$ rpki-client -vvf rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft File: 5FD95F455755676CB89A532D2F2A8301877C4AEC.mft (raw, json) Hash identifier: Uj/EM2HW0nlOlxKpyrJFxUM3LWLDMPKcie+PYz0Z8DA= Subject key identifier: 03:12:BA:4E:AF:BD:3C:EA:24:C3:44:58:A7:4B:29:BE:E3:57:34:D8 Authority key identifier: 5F:D9:5F:45:57:55:67:6C:B8:9A:53:2D:2F:2A:83:01:87:7C:4A:EC Certificate issuer: /CN=5FD95F455755676CB89A532D2F2A8301877C4AEC Certificate serial: 6ED1BB8D00E17B60FE53703AD26D43E8CAA080EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 03:13:44 +0000 Manifest this update: Sat 20 Jun 2026 03:08:44 +0000 Manifest next update: Sun 21 Jun 2026 03:57:44 +0000 Files and hashes: 1: 5FD95F455755676CB89A532D2F2A8301877C4AEC.crl (hash: gk9RVSG5jkZSUyLJ4CR633HqZMe9Os2pVXtbfHFVq+M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.crl rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d1:bb:8d:00:e1:7b:60:fe:53:70:3a:d2:6d:43:e8:ca:a0:80:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FD95F455755676CB89A532D2F2A8301877C4AEC Validity Not Before: Jun 20 03:08:44 2026 GMT Not After : Jun 21 03:57:44 2026 GMT Subject: CN=0312BA4EAFBD3CEA24C34458A74B29BEE35734D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:58:81:b4:c2:af:97:20:75:54:7e:04:c0: ca:d2:47:9d:49:2c:7f:26:30:2c:85:8a:27:1b:7f: 41:77:ae:05:b3:63:59:56:b3:3a:fa:e4:71:00:60: f1:fe:17:2f:3c:1c:07:a0:85:90:ce:36:cc:89:c3: a8:17:a2:53:ad:a9:7c:12:59:14:e5:60:2a:4c:cd: b7:13:8b:1c:d1:9a:88:f4:06:55:3f:39:85:31:d9: cf:67:86:34:ab:fd:8d:a8:a0:a1:15:77:b8:85:8b: 5e:dc:0e:44:96:41:f7:49:57:73:0d:59:aa:55:74: c6:97:5d:52:14:6c:2c:2e:e6:69:41:bf:76:ba:30: 9e:f2:55:7d:8c:33:69:c6:ce:7b:70:5f:39:4e:2b: 68:b9:c0:b4:03:bc:55:f3:97:5e:b0:5a:5d:e2:1b: 13:c5:48:46:02:cf:1b:0e:39:4f:0e:c3:9c:35:63: 88:58:58:3b:cf:91:ef:8f:5a:58:ee:ed:a1:cc:28: fd:38:ce:04:4e:51:e5:71:d8:dd:74:14:9d:b7:af: 45:e4:9e:b8:c5:32:2e:e5:21:d0:f5:ef:e3:63:ee: 2c:8d:97:71:de:50:7c:88:7d:6e:ad:2b:07:24:a8: ef:74:f8:d5:96:c3:89:8b:d0:f2:d8:31:6f:da:86: 4c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:12:BA:4E:AF:BD:3C:EA:24:C3:44:58:A7:4B:29:BE:E3:57:34:D8 X509v3 Authority Key Identifier: keyid:5F:D9:5F:45:57:55:67:6C:B8:9A:53:2D:2F:2A:83:01:87:7C:4A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0e:72:85:35:d1:9d:be:f2:09:ef:91:0f:92:1c:af:12:e0: db:bc:26:71:44:d3:48:82:da:b8:63:11:5a:b4:ce:e6:fb:c8: 