$ rpki-client -vvf rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft File: 5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft (raw, json) Hash identifier: JtP8d6CT2zpVnp4wbR9IDlxO18IHm1G+pLRK4VrIyvU= Subject key identifier: 78:14:E8:05:37:0A:C7:D2:6A:40:AC:F5:3F:6E:15:B4:D5:16:6B:24 Authority key identifier: 5E:25:E7:5E:AD:14:FB:9C:87:77:75:CF:A5:C7:68:C9:9B:F8:31:CB Certificate issuer: /CN=5E25E75EAD14FB9C877775CFA5C768C99BF831CB Certificate serial: 1B64D9D3195CC99163D7FFA07C92CD5736523903 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:36:07 +0000 Manifest this update: Tue 02 Jun 2026 21:31:07 +0000 Manifest next update: Wed 03 Jun 2026 23:26:07 +0000 Files and hashes: 1: 5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl (hash: W+BrXWZsdZZb/vjswqa4HA+OQ4NETiZWAw8RlHX1GiE=) 2: 3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa (hash: U6ZrAajnenCJBZYC9uBM6kAorfrc1n55yTDGAGbaXuI=) 3: 323030313a6466303a666534303a3a2f34382d3438203d3e20313439393133.roa (hash: Mx1Bs+uk4ORbPOJY3X4OSkdxpVJJ2TqdAiAI7XjMvYw=) 4: 3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (hash: GheubIEbC2RH3FMbulGJZm2AS1TBwHys9ZC8vY6htKI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 23:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:64:d9:d3:19:5c:c9:91:63:d7:ff:a0:7c:92:cd:57:36:52:39:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E25E75EAD14FB9C877775CFA5C768C99BF831CB Validity Not Before: Jun 2 21:31:07 2026 GMT Not After : Jun 3 23:26:07 2026 GMT Subject: CN=7814E805370AC7D26A40ACF53F6E15B4D5166B24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f2:db:f2:ae:82:93:9d:ad:d5:6e:ee:05:4d: 4a:0a:ea:d6:69:b2:62:2e:e6:5b:95:bd:8d:b1:18: 15:70:4a:39:83:48:a8:40:0f:b2:00:e9:d5:73:15: c9:01:41:57:e9:26:cd:e2:5e:e9:89:a8:69:46:2f: be:7d:88:7d:fc:81:23:5d:0c:3d:42:fc:a0:b2:bf: 55:11:3e:cd:8b:02:16:bf:60:36:73:f1:6b:af:61: e4:c9:1d:49:4f:46:f3:51:94:67:c2:22:a4:fa:92: fa:c9:6a:25:b9:9a:a6:8c:8d:5d:1c:f3:0a:f7:1e: 95:e8:cf:a4:f1:cd:dd:20:8f:90:30:15:0c:fa:48: 9d:59:63:c2:78:f9:bb:9d:8a:98:80:01:e5:d8:ab: 85:fc:33:74:3e:4f:fc:fa:79:42:b2:a8:9c:db:ee: 16:0a:c2:dc:67:1c:99:6d:1d:5c:4c:f7:a3:64:35: 18:12:ca:d2:f7:74:1a:88:e7:86:ef:7c:1d:f6:5d: 02:f6:cd:2b:4a:5c:38:8e:34:61:ab:67:d4:c0:c7: 39:38:72:56:23:34:71:b5:f2:bd:be:ba:ee:24:3d: b3:9f:88:c6:f9:3b:35:48:92:98:a2:fe:fe:2a:a7: 85:c5:12:0c:e0:aa:b5:c7:9b:66:0a:cc:5b:10:50: 5d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:14:E8:05:37:0A:C7:D2:6A:40:AC:F5:3F:6E:15:B4:D5:16:6B:24 X509v3 Authority Key Identifier: