$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft File: 5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft (raw, json) Hash identifier: NIbxL4f0rCyOqrrTVX40J4VzNruvKm61ujP7rgNrvc0= Subject key identifier: 32:BF:1F:E5:1E:1C:0D:9D:BC:23:7B:29:B5:37:9B:24:5A:0A:3A:BA Authority key identifier: 5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1 Certificate issuer: /CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1 Certificate serial: 5A660918FDD7B7C788671AF48F48ACABC87F546A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:29:15 +0000 Manifest this update: Tue 02 Jun 2026 23:24:15 +0000 Manifest next update: Thu 04 Jun 2026 02:38:15 +0000 Files and hashes: 1: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: yFzJDaOR3ALC9R9lcLlFWOcSjWJQYhCD//08bWWKhcU=) 2: 5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl (hash: JwZhSmQI0Q5YhzRRav5mXPFEDvre7f5wztc2yiiELEA=) 3: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: CgpRUUxgJdvC2DaauFEj0ljqW/Af8HR5RmTcf5er/Ag=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:66:09:18:fd:d7:b7:c7:88:67:1a:f4:8f:48:ac:ab:c8:7f:54:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1 Validity Not Before: Jun 2 23:24:15 2026 GMT Not After : Jun 4 02:38:15 2026 GMT Subject: CN=32BF1FE51E1C0D9DBC237B29B5379B245A0A3ABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:47:1a:cf:45:82:b8:d2:c8:82:2d:1d:c8:73: 38:85:eb:3e:af:e1:2c:64:31:d5:0a:74:e3:e3:6e: a2:02:b5:b8:36:f3:cc:bf:93:d2:62:cc:f5:08:92: 98:65:0f:ad:2c:2f:01:ff:b4:9e:37:37:a4:64:1a: 88:9d:96:e3:b7:51:bc:ce:46:2d:ec:a6:c8:33:20: 86:cd:8d:78:b3:db:04:06:df:42:1e:9a:f2:90:63: 69:56:87:ba:c4:e4:31:52:cd:20:0f:6b:90:98:7c: 45:0b:34:d5:b7:13:03:b3:fd:ea:55:af:d3:dd:29: f0:de:0d:36:fd:d4:ea:e4:23:c1:70:05:9b:eb:dd: 35:a7:23:fa:8d:55:66:19:32:78:c5:49:26:d2:ab: 9d:e0:4a:ee:33:a2:ea:48:9b:57:25:3e:80:4e:5f: 94:1c:6b:ef:c6:c7:5f:f2:1e:67:99:3f:64:3a:0d: 51:22:4e:0e:e6:5a:a3:d2:7a:fc:63:6f:68:9b:70: ba:84:ca:10:8d:6c:66:0d:ed:be:98:ce:98:27:db: 5e:e2:14:7b:31:5b:46:42:64:14:fa:cc:d1:fa:f3: 8c:f3:db:84:9a:7f:ae:08:45:ed:dd:6f:b4:fb:31: 83:51:ee:5f:f1:22:0d:88:12:da:4f:72:0f:b3:8e: 58:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BF:1F:E5:1E:1C:0D:9D:BC:23:7B:29:B5:37:9B:24:5A:0A:3A:BA X509v3 Authority Key Identifier: keyid:5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f4:18:c5:ec:d0:8e:3b:ab:aa:f9:5f:ff:35:b3:5f:d5:5a: 