$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft File: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft (raw, json) Hash identifier: BOM+RL4FGESMLvcx+uH8JMd8hiTRkyXqOMI7f5XhysQ= Subject key identifier: 40:8A:92:F5:A9:02:53:CB:1B:B3:A7:C7:D1:39:6A:07:3E:B5:AA:21 Authority key identifier: 52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF Certificate issuer: /CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Certificate serial: 644818F38BB0E819C664D45C45BAE273C3849AC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 08:42:47 +0000 Manifest this update: Thu 18 Jun 2026 08:37:47 +0000 Manifest next update: Fri 19 Jun 2026 10:31:47 +0000 Files and hashes: 1: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl (hash: HG7nKNqOKP9synMpQf1lNXX7k7vJD3tDAEqPx5A4bJI=) 2: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: s0qL2weEhTe4sBj4h3x5XjkUykXaQaRd3WPD4VdRPq0=) 3: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: Xm5n/XLcKtlX7vaWLbK2D/7cXu3TQ6c3pSXsVlfA9/0=) 4: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: NHw4QH7kx6gwhf24chR9MVQWVvSl6RuQvk3rMGt5qyQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:48:18:f3:8b:b0:e8:19:c6:64:d4:5c:45:ba:e2:73:c3:84:9a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Validity Not Before: Jun 18 08:37:47 2026 GMT Not After : Jun 19 10:31:47 2026 GMT Subject: CN=408A92F5A90253CB1BB3A7C7D1396A073EB5AA21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f3:ce:33:61:6c:6a:a8:cd:fa:90:cf:ef:e4: 1e:ed:98:3a:d5:f9:48:4b:35:1e:33:16:f9:bf:82: 20:db:e0:27:1b:7e:c7:57:47:7d:49:71:4e:9c:a1: 21:62:45:c9:d4:0c:d6:9e:fc:7a:8d:15:1b:aa:4a: 7a:cf:8f:d2:21:f1:ec:f0:99:ab:34:24:69:ab:8f: bd:0e:0d:3a:c9:86:00:1a:1b:7d:75:38:a5:fc:9e: e4:c5:30:25:4d:2e:be:7e:df:ac:f2:6d:51:42:58: b8:15:3f:9f:9c:c4:e6:43:6c:b9:68:89:20:ad:2a: 39:eb:71:8d:fd:1b:bd:48:06:bd:0b:af:66:29:5d: 40:f4:27:03:c3:bb:a6:8f:f6:3e:12:25:dd:27:9f: 08:47:63:20:da:39:d1:e2:d5:85:2c:a5:a6:06:f2: 4f:08:7a:04:42:b6:8a:29:8e:c2:fe:49:79:f4:44: d5:db:e3:55:87:1c:6e:0e:b1:b5:4b:a2:65:92:e6: 32:9e:67:62:78:d3:cc:91:c2:d9:aa:d1:90:c5:97: 4a:8f:19:1a:ea:23:b0:7d:47:4a:e0:04:40:f6:f3: 9e:ac:ad:e7:98:cb:a2:e5:62:62:82:57:e9:85:61: 2b:54:9a:dc:87:3d:fe:99:d9:d2:3d:c1:80:d4:53: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8A:92:F5:A9:02:53:CB:1B:B3:A7:C7:D1:39:6A:07:3E:B5:AA:21 X509v3 Authority Key Identifier: keyid:52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:00:83:4c:91:7c:eb:34:cc:32:31:22:02:d3:eb:ed:44:f5: 48:f9:33:2b:dd:ae:c2:91:e8:9a:ef:6f:74:64:96:11:ed:dd: e8:7c:2b:cd:e6:e5:d1:7a:0e:c0:46:a8:66:ce:69:dd:50:75: 16:35:c6:61:9c:3c:60:13:e4:9e:6b:7e:3b:26:d9:7b:fe:52: af:2f:78:d3:6f:be:08:31:a1:eb:35:35:68:38:51:b1:bb:b2: bd:9f:9b:4d:97:e1:f4:5b:bb:af:2e:46:a7:c4:ea:2a:c1:0c: 0c:17:b5:74:32:c5:c7:21:6a:e9:b6:1e:24:2a:b9:38:2e:8a: a9:94:65:fa:37:e8:74:40:0b:ea:ad:e0:2b:cb:0e:11:f2:18: a8:b5:29:64:68:26:90:12:ea:cf:5f:2e:ae:5e:f8:33:5d:55: 28:3d:45:dd:31:8c:ec:f9:1e:8d:c5:8f:bc:e9:ef:e8:41:93: db:37:7f:e5:18:ba:e3:da:0b:91:c3:07:fa:02:1a:e9:83:5d: 99:92:a2:d5:29:df:6c:b9:1c:79:50:f2:1f:39:84:31:d2:c8: dc:6f:11:fe:a4:dd:e1:3a:ba:46:b2:8b:46:75:41:a5:bb:ae: 69:56:56:13:71:c7:98:8c:70:c6:4f:30:08:27:a3:fa:e7:82: d0:71:35:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZEgY84uw6BnGZNRcRbric8OEmsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgx QTE2RjhERjAeFw0yNjA2MTgwODM3NDdaFw0yNjA2MTkxMDMxNDdaMDMxMTAvBgNV BAMTKDQwOEE5MkY1QTkwMjUzQ0IxQkIzQTdDN0QxMzk2QTA3M0VCNUFBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn884zYWxqqM36kM/v5B7tmDrV +UhLNR4zFvm/giDb4CcbfsdXR31JcU6coSFiRcnUDNae/HqNFRuqSnrPj9Ih8ezw mas0JGmrj70ODTrJhgAaG311OKX8nuTFMCVNLr5+36zybVFCWLgVP5+cxOZDbLlo iSCtKjnrcY39G71IBr0Lr2YpXUD0JwPDu6aP9j4SJd0nnwhHYyDaOdHi1YUspaYG 8k8IegRCtoopjsL+SXn0RNXb41WHHG4OsbVLomWS5jKeZ2J408yRwtmq0ZDFl0qP GRrqI7B9R0rgBED2856sreeYy6LlYmKCV+mFYStUmtyHPf6Z2dI9wYDUU9snAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQIqS9akCU8sbs6fH0TlqBz61qiEwHwYDVR0j BBgwFoAUUpf8C1LNT8fwbBZTENETyBoW+N8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2RkYmI3OWMtOWVhMi00N2YwLWI0NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1 MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgxQTE2RjhERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Mjk3RkMwQjUyQ0Q0RkM3RjA2QzE2NTMxMEQxMTNDODFBMTZG OERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEz QzgxQTE2RjhERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIAg0yRfOs0zDIxIgLT6+1E9Uj5MyvdrsKR 6Jrvb3RklhHt3eh8K83m5dF6DsBGqGbOad1QdRY1xmGcPGAT5J5rfjsm2Xv+Uq8v eNNvvggxoes1NWg4UbG7sr2fm02X4fRbu68uRqfE6irBDAwXtXQyxcchaum2HiQq uTguiqmUZfo36HRAC+qt4CvLDhHyGKi1KWRoJpAS6s9fLq5e+DNdVSg9Rd0xjOz5 Ho3Fj7zp7+hBk9s3f+UYuuPaC5HDB/oCGumDXZmSotUp32y5HHlQ8h85hDHSyNxv Ef6k3eE6ukayi0Z1QaW7rmlWVhNxx5iMcMZPMAgno/rngtBxNQM= -----END CERTIFICATE-----Generated at Thu Jun 18 17:08:21 2026 by rpki-client