$ rpki-client -vvf rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft File: 5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft (raw, json) Hash identifier: 68dW6LxLYEawYQ4UNdU/QNJ4rCqa+b/j7hK+SE294Eg= Subject key identifier: 9E:51:5A:EB:9A:54:D6:F8:F7:2F:04:32:1A:B1:80:E1:2A:48:89:B9 Authority key identifier: 5F:7C:0C:BF:5B:B8:C4:66:1C:32:A0:E0:43:E5:00:56:0D:BF:47:29 Certificate issuer: /CN=5F7C0CBF5BB8C4661C32A0E043E500560DBF4729 Certificate serial: 1EC7AD0F9B03F89DB44DEB1131C04D046D49F063 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 01:16:18 +0000 Manifest this update: Sat 20 Jun 2026 01:11:18 +0000 Manifest next update: Sun 21 Jun 2026 03:09:18 +0000 Files and hashes: 1: 3130332e3138352e3139362e302f32342d3234203d3e20313333383136.roa (hash: oPlCdoIfmCJKqeBLs55VVkT8uc2vPldYwiU3y8pfCsM=) 2: 3130332e35322e3231332e302f32342d3234203d3e20313333383136.roa (hash: SfQvGENDC41waooB6j4WUvvJFAlrc4V5XQaGfGIyIVQ=) 3: 5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl (hash: bm8yA1lKttpbmJQONcr7xB87RbBpsjqc35SG9S4CfRg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c7:ad:0f:9b:03:f8:9d:b4:4d:eb:11:31:c0:4d:04:6d:49:f0:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F7C0CBF5BB8C4661C32A0E043E500560DBF4729 Validity Not Before: Jun 20 01:11:18 2026 GMT Not After : Jun 21 03:09:18 2026 GMT Subject: CN=9E515AEB9A54D6F8F72F04321AB180E12A4889B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2b:49:d7:a6:43:e4:ed:5b:fe:10:93:6e:9a: 4f:01:aa:5a:5e:57:b5:e6:79:98:0c:c5:90:99:c3: af:e0:34:8e:70:15:88:67:f8:0a:d5:cc:3f:b8:12: 47:53:fc:27:c1:5c:38:6e:23:f6:1e:82:02:10:3d: 79:55:49:ce:55:ac:bf:6e:2c:6d:80:cf:64:46:92: c4:b1:50:8e:db:33:2a:b1:d3:e1:41:1e:fe:74:03: 7a:4d:3f:62:5b:44:84:c4:6e:67:d1:87:d5:ab:e7: 9c:d8:1a:42:1d:3d:7f:f5:3f:87:0a:53:28:98:f8: 1b:40:e0:9b:74:19:1a:95:f7:b9:4b:0e:00:62:6a: 44:2e:99:d4:7a:20:9b:71:d7:7e:77:52:58:66:2a: 1b:2e:b8:ae:a5:3b:56:4a:b5:d7:09:3d:4f:1c:19: dc:4a:0d:10:9e:99:d1:ed:51:f1:be:57:85:d8:71: 88:ab:9f:f0:10:f3:a7:1f:d9:18:4f:a0:d7:01:2c: c2:62:81:1f:29:fb:a9:14:91:c1:62:10:a9:cc:f9: b1:81:a0:06:45:b0:70:b8:41:43:fd:9e:69:b3:0c: 99:71:01:82:86:db:ad:1e:63:ab:bd:59:7f:51:ce: 92:01:19:76:12:d3:d7:5c:c1:45:dc:46:4a:4f:bc: c4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:51:5A:EB:9A:54:D6:F8:F7:2F:04:32:1A:B1:80:E1:2A:48:89:B9 X509v3 Authority Key Identifier: keyid:5F:7C:0C:BF:5B:B8:C4:66:1C:32:A0:E0:43:E5:00:56:0D:BF:47:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:8d:91:2f:6f:1c:78:16:f7:ae:53:07:a0:ef:78:ba:9a:83: 