$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft File: 5645F0B82898A2A9A354AB086BC696E81297553D.mft (raw, json) Hash identifier: yyVXhVfc0H9F6d+A+DwDNloQNzHsFXPdIZLQNewvXTU= Subject key identifier: 7A:E8:2D:A4:EC:E8:AA:1A:8B:B5:63:85:D8:45:F8:FC:AA:E2:B1:80 Authority key identifier: 56:45:F0:B8:28:98:A2:A9:A3:54:AB:08:6B:C6:96:E8:12:97:55:3D Certificate issuer: /CN=5645F0B82898A2A9A354AB086BC696E81297553D Certificate serial: 38501B4923EDD51F8EC3334D48F0CFE5478F8FD0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:22:54 +0000 Manifest this update: Tue 02 Jun 2026 22:17:54 +0000 Manifest next update: Thu 04 Jun 2026 01:23:54 +0000 Files and hashes: 1: 3130332e36372e36392e302f32342d3234203d3e20313531393938.roa (hash: qeHJ1PkAaAN+foqEt/Aw5gnh3414OQ8lq2kg+Oj23CQ=) 2: 5645F0B82898A2A9A354AB086BC696E81297553D.crl (hash: 78kobsfRjNsJSentOj45RCkXs5so8qLUF+iYj0IEB5g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.crl rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:50:1b:49:23:ed:d5:1f:8e:c3:33:4d:48:f0:cf:e5:47:8f:8f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5645F0B82898A2A9A354AB086BC696E81297553D Validity Not Before: Jun 2 22:17:54 2026 GMT Not After : Jun 4 01:23:54 2026 GMT Subject: CN=7AE82DA4ECE8AA1A8BB56385D845F8FCAAE2B180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fd:d4:c5:56:db:9c:bb:2e:41:5e:72:3e:ea: 29:da:30:33:5b:d6:3b:4e:d6:70:1a:ba:a2:91:5d: bf:ea:d1:7b:b3:c3:b3:82:13:c7:15:de:4e:43:1b: fa:10:98:94:be:99:07:dd:4d:f4:96:0e:c5:b1:01: 60:c2:37:25:9a:2c:41:3c:4f:fa:44:94:5e:92:2c: f8:54:12:2c:99:e9:d3:d4:ae:01:a5:6c:10:54:8c: 61:c3:ad:26:13:17:d6:21:67:21:f7:8c:0c:1e:8c: b5:5c:98:eb:37:ec:66:7e:28:b0:77:65:46:64:4c: 9b:f8:7d:c5:98:8b:02:d4:93:cb:53:07:9a:4f:6f: c9:00:94:ff:f6:80:02:92:4a:c0:93:64:72:59:7c: 81:92:c6:05:d6:ea:3a:3c:b4:a2:2a:08:64:2a:9a: 6a:33:d1:e4:ce:7c:70:7a:d1:5a:62:1e:6b:38:64: e1:a9:68:ab:31:fc:ed:45:80:32:d3:c6:b5:cb:5e: cb:b4:a0:10:f3:8b:a1:8b:4e:9b:71:c0:86:57:83: cd:44:00:52:fc:62:e9:73:4c:78:4a:0b:ab:51:14: f2:77:53:89:f8:b6:1a:02:14:a2:5c:0b:bd:31:b0: 0d:53:1d:67:33:64:53:95:3b:39:4d:b7:d1:b6:1e: 83:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E8:2D:A4:EC:E8:AA:1A:8B:B5:63:85:D8:45:F8:FC:AA:E2:B1:80 X509v3 Authority Key Identifier: keyid:56:45:F0:B8:28:98:A2:A9:A3:54:AB:08:6B:C6:96:E8:12:97:55:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:e0:ad:35:ba:c3:d5:27:b5:da:56:f6:e3:9a:80:c9:63:4a: 