$ rpki-client -vvf rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft File: 5BD70FF0C393471CFAF795433474B327BD4832F9.mft (raw, json) Hash identifier: Xr1AuBQIR0dQavYsG3UDQAW3efV3o9H4ZJNiL0igquU= Subject key identifier: D4:C0:0D:75:33:42:2E:27:8B:42:31:86:5C:C7:37:F1:D2:4C:1D:2E Authority key identifier: 5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9 Certificate issuer: /CN=5BD70FF0C393471CFAF795433474B327BD4832F9 Certificate serial: 56704B42CB680FB218DF02A48302E4928DF54A63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 00:57:53 +0000 Manifest this update: Thu 18 Jun 2026 00:52:53 +0000 Manifest next update: Fri 19 Jun 2026 04:52:53 +0000 Files and hashes: 1: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: VRIdIq5putn/ECgQ5btezrubt1dqb54ZcZ8apLF1yIY=) 2: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: tdzqlaQf0fF4d+ZUvSQhNIWl0HYGOdoxh6aHUWDnZjg=) 3: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: bBQLsVkx2CpNTLhQIb39ezRJZR+3VFuLJFWKGpnOARA=) 4: 5BD70FF0C393471CFAF795433474B327BD4832F9.crl (hash: Y6+shO/k5FwEnlAeYmaGZmO9EXsPh3GF/998OU0apfw=) 5: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: kDdkImc9WCIWpXnaeyzXyBkOibkDgoSjiG8qhXynUZA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 04:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:70:4b:42:cb:68:0f:b2:18:df:02:a4:83:02:e4:92:8d:f5:4a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD70FF0C393471CFAF795433474B327BD4832F9 Validity Not Before: Jun 18 00:52:53 2026 GMT Not After : Jun 19 04:52:53 2026 GMT Subject: CN=D4C00D7533422E278B4231865CC737F1D24C1D2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:24:2b:da:39:77:80:7e:f0:f4:e7:63:75:9f: e2:e0:03:cf:a8:cd:8b:14:c7:38:64:0f:9a:ed:59: bf:6f:0c:0f:5b:47:49:bd:e7:65:a9:26:2e:8d:d0: 88:60:6f:12:95:fc:a3:06:fb:32:09:dc:9f:82:3a: b5:9c:b0:a0:1d:c3:11:75:bc:21:49:b3:2b:a4:d0: 98:a2:4c:21:0d:2e:10:bb:a4:31:b8:08:88:d9:ca: 75:ce:08:4c:1a:de:de:d3:a8:19:8c:56:1f:6a:79: c7:5d:7e:ca:05:45:b5:42:15:3d:12:c8:33:39:28: a3:ea:c6:2d:63:dd:fb:48:e2:3b:f0:44:33:8e:f5: 93:2e:d0:13:5b:fc:d3:b8:39:ec:59:5e:8c:91:7c: db:55:6a:cb:be:df:40:a7:3a:14:0f:43:52:a8:a4: bc:f5:36:9d:26:3b:5d:f6:11:27:76:8f:a5:4b:fc: 5d:62:16:09:2b:c9:0c:e5:65:ee:15:a4:e5:ad:1d: eb:69:12:70:dc:2d:3d:88:4f:e3:90:4d:63:0a:45: a5:ff:62:dd:ca:44:91:d3:ff:8e:11:ab:bb:bb:99: 04:16:79:af:4c:42:18:7e:87:46:74:06:6b:34:89: 50:d3:ea:83:9d:c7:9c:bc:db:56:e4:46:42:01:0f: 07:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C0:0D:75:33:42:2E:27:8B:42:31:86:5C:C7:37:F1:D2:4C:1D:2E