$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft File: 5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft (raw, json) Hash identifier: HWEJEJxpNEjg9n580ZBWU3jNA/JXznEUsdbz7wwo8oE= Subject key identifier: 24:0D:0D:4F:E8:70:B9:5A:97:F6:D2:FA:91:C5:58:28:FE:3B:E1:F3 Authority key identifier: 5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5 Certificate issuer: /CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5 Certificate serial: 51DB2AA7476CA41B7B4D47ED1061FF0DAFAEBF73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 20:30:40 +0000 Manifest this update: Fri 19 Jun 2026 20:25:40 +0000 Manifest next update: Sat 20 Jun 2026 23:31:40 +0000 Files and hashes: 1: 323430363a353463303a3a2f33332d3333203d3e20313430343739.roa (hash: 2cV6nPzmY4kD2CJExVdWuMSGfjJCPD1xihnYeBD8ieA=) 2: 3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa (hash: /1UO8tVQ+wLCWDJC+/9ddMEbFB3CgcFjCBFNxuu9120=) 3: 5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl (hash: MC4FVrdj99UeVxCYCqvbBltP9SkjgxQfs/720pXPSnI=) 4: 3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa (hash: hB2D7K4UTkw5fpBq+t9X3VNB/1j6WvNNmkdz6+J5cvo=) 5: 323430363a353463303a383030303a3a2f33332d3333203d3e20313430343739.roa (hash: bIsAPyP9rDpPX3/Ob3Qv6l0T0cqP2nXkNSsYJzMdy0g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:db:2a:a7:47:6c:a4:1b:7b:4d:47:ed:10:61:ff:0d:af:ae:bf:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5 Validity Not Before: Jun 19 20:25:40 2026 GMT Not After : Jun 20 23:31:40 2026 GMT Subject: CN=240D0D4FE870B95A97F6D2FA91C55828FE3BE1F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:30:dd:78:e4:94:5b:e9:1e:bc:63:ca:27: ec:e7:72:e5:e7:b2:44:35:e1:9a:37:19:96:a9:46: ab:7c:ea:18:84:26:8c:9b:df:d9:3b:19:fd:85:a3: 47:a8:9b:d9:1b:ea:f9:46:12:e7:dd:9b:bd:9a:9c: fa:95:8b:bf:df:fe:71:29:f4:72:1e:3d:eb:f2:a7: 74:d9:74:d6:af:85:8a:66:7f:5a:26:40:13:b8:a2: de:9a:ae:69:9d:c8:0a:4e:be:b0:ba:a1:63:d2:57: b7:7a:4f:a9:42:78:41:9a:ae:cb:12:37:67:d5:9b: 1f:35:62:e5:0d:9f:99:59:d1:32:fb:fb:7b:d5:1b: a8:a5:13:aa:5b:73:ef:71:f6:03:ae:2b:82:5a:cb: b1:a0:81:7e:d3:b9:4f:24:d1:72:04:99:4a:f6:47: fd:fe:72:47:52:20:c1:5a:55:b8:2c:06:95:95:56: 97:7f:ab:a1:ef:be:e0:fe:c3:1a:61:97:74:82:98: cf:23:a4:70:8d:f4:0f:62:5c:78:ec:f2:1b:2a:f3: 8b:44:90:c0:aa:b1:62:a9:94:89:a9:01:b1:71:fb: b5:b7:77:7b:e8:30:66:87:9d:32:8d:dc:ff:b3:7a: f3:31:ca:4f:2d:2a:62:71:0e:e1:5a:8b:ea:ca:cc: 0c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0D:0D:4F:E8:70:B9:5A:97:F6:D2:FA:91:C5:58:28:FE:3B:E1:F3 X509v3 Authority Key Identifier: keyid:5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:fb:f2:b9:df:44:c9:52:0c:31:05:19:11:8f:2c:34:e7:f1: 04:ca:7d:6e:57:3b:1e:48:8f:4c:d2:99:92:7b:29:3b:ad:e2: c4:26:e4:72:fe:d8:3e:91:c9:58:f2:3e:68:5e:5e:ad:c2:af: 7f:aa:f5:7e:c1:51:54:93:52:f0:7e:ae:0a:93:ea:6e:a4:a8: 33:7f:97:0e:47:70:04:c4:ce:35:ec:c2:cb:34:19:60:14:36: c8:8f:99:1a:a9:87:54:0c:86:e2:f2:4a:a7:7b:f0:85:e9:65: b3:b7:1e:d9:61:de:9e:48:61:d2:1e:cb:14:9e:76:05:1d:be: 9c:37:cd:64:c2:7d:9d:d6:3a:12:62:6a:9b:9e:a9:90:7e:ef: ee:79:fe:e9:7f:d9:d3:ea:a3:2b:90:00:aa:97:2a:e2:f2:6d: bd:60:3c:03:d8:3d:2b:c0:34:cb:61:6d:d9:49:5b:38:d3:50: 22:24:91:6d:d8:5b:c5:24:95:dc:93:6e:fa:88:97:29:c3:1f: 50:d2:07:81:21:3f:e2:17:8b:1d:82:98:d7:dd:fa:39:2e:aa: 77:b2:d0:df:93:0c:46:58:b9:df:05:b2:46:ad:72:9e:62:8a: 87:d2:ff:06:77:bd:9f:3e:f2:ae:f0:ba:b2:c9:bd:d9:6a:f5: 53:c2:65:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUdsqp0dspBt7TUftEGH/Da+uv3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCRURFOTgzQTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2QTdD NjA2M0ZCNTAeFw0yNjA2MTkyMDI1NDBaFw0yNjA2MjAyMzMxNDBaMDMxMTAvBgNV BAMTKDI0MEQwRDRGRTg3MEI5NUE5N0Y2RDJGQTkxQzU1ODI4RkUzQkUxRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PTDdeOSUW+kevGPKJ+zncuXn skQ14Zo3GZapRqt86hiEJoyb39k7Gf2Fo0eom9kb6vlGEufdm72anPqVi7/f/nEp 9HIePevyp3TZdNavhYpmf1omQBO4ot6armmdyApOvrC6oWPSV7d6T6lCeEGarssS N2fVmx81YuUNn5lZ0TL7+3vVG6ilE6pbc+9x9gOuK4Jay7GggX7TuU8k0XIEmUr2 R/3+ckdSIMFaVbgsBpWVVpd/q6HvvuD+wxphl3SCmM8jpHCN9A9iXHjs8hsq84tE kMCqsWKplImpAbFx+7W3d3voMGaHnTKN3P+zevMxyk8tKmJxDuFai+rKzAwHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJA0NT+hwuVqX9tL6kcVYKP474fMwHwYDVR0j BBgwFoAUX77emDpjIrmZpGq2qsz2p8YGP7UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGM3NjVkNTEtYjBiMS00MzVkLWE2NmItNjA0YzZlNWQyOWVmLzAvNUZCRURFOTgz QTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2QTdDNjA2M0ZCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkJFREU5ODNBNjMyMkI5OTlBNDZBQjZBQUNDRjZBN0M2MDYz RkI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGM3NjVkNTEtYjBiMS00MzVkLWE2 NmItNjA0YzZlNWQyOWVmLzAvNUZCRURFOTgzQTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2 QTdDNjA2M0ZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGH78rnfRMlSDDEFGRGPLDTn8QTKfW5XOx5I j0zSmZJ7KTut4sQm5HL+2D6RyVjyPmheXq3Cr3+q9X7BUVSTUvB+rgqT6m6kqDN/ lw5HcATEzjXswss0GWAUNsiPmRqph1QMhuLySqd78IXpZbO3Htlh3p5IYdIeyxSe dgUdvpw3zWTCfZ3WOhJiapueqZB+7+55/ul/2dPqoyuQAKqXKuLybb1gPAPYPSvA NMthbdlJWzjTUCIkkW3YW8UkldyTbvqIlynDH1DSB4EhP+IXix2CmNfd+jkuqney 0N+TDEZYud8Fskatcp5iiofS/wZ3vZ8+8q7wurLJvdlq9VPCZb8= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:26 2026 by rpki-client