$ rpki-client -vvf rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft File: 5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft (raw, json) Hash identifier: xXR8qmhjt9+DE2HvXp/JX2B18fvtT5RRpMbyKQZpdYg= Subject key identifier: 05:30:27:6E:68:EE:52:F5:7A:2D:FA:05:81:C8:DE:BD:ED:AE:45:77 Authority key identifier: 5A:C7:FD:C1:38:0E:98:33:9F:28:DB:DC:57:B2:1E:7D:2F:95:A0:C0 Certificate issuer: /CN=5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0 Certificate serial: 2A69B46331A4B6309054990F8B30852E4A5EA38B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 20:25:37 +0000 Manifest this update: Fri 19 Jun 2026 20:20:37 +0000 Manifest next update: Sat 20 Jun 2026 21:21:37 +0000 Files and hashes: 1: 5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl (hash: Q9JQpRZSfSZz1w7Y4jKJctQCmA2tFVFMhf/R9IJLC9E=) 2: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: 4g4u+OEshRSiXLYJx+dZnyPxCHcmqZ8djxIy4N3tcCM=) 3: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: KmWWkFu4uWgTsq2Hfq2FHIMCUvYeIO46DVlLY6UTkvU=) 4: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: fc+4JU1Tpp/1O31vstVFMWqbX3rMZmX9kGoVnJ5dzDQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 21:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:69:b4:63:31:a4:b6:30:90:54:99:0f:8b:30:85:2e:4a:5e:a3:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0 Validity Not Before: Jun 19 20:20:37 2026 GMT Not After : Jun 20 21:21:37 2026 GMT Subject: CN=0530276E68EE52F57A2DFA0581C8DEBDEDAE4577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7d:69:9a:17:a4:0c:3a:24:64:d1:c7:c6:af: 5e:a7:a2:2b:82:5a:ed:f1:2c:f9:c7:fb:ef:64:32: 34:1f:5f:4b:7d:f8:a7:69:36:f6:e1:c8:99:23:90: 70:1e:6d:82:cb:7a:5a:b5:81:e7:71:75:b8:c6:32: 0b:f7:da:c6:9e:4e:47:4e:00:ad:ca:8f:8f:e1:69: a6:ea:fc:9b:89:3f:b4:90:c0:f8:65:22:12:fe:90: 67:87:57:ef:48:31:e6:22:76:f1:8c:f0:36:41:0a: c4:87:75:f4:8e:07:40:90:9d:d7:50:a1:ae:0a:5b: 0f:b1:45:fe:b0:59:32:17:da:2e:57:a7:2f:80:e3: 60:14:ba:ca:db:75:98:b4:2e:b2:d6:ce:35:1c:51: f7:0a:c9:ed:c8:c1:33:8e:9d:92:3b:68:7d:9a:63: f9:ed:fc:da:55:e8:e2:d4:2b:60:7e:57:da:8c:88: d1:8b:0c:21:51:d1:1e:00:12:ee:c3:d1:f4:b8:04: 00:7f:7e:b4:5f:0b:95:29:bd:1b:01:d0:d6:eb:91: 91:d1:14:ca:90:89:a8:5d:00:c4:25:47:72:5e:34: 6d:27:cc:7d:f7:62:28:5b:9c:fa:26:2f:63:3c:68: 24:bc:86:3e:93:8c:9d:1a:37:8c:f3:15:81:42:51: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:30:27:6E:68:EE:52:F5:7A:2D:FA:05:81:C8:DE:BD:ED:AE:45:77 X509v3 Authority Key Identifier: keyid:5A:C7:FD:C1:38:0E:98:33:9F:28:DB:DC:57:B2:1E:7D:2F:95:A0:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:41:3d:9e:f5:b9:fa:d0:68:13:40:fc:51:1b:20:ad:21:c0: c3:95:ec:1c:ca:13:6a:e6:21:c6:d6:7c:ec:6b:51:3b:eb:cc: 93:22:fa:28:4e:c1:a5:e7:67:20:1f:d6:40:ba:ad:66:d2:bc: f4:18:84:8d:56:6a:91:0e:af:2c:93:b3:4b:07:bd:c5:01:cf: 1a:eb:ee:63:83:36:d7:71:56:87:ab:f1:3c:ec:48:53:9b:31: b4:38:3f:df:4a:05:8e:83:f0:0c:00:84:b4:9b:5f:0a:3d:f5: 69:2d:a7:82:8f:cb:43:e0:0c:a6:55:de:77:1e:19:72:fe:7d: 80:72:0f:56:9d:c6:54:52:c2:e1:09:d7:5c:51:0e:55:ab:5b: cc:ad:1b:07:18:f8:44:c3:64:fa:49:9b:17:b9:3d:7a:68:18: 4b:de:cf:c2:b2:33:0a:d2:a1:07:76:b0:c7:01:ff:d9:e1:46: 42:5a:8a:2f:4c:cc:0a:8b:6c:9c:e9:4f:cc:79:38:17:45:97: 35:d0:ba:96:f4:d6:58:a1:93:29:a9:f0:7a:19:2e:41:60:cc: 77:52:d9:1d:bd:2f:16:6e:d1:6c:f5:7e:66:c5:a4:d4:7e:99: 2f:cb:89:f5:59:10:22:f5:08:f4:4e:c4:8b:e9:f6:c5:ef:04: d7:93:9b:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKmm0YzGktjCQVJkPizCFLkpeo4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDN0ZEQzEzODBFOTgzMzlGMjhEQkRDNTdCMjFFN0Qy Rjk1QTBDMDAeFw0yNjA2MTkyMDIwMzdaFw0yNjA2MjAyMTIxMzdaMDMxMTAvBgNV BAMTKDA1MzAyNzZFNjhFRTUyRjU3QTJERkEwNTgxQzhERUJERURBRTQ1NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyfWmaF6QMOiRk0cfGr16noiuC Wu3xLPnH++9kMjQfX0t9+KdpNvbhyJkjkHAebYLLelq1gedxdbjGMgv32saeTkdO AK3Kj4/haabq/JuJP7SQwPhlIhL+kGeHV+9IMeYidvGM8DZBCsSHdfSOB0CQnddQ oa4KWw+xRf6wWTIX2i5Xpy+A42AUusrbdZi0LrLWzjUcUfcKye3IwTOOnZI7aH2a Y/nt/NpV6OLUK2B+V9qMiNGLDCFR0R4AEu7D0fS4BAB/frRfC5UpvRsB0NbrkZHR FMqQiahdAMQlR3JeNG0nzH33YihbnPomL2M8aCS8hj6TjJ0aN4zzFYFCUdyVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBTAnbmjuUvV6LfoFgcjeve2uRXcwHwYDVR0j BBgwFoAUWsf9wTgOmDOfKNvcV7IefS+VoMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTNiODU4ZjYtZGUyMC00MTIxLWJjZWEtOTA3NmVkY2NjMDk3LzAvNUFDN0ZEQzEz ODBFOTgzMzlGMjhEQkRDNTdCMjFFN0QyRjk1QTBDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUM3RkRDMTM4MEU5ODMzOUYyOERCREM1N0IyMUU3RDJGOTVB MEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTNiODU4ZjYtZGUyMC00MTIxLWJj ZWEtOTA3NmVkY2NjMDk3LzAvNUFDN0ZEQzEzODBFOTgzMzlGMjhEQkRDNTdCMjFF N0QyRjk1QTBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBBPZ71ufrQaBNA/FEbIK0hwMOV7BzKE2rm IcbWfOxrUTvrzJMi+ihOwaXnZyAf1kC6rWbSvPQYhI1WapEOryyTs0sHvcUBzxrr 7mODNtdxVoer8TzsSFObMbQ4P99KBY6D8AwAhLSbXwo99Wktp4KPy0PgDKZV3nce GXL+fYByD1adxlRSwuEJ11xRDlWrW8ytGwcY+ETDZPpJmxe5PXpoGEvez8KyMwrS oQd2sMcB/9nhRkJaii9MzAqLbJzpT8x5OBdFlzXQupb01lihkymp8HoZLkFgzHdS 2R29LxZu0Wz1fmbFpNR+mS/LifVZECL1CPROxIvp9sXvBNeTmyE= -----END CERTIFICATE-----Generated at Sat Jun 20 09:15:41 2026 by rpki-client