$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft File: 5A5DD73D891416196AA5239D921D189D149B622B.mft (raw, json) Hash identifier: b9+MXaHD/GewzJvAtngc/0oi+fV8OzO98XSWrtrS9KQ= Subject key identifier: BF:85:DD:B1:ED:73:5D:CD:39:9D:2D:7D:3B:19:37:36:86:37:45:D4 Authority key identifier: 5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B Certificate issuer: /CN=5A5DD73D891416196AA5239D921D189D149B622B Certificate serial: 72575B7C3E7377C336E703068186DE73546FDF0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft Manifest number: 07 Signing time: Wed 06 May 2026 18:38:31 +0000 Manifest this update: Wed 06 May 2026 18:33:31 +0000 Manifest next update: Thu 07 May 2026 21:57:31 +0000 Files and hashes: 1: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: LUrz0HzKQn3BDSTwVj0zPYkXFEJEXJ4mzlthepJ39U0=) 2: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: qFviTkAJdjhBsY+4vQ6F1D24Kw3W6hG5KcLt5OTgeis=) 3: 5A5DD73D891416196AA5239D921D189D149B622B.crl (hash: JdI9BW0V27v09EmlVM7CNBC0LVx9BR/eADyBHBxIMaE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 21:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:57:5b:7c:3e:73:77:c3:36:e7:03:06:81:86:de:73:54:6f:df:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A5DD73D891416196AA5239D921D189D149B622B Validity Not Before: May 6 18:33:31 2026 GMT Not After : May 7 21:57:31 2026 GMT Subject: CN=BF85DDB1ED735DCD399D2D7D3B193736863745D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8e:89:17:78:94:9e:6b:3f:42:05:b0:af:3e: 8a:6f:1b:39:89:26:45:71:32:57:ad:0a:80:6f:f3: 22:96:d4:7a:0b:69:55:f2:5d:8a:35:08:05:79:d2: 2e:db:d8:d4:98:c9:01:68:61:39:c2:7b:44:5e:83: 55:dd:98:bc:52:e4:d8:d6:65:d7:c7:19:e3:5e:1a: 63:b8:9d:19:42:42:85:49:5b:7e:2a:61:6a:c3:12: 71:78:a1:95:ca:99:07:33:db:8d:ca:8b:03:f0:91: 3a:3e:a0:21:f4:1c:3d:c2:46:ae:ea:a8:27:ee:a4: 89:2a:a6:bc:db:28:17:82:ed:41:e1:09:da:ad:27: 75:57:54:57:af:8f:ed:5a:bd:ae:6e:bb:f5:12:9b: c9:48:ae:76:e0:b9:bb:92:0d:43:f5:6e:b1:0d:0a: 96:1d:62:0a:32:84:78:14:f6:50:87:72:16:bf:b6: 15:fc:1b:c8:78:93:58:24:fc:64:78:e5:40:3a:e9: 58:b1:24:b0:a3:05:89:ff:65:aa:d5:b0:0c:40:ac: 9b:ed:63:37:7d:d6:e0:15:9a:46:e3:62:b0:6c:48: 9f:27:0f:63:31:2e:d8:3e:00:ae:43:41:32:28:01: de:b0:0a:aa:f7:a1:40:1e:5d:de:8e:b0:62:f1:18: 02:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:85:DD:B1:ED:73:5D:CD:39:9D:2D:7D:3B:19:37:36:86:37:45:D4 X509v3 Authority Key Identifier: keyid:5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a7:97:92:1e:a3:61:e1:78:70:4e:36:03:ea:1a:f2:c6:16: 