$ rpki-client -vvf rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft File: 5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft (raw, json) Hash identifier: JWC4TwXfEbw+RfscJRsqbEpYXxUOBg+hoGSJn6jckSY= Subject key identifier: 43:E2:80:37:36:02:17:01:F7:D5:04:5D:18:55:68:72:76:86:17:BE Authority key identifier: 5C:F0:75:1D:09:00:89:27:35:B6:7C:FC:77:F2:BA:C1:7A:3B:B1:D8 Certificate issuer: /CN=5CF0751D0900892735B67CFC77F2BAC17A3BB1D8 Certificate serial: 2129C25BC3CEEBD412F024C3A29EE3B8E804615B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:43:21 +0000 Manifest this update: Tue 02 Jun 2026 10:38:21 +0000 Manifest next update: Wed 03 Jun 2026 12:21:21 +0000 Files and hashes: 1: 5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl (hash: xqzN17FIPyggPyl6etAd0+LvVaWpSJ93cQLTABAh/QA=) 2: 3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (hash: 9PTwvaeRVFt7vMjuuHgRNVKrWXlVE2+CW1qlg4q1SF0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:29:c2:5b:c3:ce:eb:d4:12:f0:24:c3:a2:9e:e3:b8:e8:04:61:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CF0751D0900892735B67CFC77F2BAC17A3BB1D8 Validity Not Before: Jun 2 10:38:21 2026 GMT Not After : Jun 3 12:21:21 2026 GMT Subject: CN=43E2803736021701F7D5045D18556872768617BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:54:ca:9b:a9:75:3b:e0:e7:33:96:62:72: 12:c1:87:db:90:43:e4:80:fc:bd:46:93:45:35:91: 6b:76:d3:20:a3:ae:0f:fd:94:9f:1e:d0:6f:01:65: 33:d8:0a:1d:d8:3e:57:d1:1e:c2:c4:b2:39:ab:66: ec:ab:72:de:c8:83:15:f0:53:c6:aa:0f:a2:b3:f4: d2:2d:64:d0:6c:bf:d4:2f:76:ca:e2:47:65:70:fa: fc:7b:39:30:61:c4:2a:1e:12:05:c5:29:17:1e:03: 87:7b:eb:56:95:df:25:d6:c1:ef:1f:21:6e:58:df: 2b:51:65:dc:f8:ce:ce:b6:3e:d2:18:90:2c:22:a3: 96:bd:95:55:c8:18:e3:20:a5:95:59:bf:56:3b:1b: e5:8e:92:f7:88:18:e4:38:89:ef:74:8f:3b:6c:63: 31:38:52:b0:87:d2:28:0f:2c:47:63:13:be:4c:13: b2:80:1e:ae:f3:0f:44:a2:fc:fc:b5:28:20:71:74: f2:45:e6:0c:04:b8:4d:cb:d7:60:92:18:70:04:72: a4:90:90:78:56:92:0c:f4:65:eb:3e:28:37:bb:8a: 11:ae:bc:dd:04:e1:7a:fd:88:e1:ef:e3:a2:3f:5e: 0c:da:d1:cb:7e:1d:8b:e2:72:80:a8:8d:52:7e:6a: 40:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E2:80:37:36:02:17:01:F7:D5:04:5D:18:55:68:72:76:86:17:BE X509v3 Authority Key Identifier: keyid:5C:F0:75:1D:09:00:89:27:35:B6:7C:FC:77:F2:BA:C1:7A:3B:B1:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9d:41:7f:03:5c:c1:d4:93:23:3a:43:7d:45:65:13:7d:a9: 