$ rpki-client -vvf rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft File: 5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft (raw, json) Hash identifier: n5bD+mHEiMtaySP9Jj3znZVli500L5Wxs0LDSNxjCM0= Subject key identifier: 80:11:91:D2:1D:04:C7:0F:5B:36:1F:36:D2:56:86:33:22:E4:B9:BC Authority key identifier: 5E:31:28:90:2F:CA:3B:CE:9C:9F:EB:FB:26:4D:55:0A:D6:23:05:72 Certificate issuer: /CN=5E3128902FCA3BCE9C9FEBFB264D550AD6230572 Certificate serial: 73CE4D3C54A68A56BB6AA7C9D5F8FE54BC12CC32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 00:45:48 +0000 Manifest this update: Sat 20 Jun 2026 00:40:48 +0000 Manifest next update: Sun 21 Jun 2026 01:21:48 +0000 Files and hashes: 1: 5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl (hash: Uef5Iea9F2ZA5S/eejTuIPH5kbR5MHnFZpYJ5MglozQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 01:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ce:4d:3c:54:a6:8a:56:bb:6a:a7:c9:d5:f8:fe:54:bc:12:cc:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E3128902FCA3BCE9C9FEBFB264D550AD6230572 Validity Not Before: Jun 20 00:40:48 2026 GMT Not After : Jun 21 01:21:48 2026 GMT Subject: CN=801191D21D04C70F5B361F36D256863322E4B9BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a0:41:b4:75:82:d4:09:4c:a2:f3:db:1d:92: 5b:a6:48:7f:88:b6:0c:7b:e9:88:e0:ce:21:ef:45: 06:b3:fa:af:bc:5c:bd:e7:46:cb:71:eb:89:84:46: 05:c8:86:47:b8:59:6c:3c:71:a9:81:1f:5c:06:f2: 68:df:5e:ce:41:9e:2a:f6:09:1c:04:66:13:7d:d2: b5:12:c6:32:a6:b3:84:df:83:21:70:10:70:96:a0: 80:8c:35:1a:b1:a2:98:0b:84:d0:17:f6:18:b6:74: a4:a7:7d:ee:20:d2:b7:15:1b:f7:5b:31:57:c1:b7: 60:99:c4:27:db:24:56:9a:9b:61:d6:7f:92:f4:d8: da:68:64:34:fe:b9:c4:8c:85:6a:57:31:da:28:ec: d4:28:66:8f:e6:bb:d2:c2:2d:cf:48:a1:15:2a:e4: 81:2a:ab:66:6c:ec:f4:bb:36:6b:40:de:2b:ec:6f: c2:77:6b:34:f4:de:d8:43:e2:61:92:b5:71:4c:9c: 7f:99:65:be:3e:05:c8:9c:79:42:f2:c4:7f:21:fd: 4e:59:bd:a9:e3:95:c7:a5:ff:05:96:47:61:9c:d9: a5:b7:93:6b:63:ef:4a:8f:0f:59:30:ca:96:44:f8: 9f:ef:d5:a2:11:3f:32:99:29:6e:2c:33:74:e6:e7: 2d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:11:91:D2:1D:04:C7:0F:5B:36:1F:36:D2:56:86:33:22:E4:B9:BC X509v3 Authority Key Identifier: keyid:5E:31:28:90:2F:CA:3B:CE:9C:9F:EB:FB:26:4D:55:0A:D6:23:05:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ff:d6:ea:0a:d7:4c:10:ed:b3:a9:5b:08:75:43:e9:f6:58: 