35:a4:dd:59:93:e4:71:eb:71:8a:9c:f5:54:8c:4f:e7:21:6c: fd:9a:fa:5c:71:d8:8c:d1:20:68:f2:7d:8c:df:b8:d1:49:56: 79:e7:0f:8c:50:f7:6a:0c:c1:83:9c:67:eb:4d:33:96:91:f9: ea:f3:53:a4:3a:cc:7a:bb:25:8d:f3:7f:9c:65:96:04:31:83: 54:07:7e:a1:eb:ca:99:38:01:72:e6:94:6c:39:cd:9f:65:70: b7:bc:96:be:ab:10:39:ce:1c:cb:53:95:ed:92:1b:37:09:d9: 26:bb:98:e6:9c:f8:71:62:9d:9c:5a:e5:35:e0:42:12:09:d9: bd:7c:8b:b5:ec:18:38:ea:e3:49:45:a4:d8:d1:38:11:c2:99: 7c:c7:bc:38:c7:48:aa:59:d3:2f:8d:da:95:7f:91:55:9f:a9: 07:71:84:f5:64:be:60:a1:c9:70:fe:4c:98:49:76:45:44:9b: a2:73:80:f7:2c:66:0e:04:05:7e:63:35:5f:5d:ca:7e:2e:b5: 18:5c:9c:ef:6c:9a:7a:bc:b6:05:60:e6:6a:d5:82:71:30:cd: ff:b8:49:c7:e6:af:bb:97:f2:12:41:a7:5c:db:70:36:cc:a8: 2f:8d:9f:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcldbfD5zd8M25wMGgYbec1Rv3wwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE1REQ3M0Q4OTE0MTYxOTZBQTUyMzlEOTIxRDE4OUQx NDlCNjIyQjAeFw0yNjA1MDYxODMzMzFaFw0yNjA1MDcyMTU3MzFaMDMxMTAvBgNV BAMTKEJGODVEREIxRUQ3MzVEQ0QzOTlEMkQ3RDNCMTkzNzM2ODYzNzQ1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdjokXeJSeaz9CBbCvPopvGzmJ JkVxMletCoBv8yKW1HoLaVXyXYo1CAV50i7b2NSYyQFoYTnCe0Reg1XdmLxS5NjW ZdfHGeNeGmO4nRlCQoVJW34qYWrDEnF4oZXKmQcz243KiwPwkTo+oCH0HD3CRq7q qCfupIkqprzbKBeC7UHhCdqtJ3VXVFevj+1ava5uu/USm8lIrnbgubuSDUP1brEN CpYdYgoyhHgU9lCHcha/thX8G8h4k1gk/GR45UA66VixJLCjBYn/ZarVsAxArJvt Yzd91uAVmkbjYrBsSJ8nD2MxLtg+AK5DQTIoAd6wCqr3oUAeXd6OsGLxGAJTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv4Xdse1zXc05nS19Oxk3NoY3RdQwHwYDVR0j BBgwFoAUWl3XPYkUFhlqpSOdkh0YnRSbYiswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE2M2I3ZDctZWE4My00YmU5LWIyZmMtYjMwZWIwYjQ0ZDBhLzAvNUE1REQ3M0Q4 OTE0MTYxOTZBQTUyMzlEOTIxRDE4OUQxNDlCNjIyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTVERDczRDg5MTQxNjE5NkFBNTIzOUQ5MjFEMTg5RDE0OUI2 MjJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvNUE1REQ3M0Q4OTE0MTYxOTZBQTUyMzlEOTIxRDE4 OUQxNDlCNjIyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqnl5Ieo2HheHBONgPqGvLGFjWk3VmT5HHr cYqc9VSMT+chbP2a+lxx2IzRIGjyfYzfuNFJVnnnD4xQ92oMwYOcZ+tNM5aR+erz U6Q6zHq7JY3zf5xllgQxg1QHfqHrypk4AXLmlGw5zZ9lcLe8lr6rEDnOHMtTle2S GzcJ2Sa7mOac+HFinZxa5TXgQhIJ2b18i7XsGDjq40lFpNjROBHCmXzHvDjHSKpZ 0y+N2pV/kVWfqQdxhPVkvmChyXD+TJhJdkVEm6JzgPcsZg4EBX5jNV9dyn4utRhc nO9smnq8tgVg5mrVgnEwzf+4Scfmr7uX8hJBp1zbcDbMqC+Nn/U= -----END CERTIFICATE-----Generated at Thu May 7 03:53:40 2026 by rpki-client