$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft File: 5843958BB240779320D7F0C2B674ACF5EF6122BC.mft (raw, json) Hash identifier: PfSncGne+Fyr56ZvNq122LCwDeA/u/n60QY0Y8wnsvE= Subject key identifier: 24:5B:93:42:EF:56:C9:FB:E5:99:1C:E5:B2:A2:75:BB:C3:90:27:42 Authority key identifier: 58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC Certificate issuer: /CN=5843958BB240779320D7F0C2B674ACF5EF6122BC Certificate serial: 4032BFB42560AE0FFFFE583318966D48FD778BAC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft Manifest number: 13 Signing time: Fri 15 May 2026 23:15:21 +0000 Manifest this update: Fri 15 May 2026 23:10:21 +0000 Manifest next update: Sat 16 May 2026 23:54:21 +0000 Files and hashes: 1: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: WeFmDyNsHJ6btvYfzDFQoJzW4vr0tmZoF+30o64Nsw4=) 2: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: jOCXET8yniqJ02iHiMoBI6iwGo2/5oUN4/jc3LtL0jQ=) 3: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: yPK7GQUu85mTor59GtzCw8idVr6kmAEeffKza8nzEd8=) 4: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: t3N8/NmkXItiVJAARc4CSYWSo+yW57apDjW3aqHeSkc=) 5: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: 3HeHx0erxEkjN9PtOgU3W6tKucWeXKE5FEYLyXwycJc=) 6: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: zO201tAVoPKGV/ct4ikI5lfPCjZ1ksaQX5GMEkLajwg=) 7: 5843958BB240779320D7F0C2B674ACF5EF6122BC.crl (hash: 52C6Xmv581CQz/b2muJw9WMABi+bGqJOtCow4X080Zw=) 8: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: lVR5iCrB58ZGOeyqsgP1KQLwdS0WjCcfUKPYsWN8lxI=) 9: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: bNdzrUkHylX3nBoyTDryEKwja6jOzq2DQP/kaLdB4H4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 23:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:32:bf:b4:25:60:ae:0f:ff:fe:58:33:18:96:6d:48:fd:77:8b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5843958BB240779320D7F0C2B674ACF5EF6122BC Validity Not Before: May 15 23:10:21 2026 GMT Not After : May 16 23:54:21 2026 GMT Subject: CN=245B9342EF56C9FBE5991CE5B2A275BBC3902742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5f:08:3b:3d:91:41:6a:58:84:0e:d8:19:f9: da:71:b4:51:8b:15:6c:66:c2:ac:4c:dc:dc:8b:db: 07:66:14:ef:71:c0:fa:d4:8b:67:51:ee:59:74:16: 7d:45:c1:be:fb:1f:25:d6:3a:f8:8f:f4:3e:40:c6: 0f:d7:55:1b:64:70:c8:13:b7:7b:ac:87:c7:0a:3f: 15:26:c1:ab:5f:38:15:33:f1:42:58:ba:0b:0b:13: 8f:d0:9a:80:98:85:27:76:6a:32:9d:ee:21:17:b5: 6f:36:5c:17:7d:65:3b:23:36:c2:dd:c2:ff:8c:f4: 75:ff:d1:83:20:55:5c:f0:79:cc:cd:95:e0:e6:2a: eb:d2:4e:d1:fb:ad:e6:25:24:6d:a1:30:01:9e:ab: e2:70:dd:48:9c:71:fb:68:7c:51:b8:3a:06:8c:4a: 5a:5b:eb:03:6d:5a:fd:d4:70:af:d8:57:8f:f5:0a: c8:98:e7:17:ee:0b:ef:d3:ae:38:38:4f:67:08:f1: c2:78:1f:59:bc:af:2c:9f:8d:2f:db:f1:fc:2b:62: 2b:7c:cd:03:d8:a1:76:0d:81:ea:08:b5:15:c1:5c: 