$ rpki-client -vvf rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft File: 5FF85953C6850E359467A581C3FE1AC78E529F2F.mft (raw, json) Hash identifier: svVyV1i7E5+718dJeP+PPlQK3mID/JiNT8o7iP/BN7k= Subject key identifier: 7E:AA:6B:59:33:4C:FA:FA:65:B8:A6:DF:92:53:CB:0A:C7:75:C7:83 Authority key identifier: 5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F Certificate issuer: /CN=5FF85953C6850E359467A581C3FE1AC78E529F2F Certificate serial: 2FD3F0C268FE6BB8E030B3443D4FF7B7E640CE97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 18:43:30 +0000 Manifest this update: Fri 19 Jun 2026 18:38:30 +0000 Manifest next update: Sat 20 Jun 2026 20:26:30 +0000 Files and hashes: 1: 5FF85953C6850E359467A581C3FE1AC78E529F2F.crl (hash: x6dllMmRdYa5cyxYEOvjI9Ugd7wE1s7TUC+EVF0WdF4=) 2: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: MmVOOc/LuqFNSXqQ5IddobFw0Ch137C+avOoyFd6ZzY=) 3: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: +qKLLz9ehRuOchJ8m6wI99oYtklf5Gx9ixqGHWMAzMw=) 4: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: AwkHb7HGSUt+TaaLZZEdADtv/v78j6fMphbiNKpRchs=) 5: 3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (hash: t97u2GqJ2jtckgSGR6Sjz6Jn9nKSQHkBxpLPsPLvaYM=) 6: 3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (hash: uTaNGo7IDdsOGs73zESne28tA+ZzMyK0wMRINMuXTcQ=) 7: 3131352e3136362e3131312e302f32342d3234203d3e203134363138.roa (hash: kPUK2GFDFYlKn9GXNmNAqFN8ChpgIluMw/CP+FmKw0o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:d3:f0:c2:68:fe:6b:b8:e0:30:b3:44:3d:4f:f7:b7:e6:40:ce:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF85953C6850E359467A581C3FE1AC78E529F2F Validity Not Before: Jun 19 18:38:30 2026 GMT Not After : Jun 20 20:26:30 2026 GMT Subject: CN=7EAA6B59334CFAFA65B8A6DF9253CB0AC775C783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:84:5e:cc:31:0d:b4:93:cf:29:0b:d8:af: 54:5d:fc:c3:b2:06:25:77:e9:42:01:9b:c3:4f:bd: ce:d7:8e:13:f4:d0:7f:b4:bb:65:f1:66:8e:65:07: a3:41:6b:8d:22:3e:a8:fd:e7:01:24:4a:9e:a3:06: ef:9b:c5:34:a8:6e:35:ef:7c:f0:7c:29:e4:d7:64: af:02:45:e1:0f:81:8f:d3:4e:0a:80:42:63:d8:7e: 06:02:6d:93:4a:83:f5:01:de:31:e1:e3:2e:3e:da: 01:14:86:5d:45:46:7b:a7:02:62:cd:69:f3:e5:12: b8:14:89:de:2f:7c:23:d7:b7:7b:2d:68:3d:bd:66: 74:d2:f1:ca:05:2a:5f:85:35:a5:c2:24:4a:fd:7d: 90:06:f5:20:c8:d4:9c:75:d4:b9:e2:30:4a:2c:41: 1d:08:e3:5d:af:ae:0b:67:eb:66:b7:ce:62:ac:5c: ab:f7:db:e6:81:05:cd:7f:9d:4e:40:30:b8:22:85: d6:04:41:70:17:30:ee:6a:af:cc:8e:53:da:1c:a7: 8d:9d:c8:a0:0b:be:fd:ff:92:02:7b:99:fd:46:aa: 64:d2:11:f3:ac:15:c8:31:a8:35:72:1d:b4:67:35: 54:28:6c:9d:7b:96:69:1a:17:46:e9:2c:b9:29:da: 02:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AA:6B:59:33:4C:FA:FA:65:B8:A6:DF:92:53:CB:0A:C7:75:C7:83 X509v3 Authority Key Identifier: keyid:5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:62:d3:16:50:0d:7d:11:bd:b5:21:02:f8:53:b3:d7:f8:c9: 4e:2c:54:5d:83:88:cb:94:51:dd:ec:b1:fd:45:1f:99:94:2a: a6:5e:8b:c3:ab:0a:5a:01:51:7c:c2:6e:c0:c8:c9:6d:ce:4e: dc:18:9c:63:af:3c:e2:8c:f2:c2:42:84:59:7d:7b:98:ab:46: 85:5b:95:cd:ac:52:49:db:25:37:fe:4f:4c:f5:1a:c8:00:04: de:c3:eb:b9:7a:da:3a:6f:91:52:25:3b:31:10:aa:1d:76:56: 49:d2:d2:0f:20:9a:f9:8e:c9:48:6e:1c:a7:25:85:62:3e:8f: 95:25:16:8a:35:05:08:4b:24:53:9f:e2:93:88:40:5b:05:f9: 9f:62:22:53:27:22:f0:37:4f:ef:9c:59:b2:fc:ff:9e:45:db: cf:ad:b5:f9:51:64:cb:a6:fc:fd:44:5e:11:31:8f:c9:7b:63: bb:47:81:40:f8:b2:8b:bd:b4:ff:e7:35:43:66:e8:f7:df:b4: ea:44:f8:bf:98:c2:a0:c6:72:4a:cc:47:7f:1e:47:18:c1:65: 3f:77:b7:e0:38:00:5f:2e:35:07:7b:b8:49:47:cb:e2:49:02: a2:c2:38:40:ab:ea:d1:64:3c:7a:28:12:e9:24:f7:9f:80:aa: cb:77:ad:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL9Pwwmj+a7jgMLNEPU/3t+ZAzpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4 RTUyOUYyRjAeFw0yNjA2MTkxODM4MzBaFw0yNjA2MjAyMDI2MzBaMDMxMTAvBgNV BAMTKDdFQUE2QjU5MzM0Q0ZBRkE2NUI4QTZERjkyNTNDQjBBQzc3NUM3ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqnIRezDENtJPPKQvYr1Rd/MOy BiV36UIBm8NPvc7XjhP00H+0u2XxZo5lB6NBa40iPqj95wEkSp6jBu+bxTSobjXv fPB8KeTXZK8CReEPgY/TTgqAQmPYfgYCbZNKg/UB3jHh4y4+2gEUhl1FRnunAmLN afPlErgUid4vfCPXt3staD29ZnTS8coFKl+FNaXCJEr9fZAG9SDI1Jx11LniMEos QR0I412vrgtn62a3zmKsXKv32+aBBc1/nU5AMLgihdYEQXAXMO5qr8yOU9ocp42d yKALvv3/kgJ7mf1GqmTSEfOsFcgxqDVyHbRnNVQobJ17lmkaF0bpLLkp2gKZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfqprWTNM+vpluKbfklPLCsd1x4MwHwYDVR0j BBgwFoAUX/hZU8aFDjWUZ6WBw/4ax45Sny8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmRkNDdmNTYtZWM1My00MmViLTliOGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTND Njg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4RTUyOUYyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkY4NTk1M0M2ODUwRTM1OTQ2N0E1ODFDM0ZFMUFDNzhFNTI5 RjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFB Qzc4RTUyOUYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhi0xZQDX0RvbUhAvhTs9f4yU4sVF2DiMuU Ud3ssf1FH5mUKqZei8OrCloBUXzCbsDIyW3OTtwYnGOvPOKM8sJChFl9e5irRoVb lc2sUknbJTf+T0z1GsgABN7D67l62jpvkVIlOzEQqh12VknS0g8gmvmOyUhuHKcl hWI+j5UlFoo1BQhLJFOf4pOIQFsF+Z9iIlMnIvA3T++cWbL8/55F28+ttflRZMum /P1EXhExj8l7Y7tHgUD4sou9tP/nNUNm6PfftOpE+L+YwqDGckrMR38eRxjBZT93 t+A4AF8uNQd7uElHy+JJAqLCOECr6tFkPHooEukk95+Aqst3rVg= -----END CERTIFICATE-----Generated at Sat Jun 20 09:22:52 2026 by rpki-client