$ rpki-client -vvf rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft File: 5B4C702133C87BA4BC2E55E712270969ABE45A51.mft (raw, json) Hash identifier: Fxzc3yCyFWXN5e3LTKMs10bRhyROSjABvAVAnmawm8w= Subject key identifier: 8C:94:2D:F4:57:93:65:72:CE:E7:99:E0:64:70:39:A1:18:23:6F:CA Authority key identifier: 5B:4C:70:21:33:C8:7B:A4:BC:2E:55:E7:12:27:09:69:AB:E4:5A:51 Certificate issuer: /CN=5B4C702133C87BA4BC2E55E712270969ABE45A51 Certificate serial: 5C36E64BDD5092DF10E70D3F17058B5CB417CEF0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 03:49:25 +0000 Manifest this update: Sat 20 Jun 2026 03:44:25 +0000 Manifest next update: Sun 21 Jun 2026 07:36:25 +0000 Files and hashes: 1: 3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa (hash: sLHnpPIHUxO29WSb75hs0N2E96R8Wj78zUMN4pLDvZ4=) 2: 5B4C702133C87BA4BC2E55E712270969ABE45A51.crl (hash: 1AJvISht9HnvyqmFjJ+Z8JL7UaUMgFJ8IL8uIMtlviM=) 3: 3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa (hash: Vkq3URZ932rcZk4u78E4tOq6/4bheSUZYPRHTmwP30Y=) 4: 3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa (hash: BHukqw3OCwpT8gyX9jofbrVK6NJ8azV8C28UZNn4k40=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.crl rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:36:e6:4b:dd:50:92:df:10:e7:0d:3f:17:05:8b:5c:b4:17:ce:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B4C702133C87BA4BC2E55E712270969ABE45A51 Validity Not Before: Jun 20 03:44:25 2026 GMT Not After : Jun 21 07:36:25 2026 GMT Subject: CN=8C942DF457936572CEE799E0647039A118236FCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:2c:30:2b:58:d8:0d:a7:ef:21:0a:9f:0d: d6:72:f9:db:f5:f6:b6:4e:8c:b4:7b:0e:32:a6:89: 71:f9:02:ab:49:7f:d4:c8:17:94:a4:20:d0:f4:22: 4a:fc:df:55:4b:65:49:fd:f3:5a:6d:fa:40:47:f6: f1:72:26:d5:70:07:17:e5:de:a0:22:b2:2d:40:87: 66:6e:c3:a3:45:ea:c8:67:8f:8f:00:9e:bb:38:e2: 59:c0:50:78:91:8b:a3:3d:61:f4:3b:ee:ed:9f:3a: b5:25:49:3b:3b:bf:d7:10:af:02:7a:af:02:04:d7: 39:10:7f:95:cb:44:12:57:49:8e:36:35:34:06:bc: 58:2d:85:03:5a:70:38:9d:e5:23:75:07:98:49:36: c1:c8:93:5b:30:ba:1a:81:03:da:36:1d:f8:d8:eb: 92:ef:49:db:cd:cb:d8:ac:3a:55:93:ca:9b:91:ea: e4:76:6f:39:a1:1b:f9:de:7a:5e:a4:32:fe:7b:6b: ed:32:fc:86:3f:f9:e8:b3:27:03:a6:47:ef:e4:42: 37:b2:97:84:43:b0:78:27:59:f0:03:83:17:64:47: dd:a0:f0:a6:26:01:8c:f7:7a:91:0b:e1:49:ab:2d: 11:49:f2:11:ca:83:5e:dd:06:bb:71:93:68:dd:3c: 2b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:94:2D:F4:57:93:65:72:CE:E7:99:E0:64:70:39:A1:18:23:6F:CA X509v3 Authority Key Identifier: keyid:5B:4C:70:21:33:C8:7B:A4:BC:2E:55:E7:12:27:09:69:AB:E4:5A:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:64:59:53:e1:65:7e:d6:d9:23:b3:e4:7e:59:93:e4:f7:63: 08:05:58:3d:e9:da:59:e7:ac:0d:a9:0d:cd:05:d9:a7:7a:ee: e0:f2:10:16:fa:52:1e:56:44:25:2b:61:e8:00:bc:89:22:a7: dd:ad:06:83:3b:17:5a:f4:b5:77:56:29:43:62:6c:a7:d4:89: c9:de:1f:89:17:c1:94:e0:fe:18:02:43:b0:0b:e6:01:c4:7d: 8a:2c:35:e9:12:32:44:10:e1:1d:b4:a9:a4:da:09:1d:8a:63: 35:19:5b:63:19:7c:91:4a:7b:e1:78:c5:c8:43:f6:de:3b:b3: cd:31:b9:44:3e:06:d7:4d:4b:e6:35:52:46:f8:24:0f:61:1d: d8:7f:0b:7c:d7:18:2d:40:83:33:c1:69:58:f9:50:c9:c9:3e: 3f:ca:68:41:67:08:11:ca:7e:25:20:af:57:32:ac:08:0b:55: ee:32:29:05:9c:b6:a2:da:4c:1b:c0:67:0c:5c:3d:eb:28:74: a6:f4:13:b0:f9:9c:e9:e9:9a:94:27:4f:82:a9:79:f2:5e:59: cf:f0:e2:f3:1a:54:35:de:8c:fb:94:92:02:87:8c:47:e5:60: 0d:68:a0:74:63:4d:1e:71:37:2a:48:35:f1:e1:0d:9d:39:dc: 7c:ae:e9:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXDbmS91Qkt8Q5w0/FwWLXLQXzvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI0QzcwMjEzM0M4N0JBNEJDMkU1NUU3MTIyNzA5NjlB QkU0NUE1MTAeFw0yNjA2MjAwMzQ0MjVaFw0yNjA2MjEwNzM2MjVaMDMxMTAvBgNV BAMTKDhDOTQyREY0NTc5MzY1NzJDRUU3OTlFMDY0NzAzOUExMTgyMzZGQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9SywwK1jYDafvIQqfDdZy+dv1 9rZOjLR7DjKmiXH5AqtJf9TIF5SkIND0Ikr831VLZUn981pt+kBH9vFyJtVwBxfl 3qAisi1Ah2Zuw6NF6shnj48Anrs44lnAUHiRi6M9YfQ77u2fOrUlSTs7v9cQrwJ6 rwIE1zkQf5XLRBJXSY42NTQGvFgthQNacDid5SN1B5hJNsHIk1swuhqBA9o2HfjY 65LvSdvNy9isOlWTypuR6uR2bzmhG/neel6kMv57a+0y/IY/+eizJwOmR+/kQjey l4RDsHgnWfADgxdkR92g8KYmAYz3epEL4UmrLRFJ8hHKg17dBrtxk2jdPCsdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjJQt9FeTZXLO55ngZHA5oRgjb8owHwYDVR0j BBgwFoAUW0xwITPIe6S8LlXnEicJaavkWlEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDE0ZTA0ZmEtNzE4OC00ZjRmLTgxYmItMzMwMzg5Zjg3MDE1LzAvNUI0QzcwMjEz M0M4N0JBNEJDMkU1NUU3MTIyNzA5NjlBQkU0NUE1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QjRDNzAyMTMzQzg3QkE0QkMyRTU1RTcxMjI3MDk2OUFCRTQ1 QTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDE0ZTA0ZmEtNzE4OC00ZjRmLTgx YmItMzMwMzg5Zjg3MDE1LzAvNUI0QzcwMjEzM0M4N0JBNEJDMkU1NUU3MTIyNzA5 NjlBQkU0NUE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhkWVPhZX7W2SOz5H5Zk+T3YwgFWD3p2lnn rA2pDc0F2ad67uDyEBb6Uh5WRCUrYegAvIkip92tBoM7F1r0tXdWKUNibKfUicne H4kXwZTg/hgCQ7AL5gHEfYosNekSMkQQ4R20qaTaCR2KYzUZW2MZfJFKe+F4xchD 9t47s80xuUQ+BtdNS+Y1Ukb4JA9hHdh/C3zXGC1AgzPBaVj5UMnJPj/KaEFnCBHK fiUgr1cyrAgLVe4yKQWctqLaTBvAZwxcPesodKb0E7D5nOnpmpQnT4KpefJeWc/w 4vMaVDXejPuUkgKHjEflYA1ooHRjTR5xNypINfHhDZ053Hyu6VA= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:08 2026 by rpki-client