$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft File: 5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft (raw, json) Hash identifier: j1zYNfFq1x3W07+aHw0N4vwMEkifYqPDdhQs/XaacME= Subject key identifier: DA:04:B8:F9:34:E4:84:C5:BB:4E:E3:27:FC:9E:52:2F:DD:8E:E5:42 Authority key identifier: 5F:64:BD:BF:1F:5E:F4:64:EE:DA:DC:0C:7E:E7:F2:53:77:E7:9D:58 Certificate issuer: /CN=5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58 Certificate serial: 01452E2EB46A1AABD997700A68AEF970033500CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:45:09 +0000 Manifest this update: Tue 02 Jun 2026 20:40:09 +0000 Manifest next update: Wed 03 Jun 2026 22:48:09 +0000 Files and hashes: 1: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: 7jJh3/VcK6Y+8JbMHzIyFhICT0ZmzdRr0l5g6HYzQ4U=) 2: 5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl (hash: hOFav7I5n50W9vtbEloyfC/LwMpjwHaZWm1nA4QgWJk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 22:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:45:2e:2e:b4:6a:1a:ab:d9:97:70:0a:68:ae:f9:70:03:35:00:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58 Validity Not Before: Jun 2 20:40:09 2026 GMT Not After : Jun 3 22:48:09 2026 GMT Subject: CN=DA04B8F934E484C5BB4EE327FC9E522FDD8EE542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:35:01:9c:a0:fd:0c:1f:b2:78:7b:9e:8c:24: 40:14:78:63:2e:c9:ef:55:d3:72:01:4f:ac:42:0b: e4:a9:2e:be:be:37:05:8e:6e:4b:55:d6:6a:58:14: 04:f9:cf:6e:77:09:75:e6:13:47:4e:76:20:05:88: 1e:5c:01:d6:65:9f:a3:d1:9c:52:40:34:40:b4:6c: 09:bf:22:62:6d:a9:58:01:4b:14:68:fa:c5:c8:3e: a2:3b:bc:c3:35:c8:82:56:c1:15:c0:7d:fb:37:3b: 53:22:df:10:26:7f:b3:69:59:28:e9:71:fe:35:fe: 56:99:4a:6e:9f:a2:de:c9:36:b9:b0:ec:33:b2:cd: 73:28:83:6d:5e:71:1c:ac:ce:01:7e:72:47:ec:10: d5:04:14:9d:27:b3:0d:83:19:db:60:91:2c:52:0c: 84:56:e1:4c:8d:e3:78:4d:e1:67:0e:8e:56:ab:1b: 3f:e5:52:4a:90:fe:45:ee:25:62:92:b8:1e:d4:da: 58:8d:c4:5c:75:cb:a7:4d:50:e6:71:de:75:99:93: 8d:ac:f7:9c:bc:6b:e3:8e:2c:e5:f3:58:d4:55:36: f7:cf:90:d9:98:b8:db:ef:64:83:04:6c:6b:e6:4d: da:89:36:a4:8a:a6:88:a3:1d:48:5f:cf:6b:a0:5e: a4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:04:B8:F9:34:E4:84:C5:BB:4E:E3:27:FC:9E:52:2F:DD:8E:E5:42 X509v3 Authority Key Identifier: keyid:5F:64:BD:BF:1F:5E:F4:64:EE:DA:DC:0C:7E:E7:F2:53:77:E7:9D:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ba:f2:94:88:87:91:e7:15:60:8c:e9:9f:91:8b:ec:93:db: 