3d:02:af:e6:96:0d:7f:86:ab:6b:e1:60:e6:5d:f7:f9:98:88: 8d:fd:fb:41:af:1f:f1:da:77:f3:60:27:0c:2d:36:e7:46:15: f1:e7:a6:f1:1d:61:a8:b9:4a:d0:ec:e0:a7:03:c1:04:a9:3f: 38:42:a7:ef:2f:df:0d:27:17:6d:8c:93:95:55:88:f9:da:c6: 67:02:a4:de:b5:ac:c7:3a:b4:89:55:7e:83:80:53:5b:4a:f5: cc:08:0a:54:90:26:71:12:fe:6b:a0:65:9c:95:02:13:85:d3: 06:50:c1:64:71:0c:96:a1:5f:02:b7:58:76:ae:fe:74:19:2b: 6f:fe:73:5a:23:37:1e:8c:01:8c:22:42:f8:8d:57:4a:f9:c8: 31:9a:bc:ef:7e:76:bf:f1:1d:fe:45:44:16:a1:3a:ea:1e:6d: 3e:98:1d:e2:a7:6b:fd:a9:9b:42:92:1b:43:34:01:a3:e6:55: e1:ff:4d:2b:f8:0b:c5:32:70:0d:b2:5b:b8:61:2d:18:f9:f9: cb:e5:ef:cb:1a:d7:6f:50:89:62:5b:bc:b4:5f:78:66:d9:52: 5e:58:85:b3:00:fe:d4:12:d7:8d:6e:25:aa:23:d3:20:59:32: ff:00:26:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUISnCW8PO69QS8CTDop7juOgEYVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNGMDc1MUQwOTAwODkyNzM1QjY3Q0ZDNzdGMkJBQzE3 QTNCQjFEODAeFw0yNjA2MDIxMDM4MjFaFw0yNjA2MDMxMjIxMjFaMDMxMTAvBgNV BAMTKDQzRTI4MDM3MzYwMjE3MDFGN0Q1MDQ1RDE4NTU2ODcyNzY4NjE3QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/iVTKm6l1O+DnM5ZichLBh9uQ Q+SA/L1Gk0U1kWt20yCjrg/9lJ8e0G8BZTPYCh3YPlfRHsLEsjmrZuyrct7IgxXw U8aqD6Kz9NItZNBsv9QvdsriR2Vw+vx7OTBhxCoeEgXFKRceA4d761aV3yXWwe8f IW5Y3ytRZdz4zs62PtIYkCwio5a9lVXIGOMgpZVZv1Y7G+WOkveIGOQ4ie90jzts YzE4UrCH0igPLEdjE75ME7KAHq7zD0Si/Py1KCBxdPJF5gwEuE3L12CSGHAEcqSQ kHhWkgz0Zes+KDe7ihGuvN0E4Xr9iOHv46I/Xgza0ct+HYvicoCojVJ+akCHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ+KANzYCFwH31QRdGFVocnaGF74wHwYDVR0j BBgwFoAUXPB1HQkAiSc1tnz8d/K6wXo7sdgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzI0ZGI1NjctMzNhOC00Y2UwLWJjZmYtY2IwZjBhODVjMjM5LzAvNUNGMDc1MUQw OTAwODkyNzM1QjY3Q0ZDNzdGMkJBQzE3QTNCQjFEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Q0YwNzUxRDA5MDA4OTI3MzVCNjdDRkM3N0YyQkFDMTdBM0JC MUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzI0ZGI1NjctMzNhOC00Y2UwLWJj ZmYtY2IwZjBhODVjMjM5LzAvNUNGMDc1MUQwOTAwODkyNzM1QjY3Q0ZDNzdGMkJB QzE3QTNCQjFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFudQX8DXMHUkyM6Q31FZRN9qT0Cr+aWDX+G q2vhYOZd9/mYiI39+0GvH/Had/NgJwwtNudGFfHnpvEdYai5StDs4KcDwQSpPzhC p+8v3w0nF22Mk5VViPnaxmcCpN61rMc6tIlVfoOAU1tK9cwIClSQJnES/mugZZyV AhOF0wZQwWRxDJahXwK3WHau/nQZK2/+c1ojNx6MAYwiQviNV0r5yDGavO9+dr/x Hf5FRBahOuoebT6YHeKna/2pm0KSG0M0AaPmVeH/TSv4C8UycA2yW7hhLRj5+cvl 78sa129QiWJbvLRfeGbZUl5YhbMA/tQS141uJaoj0yBZMv8AJpk= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:44 2026 by rpki-client