$ rpki-client -vvf rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft File: 5D885821D2406437CDFEC04380E967515A67AECC.mft (raw, json) Hash identifier: kytrNmjqyurer2anZR+gIX2J7bepuEOzPESZjYVlFvk= Subject key identifier: 39:5F:5C:01:4B:23:D0:75:6A:C4:11:B2:8E:B8:E8:0A:3D:07:92:A9 Authority key identifier: 5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC Certificate issuer: /CN=5D885821D2406437CDFEC04380E967515A67AECC Certificate serial: 52D2491736D68F46C5BA1FF12084BFB75FE754DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft Manifest number: 14 Signing time: Sat 16 May 2026 18:18:15 +0000 Manifest this update: Sat 16 May 2026 18:13:15 +0000 Manifest next update: Sun 17 May 2026 20:48:15 +0000 Files and hashes: 1: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: K0RHUYKMgdp0wpj2LpgjeiPXy+duWorfZjM80sQwxyc=) 2: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (hash: L6gQCpLzy7aXDtfuVgbwQW0xcldnnRmpgqFEsdoAP3Q=) 3: 5D885821D2406437CDFEC04380E967515A67AECC.crl (hash: CKROAtJdmJt4M/rAf/2n5iTilzSFLms/1qoV9hzj1vg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 20:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d2:49:17:36:d6:8f:46:c5:ba:1f:f1:20:84:bf:b7:5f:e7:54:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D885821D2406437CDFEC04380E967515A67AECC Validity Not Before: May 16 18:13:15 2026 GMT Not After : May 17 20:48:15 2026 GMT Subject: CN=395F5C014B23D0756AC411B28EB8E80A3D0792A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cf:3a:49:31:c4:d5:bf:08:72:18:04:48:e5: f7:e9:41:b9:3e:75:f4:45:ac:b3:92:b8:a6:38:a5: cd:22:6c:77:ae:c2:33:a8:f4:b1:50:bd:c6:3f:ab: ac:6b:73:79:31:ac:3e:92:b0:3c:0f:48:dc:df:1c: 74:a9:2a:75:6f:e0:a6:ae:f5:86:a4:5d:4c:30:06: 25:27:a3:3b:0b:1c:28:78:a7:bd:8e:2c:68:e0:5a: 28:b6:74:8f:03:b7:10:b2:3e:03:4e:52:77:1b:5b: c5:c8:39:e9:7a:7b:a6:19:0c:f8:97:a5:75:83:e6: 99:18:7a:94:50:4e:30:14:d8:c6:0d:e0:bf:01:5e: f2:ea:ca:27:3f:ae:2f:f1:73:71:7c:0e:3e:0e:2c: 96:67:83:eb:2e:fb:34:2e:46:18:2b:6c:81:fc:25: f3:16:0b:06:b1:72:8c:7e:f5:35:df:0f:36:ab:68: 2a:d9:92:21:27:7c:f1:06:34:e0:d9:37:3d:94:67: 57:1e:cf:3d:ac:8d:39:16:ff:f4:2e:e5:fb:78:fa: af:c5:28:f9:aa:08:fa:39:96:26:f1:c4:0a:fc:02: a8:45:b8:7b:f3:74:5f:d7:54:01:d2:be:cb:77:9f: ea:f5:f3:53:b6:41:0c:d0:56:90:99:bc:af:39:b4: 92:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5F:5C:01:4B:23:D0:75:6A:C4:11:B2:8E:B8:E8:0A:3D:07:92:A9 X509v3 Authority Key Identifier: keyid:5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:17:66:76:94:aa:8a:42:16:ba:c5:ec:aa:3e:0c:50:de:a4: 29:4a:c6:d1:fe:47:7f:7a:ef:21:af:77:a5:f2:c4:d4:89:cb: b7:91:c9:b7:a6:37:9a:cd:0a:be:63:f9:d0:2c:44:ef:f0:6a: ad:70:63:12:5b:16:eb:fe:90:23:7c:17:b6:08:2e:fb:af:f4: 58:87:f6:c4:1a:2a:a4:59:6e:1d:81:da:68:d2:bb:3b:2b:f2: ce:7b:12:8a:15:09:86:dc:60:61:f7:c7:8a:7f:e3:95:30:58: 53:f8:3a:a0:56:94:58:96:66:90:dc:ab:03:a4:f5:02:09:2a: 56:c2:f6:5d:35:7d:ee:41:6a:f5:89:de:ec:49:40:60:20:18: 7e:ee:d2:25:a4:46:ac:92:87:ea:58:f9:49:7c:be:1b:98:c7: ec:40:10:92:16:84:46:9b:5f:47:8f:fd:07:74:09:64:4c:7c: 48:6a:48:2c:ab:0e:d0:a7:99:8b:37:55:1d:a1:f5:8c:2a:39: f0:0e:33:c7:a2:f3:4b:e1:50:08:a7:46:29:b8:6c:ea:fc:60: 87:ac:42:d7:ed:5f:50:a5:93:8e:46:64:ed:81:9a:48:7e:c6: 45:dc:d0:dc:79:db:ba:63:11:f1:7f:30:a6:d5:f0:57:29:25: 0c:3d:12:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUtJJFzbWj0bFuh/xIIS/t1/nVNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ4ODU4MjFEMjQwNjQzN0NERkVDMDQzODBFOTY3NTE1 QTY3QUVDQzAeFw0yNjA1MTYxODEzMTVaFw0yNjA1MTcyMDQ4MTVaMDMxMTAvBgNV BAMTKDM5NUY1QzAxNEIyM0QwNzU2QUM0MTFCMjhFQjhFODBBM0QwNzkyQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYzzpJMcTVvwhyGARI5ffpQbk+ dfRFrLOSuKY4pc0ibHeuwjOo9LFQvcY/q6xrc3kxrD6SsDwPSNzfHHSpKnVv4Kau 9YakXUwwBiUnozsLHCh4p72OLGjgWii2dI8DtxCyPgNOUncbW8XIOel6e6YZDPiX pXWD5pkYepRQTjAU2MYN4L8BXvLqyic/ri/xc3F8Dj4OLJZng+su+zQuRhgrbIH8 JfMWCwaxcox+9TXfDzaraCrZkiEnfPEGNODZNz2UZ1cezz2sjTkW//Qu5ft4+q/F KPmqCPo5libxxAr8AqhFuHvzdF/XVAHSvst3n+r181O2QQzQVpCZvK85tJItAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOV9cAUsj0HVqxBGyjrjoCj0HkqkwHwYDVR0j BBgwFoAUXYhYIdJAZDfN/sBDgOlnUVpnrswwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM3Njk0YjctMzI1Ni00NjY2LWEzZmUtNmU4MmU3ODNiMWUxLzAvNUQ4ODU4MjFE MjQwNjQzN0NERkVDMDQzODBFOTY3NTE1QTY3QUVDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDg4NTgyMUQyNDA2NDM3Q0RGRUMwNDM4MEU5Njc1MTVBNjdB RUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvNUQ4ODU4MjFEMjQwNjQzN0NERkVDMDQzODBFOTY3 NTE1QTY3QUVDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL0XZnaUqopCFrrF7Ko+DFDepClKxtH+R396 7yGvd6XyxNSJy7eRybemN5rNCr5j+dAsRO/waq1wYxJbFuv+kCN8F7YILvuv9FiH 9sQaKqRZbh2B2mjSuzsr8s57EooVCYbcYGH3x4p/45UwWFP4OqBWlFiWZpDcqwOk 9QIJKlbC9l01fe5BavWJ3uxJQGAgGH7u0iWkRqySh+pY+Ul8vhuYx+xAEJIWhEab X0eP/Qd0CWRMfEhqSCyrDtCnmYs3VR2h9YwqOfAOM8ei80vhUAinRim4bOr8YIes QtftX1Clk45GZO2Bmkh+xkXc0Nx527pjEfF/MKbV8FcpJQw9Eqw= -----END CERTIFICATE-----Generated at Sun May 17 14:00:30 2026 by rpki-client