64:22:c7:d1:55:fd:bf:a0:e9:6b:5b:64:5a:83:fb:3d:e5:c9: e5:a1:53:d9:e2:38:ac:b3:f5:8f:88:3c:81:3b:23:40:c6:43: 90:bf:58:af:86:ec:f1:3d:d9:84:20:b3:4f:57:62:5b:0f:28: 63:80:79:9d:69:ba:4a:64:4e:75:2a:be:ed:4a:8c:0b:18:7a: c5:97:ea:54:24:4d:d0:cb:d9:74:15:d9:f4:04:d9:d5:b9:4d: 14:2a:2c:a0:72:cc:c6:e8:57:7b:a7:45:2f:1a:4c:22:d0:5c: cb:a2:16:eb:e4:e6:b4:f4:eb:b7:8a:fc:e8:1a:af:58:f6:b4: 92:02:81:6b:c0:97:68:4e:8c:9c:58:8b:b7:85:5b:69:91:1d: 83:a3:52:2a:94:40:0d:34:df:f8:4e:70:ad:0d:d3:f5:ca:02: 70:92:e5:9b:84:f5:d0:92:33:b8:52:6e:1a:df:23:26:14:92: 98:54:77:21:52:94:14:be:f2:13:2e:39:38:1b:6a:fb:26:49: c9:01:0b:ef:f7:a7:5a:8c:3b:bc:49:8b:11:37:6e:cf:09:e6: d2:c1:92:7d:ed:8f:4e:a8:40:44:21:e4:d1:db:21:32:45:ad: 91:bf:ac:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAUUuLrRqGqvZl3AKaK75cAM1AM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY2NEJEQkYxRjVFRjQ2NEVFREFEQzBDN0VFN0YyNTM3 N0U3OUQ1ODAeFw0yNjA2MDIyMDQwMDlaFw0yNjA2MDMyMjQ4MDlaMDMxMTAvBgNV BAMTKERBMDRCOEY5MzRFNDg0QzVCQjRFRTMyN0ZDOUU1MjJGREQ4RUU1NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxNQGcoP0MH7J4e56MJEAUeGMu ye9V03IBT6xCC+SpLr6+NwWObktV1mpYFAT5z253CXXmE0dOdiAFiB5cAdZln6PR nFJANEC0bAm/ImJtqVgBSxRo+sXIPqI7vMM1yIJWwRXAffs3O1Mi3xAmf7NpWSjp cf41/laZSm6fot7JNrmw7DOyzXMog21ecRyszgF+ckfsENUEFJ0nsw2DGdtgkSxS DIRW4UyN43hN4WcOjlarGz/lUkqQ/kXuJWKSuB7U2liNxFx1y6dNUOZx3nWZk42s 95y8a+OOLOXzWNRVNvfPkNmYuNvvZIMEbGvmTdqJNqSKpoijHUhfz2ugXqTFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2gS4+TTkhMW7TuMn/J5SL92O5UIwHwYDVR0j BBgwFoAUX2S9vx9e9GTu2twMfufyU3fnnVgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDlhZTk4MjgtMGU4Mi00NDM0LWI4ZjItMmQ4YWQ1OWNlYTg4LzAvNUY2NEJEQkYx RjVFRjQ2NEVFREFEQzBDN0VFN0YyNTM3N0U3OUQ1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjY0QkRCRjFGNUVGNDY0RUVEQURDMEM3RUU3RjI1Mzc3RTc5 RDU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDlhZTk4MjgtMGU4Mi00NDM0LWI4 ZjItMmQ4YWQ1OWNlYTg4LzAvNUY2NEJEQkYxRjVFRjQ2NEVFREFEQzBDN0VFN0Yy NTM3N0U3OUQ1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFe68pSIh5HnFWCM6Z+Ri+yT22Qix9FV/b+g 6WtbZFqD+z3lyeWhU9niOKyz9Y+IPIE7I0DGQ5C/WK+G7PE92YQgs09XYlsPKGOA eZ1pukpkTnUqvu1KjAsYesWX6lQkTdDL2XQV2fQE2dW5TRQqLKByzMboV3unRS8a TCLQXMuiFuvk5rT067eK/Ogar1j2tJICgWvAl2hOjJxYi7eFW2mRHYOjUiqUQA00 3/hOcK0N0/XKAnCS5ZuE9dCSM7hSbhrfIyYUkphUdyFSlBS+8hMuOTgbavsmSckB C+/3p1qMO7xJixE3bs8J5tLBkn3tj06oQEQh5NHbITJFrZG/rJE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:20 2026 by rpki-client