwSXrBjSCIb/N2klzYd2Y+T4JOb1cDmQA=)
19: 323430363a323063303a3a2f33352d3438203d3e20313430343233.roa (hash: hhlA0VGzX08tN+OSH4fN4a5In9cg0MfTRLsflSn5raI=)
20: 323430363a323063303a343030303a3a2f33342d3438203d3e20313430343233.roa (hash: +j5DE6bPhBgaX+1hWxzB/COb6Ltlclljt4GJO0GxP8M=)
21: 3130332e3135312e3232322e302f32342d3234203d3e20313430343233.roa (hash: ZNyiccNjhXptE4dxzhrlfJbvC71Eonl//QWVSnfc3qo=)
22: 323430363a323063303a383030303a3a2f33342d3438203d3e20313430343233.roa (hash: /s+gPK6juMCKnDiQzNEnsHewLj79DjE+hgG0nN04WS0=)
23: 323430363a323063303a393030303a3a2f33362d3438203d3e20313430343233.roa (hash: eweK/QOwAEAZyYt+0HU6CQISu1I/cMb98HQH+ub1M+g=)
24: 323430363a323063303a343030303a3a2f33362d3438203d3e20313430343233.roa (hash: iZZJuDZmrr2/afqUVlF00pjMyB1vpVxxKIJA2IakLy4=)
25: 323430363a323063303a3a2f33362d3438203d3e20313430343233.roa (hash: T+xSYDcTCytf9ge/CquyHcQiZcDvY1TdxC0CLyaCkFI=)
26: 323430363a323063303a353030303a3a2f33362d3438203d3e20313430343233.roa (hash: uGDln0LQbqYabZwH0MSm4Can920lrolRZbhqiKRqZZM=)
27: 323430363a323063303a383030303a3a2f33362d3438203d3e20313430343233.roa (hash: lSUZdM5y9tB7Ad6Sz4XVuv385cnEKOYBH8kSeRSFOB4=)
28: 323430363a323063303a3a2f33332d3438203d3e20313430343233.roa (hash: Q0bQnkdNnHnsxO+GXiI1DfAStNISNi67o3iXE1u81M4=)
29: 323430363a323063303a3a2f33322d3438203d3e20313430343233.roa (hash: O1fi2B87Nwf/m/9ZOriJRND1r1RTaVU2APZfVnmoIyE=)
30: 323430363a323063303a613030303a3a2f33362d3438203d3e20313430343233.roa (hash: 5mdLxZ6k+cIBv/YF4496B7rIbx7i3OXe0U0jagA9JSg=)
31: 5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl (hash: ux2j9oNrpNggkTrGvWb25xZqsg1hRUc+jKi3m8+vAYw=)
32: 323430363a323063303a653030303a3a2f33362d3438203d3e20313430343233.roa (hash: EN3kqHyGZ29LkAaZy7fUIE4yDrcDxDLll5F/VFmNzLY=)
33: 323430363a323063303a653030303a3a2f34382d3438203d3e20313530323638.roa (hash: Qc0NamOT28MuZWPLDiYfq0XB1AFMJsZuItdPi4bZLMg=)
34: 323430363a323063303a643030303a3a2f33362d3438203d3e20313430343233.roa (hash: ZBUZBxEa7mpoDutjtu0izsjhyj7iIg5+ghibx3OD2Zo=)
35: 323430363a323063303a313030303a3a2f33362d3438203d3e20313430343233.roa (hash: A7C5+KZ2ijYP53e/sGh2G1XODQch1w17LTW+GziPwDQ=)
36: 323430363a323063303a373030303a3a2f33362d3438203d3e20313430343233.roa (hash: A0iKimPBe5FHTwF9ZBavCc6lcL3pnQfd10Ynmjdk5YQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl
rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:4e:b4:82:41:3d:95:3e:0e:0b:d4:35:33:5c:62:12:f5:80:9d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73
Validity
Not Before: Jun 2 13:21:28 2026 GMT
Not After : Jun 3 13:31:28 2026 GMT
Subject: CN=0EC843A80F06240A2FE466B84EF7B450ACE1BFCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9e:43:e6:00:23:e5:a6:75:30:19:aa:bf:96:
81:88:ea:4d:0b:33:22:71:3d:0c:04:6d:a9:3f:9a:
1a:ae:5a:ef:15:8f:18:59:7a:4b:1d:0c:7d:e7:38:
12:6e:df:88:53:3c:4f:c9:61:25:85:15:8f:e8:d5:
1c:62:0b:47:b4:21:c0:56:4f:aa:8a:91:7f:c6:87:
91:c1:36:c5:17:d7:cf:47:11:e6:b4:c5:98:95:6e:
af:9c:52:af:09:18:85:06:24:6a:f8:51:4b:1a:52:
e4:31:9a:94:35:e5:75:ed:87:b4:c9:11:cc:fd:63:
fa:76:f4:2b:76:4b:ee:fe:b1:aa:1a:6d:11:9e:d3:
