$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft File: 5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft (raw, json) Hash identifier: JKYFih5aBt1tfvAUzIxZlr6SrAUr9l0IhzncOoE0E+0= Subject key identifier: 72:BB:0A:C6:14:45:DE:36:2C:AD:46:89:96:07:F5:9D:B4:DE:08:63 Authority key identifier: 5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64 Certificate issuer: /CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564 Certificate serial: 56101ED19CF55BEC266446A190AC14A07E0556FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 15:23:43 +0000 Manifest this update: Tue 02 Jun 2026 15:18:43 +0000 Manifest next update: Wed 03 Jun 2026 18:14:43 +0000 Files and hashes: 1: 3130332e3134322e38382e302f32332d3233203d3e20313339333638.roa (hash: 85nzKNKm1prDMlKjYCs/G3skXgXdFpd3BSx7AhsXh80=) 2: 5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl (hash: dwjIU8H17prEQFZPiXD6uKXUc0ZJAEbXm2KWDUFUAcI=) 3: 3130332e3134322e38392e302f32342d3234203d3e20313339333638.roa (hash: 4JRcCjrbt6UQy9keTGtyxuVyA16nB/RDNc0x3IcBoFU=) 4: 3130332e3134322e38382e302f32342d3234203d3e20313339333638.roa (hash: tQktaum4KycUd3NVfEb+S8gEbr6uIhyBlDiFsL9oiH8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 18:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:10:1e:d1:9c:f5:5b:ec:26:64:46:a1:90:ac:14:a0:7e:05:56:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564 Validity Not Before: Jun 2 15:18:43 2026 GMT Not After : Jun 3 18:14:43 2026 GMT Subject: CN=72BB0AC61445DE362CAD46899607F59DB4DE0863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:83:a7:e8:4f:f0:da:6f:d6:77:07:ee:e1:bd: ee:74:fb:e9:16:7d:d5:ad:d5:cb:2e:1b:f7:ca:f3: 81:15:6b:c8:7c:ba:cb:7a:9a:ec:4d:06:1d:13:3b: ac:f8:c0:8c:d5:39:be:88:90:47:be:26:4b:ae:54: 43:97:ed:0b:0e:46:0b:14:e1:ee:39:7c:67:4e:4a: 2e:ea:f4:41:de:62:7b:2a:f1:a5:cd:1c:24:1f:6e: 96:01:ee:81:e7:ae:d0:ca:a1:a6:65:64:91:fc:dc: 4c:8d:1c:93:63:18:3a:50:d9:1d:4a:63:92:30:21: 30:3f:9b:07:c1:03:3f:b3:f0:f1:72:bd:91:6d:a2: 58:3a:1f:46:3f:15:55:f1:9b:52:d6:95:7d:a7:95: 2a:f1:a6:e9:3e:54:a9:5b:91:b1:55:d3:f5:c9:15: 7f:33:6c:8c:fe:9d:f8:03:ca:c5:fd:04:e1:6e:00: 57:14:f7:8c:b9:37:2d:f0:23:12:f9:c4:a3:63:6f: 4b:bc:a6:b0:a3:90:f7:d2:28:4c:e7:92:6f:0f:24: 3b:a8:2e:7b:26:52:52:c0:cc:10:99:e0:87:a0:e1: 91:15:6e:51:06:0d:ef:94:14:7b:58:f5:c4:a2:82: 71:a5:22:99:c1:8a:e7:03:a8:7a:c5:14:be:52:6a: c0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BB:0A:C6:14:45:DE:36:2C:AD:46:89:96:07:F5:9D:B4:DE:08:63 X509v3 Authority Key Identifier: