$ rpki-client -vvf rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft File: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft (raw, json) Hash identifier: iLcdiPrn5+UrEqGfxgKO8U3RJ7RbFMqqexx1rWu4GdY= Subject key identifier: BC:A2:35:F5:C6:DF:E5:01:89:35:94:3F:E4:AC:E1:A8:D3:15:BE:52 Authority key identifier: 5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 Certificate issuer: /CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Certificate serial: 0546CDB266EC1807D91BE75EB668FA3934069EC7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 09:54:09 +0000 Manifest this update: Thu 18 Jun 2026 09:49:09 +0000 Manifest next update: Fri 19 Jun 2026 12:24:09 +0000 Files and hashes: 1: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: YzbPSpHu4Y/3sNkzMjgGkQaP8RKL2rlB1MRk9WcO/JU=) 2: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl (hash: gSdcOmTR7GS3ZTIBYpH6INtdEzjMoKGDn7cCCHtWBYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:46:cd:b2:66:ec:18:07:d9:1b:e7:5e:b6:68:fa:39:34:06:9e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Validity Not Before: Jun 18 09:49:09 2026 GMT Not After : Jun 19 12:24:09 2026 GMT Subject: CN=BCA235F5C6DFE5018935943FE4ACE1A8D315BE52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:e0:1d:65:1b:54:cd:8d:de:fc:84:de:2b: 9e:98:5c:b9:11:b1:e5:78:a1:19:12:9d:da:ad:d7: 9b:7f:66:21:4c:6f:b2:02:20:9e:9e:66:2b:da:b2: 25:f7:54:27:da:ac:65:c4:86:69:21:4b:a9:c8:23: 68:35:a3:be:78:b0:86:e7:fb:14:ff:e3:22:89:dd: d1:96:da:2b:16:eb:a8:34:12:58:59:0e:f3:9a:c6: 89:2b:71:ad:a9:e3:41:a6:e0:59:91:c9:e9:90:a2: 47:a6:9c:0d:d3:b7:85:1c:9f:b9:0d:6d:27:e9:cb: bc:f9:fc:86:75:cf:d7:b0:d7:68:d4:dd:22:b6:4d: 88:a4:93:a3:71:90:58:9c:0d:70:4a:17:33:e7:c5: a1:94:88:98:a5:fe:74:0e:ee:a3:3c:f2:fb:9a:5e: 82:d1:f3:ca:c4:81:86:4d:e1:16:dc:7a:3c:58:ec: f7:32:f8:97:4d:1b:f2:ca:28:8b:84:58:1c:2c:e1: 05:8b:fa:90:b4:8c:f8:0a:76:72:e8:bd:b2:2c:33: a4:82:c5:a8:1e:3e:40:bb:df:f0:74:db:4e:17:3f: 70:24:96:c6:ed:f6:e4:f5:21:cb:5d:74:3b:20:56: a4:7a:12:d9:52:8e:73:0b:db:e5:df:e8:b8:bf:b6: 6d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A2:35:F5:C6:DF:E5:01:89:35:94:3F:E4:AC:E1:A8:D3:15:BE:52 X509v3 Authority Key Identifier: keyid:5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b3:df:53:de:8f:44:a4:bc:33:69:ed:a2:a0:a5:a8:4e:43: 28:ac:21:47:4e:40:18:ef:ef:2c:f8:22:79:44:fe:c3:13:7d: 5c:7a:8a:46:5a:95:35:e9:9a:0c:82:50:31:1a:50:33:9b:c4: c2:c9:15:11:86:ec:32:54:d9:a5:e8:09:7f:a1:8d:88:20:6e: f1:1a:04:46:ec:a4:eb:a5:0d:4c:aa:a1:6f:6d:d7:a9:da:9b: 28:cc:c8:d3:2c:05:b6:a8:a7:51:85:5f:af:7e:2e:a2:50:56: 7f:da:a0:c3:b1:38:e8:ec:2a:11:24:39:18:05:62:36:c5:0e: e7:9a:11:66:ed:2c:70:3a:da:73:39:96:98:cd:2c:d7:29:b5: af:26:16:99:07:72:19:19:7c:e6:ea:70:aa:3e:05:ab:e8:46: 99:e8:0c:b2:a4:0b:a7:14:47:b2:ef:5e:df:0c:86:0c:77:f2: 3e:5d:74:8a:c0:e8:33:96:b5:8f:80:26:aa:1a:a7:b7:99:19: 78:bd:c5:db:9e:07:10:bd:91:ca:bd:c7:b2:7c:6f:22:a7:80: d8:6f:72:9f:07:63:e1:85:de:0f:43:01:4b:87:59:c1:d9:18: 8e:63:08:fb:59:b8:82:21:bb:4f:4e:5a:59:30:d8:80:0d:0c: 5e:96:5f:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBUbNsmbsGAfZG+detmj6OTQGnscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5 Q0NEN0RDNDAeFw0yNjA2MTgwOTQ5MDlaFw0yNjA2MTkxMjI0MDlaMDMxMTAvBgNV BAMTKEJDQTIzNUY1QzZERkU1MDE4OTM1OTQzRkU0QUNFMUE4RDMxNUJFNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtreAdZRtUzY3e/ITeK56YXLkR seV4oRkSndqt15t/ZiFMb7ICIJ6eZivasiX3VCfarGXEhmkhS6nII2g1o754sIbn +xT/4yKJ3dGW2isW66g0ElhZDvOaxokrca2p40Gm4FmRyemQokemnA3Tt4Ucn7kN bSfpy7z5/IZ1z9ew12jU3SK2TYikk6NxkFicDXBKFzPnxaGUiJil/nQO7qM88vua XoLR88rEgYZN4RbcejxY7Pcy+JdNG/LKKIuEWBws4QWL+pC0jPgKdnLovbIsM6SC xagePkC73/B0204XP3Aklsbt9uT1IctddDsgVqR6EtlSjnML2+Xf6Li/tm1XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvKI19cbf5QGJNZQ/5KzhqNMVvlIwHwYDVR0j BBgwFoAUX8aJ6rlB0uD0A/TY/nuIZJzNfcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlOGJjYzktNDNhMS00YmFiLWI2ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFC OTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5Q0NEN0RDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkM2ODlFQUI5NDFEMkUwRjQwM0Y0RDhGRTdCODg2NDlDQ0Q3 REM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4 NjQ5Q0NEN0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiz31Pej0SkvDNp7aKgpahOQyisIUdOQBjv 7yz4InlE/sMTfVx6ikZalTXpmgyCUDEaUDObxMLJFRGG7DJU2aXoCX+hjYggbvEa BEbspOulDUyqoW9t16namyjMyNMsBbaop1GFX69+LqJQVn/aoMOxOOjsKhEkORgF YjbFDueaEWbtLHA62nM5lpjNLNcpta8mFpkHchkZfObqcKo+BavoRpnoDLKkC6cU R7LvXt8Mhgx38j5ddIrA6DOWtY+AJqoap7eZGXi9xdueBxC9kcq9x7J8byKngNhv cp8HY+GF3g9DAUuHWcHZGI5jCPtZuIIhu09OWlkw2IANDF6WX6Q= -----END CERTIFICATE-----Generated at Thu Jun 18 19:03:00 2026 by rpki-client