94:59:72:24:bb:f3:bb:2d:dd:c6:f9:bc:2e:92:38:86:6b:28: 42:0c:62:25:e2:81:e2:40:ea:d8:5d:3b:f3:fb:a4:8a:f3:31: 90:95:6f:a3:ed:99:ae:42:7a:5d:14:cf:24:0f:c2:4e:cd:67: 71:d3:85:e9:8b:04:62:5d:30:63:53:16:e6:fe:aa:83:26:c3: 21:dc:c5:7a:32:a9:6a:b3:de:dd:e1:35:92:36:f9:36:ac:c5: a6:29:67:9d:86:ec:af:78:38:6c:c8:10:f5:b5:96:64:58:ff: e4:ed:49:f3:ac:e3:47:8c:95:6b:1b:66:2a:10:94:05:b4:dd: 56:73:8d:a0:fc:b0:33:85:d3:a4:25:74:98:98:c2:89:dc:ba: e0:d6:d4:82:32:7b:ef:5f:d5:ae:5f:58:a2:d4:0a:1e:0b:71: 76:22:75:df:81:3f:86:92:3e:8c:99:61:1c:83:20:fd:2a:a6: 3b:c3:cb:79:7e:7d:96:12:da:d1:32:20:d3:f4:bd:f7:b5:fe: 8e:2e:4c:7a:a1:7f:a3:24:87:f5:ec:5b:5f:87:04:ca:c3:2e: 0d:c6:d6:4e:d2:05:79:c1:79:16:59:f6:10:e5:e0:ab:e9:b9: c3:37:a5:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc85NPFSmila7aqfJ1fj+VLwSzDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMTI4OTAyRkNBM0JDRTlDOUZFQkZCMjY0RDU1MEFE NjIzMDU3MjAeFw0yNjA2MjAwMDQwNDhaFw0yNjA2MjEwMTIxNDhaMDMxMTAvBgNV BAMTKDgwMTE5MUQyMUQwNEM3MEY1QjM2MUYzNkQyNTY4NjMzMjJFNEI5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2oEG0dYLUCUyi89sdklumSH+I tgx76YjgziHvRQaz+q+8XL3nRstx64mERgXIhke4WWw8camBH1wG8mjfXs5Bnir2 CRwEZhN90rUSxjKms4TfgyFwEHCWoICMNRqxopgLhNAX9hi2dKSnfe4g0rcVG/db MVfBt2CZxCfbJFaam2HWf5L02NpoZDT+ucSMhWpXMdoo7NQoZo/mu9LCLc9IoRUq 5IEqq2Zs7PS7NmtA3ivsb8J3azT03thD4mGStXFMnH+ZZb4+BciceULyxH8h/U5Z vanjlcel/wWWR2Gc2aW3k2tj70qPD1kwypZE+J/v1aIRPzKZKW4sM3Tm5y0zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgBGR0h0Exw9bNh820laGMyLkubwwHwYDVR0j BBgwFoAUXjEokC/KO86cn+v7Jk1VCtYjBXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGZiNWZmMzctMzk0YS00ZWJhLWE0NzAtMTBhZjM3Y2Y3NWRjLzAvNUUzMTI4OTAy RkNBM0JDRTlDOUZFQkZCMjY0RDU1MEFENjIzMDU3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RTMxMjg5MDJGQ0EzQkNFOUM5RkVCRkIyNjRENTUwQUQ2MjMw NTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvNUUzMTI4OTAyRkNBM0JDRTlDOUZFQkZCMjY0RDU1 MEFENjIzMDU3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGL/1uoK10wQ7bOpWwh1Q+n2WJRZciS787st 3cb5vC6SOIZrKEIMYiXigeJA6thdO/P7pIrzMZCVb6Ptma5Cel0UzyQPwk7NZ3HT hemLBGJdMGNTFub+qoMmwyHcxXoyqWqz3t3hNZI2+TasxaYpZ52G7K94OGzIEPW1 lmRY/+TtSfOs40eMlWsbZioQlAW03VZzjaD8sDOF06QldJiYwoncuuDW1IIye+9f 1a5fWKLUCh4LcXYidd+BP4aSPoyZYRyDIP0qpjvDy3l+fZYS2tEyINP0vfe1/o4u THqhf6Mkh/XsW1+HBMrDLg3G1k7SBXnBeRZZ9hDl4KvpucM3pQo= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:16 2026 by rpki-client