58:4d:e8:b3:b8:13:f8:d4:d1:20:cb:84:21:22:5c: a6:75:e7:b3:56:91:e7:94:54:4f:29:da:a6:6f:cd: 8f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5B:93:42:EF:56:C9:FB:E5:99:1C:E5:B2:A2:75:BB:C3:90:27:42 X509v3 Authority Key Identifier: keyid:58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:73:05:bc:65:1d:71:32:46:e3:52:e1:a6:2f:c0:e8:fc:9d: f5:be:55:d1:77:ed:af:25:f0:05:a6:4c:e0:d2:17:3e:50:ca: 41:36:b6:be:b3:94:c8:15:eb:af:1f:c1:f8:12:a3:44:6a:cc: 01:29:b8:aa:23:38:b0:c8:ce:b5:3c:d6:d3:6d:b7:52:ae:8f: 70:0c:c7:8f:90:eb:37:d4:15:15:78:9c:2c:bb:52:3b:2e:4e: d0:94:3d:31:8f:21:05:2b:e6:88:de:d2:5f:c8:2d:21:30:76: 85:ee:43:08:06:e4:b2:63:68:02:7e:bf:2f:7a:b2:43:f5:b4: a9:ef:45:5d:f3:bd:e9:13:89:29:e8:32:8e:3f:39:57:b3:a2: 44:78:0c:6e:33:a6:ae:88:e4:5e:fa:5a:4b:65:5c:14:8f:b4: 93:cc:26:c9:09:6b:6d:3a:71:82:1e:50:ad:c4:a2:15:99:b4: 0b:48:95:60:ec:21:1c:c0:e5:43:19:79:8a:20:d5:f9:fb:68: fd:a5:ad:51:26:03:4e:f0:de:d6:7a:41:da:e0:b4:4c:a9:85: 72:f7:18:ae:86:5e:2a:f9:98:08:93:8b:ad:65:0e:03:d0:ec: 85:8d:23:1c:77:b5:5c:17:54:51:6f:f3:a1:22:f8:9a:f0:9e: ef:63:ae:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQDK/tCVgrg///lgzGJZtSP13i6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVF RjYxMjJCQzAeFw0yNjA1MTUyMzEwMjFaFw0yNjA1MTYyMzU0MjFaMDMxMTAvBgNV BAMTKDI0NUI5MzQyRUY1NkM5RkJFNTk5MUNFNUIyQTI3NUJCQzM5MDI3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWXwg7PZFBaliEDtgZ+dpxtFGL FWxmwqxM3NyL2wdmFO9xwPrUi2dR7ll0Fn1Fwb77HyXWOviP9D5Axg/XVRtkcMgT t3ush8cKPxUmwatfOBUz8UJYugsLE4/QmoCYhSd2ajKd7iEXtW82XBd9ZTsjNsLd wv+M9HX/0YMgVVzweczNleDmKuvSTtH7reYlJG2hMAGeq+Jw3UiccftofFG4OgaM Slpb6wNtWv3UcK/YV4/1CsiY5xfuC+/Trjg4T2cI8cJ4H1m8ryyfjS/b8fwrYit8 zQPYoXYNgeoItRXBXFhN6LO4E/jU0SDLhCEiXKZ157NWkeeUVE8p2qZvzY9LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJFuTQu9WyfvlmRzlsqJ1u8OQJ0IwHwYDVR0j BBgwFoAUWEOVi7JAd5Mg1/DCtnSs9e9hIrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ5NWMxOWMtMzI2Mi00OGM3LWFmMDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJC MjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVFRjYxMjJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODQzOTU4QkIyNDA3NzkzMjBEN0YwQzJCNjc0QUNGNUVGNjEy MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ5NWMxOWMtMzI2Mi00OGM3LWFm MDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFD RjVFRjYxMjJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVzBbxlHXEyRuNS4aYvwOj8nfW+VdF37a8l 8AWmTODSFz5QykE2tr6zlMgV668fwfgSo0RqzAEpuKojOLDIzrU81tNtt1Kuj3AM x4+Q6zfUFRV4nCy7UjsuTtCUPTGPIQUr5oje0l/ILSEwdoXuQwgG5LJjaAJ+vy96 skP1tKnvRV3zvekTiSnoMo4/OVezokR4DG4zpq6I5F76WktlXBSPtJPMJskJa206 cYIeUK3EohWZtAtIlWDsIRzA5UMZeYog1fn7aP2lrVEmA07w3tZ6QdrgtEyphXL3 GK6GXir5mAiTi61lDgPQ7IWNIxx3tVwXVFFv86Ei+Jrwnu9jrsw= -----END CERTIFICATE-----Generated at Sat May 16 15:35:09 2026 by rpki-client