$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft File: 5137BC6C642818ED44761CE24BD59136B86E9502.mft (raw, json) Hash identifier: ZHsvkHz93JMeExdiRQ4Izw8iMY8Cda8hnygf+Yhkwtc= Subject key identifier: 66:5C:FF:2D:28:7E:E7:1C:D7:16:F4:E1:4F:A8:29:8A:54:93:C8:37 Authority key identifier: 51:37:BC:6C:64:28:18:ED:44:76:1C:E2:4B:D5:91:36:B8:6E:95:02 Certificate issuer: /CN=5137BC6C642818ED44761CE24BD59136B86E9502 Certificate serial: 2385555EB108DE35F28708F317A95193F83F119B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 13:27:08 +0000 Manifest this update: Fri 19 Jun 2026 13:22:08 +0000 Manifest next update: Sat 20 Jun 2026 16:10:08 +0000 Files and hashes: 1: 5137BC6C642818ED44761CE24BD59136B86E9502.crl (hash: WRV59GeXwEX+9fPSEGAPHePk87Z8exa1IygVa5GzO14=) 2: 323430333a393530303a3a2f33322d3336203d3e2039363537.roa (hash: Bjupm6rpCAaMTeTPZ2eGuF40Rt3f9ZMn/qqAW7B+FsQ=) 3: 3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa (hash: rnnGREcPzTzqU+DHtFpFgNVjo93sVnYIgoX5i3YQ96Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.crl rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 16:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:85:55:5e:b1:08:de:35:f2:87:08:f3:17:a9:51:93:f8:3f:11:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5137BC6C642818ED44761CE24BD59136B86E9502 Validity Not Before: Jun 19 13:22:08 2026 GMT Not After : Jun 20 16:10:08 2026 GMT Subject: CN=665CFF2D287EE71CD716F4E14FA8298A5493C837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:a5:60:1b:74:f0:1a:ed:9f:3e:45:24:fc: 0c:c3:77:e8:ce:97:b8:8b:55:29:d8:a1:b2:ce:6b: 17:4d:78:d1:3f:ab:1e:de:a5:67:b7:7c:99:ef:a8: f4:1f:f3:40:a4:67:cf:32:03:f6:2c:d2:25:da:68: 8d:11:56:12:30:7b:f2:fe:4f:c5:a6:d2:3e:90:b6: c1:b2:f9:a4:ac:14:28:54:e4:cd:05:83:5e:20:bc: d9:b0:0e:ff:48:ab:ea:1e:2c:97:37:a9:03:01:1c: 8a:d2:b7:82:8b:ba:9a:5b:17:ac:2b:03:29:3d:6a: 9e:7d:2c:b5:64:0d:53:76:70:7b:e2:66:5c:31:59: cd:45:a5:fb:78:f4:f1:0f:6c:b7:e2:e3:8b:b1:0b: 25:66:c3:ce:25:8a:15:c0:33:42:f0:c1:cb:11:33: ba:6e:14:f2:e0:2e:eb:d9:b6:df:81:e6:66:a4:49: dd:c0:b9:9c:7a:84:8d:8d:06:4e:59:d6:16:7e:70: 85:58:77:ae:fd:64:b8:f0:ad:5b:9f:7c:a4:4e:aa: a0:01:ca:08:08:1f:91:d6:33:c1:78:26:6a:66:67: 4d:9e:dc:8a:96:2e:15:25:4f:92:fc:9c:fb:a0:98: 23:1a:e9:95:16:3e:f4:83:7b:45:58:6f:17:f2:fe: 8d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5C:FF:2D:28:7E:E7:1C:D7:16:F4:E1:4F:A8:29:8A:54:93:C8:37 X509v3 Authority Key Identifier: keyid:51:37:BC:6C:64:28:18:ED:44:76:1C:E2:4B:D5:91:36:B8:6E:95:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:da:4c:df:33:a0:3d:e6:ff:e9:ce:f9:9f:ca:af:c1:3a:3f: 