00:63:8e:2a:df:5b:fc:a0:81:f0:60:af:bd:f4:cb:9e:7f:3b: 55:91:75:05:e3:74:06:eb:49:36:a7:a1:8d:40:ce:92:b0:f5: 25:e7:91:b3:01:51:2a:69:9d:c6:6a:ed:32:f4:5f:26:8d:a5: 72:8a:3c:49:50:8f:a0:42:ba:54:d6:90:8c:cd:52:d1:81:23: b2:de:05:dc:97:4c:ba:58:fb:49:c6:0a:3d:f2:29:62:1a:0b: ee:0d:4e:19:3e:30:17:3f:1b:48:e6:2c:ae:f5:63:71:f7:7e: 4d:88:01:7e:fa:0a:c8:ce:96:93:0b:fa:ff:ae:75:a5:6e:c3: 6f:d4:55:f7:28:38:d4:0f:95:10:21:5c:d2:b0:2c:d1:52:4e: 7d:64:44:33:44:a7:eb:e5:48:1f:71:73:01:6c:8e:e4:f2:60: 85:1e:d8:37:11:25:31:ab:48:e8:13:11:6b:05:c2:c1:ef:69: 89:4b:75:9b:f0:96:2a:c0:44:d1:4e:77:b6:e8:bc:ab:7c:15: 5e:fb:a4:cf:c0:bf:48:9e:55:63:24:da:8c:1b:2c:6f:d2:73: 1b:ce:55:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbtG7jQDhe2D+U3A60m1D6MqggOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZEOTVGNDU1NzU1Njc2Q0I4OUE1MzJEMkYyQTgzMDE4 NzdDNEFFQzAeFw0yNjA2MjAwMzA4NDRaFw0yNjA2MjEwMzU3NDRaMDMxMTAvBgNV BAMTKDAzMTJCQTRFQUZCRDNDRUEyNEMzNDQ1OEE3NEIyOUJFRTM1NzM0RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJi1iBtMKvlyB1VH4EwMrSR51J LH8mMCyFiicbf0F3rgWzY1lWszr65HEAYPH+Fy88HAeghZDONsyJw6gXolOtqXwS WRTlYCpMzbcTixzRmoj0BlU/OYUx2c9nhjSr/Y2ooKEVd7iFi17cDkSWQfdJV3MN WapVdMaXXVIUbCwu5mlBv3a6MJ7yVX2MM2nGzntwXzlOK2i5wLQDvFXzl16wWl3i GxPFSEYCzxsOOU8Ow5w1Y4hYWDvPke+PWlju7aHMKP04zgROUeVx2N10FJ23r0Xk nrjFMi7lIdD17+Nj7iyNl3HeUHyIfW6tKwckqO90+NWWw4mL0PLYMW/ahkypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAxK6Tq+9POokw0RYp0spvuNXNNgwHwYDVR0j BBgwFoAUX9lfRVdVZ2y4mlMtLyqDAYd8SuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJhOTdiMGItMzlhZS00YzJjLWIxM2ItMDFlMzk1YjdhMjRiLzAvNUZEOTVGNDU1 NzU1Njc2Q0I4OUE1MzJEMkYyQTgzMDE4NzdDNEFFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkQ5NUY0NTU3NTU2NzZDQjg5QTUzMkQyRjJBODMwMTg3N0M0 QUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvNUZEOTVGNDU1NzU1Njc2Q0I4OUE1MzJEMkYyQTgz MDE4NzdDNEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4OcoU10Z2+8gnvkQ+SHK8S4Nu8JnFE00iC 2rhjEVq0zub7yABjjirfW/yggfBgr730y55/O1WRdQXjdAbrSTanoY1AzpKw9SXn kbMBUSppncZq7TL0XyaNpXKKPElQj6BCulTWkIzNUtGBI7LeBdyXTLpY+0nGCj3y KWIaC+4NThk+MBc/G0jmLK71Y3H3fk2IAX76CsjOlpML+v+udaVuw2/UVfcoONQP lRAhXNKwLNFSTn1kRDNEp+vlSB9xcwFsjuTyYIUe2DcRJTGrSOgTEWsFwsHvaYlL dZvwlirARNFOd7bovKt8FV77pM/Av0ieVWMk2owbLG/ScxvOVVk= -----END CERTIFICATE-----Generated at Sat Jun 20 09:15:35 2026 by rpki-client