1a:f2:d9:07:b6:11:df:b5:c9:27:49:00:fb:ff:23:9f:dd:ef: 20:bf:a3:f3:8d:b5:43:9e:a2:f3:42:7b:ef:9d:13:86:7b:ad: 84:b8:4a:ca:a3:cb:31:b2:61:a9:09:16:4a:81:ec:7d:e0:60: 20:1b:c2:37:47:05:48:29:2f:69:8b:9c:c6:67:2f:c5:1b:cf: 07:c7:e4:9e:ed:c0:84:04:89:7c:32:4d:d9:3d:cc:8c:09:16: 29:b6:29:6c:12:25:20:b6:a1:83:35:04:77:ac:0b:b6:83:e2: 75:2a:fc:9a:e6:c3:a6:ec:42:33:7c:be:83:a7:54:63:07:0a: f6:a3:63:d7:e0:c8:4c:1b:a8:8b:be:72:ba:7a:02:db:74:ea: 82:e4:e8:1e:d4:6c:34:af:da:2b:e0:e5:98:fc:39:a9:83:60: 11:9e:8b:34:65:b9:76:9e:0a:d0:d9:38:5d:d5:e6:3a:0b:23: b4:de:1b:18:ba:ef:88:73:ee:fc:ad:b8:97:cf:f0:76:70:ad: 63:4a:74:f7:da:dc:9c:84:99:76:1f:9a:3f:62:17:24:95:c2: 29:db:21:00:bb:d9:ac:2e:38:a4:a3:4a:f7:f2:94:c0:6d:98: 5c:d3:36:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOFAbSSPt1R+OwzNNSPDP5UePj9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY0NUYwQjgyODk4QTJBOUEzNTRBQjA4NkJDNjk2RTgx Mjk3NTUzRDAeFw0yNjA2MDIyMjE3NTRaFw0yNjA2MDQwMTIzNTRaMDMxMTAvBgNV BAMTKDdBRTgyREE0RUNFOEFBMUE4QkI1NjM4NUQ4NDVGOEZDQUFFMkIxODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc/dTFVtucuy5BXnI+6inaMDNb 1jtO1nAauqKRXb/q0Xuzw7OCE8cV3k5DG/oQmJS+mQfdTfSWDsWxAWDCNyWaLEE8 T/pElF6SLPhUEiyZ6dPUrgGlbBBUjGHDrSYTF9YhZyH3jAwejLVcmOs37GZ+KLB3 ZUZkTJv4fcWYiwLUk8tTB5pPb8kAlP/2gAKSSsCTZHJZfIGSxgXW6jo8tKIqCGQq mmoz0eTOfHB60VpiHms4ZOGpaKsx/O1FgDLTxrXLXsu0oBDzi6GLTptxwIZXg81E AFL8YulzTHhKC6tRFPJ3U4n4thoCFKJcC70xsA1THWczZFOVOzlNt9G2HoNbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeugtpOzoqhqLtWOF2EX4/KrisYAwHwYDVR0j BBgwFoAUVkXwuCiYoqmjVKsIa8aW6BKXVT0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBkOGRhMmQtYTUwNi00NzYzLWJjM2MtZTI4MGJmNzUxN2E0LzAvNTY0NUYwQjgy ODk4QTJBOUEzNTRBQjA4NkJDNjk2RTgxMjk3NTUzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NjQ1RjBCODI4OThBMkE5QTM1NEFCMDg2QkM2OTZFODEyOTc1 NTNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBkOGRhMmQtYTUwNi00NzYzLWJj M2MtZTI4MGJmNzUxN2E0LzAvNTY0NUYwQjgyODk4QTJBOUEzNTRBQjA4NkJDNjk2 RTgxMjk3NTUzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFngrTW6w9UntdpW9uOagMljShry2Qe2Ed+1 ySdJAPv/I5/d7yC/o/ONtUOeovNCe++dE4Z7rYS4SsqjyzGyYakJFkqB7H3gYCAb wjdHBUgpL2mLnMZnL8UbzwfH5J7twIQEiXwyTdk9zIwJFim2KWwSJSC2oYM1BHes C7aD4nUq/Jrmw6bsQjN8voOnVGMHCvajY9fgyEwbqIu+crp6Att06oLk6B7UbDSv 2ivg5Zj8OamDYBGeizRluXaeCtDZOF3V5joLI7TeGxi674hz7vytuJfP8HZwrWNK dPfa3JyEmXYfmj9iFySVwinbIQC72awuOKSjSvfylMBtmFzTNhk= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:10 2026 by rpki-client