$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft File: 5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft (raw, json) Hash identifier: od7N/luD5a2z5O0/aOj7I76o+bmModjpuZNNs/UfDoU= Subject key identifier: 78:0D:06:B5:D8:E5:0B:BA:5A:F5:12:7B:C0:B2:FA:18:65:D0:87:B4 Authority key identifier: 5D:10:A7:2C:87:21:CE:50:C0:93:BD:9B:5D:1A:C9:BB:6F:E9:34:95 Certificate issuer: /CN=5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495 Certificate serial: 087FB2DFBB1796D145BD1E5D5798047A6C44288F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 06:50:33 +0000 Manifest this update: Thu 18 Jun 2026 06:45:33 +0000 Manifest next update: Fri 19 Jun 2026 09:10:33 +0000 Files and hashes: 1: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: JniyB+kykIY2ndXJuy/YxGMo3Dbdi9UVhfqGmbiBAvY=) 2: 5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl (hash: rHJGD8LB0pI8QiqtNNe1IPeusj68BFrLzv1RJ/7egKk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:7f:b2:df:bb:17:96:d1:45:bd:1e:5d:57:98:04:7a:6c:44:28:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495 Validity Not Before: Jun 18 06:45:33 2026 GMT Not After : Jun 19 09:10:33 2026 GMT Subject: CN=780D06B5D8E50BBA5AF5127BC0B2FA1865D087B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:d8:f2:6a:d3:7e:21:9c:c8:5e:05:ad:90: fc:e4:04:76:47:dd:15:53:7a:4a:a4:01:6a:e8:df: 20:ee:a0:9c:c3:d7:a9:14:1f:60:84:d3:b5:0c:e1: 75:a8:02:25:3c:f1:42:35:7e:d0:24:68:64:54:45: b5:ff:e1:04:ef:b0:d4:c3:d2:6e:76:ab:e9:bc:67: 98:28:25:f6:2c:e4:0a:9c:56:35:50:6b:d7:cf:10: f5:21:8f:e6:01:dc:f1:c4:d8:4d:15:1e:7a:0f:b0: 4b:6a:e5:92:90:c4:fc:a7:65:64:3e:22:da:00:78: 68:91:e8:af:05:dc:ae:1e:84:31:a4:f8:03:8f:15: 3f:99:6b:32:10:60:29:1c:b5:07:e3:b9:0e:fd:5a: ff:06:d4:c7:c5:e8:c5:ed:66:66:90:43:e3:d1:98: c6:97:82:15:83:6c:28:75:2e:fc:e0:d2:98:32:78: 0c:1a:29:52:4d:28:67:b9:7d:f1:53:9b:76:a8:99: 91:11:e6:34:83:50:b7:6e:86:0a:77:1c:8a:4b:2d: bc:cf:5a:ed:68:da:67:5e:53:a5:7d:ca:36:55:fa: 2c:09:07:b3:46:b2:8b:90:35:11:56:b5:94:58:fe: 76:ca:a0:4f:63:d3:36:12:5e:e5:3d:a9:01:eb:37: 9f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0D:06:B5:D8:E5:0B:BA:5A:F5:12:7B:C0:B2:FA:18:65:D0:87:B4 X509v3 Authority Key Identifier: keyid:5D:10:A7:2C:87:21:CE:50:C0:93:BD:9B:5D:1A:C9:BB:6F:E9:34:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:2a:c7:33:f0:46:9f:d1:84:b8:89:04:48:84:57:3d:8b:2b: 