$ rpki-client -vvf rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft File: 5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft (raw, json) Hash identifier: 2fdDCs4kVWBBoxO8PoSimjLgLyOsEpbwOUt4CYQBzmA= Subject key identifier: BF:A2:CC:34:29:16:B8:CE:90:7D:82:BF:23:D0:94:73:E7:3F:93:FE Authority key identifier: 5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61 Certificate issuer: /CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61 Certificate serial: 5C1810C85C111F1253D535B5D0AEAA15D6B1D478 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 08:14:37 +0000 Manifest this update: Sat 20 Jun 2026 08:09:37 +0000 Manifest next update: Sun 21 Jun 2026 10:38:37 +0000 Files and hashes: 1: 5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl (hash: sDyWvvHknumy6ro2BTrEocLuEEv2lrs3XGMbcxJSdmg=) 2: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: ZSQfDBDx08SMOJ9/mfQRF6dJyZ/7l6GG2dcY9tQkt/U=) 3: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: BWylbxtj1ROm+MVww31ybQOgEWW9jWHft5tLSvCMDwM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 10:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:18:10:c8:5c:11:1f:12:53:d5:35:b5:d0:ae:aa:15:d6:b1:d4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61 Validity Not Before: Jun 20 08:09:37 2026 GMT Not After : Jun 21 10:38:37 2026 GMT Subject: CN=BFA2CC342916B8CE907D82BF23D09473E73F93FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:f2:1f:10:29:29:bf:57:c5:37:e4:9b:42: d3:4d:07:9b:f3:b7:00:59:ab:82:d3:e3:96:a1:17: 13:f8:09:d5:b0:29:4b:c1:0c:f7:ad:44:d0:d9:2e: 77:c2:9a:c9:63:42:91:7b:44:ea:c2:54:1e:3e:58: 97:81:46:92:0b:37:d4:eb:b4:0e:4c:85:64:ad:06: c8:2b:68:d0:8c:22:20:11:40:25:49:5a:2b:c9:dd: 52:24:de:46:76:40:fc:72:26:78:cf:b8:e2:8d:c4: 4b:27:53:11:47:b0:87:25:48:ad:1b:e0:99:8c:d0: d1:0d:33:1e:1a:7f:81:00:9d:0b:c1:a9:b4:7c:49: 4d:18:0b:61:d1:9c:8e:38:45:c7:09:54:6b:5d:58: db:57:87:ce:11:c5:04:e0:c9:fa:f2:59:52:e3:bd: 3e:22:7b:2f:c4:14:48:96:c3:bb:9b:68:43:ce:92: 27:86:fb:a6:9d:0e:15:41:67:62:f3:a8:fd:0e:c1: 87:b7:06:97:0a:12:12:c9:79:74:3b:c6:97:e9:7a: b2:5e:c1:b6:3a:81:d8:2b:b1:d4:d6:48:54:59:a8: 90:b3:94:6f:63:34:98:e4:31:cd:15:9f:5b:e4:a6: 34:10:d0:25:e8:6b:17:4e:fc:dd:72:4c:9c:7c:b3: 3e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A2:CC:34:29:16:B8:CE:90:7D:82:BF:23:D0:94:73:E7:3F:93:FE X509v3 Authority Key Identifier: keyid:5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a5:93:b9:ca:cc:63:ff:48:5f:2b:eb:57:ee:1e:da:2b:78: 