ab:69:c6:d9:ee:b5:ac:f4:04:2f:8e:8d:fd:ae:8f:
f3:20:7f:8b:7c:e0:73:35:d7:b4:05:71:c0:71:c9:
8e:8c:2e:b3:fb:c1:27:9f:41:87:a2:bd:1d:d9:04:
ec:6b:ff:69:6d:b7:89:5e:46:50:0c:34:18:15:97:
d8:f2:bc:25:ca:1a:6a:76:2e:04:7c:49:8f:b8:d0:
e3:dd:3b:7b:22:6e:d4:ce:6c:da:3a:a6:e9:92:3a:
5f:a5:42:4a:5f:8e:be:03:ef:a8:7a:aa:25:bf:b6:
ba:52:b6:82:af:a1:89:fb:38:65:fc:16:e9:e0:37:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C8:43:A8:0F:06:24:0A:2F:E4:66:B8:4E:F7:B4:50:AC:E1:BF:CA
X509v3 Authority Key Identifier:
keyid:5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:03:eb:cd:9b:04:22:2b:31:b4:ee:60:91:b0:fd:8e:f8:f9:
f3:99:6d:2f:81:5f:54:79:45:64:67:ae:2b:c3:54:fa:1e:a9:
2a:62:b7:ca:a5:a5:20:18:ea:58:a1:6f:6c:95:67:2e:4f:29:
8f:4e:64:14:f5:d3:c5:37:3f:79:79:f0:63:59:99:62:03:31:
5b:e2:b5:08:a0:cd:c4:ef:64:09:47:78:45:12:19:6d:4a:fd:
e9:6e:38:56:86:ca:83:aa:19:a8:6f:9e:25:85:1a:78:fa:0d:
1a:05:1f:74:64:70:54:cf:f2:6d:ba:03:e7:4a:81:ad:b0:d4:
99:d0:21:e0:18:65:34:44:e7:2f:b3:ab:b3:a1:f7:a1:9f:d2:
37:44:a7:80:e8:3b:41:68:03:ab:e5:e8:1c:61:7d:82:c3:dc:
59:d3:66:e1:72:54:1f:e7:0d:9e:76:c3:8e:1d:7e:01:26:0f:
b4:90:ea:cf:20:9e:b3:7b:7c:26:3c:b9:73:64:a5:05:6e:30:
2d:d4:53:c9:cd:c4:61:0a:9a:33:ab:8c:0b:dc:8f:53:bd:f4:
8c:6d:51:b1:07:68:d4:d9:83:51:6a:4a:55:90:bf:ad:9c:e4:
33:15:a6:b1:52:a4:e7:19:20:6c:9b:fd:06:ad:69:b5:e6:d9:
a7:01:a8:fd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUO060gkE9lT4OC9Q1M1xiEvWAneMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQyNzJFRjFGRjVGOTk2MDNERkMyQTJCOUM1QUIxQThC
RjMyMkU3MzAeFw0yNjA2MDIxMzIxMjhaFw0yNjA2MDMxMzMxMjhaMDMxMTAvBgNV
BAMTKDBFQzg0M0E4MEYwNjI0MEEyRkU0NjZCODRFRjdCNDUwQUNFMUJGQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLnkPmACPlpnUwGaq/loGI6k0L
MyJxPQwEbak/mhquWu8VjxhZeksdDH3nOBJu34hTPE/JYSWFFY/o1RxiC0e0IcBW
T6qKkX/Gh5HBNsUX189HEea0xZiVbq+cUq8JGIUGJGr4UUsaUuQxmpQ15XXth7TJ
Ecz9Y/p29Ct2S+7+saoabRGe06tpxtnutaz0BC+Ojf2uj/Mgf4t84HM117QFccBx
yY6MLrP7wSefQYeivR3ZBOxr/2ltt4leRlAMNBgVl9jyvCXKGmp2LgR8SY+40OPd
O3sibtTObNo6pumSOl+lQkpfjr4D76h6qiW/trpStoKvoYn7OGX8FungNxNfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDshDqA8GJAov5Ga4Tve0UKzhv8owHwYDVR0j
BBgwFoAUXScu8f9fmWA9/CornFqxqL8yLnMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTlhMDAzNjktNjg0MC00YTk1LTg5YjEtYTQ4NTE4Zjk4ZGM3LzAvNUQyNzJFRjFG
RjVGOTk2MDNERkMyQTJCOUM1QUIxQThCRjMyMkU3My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81RDI3MkVGMUZGNUY5OTYwM0RGQzJBMkI5QzVBQjFBOEJGMzIy
RTczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTlhMDAzNjktNjg0MC00YTk1LTg5
YjEtYTQ4NTE4Zjk4ZGM3LzAvNUQyNzJFRjFGRjVGOTk2MDNERkMyQTJCOUM1QUIx
QThCRjMyMkU3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADID682bBCIrMbTuYJGw/Y74+fOZbS+BX1R5
RWRnrivDVPoeqSpit8qlpSAY6lihb2yVZy5PKY9OZBT108U3P3l58GNZmWIDMVvi
tQigzcTvZAlHeEUSGW1K/eluOFaGyoOqGahvniWFGnj6DRoFH3RkcFTP8m26A+dK
ga2w1JnQIeAYZTRE5y+zq7Oh96Gf0jdEp4DoO0FoA6vl6BxhfYLD3FnTZuFyVB/n
DZ52w44dfgEmD7SQ6s8gnrN7fCY8uXNkpQVuMC3UU8nNxGEKmjOrjAvcj1O99Ixt
UbEHaNTZg1FqSlWQv62c5DMVprFSpOcZIGyb/QatabXm2acBqP0=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:04:40 2026 by rpki-client