95:b4:9b:f7:f4:50:e8:4c:5c:c3:4b:77:50:7c:80:a6:00:30: 8a:37:5a:f7:d2:14:90:92:14:4b:b9:1b:e2:7d:48:a0:59:ea: 89:70:46:f2:02:98:e0:82:2a:37:f4:bc:8c:90:cc:1e:aa:57: 3c:9d:c2:ea:e6:15:52:3e:26:08:36:1b:05:a6:ce:4e:5c:85: cd:d2:d0:2b:c4:57:ed:93:c1:ad:d3:b1:48:b2:e4:9b:2f:7f: 56:ae:33:00:9b:87:b4:67:19:a7:c0:db:d4:51:39:77:32:38: 3a:cc:46:6f:d0:a9:7a:4c:08:88:1c:58:95:ba:25:a6:8a:c5: 67:b8:97:fc:4a:45:c4:a6:a4:40:ba:fb:4d:27:63:d5:00:7e: bc:52:5e:65:62:75:6b:0f:c5:da:63:9a:4e:2b:e5:39:44:67: 11:53:ae:e8:e5:45:7f:69:6e:7e:4c:90:26:6b:d6:32:47:7c: 93:84:49:ed:81:53:dc:f9:90:7c:d4:d6:7a:71:49:08:d5:e0: 68:31:fc:a3:29:58:57:21:e5:ed:3c:e3:92:d4:c3:fc:d9:bb: eb:2b:b5:50:6a:81:65:ee:95:81:16:91:36:71:7e:bc:49:9c: 52:ec:40:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI4VVXrEI3jXyhwjzF6lRk/g/EZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzN0JDNkM2NDI4MThFRDQ0NzYxQ0UyNEJENTkxMzZC ODZFOTUwMjAeFw0yNjA2MTkxMzIyMDhaFw0yNjA2MjAxNjEwMDhaMDMxMTAvBgNV BAMTKDY2NUNGRjJEMjg3RUU3MUNENzE2RjRFMTRGQTgyOThBNTQ5M0M4MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE56VgG3TwGu2fPkUk/AzDd+jO l7iLVSnYobLOaxdNeNE/qx7epWe3fJnvqPQf80CkZ88yA/Ys0iXaaI0RVhIwe/L+ T8Wm0j6QtsGy+aSsFChU5M0Fg14gvNmwDv9Iq+oeLJc3qQMBHIrSt4KLuppbF6wr Ayk9ap59LLVkDVN2cHviZlwxWc1Fpft49PEPbLfi44uxCyVmw84lihXAM0LwwcsR M7puFPLgLuvZtt+B5makSd3AuZx6hI2NBk5Z1hZ+cIVYd679ZLjwrVuffKROqqAB yggIH5HWM8F4JmpmZ02e3IqWLhUlT5L8nPugmCMa6ZUWPvSDe0VYbxfy/o1hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZlz/LSh+5xzXFvThT6gpilSTyDcwHwYDVR0j BBgwFoAUUTe8bGQoGO1EdhziS9WRNrhulQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhmNmJlYjgtZTRlOC00ZTM5LTgyNzUtMWM2ZDc3YzNlZWY4LzAvNTEzN0JDNkM2 NDI4MThFRDQ0NzYxQ0UyNEJENTkxMzZCODZFOTUwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTM3QkM2QzY0MjgxOEVENDQ3NjFDRTI0QkQ1OTEzNkI4NkU5 NTAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhmNmJlYjgtZTRlOC00ZTM5LTgy NzUtMWM2ZDc3YzNlZWY4LzAvNTEzN0JDNkM2NDI4MThFRDQ0NzYxQ0UyNEJENTkx MzZCODZFOTUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvaTN8zoD3m/+nO+Z/Kr8E6P5W0m/f0UOhM XMNLd1B8gKYAMIo3WvfSFJCSFEu5G+J9SKBZ6olwRvICmOCCKjf0vIyQzB6qVzyd wurmFVI+Jgg2GwWmzk5chc3S0CvEV+2Twa3TsUiy5Jsvf1auMwCbh7RnGafA29RR OXcyODrMRm/QqXpMCIgcWJW6JaaKxWe4l/xKRcSmpEC6+00nY9UAfrxSXmVidWsP xdpjmk4r5TlEZxFTrujlRX9pbn5MkCZr1jJHfJOESe2BU9z5kHzU1npxSQjV4Ggx /KMpWFch5e0845LUw/zZu+srtVBqgWXulYEWkTZxfrxJnFLsQME= -----END CERTIFICATE-----Generated at Sat Jun 20 08:56:29 2026 by rpki-client