74:3f:fa:48:8e:d8:93:61:41:62:f2:65:bd:5b:2a:b3:e9:6f: 89:2a:28:eb:8d:05:a5:b2:aa:0b:79:4e:fc:10:ab:3a:74:4a: 92:79:63:95:cf:8b:f6:ce:9f:60:6e:5e:f3:86:19:24:f3:dd: 30:83:ce:fa:85:07:0b:69:43:a7:f5:71:dd:0b:96:57:13:72: 72:22:ca:07:bf:f0:08:07:df:74:0e:51:fc:cc:cf:3a:39:b4: 16:6a:34:2a:f0:56:fd:91:76:5f:55:01:43:0b:8e:bc:b0:16: 92:3d:51:f3:7e:15:4d:1e:4a:05:a9:d0:7c:4a:e2:2f:4e:2b: f9:c7:17:8d:b1:5b:96:4a:18:80:1e:33:26:31:aa:00:f2:73: ec:5f:de:5f:ee:7c:ff:10:6a:ce:38:50:f9:f1:52:d9:56:2b: 37:1d:fd:38:43:96:7e:83:6e:98:1f:48:f8:fe:d9:d0:5a:62: c0:1c:88:2d:c5:9f:76:15:60:de:37:44:86:d7:7e:25:a7:04: a3:a6:da:92:37:e2:68:63:1d:ba:ef:a1:0a:47:0b:fc:df:7b: 3e:f6:0a:5c:b9:7d:be:49:32:92:5a:f5:0f:28:20:a8:39:9c: e0:48:35:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXBgQyFwRHxJT1TW10K6qFdax1HgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4NDc0Q0Q1QUQ3RjU5OEE0ODI2ODk5REQ2NTIxN0Ex QkI4NUM2MTAeFw0yNjA2MjAwODA5MzdaFw0yNjA2MjExMDM4MzdaMDMxMTAvBgNV BAMTKEJGQTJDQzM0MjkxNkI4Q0U5MDdEODJCRjIzRDA5NDczRTczRjkzRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxr/IfECkpv1fFN+SbQtNNB5vz twBZq4LT45ahFxP4CdWwKUvBDPetRNDZLnfCmsljQpF7ROrCVB4+WJeBRpILN9Tr tA5MhWStBsgraNCMIiARQCVJWivJ3VIk3kZ2QPxyJnjPuOKNxEsnUxFHsIclSK0b 4JmM0NENMx4af4EAnQvBqbR8SU0YC2HRnI44RccJVGtdWNtXh84RxQTgyfryWVLj vT4iey/EFEiWw7ubaEPOkieG+6adDhVBZ2LzqP0OwYe3BpcKEhLJeXQ7xpfperJe wbY6gdgrsdTWSFRZqJCzlG9jNJjkMc0Vn1vkpjQQ0CXoaxdO/N1yTJx8sz7lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv6LMNCkWuM6QfYK/I9CUc+c/k/4wHwYDVR0j BBgwFoAUW4R0zVrX9ZikgmiZ3WUhehu4XGEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3YTZiY2ItOWViNi00OWRlLWI5OTgtMGJlZDNjNWMxMjc4LzAvNUI4NDc0Q0Q1 QUQ3RjU5OEE0ODI2ODk5REQ2NTIxN0ExQkI4NUM2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Qjg0NzRDRDVBRDdGNTk4QTQ4MjY4OTlERDY1MjE3QTFCQjg1 QzYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNUI4NDc0Q0Q1QUQ3RjU5OEE0ODI2ODk5REQ2NTIx N0ExQkI4NUM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALClk7nKzGP/SF8r61fuHtoreHQ/+kiO2JNh QWLyZb1bKrPpb4kqKOuNBaWyqgt5TvwQqzp0SpJ5Y5XPi/bOn2BuXvOGGSTz3TCD zvqFBwtpQ6f1cd0LllcTcnIiyge/8AgH33QOUfzMzzo5tBZqNCrwVv2Rdl9VAUML jrywFpI9UfN+FU0eSgWp0HxK4i9OK/nHF42xW5ZKGIAeMyYxqgDyc+xf3l/ufP8Q as44UPnxUtlWKzcd/ThDln6DbpgfSPj+2dBaYsAciC3Fn3YVYN43RIbXfiWnBKOm 2pI34mhjHbrvoQpHC/zfez72Cly5fb5JMpJa9Q8oIKg5nOBINag= -----END CERTIFICATE-----Generated at Sat Jun 20 11:42:34 2026 by rpki-client