2f:59:65:31:77:58:94:20:50:40:ea:8e:4f:a8:dc:f0:f4:aa: 3f:d1:e7:11:20:0f:70:f3:2c:31:be:de:0d:1c:4f:50:5e:60: 42:b0:6a:31:89:9c:1c:56:1c:8c:9b:3d:9e:10:1c:e6:12:2c: db:d7:53:f8:57:f9:f7:96:a2:81:2c:31:3e:50:e3:6c:1b:81: 1a:6f:3b:1f:aa:1f:d0:22:03:ed:f4:d1:66:44:e6:73:95:34: 98:bf:d6:db:cc:f2:36:63:ba:d0:e6:f5:3a:25:7f:60:2e:43: cb:63:54:cc:5a:74:b9:97:f7:e0:13:c6:28:ea:b7:96:0c:2e: fa:ca:a2:b7:13:a3:12:1e:3e:f6:5c:d5:44:4e:4c:69:6a:4a: ff:46:83:b2:82:36:b8:80:38:6a:60:e7:c0:fa:dc:c3:f0:0a: 67:d7:7e:00:42:00:a7:98:4a:1f:56:47:7c:34:b3:43:d4:66: 94:f8:75:33:dd:f2:07:20:fd:36:49:e5:ff:5a:0b:da:76:fa: 11:5a:32:2e:40:61:e3:a9:35:ef:63:92:e2:0e:83:d2:4d:60: b7:fd:12:bf:18:23:4f:50:05:61:03:1b:0e:8b:4a:54:09:f6: ce:81:08:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHsetD5sD+J20TesRMcBNBG1J8GMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY3QzBDQkY1QkI4QzQ2NjFDMzJBMEUwNDNFNTAwNTYw REJGNDcyOTAeFw0yNjA2MjAwMTExMThaFw0yNjA2MjEwMzA5MThaMDMxMTAvBgNV BAMTKDlFNTE1QUVCOUE1NEQ2RjhGNzJGMDQzMjFBQjE4MEUxMkE0ODg5QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4K0nXpkPk7Vv+EJNumk8Bqlpe V7XmeZgMxZCZw6/gNI5wFYhn+ArVzD+4EkdT/CfBXDhuI/YeggIQPXlVSc5VrL9u LG2Az2RGksSxUI7bMyqx0+FBHv50A3pNP2JbRITEbmfRh9Wr55zYGkIdPX/1P4cK UyiY+BtA4Jt0GRqV97lLDgBiakQumdR6IJtx1353UlhmKhsuuK6lO1ZKtdcJPU8c GdxKDRCemdHtUfG+V4XYcYirn/AQ86cf2RhPoNcBLMJigR8p+6kUkcFiEKnM+bGB oAZFsHC4QUP9nmmzDJlxAYKG260eY6u9WX9RzpIBGXYS09dcwUXcRkpPvMQRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnlFa65pU1vj3LwQyGrGA4SpIibkwHwYDVR0j BBgwFoAUX3wMv1u4xGYcMqDgQ+UAVg2/RykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGU5YWJiMWEtZDZjMC00NTRmLTg3MGEtOGJlZWRkODFmY2QyLzAvNUY3QzBDQkY1 QkI4QzQ2NjFDMzJBMEUwNDNFNTAwNTYwREJGNDcyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjdDMENCRjVCQjhDNDY2MUMzMkEwRTA0M0U1MDA1NjBEQkY0 NzI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGU5YWJiMWEtZDZjMC00NTRmLTg3 MGEtOGJlZWRkODFmY2QyLzAvNUY3QzBDQkY1QkI4QzQ2NjFDMzJBMEUwNDNFNTAw NTYwREJGNDcyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWNkS9vHHgW965TB6DveLqagy9ZZTF3WJQg UEDqjk+o3PD0qj/R5xEgD3DzLDG+3g0cT1BeYEKwajGJnBxWHIybPZ4QHOYSLNvX U/hX+feWooEsMT5Q42wbgRpvOx+qH9AiA+300WZE5nOVNJi/1tvM8jZjutDm9Tol f2AuQ8tjVMxadLmX9+ATxijqt5YMLvrKorcToxIePvZc1UROTGlqSv9Gg7KCNriA OGpg58D63MPwCmfXfgBCAKeYSh9WR3w0s0PUZpT4dTPd8gcg/TZJ5f9aC9p2+hFa Mi5AYeOpNe9jkuIOg9JNYLf9Er8YI09QBWEDGw6LSlQJ9s6BCMc= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:05 2026 by rpki-client