$ rpki-client -vvf rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.mft File: 5108179E3FB57F5AC45F1773279A69AF94DC10D1.mft (raw, json) Hash identifier: PK7pPNs8p7Chk2xFxYBGXTXdy1ahM94XJ6qDdoJZnV0= Subject key identifier: DE:C2:57:98:19:49:65:9A:93:04:5E:B6:4F:6F:95:BF:13:FE:A6:BA Authority key identifier: 51:08:17:9E:3F:B5:7F:5A:C4:5F:17:73:27:9A:69:AF:94:DC:10:D1 Certificate issuer: /CN=5108179E3FB57F5AC45F1773279A69AF94DC10D1 Certificate serial: 4297339AC3C5CB724CEE6F439E55D9FA991D5940 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5108179E3FB57F5AC45F1773279A69AF94DC10D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 08:56:00 +0000 Manifest this update: Tue 02 Jun 2026 08:51:00 +0000 Manifest next update: Wed 03 Jun 2026 11:56:00 +0000 Files and hashes: 1: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: tTM/9NWG3IhzxJoEk+Z1/+wUc0rz0UR/sG3hU3aFT5I=) 2: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: xgHgXW996SxponRAZGTpcyeVjDtTlNUeBNA9uYpacKM=) 3: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: BfqUHI21QYImi0lr+Z58Iqsa7Onxr7/qLGGPmYicXKE=) 4: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: 4qVuLP3oyx7RiJngtOccrj/XkML4ZSk5eigFLJLBWTE=) 5: 5108179E3FB57F5AC45F1773279A69AF94DC10D1.crl (hash: 7iTbRz9qL5Z8tgPN7MVLZFzXmD0N8w6xJumH31CPo9Q=) 6: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: cIWtTV8yQ7p3PtcGTWoKgsMP07LYm0CdEzenYPsjfco=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.crl rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5108179E3FB57F5AC45F1773279A69AF94DC10D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:97:33:9a:c3:c5:cb:72:4c:ee:6f:43:9e:55:d9:fa:99:1d:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5108179E3FB57F5AC45F1773279A69AF94DC10D1 Validity Not Before: Jun 2 08:51:00 2026 GMT Not After : Jun 3 11:56:00 2026 GMT Subject: CN=DEC257981949659A93045EB64F6F95BF13FEA6BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1e:7f:38:ec:14:1a:0b:eb:7a:6e:10:69:5d: 5f:eb:e7:f0:4f:63:df:3d:ee:33:7d:04:41:95:c6: 5e:0f:76:10:7c:5e:af:c1:84:38:a1:29:9a:38:d9: 7e:da:87:1f:21:b3:69:a2:dc:12:db:2a:f1:8a:26: 91:44:17:95:1b:32:b9:ba:6b:e0:60:81:83:3c:29: 35:ee:a7:2b:7a:2e:b2:c3:8b:0b:9a:26:59:f7:9f: 97:ce:20:6a:0f:84:55:5a:ff:ce:ab:0a:af:cb:9d: b4:b1:d8:de:5e:06:51:1f:50:f1:0a:f0:2d:89:27: b8:a6:ca:aa:82:09:25:75:85:18:1c:a7:1d:41:cc: 44:a3:9d:60:9b:0a:b5:8f:7c:bb:b8:20:f9:25:04: 0a:8f:74:83:d0:36:96:2c:35:91:ef:24:3c:8d:c1: c2:ad:98:d2:0d:67:18:d0:12:0e:6a:38:86:47:41: 7d:c1:54:00:ac:37:d6:2c:fb:86:d8:e8:2e:03:31: 26:7d:f9:81:38:7c:9e:d9:92:db:8e:38:c3:6d:01: 7f:e7:54:c7:8e:a6:74:0d:54:03:cd:0a:ec:45:74: c6:7c:90:06:3f:be:70:30:9a:83:d1:41:10:e0:14: 26:e9:bb:87:51:8e:63:60:35:05:df:df:bb:90:09: 51:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C2:57:98:19:49:65:9A:93:04:5E:B6:4F:6F:95:BF:13:FE:A6:BA X509v3 Authority Key Identifier: keyid:51:08:17:9E:3F:B5:7F:5A:C4:5F:17:73:27:9A:69:AF:94:DC:10:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5108179E3FB57F5AC45F1773279A69AF94DC10D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:75:df:07:48:66:8c:10:fd:25:9b:72:d2:cc:cc:63:68:3e: 6b:90:14:fb:6a:31:60:9c:a2:69:e1:11:9f:88:46:4b:13:0c: e8:26:0e:91:0d:32:a1:bd:5b:7d:bb:0e:7c:d2:42:3b:b6:c6: 9c:f0:9c:d2:83:7b:b1:9d:1c:80:c5:4f:b9:79:05:65:06:3d: 76:a3:b1:83:94:f5:f2:f3:a2:ff:c1:43:1f:a1:97:be:ab:57: 65:d0:23:64:9b:41:6e:e0:0f:fa:1b:20:63:4a:b4:91:fc:b9: b9:28:70:ab:60:6f:cc:db:4e:f1:84:de:6a:92:3b:64:4d:52: a4:71:b0:4f:35:f1:da:96:fa:23:3f:6a:e7:49:c7:23:8d:c6: a3:16:b2:c7:44:87:53:e7:97:24:02:91:5f:45:27:41:92:b2: f2:1c:99:32:a2:6f:ad:a7:ea:96:4a:d8:72:cc:bf:13:e2:5d: 22:b6:53:69:fe:11:57:6e:0a:82:d5:d1:53:6f:45:1b:72:75: 57:3c:d1:c6:66:98:a6:e2:40:f3:24:94:18:34:65:d5:85:47: c8:f1:c5:91:d0:67:18:71:52:e8:43:af:0c:90:3f:d3:d3:9e: 14:b0:06:25:30:9d:ba:1e:2a:aa:0e:82:a1:8b:7d:0a:12:f1: ce:c9:a4:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQpczmsPFy3JM7m9DnlXZ+pkdWUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwODE3OUUzRkI1N0Y1QUM0NUYxNzczMjc5QTY5QUY5 NERDMTBEMTAeFw0yNjA2MDIwODUxMDBaFw0yNjA2MDMxMTU2MDBaMDMxMTAvBgNV BAMTKERFQzI1Nzk4MTk0OTY1OUE5MzA0NUVCNjRGNkY5NUJGMTNGRUE2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjHn847BQaC+t6bhBpXV/r5/BP Y9897jN9BEGVxl4PdhB8Xq/BhDihKZo42X7ahx8hs2mi3BLbKvGKJpFEF5UbMrm6 a+BggYM8KTXupyt6LrLDiwuaJln3n5fOIGoPhFVa/86rCq/LnbSx2N5eBlEfUPEK 8C2JJ7imyqqCCSV1hRgcpx1BzESjnWCbCrWPfLu4IPklBAqPdIPQNpYsNZHvJDyN wcKtmNINZxjQEg5qOIZHQX3BVACsN9Ys+4bY6C4DMSZ9+YE4fJ7ZktuOOMNtAX/n VMeOpnQNVAPNCuxFdMZ8kAY/vnAwmoPRQRDgFCbpu4dRjmNgNQXf37uQCVHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3sJXmBlJZZqTBF62T2+VvxP+prowHwYDVR0j BBgwFoAUUQgXnj+1f1rEXxdzJ5ppr5TcENEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2YzNDA0ZTYtYmIyYS00NGIwLWJlZGUtYThiMzUwMTQ2MTJkLzAvNTEwODE3OUUz RkI1N0Y1QUM0NUYxNzczMjc5QTY5QUY5NERDMTBEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTA4MTc5RTNGQjU3RjVBQzQ1RjE3NzMyNzlBNjlBRjk0REMx MEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvNTEwODE3OUUzRkI1N0Y1QUM0NUYxNzczMjc5QTY5 QUY5NERDMTBEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIx13wdIZowQ/SWbctLMzGNoPmuQFPtqMWCc omnhEZ+IRksTDOgmDpENMqG9W327DnzSQju2xpzwnNKDe7GdHIDFT7l5BWUGPXaj sYOU9fLzov/BQx+hl76rV2XQI2SbQW7gD/obIGNKtJH8ubkocKtgb8zbTvGE3mqS O2RNUqRxsE818dqW+iM/audJxyONxqMWssdEh1PnlyQCkV9FJ0GSsvIcmTKib62n 6pZK2HLMvxPiXSK2U2n+EVduCoLV0VNvRRtydVc80cZmmKbiQPMklBg0ZdWFR8jx xZHQZxhxUuhDrwyQP9PTnhSwBiUwnboeKqoOgqGLfQoS8c7JpHU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:07:49 2026 by rpki-client