$ rpki-client -vvf rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft File: 5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft (raw, json) Hash identifier: llgv0Vfo/pSHw/e9GzB2M2Qn3jD7PRg0zLBZ8zJVGfM= Subject key identifier: A3:2A:BE:94:E1:62:17:00:D2:21:CB:EA:7D:20:58:F3:2D:D0:EA:C8 Authority key identifier: 5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 Certificate issuer: /CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Certificate serial: 78C917884113896518C0112A25E8632EABAB6E31 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 14:39:36 +0000 Manifest this update: Thu 18 Jun 2026 14:34:36 +0000 Manifest next update: Fri 19 Jun 2026 16:25:36 +0000 Files and hashes: 1: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: P5BEjOqlnRhd5dHiMK0aXJooM/BcbKofscPw2JJ5bRQ=) 2: 3135372e32302e34352e302f32342d3234203d3e20313532333932.roa (hash: PIubzi7VZ2N4uYX3mam6XOmZc4gw31pwt2ndjjqEeIM=) 3: 5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl (hash: 5ia8keafeUVSwabquU/cF83wR9xRppjrgWYRO/OpoFc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c9:17:88:41:13:89:65:18:c0:11:2a:25:e8:63:2e:ab:ab:6e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Validity Not Before: Jun 18 14:34:36 2026 GMT Not After : Jun 19 16:25:36 2026 GMT Subject: CN=A32ABE94E1621700D221CBEA7D2058F32DD0EAC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e8:6e:1c:6d:66:93:db:8b:85:23:cc:1c:c4: 33:56:b9:2a:22:59:dd:6e:44:c0:40:0c:54:d8:9f: 74:08:f7:63:8b:f8:48:de:9e:c4:d0:0c:b4:72:d5: 25:3d:3b:a7:d9:33:77:8a:f4:ff:76:00:31:21:44: df:0c:5f:9a:1c:40:15:f8:bf:e9:b9:8a:af:58:cc: b5:a2:6c:69:56:76:6a:3a:a6:3e:e0:81:67:16:34: e5:d8:d7:e9:1e:f9:27:80:47:94:7e:a6:9a:31:53: 76:5a:7e:d4:68:18:92:17:62:3f:0b:a5:fd:3a:35: aa:a1:b3:b9:21:07:d7:cf:73:13:4a:06:e7:de:92: ab:4e:46:7c:01:b3:37:e6:a7:cd:1a:8c:31:19:f1: 44:b9:b8:46:52:67:4f:a7:a5:10:80:06:0b:94:27: a6:97:04:44:f4:d3:99:c8:ac:50:73:b0:cd:fb:c2: 4b:64:72:f3:36:6d:49:dc:fe:06:c2:2b:d8:cb:4c: ed:0a:b4:0c:d8:45:71:c6:4e:6f:88:23:9c:77:2d: e5:af:a0:35:26:5f:ae:6e:04:b9:39:01:26:f7:df: c9:80:8b:01:58:9f:fb:0d:9c:45:1e:b7:41:ad:b2: d8:7a:30:9b:2e:e8:ef:8f:7c:52:cd:01:23:10:4b: 68:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2A:BE:94:E1:62:17:00:D2:21:CB:EA:7D:20:58:F3:2D:D0:EA:C8 X509v3 Authority Key Identifier: keyid:5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9b:15:9a:71:30:34:04:8d:81:72:0a:8b:ea:b8:04:55:76: ac:e1:af:96:90:37:11:ee:7e:67:98:98:69:1c:e7:27:ad:92: 1f:91:b1:4a:61:68:fb:07:e9:72:ef:fa:8b:6d:25:9c:ca:36: ab:0c:95:30:cc:e8:61:88:e1:dc:9d:a2:fe:c2:e3:ac:99:85: 2a:ed:ca:60:21:6a:6a:80:3b:70:2c:c6:b8:01:4a:84:10:ca: ca:37:45:ab:74:93:c4:ea:b8:68:cd:bd:5f:0a:fc:a4:38:f8: 6b:81:01:3d:b9:85:6b:e1:ee:f1:58:52:87:2d:77:20:46:39: a3:97:74:63:81:76:71:cc:ac:8b:a8:11:41:7b:39:76:f0:21: 95:99:7e:50:c3:fc:c3:ca:7f:ac:40:f5:13:c8:1b:60:fd:3a: 4c:05:4a:bb:0a:73:0e:9e:58:a0:f9:de:31:33:23:18:12:35: e4:11:72:15:a7:52:84:e2:4b:09:73:d4:cb:8d:1b:12:cb:85: 6c:f8:c6:f2:a6:94:8c:ee:55:0b:68:a4:cf:97:83:eb:bc:cf: 2d:fa:b8:a0:a5:6f:e5:10:c8:11:3a:28:a7:64:a1:e1:9b:d5: 2e:fe:3b:59:9c:cb:78:9a:d1:d7:b9:0b:fe:fc:12:b8:6f:40: 8a:98:b7:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeMkXiEETiWUYwBEqJehjLqurbjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNG RUFBQjkwOTAeFw0yNjA2MTgxNDM0MzZaFw0yNjA2MTkxNjI1MzZaMDMxMTAvBgNV BAMTKEEzMkFCRTk0RTE2MjE3MDBEMjIxQ0JFQTdEMjA1OEYzMkREMEVBQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6G4cbWaT24uFI8wcxDNWuSoi Wd1uRMBADFTYn3QI92OL+EjensTQDLRy1SU9O6fZM3eK9P92ADEhRN8MX5ocQBX4 v+m5iq9YzLWibGlWdmo6pj7ggWcWNOXY1+ke+SeAR5R+ppoxU3ZaftRoGJIXYj8L pf06Naqhs7khB9fPcxNKBufekqtORnwBszfmp80ajDEZ8US5uEZSZ0+npRCABguU J6aXBET005nIrFBzsM37wktkcvM2bUnc/gbCK9jLTO0KtAzYRXHGTm+II5x3LeWv oDUmX65uBLk5ASb338mAiwFYn/sNnEUet0Gtsth6MJsu6O+PfFLNASMQS2g5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoyq+lOFiFwDSIcvqfSBY8y3Q6sgwHwYDVR0j BBgwFoAUWhwazsC2dAF/+4nyGGW6Y/6quQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU4OGRmZjctNmE5Mi00MjkzLTg4MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VD MEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNGRUFBQjkwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81QTFDMUFDRUMwQjY3NDAxN0ZGQjg5RjIxODY1QkE2M0ZFQUFC OTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJB NjNGRUFBQjkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqbFZpxMDQEjYFyCovquARVdqzhr5aQNxHu fmeYmGkc5yetkh+RsUphaPsH6XLv+ottJZzKNqsMlTDM6GGI4dydov7C46yZhSrt ymAhamqAO3AsxrgBSoQQyso3Rat0k8TquGjNvV8K/KQ4+GuBAT25hWvh7vFYUoct dyBGOaOXdGOBdnHMrIuoEUF7OXbwIZWZflDD/MPKf6xA9RPIG2D9OkwFSrsKcw6e WKD53jEzIxgSNeQRchWnUoTiSwlz1MuNGxLLhWz4xvKmlIzuVQtopM+Xg+u8zy36 uKClb+UQyBE6KKdkoeGb1S7+O1mcy3ia0de5C/78ErhvQIqYt4M= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:36 2026 by rpki-client