keyid:5E:25:E7:5E:AD:14:FB:9C:87:77:75:CF:A5:C7:68:C9:9B:F8:31:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:c9:1e:e6:d7:e8:b2:54:cb:78:4d:7a:b4:77:f4:48:c1:31: cd:17:01:0d:ba:9a:0d:db:53:35:fc:a7:e5:28:42:db:e4:75: c3:c8:ff:81:7d:a6:e6:af:f8:fc:49:65:53:e4:9c:20:36:10: 8b:15:86:2e:93:2a:c0:0f:fc:7d:fd:05:0f:4d:1d:42:a4:9d: 76:fd:a1:17:ba:c7:7e:e9:a4:0a:7b:1c:5b:52:29:c8:ce:61: 9f:47:24:c4:9b:6e:d8:d0:0b:21:f2:7c:6b:64:ac:a6:4d:cc: 19:d4:0a:f7:d6:44:5d:6a:f4:53:5b:cf:65:05:d9:67:eb:42: 70:8f:e9:5b:e8:0a:12:d5:3e:dc:62:e2:6f:48:a4:2f:9a:89: 24:09:49:5a:66:2f:db:49:3e:82:69:bd:96:68:76:9a:17:98: 0e:c9:77:06:08:0b:e1:96:c4:7a:17:af:33:d3:5b:be:d5:a0: a5:64:9a:0d:85:d1:99:1c:26:2d:14:08:53:83:25:95:87:87: d8:35:55:e4:2c:e3:29:c3:ea:8f:2a:11:4d:06:50:17:80:10: 7c:e0:d6:3b:ea:70:b5:1e:74:ef:ab:e2:26:3a:79:a1:23:c7: 90:09:7e:1c:99:27:cd:0e:b2:e8:b6:c3:c0:46:0d:23:74:4d: 6b:8e:ae:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG2TZ0xlcyZFj1/+gfJLNVzZSOQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUyNUU3NUVBRDE0RkI5Qzg3Nzc3NUNGQTVDNzY4Qzk5 QkY4MzFDQjAeFw0yNjA2MDIyMTMxMDdaFw0yNjA2MDMyMzI2MDdaMDMxMTAvBgNV BAMTKDc4MTRFODA1MzcwQUM3RDI2QTQwQUNGNTNGNkUxNUI0RDUxNjZCMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB8tvyroKTna3Vbu4FTUoK6tZp smIu5luVvY2xGBVwSjmDSKhAD7IA6dVzFckBQVfpJs3iXumJqGlGL759iH38gSNd DD1C/KCyv1URPs2LAha/YDZz8WuvYeTJHUlPRvNRlGfCIqT6kvrJaiW5mqaMjV0c 8wr3HpXoz6Txzd0gj5AwFQz6SJ1ZY8J4+budipiAAeXYq4X8M3Q+T/z6eUKyqJzb 7hYKwtxnHJltHVxM96NkNRgSytL3dBqI54bvfB32XQL2zStKXDiONGGrZ9TAxzk4 clYjNHG18r2+uu4kPbOfiMb5OzVIkpii/v4qp4XFEgzgqrXHm2YKzFsQUF01AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeBToBTcKx9JqQKz1P24VtNUWayQwHwYDVR0j BBgwFoAUXiXnXq0U+5yHd3XPpcdoyZv4McswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg2ZDZiYTEtMWY3My00Nzc2LThhNmEtNGY0NTEyMDc5MmIxLzAvNUUyNUU3NUVB RDE0RkI5Qzg3Nzc3NUNGQTVDNzY4Qzk5QkY4MzFDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RTI1RTc1RUFEMTRGQjlDODc3Nzc1Q0ZBNUM3NjhDOTlCRjgz MUNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg2ZDZiYTEtMWY3My00Nzc2LThh NmEtNGY0NTEyMDc5MmIxLzAvNUUyNUU3NUVBRDE0RkI5Qzg3Nzc3NUNGQTVDNzY4 Qzk5QkY4MzFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbJHubX6LJUy3hNerR39EjBMc0XAQ26mg3b UzX8p+UoQtvkdcPI/4F9puav+PxJZVPknCA2EIsVhi6TKsAP/H39BQ9NHUKknXb9 oRe6x37ppAp7HFtSKcjOYZ9HJMSbbtjQCyHyfGtkrKZNzBnUCvfWRF1q9FNbz2UF 2WfrQnCP6VvoChLVPtxi4m9IpC+aiSQJSVpmL9tJPoJpvZZodpoXmA7JdwYIC+GW xHoXrzPTW77VoKVkmg2F0ZkcJi0UCFODJZWHh9g1VeQs4ynD6o8qEU0GUBeAEHzg 1jvqcLUedO+r4iY6eaEjx5AJfhyZJ80Osui2w8BGDSN0TWuOrjM= -----END CERTIFICATE-----Generated at Wed Jun 3 04:09:24 2026 by rpki-client