$ rpki-client -vvf rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft File: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft (raw, json) Hash identifier: cD7zZSmrPIbtUVmpAmbvBKdOEhlrUWBVIiURxe56CYk= Subject key identifier: 2C:DD:EC:4A:74:36:83:A8:E5:19:1E:22:3C:B0:0A:08:81:3D:C5:4E Authority key identifier: F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 Certificate issuer: /CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Certificate serial: 2A47165C188811FFFB7F64C9F7457FFB07817823 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 05:08:11 +0000 Manifest this update: Thu 18 Jun 2026 05:03:11 +0000 Manifest next update: Fri 19 Jun 2026 06:41:11 +0000 Files and hashes: 1: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: ZdektWGBi3rfOIP5V7EV+AEsc9XAfei8AhQcCJZB3h0=) 2: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl (hash: GHwrxB/vrFAY1BtzQ/7v/D6VD7lZejYyGXLMns53J7c=) 3: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: KrFgsVnJ/CPVgce61GzFtNxXXABIAjXPOpkQ6UBGiUQ=) 4: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: 03BuWy0OfURI+FKE0txZsH5LInMm2YyYlx6DInNWH9E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 06:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:47:16:5c:18:88:11:ff:fb:7f:64:c9:f7:45:7f:fb:07:81:78:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Validity Not Before: Jun 18 05:03:11 2026 GMT Not After : Jun 19 06:41:11 2026 GMT Subject: CN=2CDDEC4A743683A8E5191E223CB00A08813DC54E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:f2:9a:0e:ec:db:0b:ce:b7:56:2c:e0:63: bb:18:4b:29:7d:af:28:87:04:c3:92:4f:4a:3e:7b: 41:0d:57:c7:8d:fe:9b:c7:9f:75:f7:45:84:19:39: 66:8d:31:23:38:dd:00:19:4d:88:a7:13:2c:bc:11: 78:7e:52:4d:c7:e5:f7:d6:a4:9a:12:15:bb:e5:cf: 45:bc:41:25:6c:1f:77:df:49:f8:dc:a3:5b:5d:6b: 6f:2d:16:6c:e3:73:48:70:5a:c1:75:e8:4b:61:3e: be:fa:0a:0e:51:b6:ab:42:8a:4a:d2:ee:86:80:66: b7:56:4e:7d:e4:dc:d8:99:88:16:08:26:8b:92:90: ed:ff:91:37:91:db:be:1c:0e:9e:95:bf:77:c5:f7: 14:4c:b4:8b:d7:05:37:37:e0:25:a8:9d:92:02:c2: f3:18:cd:48:d4:b1:7a:e9:ba:ad:ae:9b:f0:14:0e: 4b:ad:7a:c8:e9:06:6b:f5:e6:d9:97:eb:0a:84:1a: 6c:15:f9:e0:25:c7:f3:ad:b9:4f:cb:44:09:a6:1f: 33:dc:bd:0c:56:40:c6:ec:ef:72:df:1d:59:f3:21: aa:9e:de:b1:03:e0:77:b8:af:8f:a3:c1:b9:d7:76: b4:02:f0:41:4c:7a:2d:88:f5:7b:18:df:88:16:79: 59:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DD:EC:4A:74:36:83:A8:E5:19:1E:22:3C:B0:0A:08:81:3D:C5:4E X509v3 Authority Key Identifier: keyid:F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:94:08:5a:8e:d9:5d:6a:7c:30:ab:4e:a6:fd:ce:37:ee:e5: 41:44:0a:cd:75:c3:f3:20:36:55:92:e3:81:60:bc:d1:ee:e6: b2:ce:5c:12:25:c9:f2:aa:62:b5:b1:68:f0:16:14:ec:d0:b0: b2:bb:5a:cb:65:37:28:49:b8:25:f3:c9:2b:53:e9:75:1f:da: eb:f5:c0:39:50:0a:a2:1c:63:db:09:55:d1:8e:d2:b2:27:56: fa:9b:4f:41:fc:e7:88:ed:3d:8d:49:4f:67:28:e3:19:70:dd: 9b:f1:61:71:a8:04:16:23:81:98:4f:cd:3a:ae:f2:9c:f9:f4: a9:b5:49:4c:ff:85:47:5c:4e:a5:fd:a7:6c:72:a4:66:79:0e: 97:2a:f5:d9:e9:02:c3:3a:3d:12:ea:37:06:3f:73:1a:3f:c5: 4d:e5:42:69:27:bd:ec:f6:c7:86:9b:c1:a8:61:8f:65:2d:44: 22:bb:65:a7:6d:3b:a2:64:ed:98:8c:c7:da:b7:27:fc:97:43: f5:8a:24:73:c7:84:4f:f1:fa:f5:1c:a7:df:f0:a3:4a:60:7f: 4b:2e:e8:8d:15:a2:8a:72:04:ba:09:36:15:6b:2a:4c:44:56: da:8c:b1:a4:b2:ad:35:e9:59:4b:70:7c:a1:60:9c:79:7b:89: 52:2f:4b:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKkcWXBiIEf/7f2TJ90V/+weBeCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3Q0Qx RkUxRUFGNjAeFw0yNjA2MTgwNTAzMTFaFw0yNjA2MTkwNjQxMTFaMDMxMTAvBgNV BAMTKDJDRERFQzRBNzQzNjgzQThFNTE5MUUyMjNDQjAwQTA4ODEzREM1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ePKaDuzbC863VizgY7sYSyl9 ryiHBMOST0o+e0ENV8eN/pvHn3X3RYQZOWaNMSM43QAZTYinEyy8EXh+Uk3H5ffW pJoSFbvlz0W8QSVsH3ffSfjco1tda28tFmzjc0hwWsF16EthPr76Cg5RtqtCikrS 7oaAZrdWTn3k3NiZiBYIJouSkO3/kTeR274cDp6Vv3fF9xRMtIvXBTc34CWonZIC wvMYzUjUsXrpuq2um/AUDkutesjpBmv15tmX6wqEGmwV+eAlx/OtuU/LRAmmHzPc vQxWQMbs73LfHVnzIaqe3rED4He4r4+jwbnXdrQC8EFMei2I9XsY34gWeVlxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULN3sSnQ2g6jlGR4iPLAKCIE9xU4wHwYDVR0j BBgwFoAU9bXUbF3OhEcHwNeJYDl3zR/h6vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY5ZjhhYTgtODk3MS00ZTUxLThiNTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1 RENFODQ0NzA3QzBENzg5NjAzOTc3Q0QxRkUxRUFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNUI1RDQ2QzVEQ0U4NDQ3MDdDMEQ3ODk2MDM5NzdDRDFGRTFF QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3 Q0QxRkUxRUFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaUCFqO2V1qfDCrTqb9zjfu5UFECs11w/Mg NlWS44FgvNHu5rLOXBIlyfKqYrWxaPAWFOzQsLK7WstlNyhJuCXzyStT6XUf2uv1 wDlQCqIcY9sJVdGO0rInVvqbT0H854jtPY1JT2co4xlw3ZvxYXGoBBYjgZhPzTqu 8pz59Km1SUz/hUdcTqX9p2xypGZ5Dpcq9dnpAsM6PRLqNwY/cxo/xU3lQmknvez2 x4abwahhj2UtRCK7ZadtO6Jk7ZiMx9q3J/yXQ/WKJHPHhE/x+vUcp9/wo0pgf0su 6I0VoopyBLoJNhVrKkxEVtqMsaSyrTXpWUtwfKFgnHl7iVIvS38= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:27 2026 by rpki-client