$ rpki-client -vvf rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft File: 5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft (raw, json) Hash identifier: I8GbRpa34mwtk90vaPFugOcs0NPjdyaGEMzZyADZYaY= Subject key identifier: 0E:41:42:AE:43:60:1D:CF:2B:25:BD:98:4C:BC:A3:62:28:B3:4F:22 Authority key identifier: 5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61 Certificate issuer: /CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61 Certificate serial: 381D51ACD8B1C363675D6DA26ED9ED84A96EAEF5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft Manifest number: 05 Signing time: Tue 05 May 2026 08:24:49 +0000 Manifest this update: Tue 05 May 2026 08:19:49 +0000 Manifest next update: Wed 06 May 2026 12:01:49 +0000 Files and hashes: 1: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: ZSQfDBDx08SMOJ9/mfQRF6dJyZ/7l6GG2dcY9tQkt/U=) 2: 5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl (hash: P85Vv0NaIwrC6WguvxpP7HWpSN/VSK7hJz0w2hW7Q4w=) 3: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: BWylbxtj1ROm+MVww31ybQOgEWW9jWHft5tLSvCMDwM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1d:51:ac:d8:b1:c3:63:67:5d:6d:a2:6e:d9:ed:84:a9:6e:ae:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61 Validity Not Before: May 5 08:19:49 2026 GMT Not After : May 6 12:01:49 2026 GMT Subject: CN=0E4142AE43601DCF2B25BD984CBCA36228B34F22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0e:48:a5:12:a4:36:28:30:6e:f8:60:f5:df: 70:e4:06:a2:f7:bc:bf:5a:f3:0a:da:b7:1e:5d:88: b2:39:c8:45:da:58:43:3b:ea:21:5a:e9:61:84:49: 1e:b1:5e:5a:da:98:ad:57:b4:6c:f6:97:f5:eb:5b: 01:1a:2b:2e:86:ee:b6:4d:17:79:52:ad:1d:2a:0f: 3b:c5:fa:c4:be:bf:98:50:8e:57:1e:b5:e5:05:e9: b7:2c:a8:0c:03:a7:3b:28:58:1a:de:6a:64:83:67: c4:c6:66:37:0b:a5:15:c7:ee:e4:ad:d5:96:5c:89: 84:5d:9d:51:12:a7:2b:22:aa:8c:90:bc:bc:79:7b: 92:e5:53:cd:dd:44:e9:ab:26:31:06:71:6e:1f:93: 6c:89:b0:44:fb:1f:d6:e1:90:4d:60:8c:dc:74:e9: ee:2a:47:13:f0:19:50:a0:29:6c:e6:d3:42:25:57: fc:e1:c9:cc:e4:a6:bc:19:af:1b:c1:19:f0:07:94: c8:bd:17:96:0b:12:26:5d:d8:28:00:c1:53:c1:e5: 6f:4e:cf:bd:7c:f5:c6:18:c2:e6:69:0c:eb:3a:c7: 2d:92:66:7c:21:6a:e2:d1:94:e0:40:c9:fd:51:1d: 15:37:43:fa:d5:f8:c6:33:21:cc:50:1a:5c:65:b7: 9b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:41:42:AE:43:60:1D:CF:2B:25:BD:98:4C:BC:A3:62:28:B3:4F:22 X509v3 Authority Key Identifier: keyid:5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:71:8c:c7:75:79:4d:3e:4f:60:05:3e:d6:27:c3:58:42:2a: f0:a1:61:38:59:d9:39:76:6f:0f:93:c8:ca:ad:b7:1a:84:9b: c8:25:92:aa:d7:fc:17:51:ec:b2:3e:fe:90:e4:24:33:f9:da: 7d:ab:37:e5:03:7d:f6:d5:f5:4b:34:be:a9:40:9b:c4:62:f7: 5c:03:3d:ef:bd:46:0a:ce:5e:77:24:04:7e:f3:7c:59:71:6e: f1:d8:43:5d:24:23:8a:be:1e:6a:19:59:a0:56:2c:fb:7e:eb: dc:20:41:cb:c2:74:ca:4a:a3:b4:ad:67:1e:ef:05:f8:2f:d8: c8:1b:a7:1d:96:b3:b8:29:97:74:7a:a2:82:c4:84:86:cc:18: d6:23:a1:08:fd:e4:55:4f:3a:e5:49:23:58:ca:22:6d:02:e3: 93:d8:a7:b4:6b:d2:b4:8a:6c:f1:a2:4d:92:db:c3:6e:db:47: 9f:b3:35:01:32:f0:0f:a7:8d:91:b7:5b:7e:ab:cf:d6:7d:b5: bc:d9:5f:51:0e:e1:55:22:44:95:e4:01:02:8f:00:69:81:db: 49:f1:35:00:a8:12:8e:b3:ad:2b:f5:67:25:1f:e4:14:fb:e6: ec:62:f9:23:e8:59:ae:46:25:57:31:2b:1a:d3:91:ce:52:ec: e2:91:67:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOB1RrNixw2NnXW2ibtnthKlurvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4NDc0Q0Q1QUQ3RjU5OEE0ODI2ODk5REQ2NTIxN0Ex QkI4NUM2MTAeFw0yNjA1MDUwODE5NDlaFw0yNjA1MDYxMjAxNDlaMDMxMTAvBgNV BAMTKDBFNDE0MkFFNDM2MDFEQ0YyQjI1QkQ5ODRDQkNBMzYyMjhCMzRGMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjDkilEqQ2KDBu+GD133DkBqL3 vL9a8wratx5diLI5yEXaWEM76iFa6WGESR6xXlramK1XtGz2l/XrWwEaKy6G7rZN F3lSrR0qDzvF+sS+v5hQjlceteUF6bcsqAwDpzsoWBreamSDZ8TGZjcLpRXH7uSt 1ZZciYRdnVESpysiqoyQvLx5e5LlU83dROmrJjEGcW4fk2yJsET7H9bhkE1gjNx0 6e4qRxPwGVCgKWzm00IlV/zhyczkprwZrxvBGfAHlMi9F5YLEiZd2CgAwVPB5W9O z7189cYYwuZpDOs6xy2SZnwhauLRlOBAyf1RHRU3Q/rV+MYzIcxQGlxlt5uvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDkFCrkNgHc8rJb2YTLyjYiizTyIwHwYDVR0j BBgwFoAUW4R0zVrX9ZikgmiZ3WUhehu4XGEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3YTZiY2ItOWViNi00OWRlLWI5OTgtMGJlZDNjNWMxMjc4LzAvNUI4NDc0Q0Q1 QUQ3RjU5OEE0ODI2ODk5REQ2NTIxN0ExQkI4NUM2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Qjg0NzRDRDVBRDdGNTk4QTQ4MjY4OTlERDY1MjE3QTFCQjg1 QzYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNUI4NDc0Q0Q1QUQ3RjU5OEE0ODI2ODk5REQ2NTIx N0ExQkI4NUM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpxjMd1eU0+T2AFPtYnw1hCKvChYThZ2Tl2 bw+TyMqttxqEm8glkqrX/BdR7LI+/pDkJDP52n2rN+UDffbV9Us0vqlAm8Ri91wD Pe+9RgrOXnckBH7zfFlxbvHYQ10kI4q+HmoZWaBWLPt+69wgQcvCdMpKo7StZx7v Bfgv2Mgbpx2Ws7gpl3R6ooLEhIbMGNYjoQj95FVPOuVJI1jKIm0C45PYp7Rr0rSK bPGiTZLbw27bR5+zNQEy8A+njZG3W36rz9Z9tbzZX1EO4VUiRJXkAQKPAGmB20nx NQCoEo6zrSv1ZyUf5BT75uxi+SPoWa5GJVcxKxrTkc5S7OKRZ4E= -----END CERTIFICATE-----Generated at Tue May 5 14:20:04 2026 by rpki-client