$ rpki-client -vvf rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft File: F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft (raw, json) Hash identifier: SOVKL3h8qZZCMLzBUGdQnrmDEp/Ap9cT6TZ+55XTBT0= Subject key identifier: 84:AD:67:10:51:7C:CF:46:49:0E:9D:7B:8D:E2:A2:32:B2:D2:07:CD Authority key identifier: F5:A8:75:F4:B1:94:D8:FE:EE:E6:58:64:23:80:16:F5:BA:01:1B:F3 Certificate issuer: /CN=F5A875F4B194D8FEEEE65864238016F5BA011BF3 Certificate serial: 25182307B6F3F5FA96AFCF0DFC500162F016AF20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5A875F4B194D8FEEEE65864238016F5BA011BF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 23:19:07 +0000 Manifest this update: Fri 19 Jun 2026 23:14:07 +0000 Manifest next update: Sun 21 Jun 2026 03:15:07 +0000 Files and hashes: 1: F5A875F4B194D8FEEEE65864238016F5BA011BF3.crl (hash: U1LrCUSWjwYBPHMQJQU0rfZzhRDw6HTc68glj/vjZ9w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.crl rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5A875F4B194D8FEEEE65864238016F5BA011BF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:18:23:07:b6:f3:f5:fa:96:af:cf:0d:fc:50:01:62:f0:16:af:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A875F4B194D8FEEEE65864238016F5BA011BF3 Validity Not Before: Jun 19 23:14:07 2026 GMT Not After : Jun 21 03:15:07 2026 GMT Subject: CN=84AD6710517CCF46490E9D7B8DE2A232B2D207CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:10:de:4b:93:3a:88:4c:86:0c:ad:91:18:5a: ed:a0:d3:f3:19:3d:44:2f:3d:c3:68:a8:c6:0a:2b: ad:19:52:ed:26:c8:8a:a2:de:ce:29:3e:a6:41:57: 4f:b2:14:4b:b8:99:2c:15:78:a1:3e:c7:79:86:67: 75:7d:7d:1c:5c:1e:fe:c4:bc:5f:0f:97:db:b4:f7: 65:08:de:fb:6a:10:38:0c:35:43:88:8a:d8:52:ed: c0:f4:66:f8:cf:ab:a0:bc:2c:59:8c:a0:29:ee:c4: e3:fe:d3:35:c3:d7:bd:4a:ed:21:44:78:5d:d0:e2: 54:44:93:6d:57:76:96:31:06:c7:b0:28:59:ba:88: 2c:8e:8e:13:33:21:1e:db:fb:1a:c5:76:ba:00:e7: 54:83:c5:90:39:04:41:32:cc:f5:73:f4:21:4a:f5: b7:30:37:74:da:85:0f:84:18:9b:5e:3e:49:b4:71: 9e:36:12:3c:5a:6d:15:d2:f6:5c:46:c4:31:c4:6c: 64:a7:4c:9f:9b:e6:bc:c0:c9:0c:a2:65:d7:f3:8b: 63:a4:66:12:b9:31:7c:47:f8:0d:4e:f2:48:57:93: cd:e8:d1:74:87:2b:95:92:db:6c:11:92:be:ab:98: ce:6f:ef:c6:7e:95:8a:49:56:2a:5f:77:d4:e1:a6: 59:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AD:67:10:51:7C:CF:46:49:0E:9D:7B:8D:E2:A2:32:B2:D2:07:CD X509v3 Authority Key Identifier: keyid:F5:A8:75:F4:B1:94:D8:FE:EE:E6:58:64:23:80:16:F5:BA:01:1B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5A875F4B194D8FEEEE65864238016F5BA011BF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:1a:ad:b0:cc:2b:91:b0:70:07:df:9e:3a:af:ba:d4:68:d4: 