83:34:13:a2:c3:41:36:ba:16:26:02:8f:bf:e0:2c:5b:f8:ea: f5:90:2f:d3:e4:18:85:17:1c:ea:5c:3e:b8:a9:28:18:4f:96: 74:bd:10:99:ae:7f:1b:0a:a0:7b:ff:a4:74:f3:e1:cc:12:61: 12:54:6b:d7:68:4f:50:f1:bf:f0:9e:2a:2c:9e:8a:4b:97:b1: 1f:10:74:a6:05:20:f1:ae:29:41:ab:45:90:7c:2f:2e:e4:19: 8d:f3:20:c1:1d:a5:f0:cb:a3:b2:8f:60:ca:fb:5a:92:00:45: ec:95:9a:89:ed:1c:36:46:dd:f7:21:c7:7a:aa:8f:80:b5:cf: 84:0a:fb:a4:98:c0:34:8f:4c:78:27:d5:a2:3b:fc:70:ed:dc: 61:c2:79:eb:c1:b5:1e:ef:3c:84:f0:36:5a:45:01:45:3e:55: 4e:78:4b:95:d7:6c:78:22:3e:55:d9:46:b2:a2:ee:b3:e1:14: a5:77:d9:56:2c:8d:d5:4f:9a:97:86:9e:24:88:c2:89:9c:02: 82:a1:50:38:e1:6e:b5:23:a5:70:76:36:a0:04:69:1e:03:55: 4d:25:4d:de:2b:6d:89:04:84:6a:89:52:cb:0f:4a:6e:de:c8: e2:54:52:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCH+y37sXltFFvR5dV5gEemxEKI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxMEE3MkM4NzIxQ0U1MEMwOTNCRDlCNUQxQUM5QkI2 RkU5MzQ5NTAeFw0yNjA2MTgwNjQ1MzNaFw0yNjA2MTkwOTEwMzNaMDMxMTAvBgNV BAMTKDc4MEQwNkI1RDhFNTBCQkE1QUY1MTI3QkMwQjJGQTE4NjVEMDg3QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+tjyatN+IZzIXgWtkPzkBHZH 3RVTekqkAWro3yDuoJzD16kUH2CE07UM4XWoAiU88UI1ftAkaGRURbX/4QTvsNTD 0m52q+m8Z5goJfYs5AqcVjVQa9fPEPUhj+YB3PHE2E0VHnoPsEtq5ZKQxPynZWQ+ ItoAeGiR6K8F3K4ehDGk+AOPFT+ZazIQYCkctQfjuQ79Wv8G1MfF6MXtZmaQQ+PR mMaXghWDbCh1Lvzg0pgyeAwaKVJNKGe5ffFTm3aomZER5jSDULduhgp3HIpLLbzP Wu1o2mdeU6V9yjZV+iwJB7NGsouQNRFWtZRY/nbKoE9j0zYSXuU9qQHrN5+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeA0GtdjlC7pa9RJ7wLL6GGXQh7QwHwYDVR0j BBgwFoAUXRCnLIchzlDAk72bXRrJu2/pNJUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRjMTAwN2QtZmQ2MS00NTQzLThmNWYtM2ZkZmZhNGIwMWU2LzAvNUQxMEE3MkM4 NzIxQ0U1MEMwOTNCRDlCNUQxQUM5QkI2RkU5MzQ5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RDEwQTcyQzg3MjFDRTUwQzA5M0JEOUI1RDFBQzlCQjZGRTkz NDk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvNUQxMEE3MkM4NzIxQ0U1MEMwOTNCRDlCNUQxQUM5 QkI2RkU5MzQ5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUqxzPwRp/RhLiJBEiEVz2LK4M0E6LDQTa6 FiYCj7/gLFv46vWQL9PkGIUXHOpcPripKBhPlnS9EJmufxsKoHv/pHTz4cwSYRJU a9doT1Dxv/CeKiyeikuXsR8QdKYFIPGuKUGrRZB8Ly7kGY3zIMEdpfDLo7KPYMr7 WpIAReyVmontHDZG3fchx3qqj4C1z4QK+6SYwDSPTHgn1aI7/HDt3GHCeevBtR7v PITwNlpFAUU+VU54S5XXbHgiPlXZRrKi7rPhFKV32VYsjdVPmpeGniSIwomcAoKh UDjhbrUjpXB2NqAEaR4DVU0lTd4rbYkEhGqJUssPSm7eyOJUUvc= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:44 2026 by rpki-client