$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft File: 5109EC0B3BA28731E9E261F3B59F3600B563E644.mft (raw, json) Hash identifier: dS7AMd9C03Ljh3YQL2/hXc2rBqo/rYYI80nMpirAlTs= Subject key identifier: 1F:93:4B:B2:38:72:B2:4F:AB:4F:9D:50:67:D5:B8:2C:75:90:D1:CC Authority key identifier: 51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44 Certificate issuer: /CN=5109EC0B3BA28731E9E261F3B59F3600B563E644 Certificate serial: 642800E9FFB16AB0662834E91BBF31933CDAD11E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft Manifest number: 43 Signing time: Sat 20 Jun 2026 06:42:49 +0000 Manifest this update: Sat 20 Jun 2026 06:37:49 +0000 Manifest next update: Sun 21 Jun 2026 08:43:49 +0000 Files and hashes: 1: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: WbqdW7MhiN2iDSZWaMRymz0suZjkKuhQk8kC3475/Ds=) 2: 5109EC0B3BA28731E9E261F3B59F3600B563E644.crl (hash: Me+gfn71JhWwUvNS1DIUYdjvmCV2c+HWMy/wVRX7iN4=) 3: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: MF1opaQfJw+Iei/Le09BzIXkrXsDLiX2XTUMp350q1Q=) 4: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: Sxg6YyOUpBblg3g3D4oNcKxKaQWWwQAvP3gO95G7uko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 08:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:28:00:e9:ff:b1:6a:b0:66:28:34:e9:1b:bf:31:93:3c:da:d1:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5109EC0B3BA28731E9E261F3B59F3600B563E644 Validity Not Before: Jun 20 06:37:49 2026 GMT Not After : Jun 21 08:43:49 2026 GMT Subject: CN=1F934BB23872B24FAB4F9D5067D5B82C7590D1CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:2a:f6:0f:91:b8:51:fc:38:2f:bc:da:e7: 6e:d9:47:07:9a:c3:3c:9b:53:13:40:2d:7a:18:a2: 58:57:e2:30:4c:55:08:52:53:2a:2c:86:58:89:cc: 9d:67:4e:69:f4:b1:e7:80:84:96:a5:29:e7:84:03: 0a:c0:4c:c7:83:cf:c7:fd:f5:05:0e:cb:dc:80:1a: 82:a9:ea:a1:5d:ad:5d:19:a4:4c:64:bf:ad:a1:2d: 00:ec:09:cf:01:76:98:29:f4:64:bf:af:e8:fc:1a: a6:95:3a:0c:58:56:d3:6a:d3:55:9a:60:42:d2:60: 11:a0:af:67:7b:72:ba:a0:74:f6:1c:42:17:4a:49: 5b:1f:95:09:8c:f1:8f:39:6f:f4:c3:2b:92:3e:5f: 2f:9b:17:89:1e:c6:f3:ed:fd:ed:3f:53:39:78:64: b6:9a:26:a6:c3:ac:14:24:bd:58:6a:97:13:aa:91: e2:0e:4e:bf:50:08:19:9c:f6:73:49:cd:20:5a:35: 06:4f:bc:eb:66:96:42:e4:14:ec:7f:a5:af:99:1b: ed:4f:8e:f1:ae:b1:c2:f0:5d:0f:b3:75:f7:9c:03: ba:f9:68:b8:f6:1e:10:cc:5a:2d:57:0e:0e:e4:09: 41:d9:cb:30:2a:f3:d3:c7:e5:dc:4b:e9:df:30:a2: a5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:93:4B:B2:38:72:B2:4F:AB:4F:9D:50:67:D5:B8:2C:75:90:D1:CC X509v3 Authority Key Identifier: