$ rpki-client -vvf rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft File: 5FF85953C6850E359467A581C3FE1AC78E529F2F.mft (raw, json) Hash identifier: vWfOCcmu5U2UYUn9ujRZu8tuXlTDXXCh8MWRfXhrzmo= Subject key identifier: D7:46:6A:AC:DE:17:60:11:5D:F1:76:D3:53:77:8E:D2:D8:D1:87:54 Authority key identifier: 5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F Certificate issuer: /CN=5FF85953C6850E359467A581C3FE1AC78E529F2F Certificate serial: 429F8BB094A83EF36AEBF3F9BE2C6BDA687009A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft Manifest number: 02 Signing time: Sun 03 May 2026 02:23:08 +0000 Manifest this update: Sun 03 May 2026 02:18:08 +0000 Manifest next update: Mon 04 May 2026 05:29:08 +0000 Files and hashes: 1: 3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (hash: uTaNGo7IDdsOGs73zESne28tA+ZzMyK0wMRINMuXTcQ=) 2: 3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (hash: t97u2GqJ2jtckgSGR6Sjz6Jn9nKSQHkBxpLPsPLvaYM=) 3: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: AwkHb7HGSUt+TaaLZZEdADtv/v78j6fMphbiNKpRchs=) 4: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: +qKLLz9ehRuOchJ8m6wI99oYtklf5Gx9ixqGHWMAzMw=) 5: 3131352e3136362e3131312e302f32342d3234203d3e203134363138.roa (hash: kPUK2GFDFYlKn9GXNmNAqFN8ChpgIluMw/CP+FmKw0o=) 6: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: MmVOOc/LuqFNSXqQ5IddobFw0Ch137C+avOoyFd6ZzY=) 7: 5FF85953C6850E359467A581C3FE1AC78E529F2F.crl (hash: uB8ymOKWK9tSt+tphig1lFJ7qGQW4+kdh+iNG43mZLg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 05:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:9f:8b:b0:94:a8:3e:f3:6a:eb:f3:f9:be:2c:6b:da:68:70:09:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF85953C6850E359467A581C3FE1AC78E529F2F Validity Not Before: May 3 02:18:08 2026 GMT Not After : May 4 05:29:08 2026 GMT Subject: CN=D7466AACDE1760115DF176D353778ED2D8D18754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:00:58:9d:7b:1f:05:5b:fd:cf:d8:75:6b:b2: 99:d7:1a:c7:ef:57:40:55:c3:74:b8:58:4c:18:4d: b7:4b:66:47:b1:4e:d8:86:f9:5c:91:06:69:62:94: ad:ed:cd:08:1b:51:2d:0f:90:2e:1c:3b:d1:66:89: 5f:a0:6d:72:93:41:ac:2e:bb:5c:a0:d4:08:fa:86: c2:df:ea:af:5a:91:60:2d:4b:89:32:bf:e1:be:6f: 08:24:e9:e4:cb:e7:2c:c3:60:2a:74:ff:3b:c8:2d: 41:13:81:41:4a:b9:df:66:4e:b1:ee:91:89:2d:4e: 74:f9:b6:9d:fa:d4:14:e7:a3:ae:c7:ba:29:47:97: f4:5d:a4:ff:94:2a:71:1d:6a:79:58:fd:57:13:2b: 72:51:e9:3b:be:72:e9:64:c3:a6:19:49:32:9e:ac: 59:d1:fd:d5:00:e2:e1:e3:b8:47:13:90:28:55:4f: 1c:73:fb:0c:29:54:89:ab:73:4d:01:15:75:29:a3: c0:c4:d0:7c:b8:5f:b3:8d:02:dd:9c:f4:e7:e9:d6: e2:3f:4e:91:72:f5:6c:3c:8e:ba:10:84:ba:8c:72: 74:07:a5:42:fe:bc:f5:06:57:3f:3d:be:6d:65:bc: d2:f6:82:41:7d:0d:dd:57:dd:cf:8a:68:8a:08:a5: a4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:46:6A:AC:DE:17:60:11:5D:F1:76:D3:53:77:8E:D2:D8:D1:87:54 X509v3 Authority Key Identifier: keyid:5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:76:3d:59:e3:af:2f:8a:87:97:49:e5:82:60:b5:f4:79:26: c9:e5:ff:92:de:bc:a9:76:52:98:d3:77:bb:04:f6:7f:d6:5c: 3f:f1:95:6f:cf:18:b1:68:4e:23:b3:b4:59:ad:14:ab:54:e1: e4:94:e1:9e:c1:3d:7c:b9:27:16:40:0c:ea:e7:36:f5:94:98: 4e:d5:d3:6c:3f:0b:47:01:2c:36:74:47:7f:40:9e:fc:a4:a1: 78:1a:e8:84:c9:5f:0f:8f:23:a2:6b:88:40:40:95:d5:b0:70: 75:f6:71:d8:e9:c8:a4:56:46:4f:bb:cf:83:d2:9e:0c:25:64: 09:94:43:6d:84:1f:40:cd:55:fe:85:d5:11:d1:b8:05:a6:02: 20:b2:90:ca:83:e9:0d:a1:41:ee:44:51:27:52:c8:ca:e6:90: 07:28:60:8b:d5:14:21:64:cd:a5:21:32:88:e1:92:48:ed:f5: 37:1c:45:d8:7d:d4:d3:09:55:37:2d:bf:8c:8d:c4:5f:6c:c8: 69:77:48:4a:d9:42:19:43:5a:1c:98:e5:65:fd:b4:68:01:8f: 61:a4:8f:d2:4a:97:66:9c:d3:d8:70:7f:9e:c8:a3:91:fc:30: 41:41:2f:76:ef:2f:b5:d1:be:92:b9:de:a0:b4:65:f7:22:1e: b5:98:54:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQp+LsJSoPvNq6/P5vixr2mhwCaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4 RTUyOUYyRjAeFw0yNjA1MDMwMjE4MDhaFw0yNjA1MDQwNTI5MDhaMDMxMTAvBgNV BAMTKEQ3NDY2QUFDREUxNzYwMTE1REYxNzZEMzUzNzc4RUQyRDhEMTg3NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1AFidex8FW/3P2HVrspnXGsfv V0BVw3S4WEwYTbdLZkexTtiG+VyRBmlilK3tzQgbUS0PkC4cO9FmiV+gbXKTQawu u1yg1Aj6hsLf6q9akWAtS4kyv+G+bwgk6eTL5yzDYCp0/zvILUETgUFKud9mTrHu kYktTnT5tp361BTno67HuilHl/RdpP+UKnEdanlY/VcTK3JR6Tu+culkw6YZSTKe rFnR/dUA4uHjuEcTkChVTxxz+wwpVImrc00BFXUpo8DE0Hy4X7ONAt2c9Ofp1uI/ TpFy9Ww8jroQhLqMcnQHpUL+vPUGVz89vm1lvNL2gkF9Dd1X3c+KaIoIpaRLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU10ZqrN4XYBFd8XbTU3eO0tjRh1QwHwYDVR0j BBgwFoAUX/hZU8aFDjWUZ6WBw/4ax45Sny8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmRkNDdmNTYtZWM1My00MmViLTliOGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTND Njg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4RTUyOUYyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkY4NTk1M0M2ODUwRTM1OTQ2N0E1ODFDM0ZFMUFDNzhFNTI5 RjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFB Qzc4RTUyOUYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAx2PVnjry+Kh5dJ5YJgtfR5Jsnl/5LevKl2 UpjTd7sE9n/WXD/xlW/PGLFoTiOztFmtFKtU4eSU4Z7BPXy5JxZADOrnNvWUmE7V 02w/C0cBLDZ0R39AnvykoXga6ITJXw+PI6JriEBAldWwcHX2cdjpyKRWRk+7z4PS ngwlZAmUQ22EH0DNVf6F1RHRuAWmAiCykMqD6Q2hQe5EUSdSyMrmkAcoYIvVFCFk zaUhMojhkkjt9TccRdh91NMJVTctv4yNxF9syGl3SErZQhlDWhyY5WX9tGgBj2Gk j9JKl2ac09hwf57Io5H8MEFBL3bvL7XRvpK53qC0ZfciHrWYVHY= -----END CERTIFICATE-----Generated at Sun May 3 15:22:43 2026 by rpki-client