4c:37:9b:12:54:86:c0:6e:38:95:ec:6e:5c:b3:72:94:76:4d: 59:79:4a:8b:b5:82:65:fe:f4:98:04:6e:21:86:1a:91:74:8c: 0e:2e:e0:a6:c4:ce:28:ad:9e:95:4f:31:84:c9:a9:0d:0d:0f: f2:d9:2a:72:cb:e7:06:f3:47:86:eb:2c:22:1c:78:4c:72:c0: a6:c0:f4:fd:42:ec:38:04:3b:fb:2a:b2:68:29:6d:4e:7f:82: e0:d7:ed:db:c7:2f:09:54:c6:db:29:dc:b3:17:2c:38:9b:4f: 39:77:2d:42:b2:c0:ec:bc:81:a8:5f:e3:df:e1:5e:b0:d4:06: c6:a3:0a:ba:20:b7:a4:28:82:70:4b:d1:38:37:70:23:ae:4c: 9e:c3:c6:35:03:27:dc:f7:2f:5b:42:d1:41:c6:e9:37:6a:02: 86:73:2c:92:6b:34:ef:28:e5:c6:68:20:08:02:3a:33:af:aa: 93:47:0f:92:52:4b:a1:65:3c:c2:6d:ac:e9:15:a7:3c:0a:f2: 41:36:31:71:42:10:3a:52:ab:b3:a4:13:39:85:df:50:e7:ba: a1:c0:37:01:12:7e:f2:3d:b1:e6:93:b5:00:1b:f2:fd:02:3b: b4:ac:99:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWmYJGP3Xt8eIZxr0j0isq8h/VGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVEMEZDOURFM0M1QkYwRjI2NDFGQkM4MkUwMzUzM0FE NUE2QzVDMTAeFw0yNjA2MDIyMzI0MTVaFw0yNjA2MDQwMjM4MTVaMDMxMTAvBgNV BAMTKDMyQkYxRkU1MUUxQzBEOURCQzIzN0IyOUI1Mzc5QjI0NUEwQTNBQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIRxrPRYK40siCLR3IcziF6z6v 4SxkMdUKdOPjbqICtbg288y/k9JizPUIkphlD60sLwH/tJ43N6RkGoidluO3UbzO Ri3spsgzIIbNjXiz2wQG30IemvKQY2lWh7rE5DFSzSAPa5CYfEULNNW3EwOz/epV r9PdKfDeDTb91OrkI8FwBZvr3TWnI/qNVWYZMnjFSSbSq53gSu4zoupIm1clPoBO X5Qca+/Gx1/yHmeZP2Q6DVEiTg7mWqPSevxjb2ibcLqEyhCNbGYN7b6Yzpgn217i FHsxW0ZCZBT6zNH684zz24Saf64IRe3db7T7MYNR7l/xIg2IEtpPcg+zjlgxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMr8f5R4cDZ28I3sptTebJFoKOrowHwYDVR0j BBgwFoAUXtD8nePFvw8mQfvILgNTOtWmxcEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJkNjZkMTAtYjg1Ny00YmVmLTkzOTUtNDVkNWFiMmM0NGY5LzAvNUVEMEZDOURF M0M1QkYwRjI2NDFGQkM4MkUwMzUzM0FENUE2QzVDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RUQwRkM5REUzQzVCRjBGMjY0MUZCQzgyRTAzNTMzQUQ1QTZD NUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNUVEMEZDOURFM0M1QkYwRjI2NDFGQkM4MkUwMzUz M0FENUE2QzVDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG70GMXs0I47q6r5X/81s1/VWkw3mxJUhsBu OJXsblyzcpR2TVl5Sou1gmX+9JgEbiGGGpF0jA4u4KbEziitnpVPMYTJqQ0ND/LZ KnLL5wbzR4brLCIceExywKbA9P1C7DgEO/sqsmgpbU5/guDX7dvHLwlUxtsp3LMX LDibTzl3LUKywOy8gahf49/hXrDUBsajCrogt6QognBL0Tg3cCOuTJ7DxjUDJ9z3 L1tC0UHG6TdqAoZzLJJrNO8o5cZoIAgCOjOvqpNHD5JSS6FlPMJtrOkVpzwK8kE2 MXFCEDpSq7OkEzmF31DnuqHANwESfvI9seaTtQAb8v0CO7SsmTc= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:08 2026 by rpki-client