keyid:51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e5:1c:b5:00:1a:5f:8f:c6:d0:e3:8f:91:40:d2:e2:79:b6: b9:aa:1c:c5:f6:6c:39:de:63:d0:b8:a9:19:77:e4:b7:c0:6c: 7f:e0:5b:6c:49:48:eb:20:aa:8c:d6:c4:79:71:20:5c:f4:30: 97:de:0b:a0:6c:a1:d1:21:73:ec:dd:a2:79:4f:23:8f:69:3c: de:93:26:a8:3e:9d:99:39:a0:b2:5a:f8:54:0b:ff:26:5b:e6: 71:6e:41:71:44:6e:7c:f0:d9:54:16:1a:02:30:c4:e4:2d:27: 74:65:cc:56:a3:c4:5a:47:5d:06:60:d7:71:63:3e:c8:66:66: 22:84:70:68:a1:66:fe:1c:f2:43:48:4d:69:db:d5:57:b8:c3: 6e:0a:58:9c:b1:4f:d7:1e:ba:10:4b:b8:51:87:ee:a9:b4:13: 84:a6:7f:db:07:4e:cf:51:a2:62:9f:27:21:ab:89:61:87:60: c5:68:3a:a7:0b:3c:e2:f8:53:d3:6e:ff:f2:cd:92:03:d6:6b: 22:80:51:1d:33:aa:e2:a3:36:51:1d:2c:01:38:f7:9d:15:48: d6:b5:99:62:e2:40:c4:93:41:ec:ee:e4:77:32:af:fb:93:5e: 34:53:f1:2a:89:22:ac:59:d2:62:b6:f1:a8:6e:e0:64:b8:3b: de:a6:41:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZCgA6f+xarBmKDTpG78xkzza0R4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwOUVDMEIzQkEyODczMUU5RTI2MUYzQjU5RjM2MDBC NTYzRTY0NDAeFw0yNjA2MjAwNjM3NDlaFw0yNjA2MjEwODQzNDlaMDMxMTAvBgNV BAMTKDFGOTM0QkIyMzg3MkIyNEZBQjRGOUQ1MDY3RDVCODJDNzU5MEQxQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/LSr2D5G4Ufw4L7za527ZRwea wzybUxNALXoYolhX4jBMVQhSUyoshliJzJ1nTmn0seeAhJalKeeEAwrATMeDz8f9 9QUOy9yAGoKp6qFdrV0ZpExkv62hLQDsCc8Bdpgp9GS/r+j8GqaVOgxYVtNq01Wa YELSYBGgr2d7crqgdPYcQhdKSVsflQmM8Y85b/TDK5I+Xy+bF4kexvPt/e0/Uzl4 ZLaaJqbDrBQkvVhqlxOqkeIOTr9QCBmc9nNJzSBaNQZPvOtmlkLkFOx/pa+ZG+1P jvGuscLwXQ+zdfecA7r5aLj2HhDMWi1XDg7kCUHZyzAq89PH5dxL6d8woqX3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH5NLsjhysk+rT51QZ9W4LHWQ0cwwHwYDVR0j BBgwFoAUUQnsCzuihzHp4mHztZ82ALVj5kQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzliM2JiMzQtMTVlMi00NDg3LWI1MjctNmU3NTEyODZjZTdkLzAvNTEwOUVDMEIz QkEyODczMUU5RTI2MUYzQjU5RjM2MDBCNTYzRTY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTA5RUMwQjNCQTI4NzMxRTlFMjYxRjNCNTlGMzYwMEI1NjNF NjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvNTEwOUVDMEIzQkEyODczMUU5RTI2MUYzQjU5RjM2 MDBCNTYzRTY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPlHLUAGl+PxtDjj5FA0uJ5trmqHMX2bDne Y9C4qRl35LfAbH/gW2xJSOsgqozWxHlxIFz0MJfeC6BsodEhc+zdonlPI49pPN6T Jqg+nZk5oLJa+FQL/yZb5nFuQXFEbnzw2VQWGgIwxOQtJ3RlzFajxFpHXQZg13Fj PshmZiKEcGihZv4c8kNITWnb1Ve4w24KWJyxT9ceuhBLuFGH7qm0E4Smf9sHTs9R omKfJyGriWGHYMVoOqcLPOL4U9Nu//LNkgPWayKAUR0zquKjNlEdLAE4950VSNa1 mWLiQMSTQezu5Hcyr/uTXjRT8SqJIqxZ0mK28ahu4GS4O96mQUg= -----END CERTIFICATE-----Generated at Sat Jun 20 11:24:57 2026 by rpki-client