X509v3 Authority Key Identifier: keyid:5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:93:41:5d:38:e9:40:5a:c1:dc:22:46:b4:f1:42:ed:7b:53: 11:ee:20:79:98:bc:76:d5:98:79:22:ed:11:9c:23:30:7c:a1: a6:7d:d5:01:97:6b:2c:df:dd:cf:51:0d:b1:38:8a:b4:26:36: f2:05:2a:1d:b9:94:19:c0:45:56:00:dd:49:07:77:fd:4f:3e: 38:a8:23:c9:77:ba:70:c4:8c:2a:ea:04:c9:e5:60:1a:f1:48: aa:a2:ae:d7:73:62:14:b7:fd:c3:9a:c5:a6:44:e3:2b:5c:76: 95:2d:18:f8:a3:0c:a4:91:e2:d7:f9:f2:72:4c:3d:17:8d:41: 7d:5e:74:1d:16:49:0a:c9:db:28:a8:54:34:11:41:88:3f:b6: c3:4a:21:54:ca:08:d0:0e:88:00:d7:51:35:a4:35:d2:f5:b1: 0e:7d:ec:2b:a1:f3:a4:67:38:7c:68:96:d5:da:7a:6c:11:c0: 61:d4:6a:54:a9:0b:ff:71:e0:59:83:b0:ed:2f:5e:db:aa:f5: 62:67:fa:cb:76:94:f9:50:93:58:27:79:ce:64:bc:49:41:78: 47:ec:72:76:95:67:a1:71:d2:e1:12:75:61:0b:a1:91:a5:a9: 10:1d:72:74:55:90:54:d7:5b:14:f3:45:1c:df:08:d2:54:53: 15:39:60:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVnBLQstoD7IY3wKkgwLkko31SmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJENzBGRjBDMzkzNDcxQ0ZBRjc5NTQzMzQ3NEIzMjdC RDQ4MzJGOTAeFw0yNjA2MTgwMDUyNTNaFw0yNjA2MTkwNDUyNTNaMDMxMTAvBgNV BAMTKEQ0QzAwRDc1MzM0MjJFMjc4QjQyMzE4NjVDQzczN0YxRDI0QzFEMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUJCvaOXeAfvD052N1n+LgA8+o zYsUxzhkD5rtWb9vDA9bR0m952WpJi6N0IhgbxKV/KMG+zIJ3J+COrWcsKAdwxF1 vCFJsyuk0JiiTCENLhC7pDG4CIjZynXOCEwa3t7TqBmMVh9qecddfsoFRbVCFT0S yDM5KKPqxi1j3ftI4jvwRDOO9ZMu0BNb/NO4OexZXoyRfNtVasu+30CnOhQPQ1Ko pLz1Np0mO132ESd2j6VL/F1iFgkryQzlZe4VpOWtHetpEnDcLT2IT+OQTWMKRaX/ Yt3KRJHT/44Rq7u7mQQWea9MQhh+h0Z0Bms0iVDT6oOdx5y821bkRkIBDwdBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1MANdTNCLieLQjGGXMc38dJMHS4wHwYDVR0j BBgwFoAUW9cP8MOTRxz695VDNHSzJ71IMvkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkyNGZhOWEtZTVmMy00MjY1LTllMWQtODRlNDUzNTk2MWQwLzAvNUJENzBGRjBD MzkzNDcxQ0ZBRjc5NTQzMzQ3NEIzMjdCRDQ4MzJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkQ3MEZGMEMzOTM0NzFDRkFGNzk1NDMzNDc0QjMyN0JENDgz MkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvNUJENzBGRjBDMzkzNDcxQ0ZBRjc5NTQzMzQ3NEIz MjdCRDQ4MzJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqTQV046UBawdwiRrTxQu17UxHuIHmYvHbV mHki7RGcIzB8oaZ91QGXayzf3c9RDbE4irQmNvIFKh25lBnARVYA3UkHd/1PPjio I8l3unDEjCrqBMnlYBrxSKqirtdzYhS3/cOaxaZE4ytcdpUtGPijDKSR4tf58nJM PReNQX1edB0WSQrJ2yioVDQRQYg/tsNKIVTKCNAOiADXUTWkNdL1sQ597Cuh86Rn OHxoltXaemwRwGHUalSpC/9x4FmDsO0vXtuq9WJn+st2lPlQk1gnec5kvElBeEfs cnaVZ6Fx0uESdWELoZGlqRAdcnRVkFTXWxTzRRzfCNJUUxU5YCA= -----END CERTIFICATE-----Generated at Thu Jun 18 21:11:11 2026 by rpki-client