$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft File: F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft (raw, json) Hash identifier: NX6f6bu5LxnxB9nBBvl86AANtUuDnfuYLrSMMwffcPw= Subject key identifier: 8A:75:AD:1A:26:CB:80:D0:40:36:12:18:27:67:C4:23:16:30:76:97 Authority key identifier: F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A Certificate issuer: /CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A Certificate serial: 591419DDCBE8DFB31877ECF7A707BC6314DC9F74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft Manifest number: 2C Signing time: Tue 02 Jun 2026 23:13:55 +0000 Manifest this update: Tue 02 Jun 2026 23:08:55 +0000 Manifest next update: Thu 04 Jun 2026 00:11:55 +0000 Files and hashes: 1: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: +u/9D9vfsyaLH2MwRf/oL8GHy2QY5reW5CdS1r9iLUo=) 2: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: QWT8clnM0WSHO8g469pTliT/WCBN4Kmg5lPcdlpi8/s=) 3: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: cRnHdJ6ERY/gOe2MatEAOxOT41WEyNcMegmve8GczJo=) 4: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: pZiifrcLbDchRtYwQAPaQx4TCr202zft6iysN0v48zg=) 5: F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl (hash: gyD8Q9K790fcTj/snZ7DZpcIWyc4WT2vbkM6o78WQa8=) 6: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: noFGhrWS2shsN12iREyShnTzBgPrE7wgh7GcY82aKhc=) 7: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: +WK4iRrSPfnkrJEz8Gq8cT5bkygdZQkUoe49fePODB0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 00:11:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:14:19:dd:cb:e8:df:b3:18:77:ec:f7:a7:07:bc:63:14:dc:9f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A Validity Not Before: Jun 2 23:08:55 2026 GMT Not After : Jun 4 00:11:55 2026 GMT Subject: CN=8A75AD1A26CB80D0403612182767C42316307697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:39:9c:d7:3f:94:b9:0b:96:e1:c9:2d:4c:6b: d7:f5:f1:5c:9a:66:43:1f:f8:63:b4:0c:5f:fe:c9: a0:7b:50:93:7a:30:c5:0b:de:fd:dc:85:9a:32:e6: a7:00:fa:df:d1:18:06:8a:4f:87:6f:d8:ae:4c:8f: 49:d7:e9:7c:0a:41:dd:99:e1:5b:d3:8c:f9:b6:bb: 5d:49:09:08:c4:58:24:7c:f2:a9:0c:f9:d9:de:25: 57:5c:d1:f3:d7:af:cb:3e:ff:aa:4c:e0:41:8d:d4: b8:89:fe:f4:f6:96:f7:21:26:74:36:14:ee:2e:53: 10:c7:fc:13:dd:03:21:99:cc:a0:78:5f:83:7f:1f: 40:c6:2f:e9:08:be:56:46:4a:e3:cc:65:f6:f2:17: c5:88:3f:06:31:03:d7:8b:1d:fe:f2:5f:aa:a1:84: 95:f9:fa:cb:f1:4d:b1:d1:82:cb:5f:4d:0b:86:aa: 03:30:bb:c7:d2:5b:ff:a3:bb:99:e9:5f:40:cd:4e: 0a:11:8c:08:80:b2:96:c8:d3:05:d7:96:9f:96:b0: 9e:b1:07:cc:b9:97:bd:6b:3f:6b:1a:15:c2:3b:2a: be:78:b2:f4:02:dd:62:16:c6:57:9e:a6:7b:7b:ec: 57:01:3d:b5:a1:6f:68:bb:bb:7a:1a:13:71:47:8b: aa:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:75:AD:1A:26:CB:80:D0:40:36:12:18:27:67:C4:23:16:30:76:97 X509v3 Authority Key Identifier: keyid:F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:9c:15:87:a0:ac:6c:9b:40:5d:3c:8c:4b:8a:68:14:0e:d0: 68:84:13:98:c8:be:a1:9a:f1:ba:51:27:4b:41:1f:95:7d:e1: b9:53:19:3c:70:70:94:33:08:d8:51:38:f5:24:bd:76:a9:37: 95:43:49:b3:99:96:a1:47:a4:2e:92:b8:4b:42:b8:f0:fe:1e: 40:69:cf:2d:5f:41:af:e3:c6:7b:94:44:0c:6c:85:b8:3a:01: e3:c2:50:06:bb:36:a5:c5:ae:90:5e:69:b3:68:6d:64:1b:1d: 4b:e5:13:6e:ee:bf:f9:79:99:53:3a:3a:5d:bd:5d:c8:36:9f: 6e:12:ce:5c:a7:5d:5b:fb:f3:ec:46:31:ab:9b:7a:d3:57:13: 03:bc:dd:35:85:e7:65:56:74:ca:1c:d4:af:85:c8:52:61:d6: f0:58:9a:7f:d8:f6:26:56:5a:f6:5a:7a:c5:fd:52:c3:31:6d: 9f:1e:2e:70:7c:14:97:c6:72:31:7b:69:6a:55:11:d6:33:e8: 0d:9c:24:b0:3b:70:b1:ee:34:9a:1d:0a:11:5c:7a:44:5f:14: a5:d7:c6:9b:0c:5d:80:98:2c:38:0d:0a:9d:8d:5e:76:6b:78: 1c:19:6b:72:1c:bb:a3:f2:36:b3:2f:6b:83:ba:9d:56:0d:ac: 43:d3:2b:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWRQZ3cvo37MYd+z3pwe8YxTcn3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVFMTMzQkNFNTAxNEI3QTc5QUU2RThFNDgwQkMzNUJE M0MzMTg3QTAeFw0yNjA2MDIyMzA4NTVaFw0yNjA2MDQwMDExNTVaMDMxMTAvBgNV BAMTKDhBNzVBRDFBMjZDQjgwRDA0MDM2MTIxODI3NjdDNDIzMTYzMDc2OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOZzXP5S5C5bhyS1Ma9f18Vya ZkMf+GO0DF/+yaB7UJN6MMUL3v3chZoy5qcA+t/RGAaKT4dv2K5Mj0nX6XwKQd2Z 4VvTjPm2u11JCQjEWCR88qkM+dneJVdc0fPXr8s+/6pM4EGN1LiJ/vT2lvchJnQ2 FO4uUxDH/BPdAyGZzKB4X4N/H0DGL+kIvlZGSuPMZfbyF8WIPwYxA9eLHf7yX6qh hJX5+svxTbHRgstfTQuGqgMwu8fSW/+ju5npX0DNTgoRjAiAspbI0wXXlp+WsJ6x B8y5l71rP2saFcI7Kr54svQC3WIWxleepnt77FcBPbWhb2i7u3oaE3FHi6qvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUinWtGibLgNBANhIYJ2fEIxYwdpcwHwYDVR0j BBgwFoAU9eEzvOUBS3p5rm6OSAvDW9PDGHowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNlNDUwMzktNmVkMC00ODNkLWExYjktYzRmNDg1NGM1Y2Y1LzAvRjVFMTMzQkNF NTAxNEI3QTc5QUU2RThFNDgwQkMzNUJEM0MzMTg3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNUUxMzNCQ0U1MDE0QjdBNzlBRTZFOEU0ODBCQzM1QkQzQzMx ODdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvRjVFMTMzQkNFNTAxNEI3QTc5QUU2RThFNDgwQkMz NUJEM0MzMTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMGcFYegrGybQF08jEuKaBQO0GiEE5jIvqGa 8bpRJ0tBH5V94blTGTxwcJQzCNhROPUkvXapN5VDSbOZlqFHpC6SuEtCuPD+HkBp zy1fQa/jxnuURAxshbg6AePCUAa7NqXFrpBeabNobWQbHUvlE27uv/l5mVM6Ol29 Xcg2n24SzlynXVv78+xGMaubetNXEwO83TWF52VWdMoc1K+FyFJh1vBYmn/Y9iZW WvZaesX9UsMxbZ8eLnB8FJfGcjF7aWpVEdYz6A2cJLA7cLHuNJodChFcekRfFKXX xpsMXYCYLDgNCp2NXnZreBwZa3Icu6PyNrMva4O6nVYNrEPTK7w= -----END CERTIFICATE-----Generated at Wed Jun 3 04:05:16 2026 by rpki-client