keyid:5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:a2:d1:4c:75:c6:17:cc:d3:9a:68:11:ff:b7:20:73:bd:34: d4:11:cf:f5:ee:8c:26:3e:ad:35:43:95:af:cd:b0:cf:58:58: da:c7:53:4d:8e:d5:5f:a0:73:79:4e:e2:67:bb:e5:85:cb:79: f3:ed:a4:54:e5:15:26:f1:36:da:5d:75:ff:99:95:5f:ea:07: fd:a9:f8:72:49:9f:da:62:1c:cc:0d:61:75:ca:64:ec:e0:10: 3d:cd:64:5d:b5:2f:3d:69:8d:e7:0f:27:7d:98:8e:77:bb:f5: d5:8b:f3:9d:24:f8:ac:26:6d:01:2b:bc:88:ff:fd:83:ec:5d: ec:11:94:7d:00:7c:f7:f1:7f:5a:d4:bb:bf:ca:af:5b:4c:7c: 2e:a1:33:3d:6a:3b:64:d2:a6:1c:e6:14:bd:3e:88:dc:a9:54: 96:9f:33:78:fa:52:14:0e:98:6c:ba:e4:ef:42:96:c3:52:f5: be:f1:83:63:fb:83:57:59:28:e5:91:34:83:df:d7:51:ce:03: 1f:07:4b:58:4c:47:6f:91:1f:41:18:2a:80:6d:07:59:6f:48: 51:3a:b7:8e:d1:c4:f5:a1:c0:7a:28:67:b5:3b:7a:46:9f:74: b2:e5:56:c9:7e:bb:63:75:71:df:a3:b6:6c:a5:f9:43:2b:1a: cf:73:15:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVhAe0Zz1W+wmZEahkKwUoH4FVvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGNURCQjE0OEQwRjRFQUJCMUE3MDg3RDhDQUQ4N0ZC MkE5MTU2NDAeFw0yNjA2MDIxNTE4NDNaFw0yNjA2MDMxODE0NDNaMDMxMTAvBgNV BAMTKDcyQkIwQUM2MTQ0NURFMzYyQ0FENDY4OTk2MDdGNTlEQjRERTA4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQg6foT/Dab9Z3B+7hve50++kW fdWt1csuG/fK84EVa8h8ust6muxNBh0TO6z4wIzVOb6IkEe+JkuuVEOX7QsORgsU 4e45fGdOSi7q9EHeYnsq8aXNHCQfbpYB7oHnrtDKoaZlZJH83EyNHJNjGDpQ2R1K Y5IwITA/mwfBAz+z8PFyvZFtolg6H0Y/FVXxm1LWlX2nlSrxpuk+VKlbkbFV0/XJ FX8zbIz+nfgDysX9BOFuAFcU94y5Ny3wIxL5xKNjb0u8prCjkPfSKEznkm8PJDuo LnsmUlLAzBCZ4Ieg4ZEVblEGDe+UFHtY9cSignGlIpnBiucDqHrFFL5SasADAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcrsKxhRF3jYsrUaJlgf1nbTeCGMwHwYDVR0j BBgwFoAUXfXbsUjQ9Oq7GnCH2MrYf7KpFWQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWQ0OWQ0OWItZGFlYS00OGMwLThkNzctMTM3MzhiNzQ1NzcyLzAvNURGNURCQjE0 OEQwRjRFQUJCMUE3MDg3RDhDQUQ4N0ZCMkE5MTU2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81REY1REJCMTQ4RDBGNEVBQkIxQTcwODdEOENBRDg3RkIyQTkx NTY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWQ0OWQ0OWItZGFlYS00OGMwLThk NzctMTM3MzhiNzQ1NzcyLzAvNURGNURCQjE0OEQwRjRFQUJCMUE3MDg3RDhDQUQ4 N0ZCMkE5MTU2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECi0Ux1xhfM05poEf+3IHO9NNQRz/XujCY+ rTVDla/NsM9YWNrHU02O1V+gc3lO4me75YXLefPtpFTlFSbxNtpddf+ZlV/qB/2p +HJJn9piHMwNYXXKZOzgED3NZF21Lz1pjecPJ32Yjne79dWL850k+KwmbQErvIj/ /YPsXewRlH0AfPfxf1rUu7/Kr1tMfC6hMz1qO2TSphzmFL0+iNypVJafM3j6UhQO mGy65O9ClsNS9b7xg2P7g1dZKOWRNIPf11HOAx8HS1hMR2+RH0EYKoBtB1lvSFE6 t47RxPWhwHooZ7U7ekafdLLlVsl+u2N1cd+jtmyl+UMrGs9zFRM= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:18 2026 by rpki-client