46:aa:b3:79:3e:84:0a:e8:cc:1a:c7:f8:41:32:36:ee:9d:ed: 17:36:2b:d0:50:61:7f:03:28:4d:db:c8:a7:b2:92:21:74:05: 31:7e:5f:2f:39:ca:df:29:fe:ba:66:f4:3a:b2:31:00:46:f4: 99:b6:e8:e3:4b:88:07:85:fa:65:dd:f6:b8:8b:c3:ac:56:5e: 26:6e:e4:89:6f:db:fb:48:f0:d1:d8:19:7f:a3:a2:c1:1c:e6: 0b:be:39:12:b6:01:9f:cf:77:e8:6a:09:38:3e:13:1d:58:c2: 87:7b:ed:bb:45:62:c9:1a:88:14:4f:c5:a8:0b:15:bd:78:37: e2:f5:f0:be:8a:f9:2e:6a:ef:da:4e:6e:07:25:e9:19:a7:49: b9:2e:fb:02:25:de:52:06:74:ee:23:55:9f:72:c3:bc:95:ff: f7:89:dd:7d:a5:96:84:c4:fc:64:95:86:96:9f:bf:8b:45:d0: 2d:5b:f7:cf:02:80:bc:30:b5:81:3f:81:26:f0:54:2d:d4:d7: 21:4d:ac:ca:66:26:d6:18:51:21:85:ff:05:09:d4:b0:8a:eb: fd:af:d0:24:5a:df:b6:bb:35:91:d9:a3:7d:69:59:37:c4:c1: 34:33:df:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJRgjB7bz9fqWr88N/FABYvAWryAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBODc1RjRCMTk0RDhGRUVFRTY1ODY0MjM4MDE2RjVC QTAxMUJGMzAeFw0yNjA2MTkyMzE0MDdaFw0yNjA2MjEwMzE1MDdaMDMxMTAvBgNV BAMTKDg0QUQ2NzEwNTE3Q0NGNDY0OTBFOUQ3QjhERTJBMjMyQjJEMjA3Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTEN5LkzqITIYMrZEYWu2g0/MZ PUQvPcNoqMYKK60ZUu0myIqi3s4pPqZBV0+yFEu4mSwVeKE+x3mGZ3V9fRxcHv7E vF8Pl9u092UI3vtqEDgMNUOIithS7cD0ZvjPq6C8LFmMoCnuxOP+0zXD171K7SFE eF3Q4lREk21XdpYxBsewKFm6iCyOjhMzIR7b+xrFdroA51SDxZA5BEEyzPVz9CFK 9bcwN3TahQ+EGJtePkm0cZ42EjxabRXS9lxGxDHEbGSnTJ+b5rzAyQyiZdfzi2Ok ZhK5MXxH+A1O8khXk83o0XSHK5WS22wRkr6rmM5v78Z+lYpJVipfd9ThplkHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhK1nEFF8z0ZJDp17jeKiMrLSB80wHwYDVR0j BBgwFoAU9ah19LGU2P7u5lhkI4AW9boBG/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjUzNTg1MGUtNGJmYS00NTA0LWJiZWMtNmM2YjJjYzNiYTI5LzAvRjVBODc1RjRC MTk0RDhGRUVFRTY1ODY0MjM4MDE2RjVCQTAxMUJGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNUE4NzVGNEIxOTREOEZFRUVFNjU4NjQyMzgwMTZGNUJBMDEx QkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjUzNTg1MGUtNGJmYS00NTA0LWJi ZWMtNmM2YjJjYzNiYTI5LzAvRjVBODc1RjRCMTk0RDhGRUVFRTY1ODY0MjM4MDE2 RjVCQTAxMUJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4arbDMK5GwcAffnjqvutRo1Eaqs3k+hAro zBrH+EEyNu6d7Rc2K9BQYX8DKE3byKeykiF0BTF+Xy85yt8p/rpm9DqyMQBG9Jm2 6ONLiAeF+mXd9riLw6xWXiZu5Ilv2/tI8NHYGX+josEc5gu+ORK2AZ/Pd+hqCTg+ Ex1Ywod77btFYskaiBRPxagLFb14N+L18L6K+S5q79pObgcl6RmnSbku+wIl3lIG dO4jVZ9yw7yV//eJ3X2lloTE/GSVhpafv4tF0C1b988CgLwwtYE/gSbwVC3U1yFN rMpmJtYYUSGF/wUJ1LCK6/2v0CRa37a7NZHZo31pWTfEwTQz39M= -----END CERTIFICATE-----Generated at Sat Jun 20 08:58:05 2026 by rpki-client