$ rpki-client -vvf rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft File: 5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft (raw, json) Hash identifier: o2CRzr+yoXeN5+P8tH0lun7t24iCoIz2mAd+QVoLQkQ= Subject key identifier: 3D:E0:88:2A:4F:FB:F9:A0:01:50:5A:FC:31:FC:E3:56:CC:EF:B2:7E Authority key identifier: 5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 Certificate issuer: /CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Certificate serial: 5650551D82E41CD6572754BFC0BFADDFAF845C6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:10:26 +0000 Manifest this update: Tue 12 May 2026 22:05:26 +0000 Manifest next update: Wed 13 May 2026 22:47:26 +0000 Files and hashes: 1: 5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl (hash: 0Bv3AY9f9JLmlegl3F5BhCM5uHuyzCruL9LXST61oiQ=) 2: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: P5BEjOqlnRhd5dHiMK0aXJooM/BcbKofscPw2JJ5bRQ=) 3: 3135372e32302e34352e302f32342d3234203d3e20313532333932.roa (hash: PIubzi7VZ2N4uYX3mam6XOmZc4gw31pwt2ndjjqEeIM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:50:55:1d:82:e4:1c:d6:57:27:54:bf:c0:bf:ad:df:af:84:5c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Validity Not Before: May 12 22:05:26 2026 GMT Not After : May 13 22:47:26 2026 GMT Subject: CN=3DE0882A4FFBF9A001505AFC31FCE356CCEFB27E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7a:5b:ba:84:ad:89:38:c9:2e:40:1c:db:e3: db:56:fb:ac:6d:82:5f:9c:da:88:43:25:f7:54:4f: 1a:a4:81:37:68:87:51:19:b6:9a:80:fc:ab:d7:85: 6c:ac:b6:8b:50:38:72:ef:9d:da:e0:ea:ea:93:13: fd:f5:7f:b4:cb:52:86:b9:73:f7:48:58:f6:a2:40: b6:48:ff:29:d2:d2:66:93:a7:37:8e:9e:81:d0:5e: 90:ab:5a:51:e2:78:f7:73:16:a9:73:46:ae:41:92: 58:2f:c6:cb:51:2e:74:f8:44:3d:5e:a1:3f:a9:1d: b9:43:f5:05:34:b3:81:9f:6e:09:7f:9c:3f:1e:a3: 04:5e:fc:48:c2:65:d7:86:f1:99:5c:f7:45:d5:82: c5:62:12:a5:ca:f2:1f:51:60:4c:60:79:3e:6e:ba: 5e:1e:ca:8b:17:e3:26:57:59:ea:3d:ae:af:6c:2f: f7:1e:a1:ec:19:57:74:42:ee:45:3f:f7:c7:d3:91: be:39:a6:d5:7f:97:09:5e:2c:4b:67:ed:8f:3b:21: 3d:bf:c9:71:32:65:b9:b9:40:45:27:3e:d1:1f:ab: 1e:05:a0:4c:d8:23:f5:3d:c4:5b:dd:74:c0:0d:b9: 73:e5:a3:cf:5f:fa:a9:cd:af:7a:15:5a:5a:56:1a: ad:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E0:88:2A:4F:FB:F9:A0:01:50:5A:FC:31:FC:E3:56:CC:EF:B2:7E X509v3 Authority Key Identifier: keyid:5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1c:44:08:19:b0:c3:7c:68:1e:cc:f6:f8:d1:8d:9f:8f:02: 35:42:8b:2a:5a:56:01:59:dc:aa:bc:68:50:c6:e0:bf:7b:bb: 21:cb:8e:2b:9a:37:f0:82:48:f1:d0:cc:7d:5c:e2:93:84:02: 08:58:bf:b9:ba:85:4b:d8:8a:6b:b2:55:43:23:b1:0d:dd:78: 7e:4d:bd:a6:46:d6:3f:e8:c7:b3:e9:ec:38:35:7b:78:f8:1e: 47:5d:35:41:44:45:1c:7d:2b:69:a6:bb:8f:51:38:71:39:14: a0:77:86:6d:2f:6d:8e:71:23:ab:ba:22:89:f8:c1:d5:71:36: ae:7a:98:fe:16:55:d2:35:aa:d4:83:ed:09:0c:ea:e4:31:dc: 0b:17:a9:8a:0d:9a:b8:fe:0f:44:07:28:f0:be:34:74:7b:9f: 02:5a:23:7a:c3:67:60:9d:52:df:96:cf:32:f2:e2:c3:98:b9: e9:7d:f8:19:f2:a6:a0:bf:1d:de:29:87:ac:08:27:47:69:15: 53:f0:09:5d:f6:ac:f4:60:41:e7:9c:d3:a8:fc:ae:14:af:1e: e8:ce:ac:ad:b3:9c:57:51:83:bb:26:72:b8:7f:57:63:b5:35: 10:d6:c2:5d:ba:cc:75:00:80:65:96:ff:09:bf:97:40:aa:48: ea:0d:c3:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlBVHYLkHNZXJ1S/wL+t36+EXG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNG RUFBQjkwOTAeFw0yNjA1MTIyMjA1MjZaFw0yNjA1MTMyMjQ3MjZaMDMxMTAvBgNV BAMTKDNERTA4ODJBNEZGQkY5QTAwMTUwNUFGQzMxRkNFMzU2Q0NFRkIyN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXelu6hK2JOMkuQBzb49tW+6xt gl+c2ohDJfdUTxqkgTdoh1EZtpqA/KvXhWystotQOHLvndrg6uqTE/31f7TLUoa5 c/dIWPaiQLZI/ynS0maTpzeOnoHQXpCrWlHiePdzFqlzRq5BklgvxstRLnT4RD1e oT+pHblD9QU0s4Gfbgl/nD8eowRe/EjCZdeG8Zlc90XVgsViEqXK8h9RYExgeT5u ul4eyosX4yZXWeo9rq9sL/ceoewZV3RC7kU/98fTkb45ptV/lwleLEtn7Y87IT2/ yXEyZbm5QEUnPtEfqx4FoEzYI/U9xFvddMANuXPlo89f+qnNr3oVWlpWGq2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPeCIKk/7+aABUFr8MfzjVszvsn4wHwYDVR0j BBgwFoAUWhwazsC2dAF/+4nyGGW6Y/6quQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU4OGRmZjctNmE5Mi00MjkzLTg4MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VD MEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNGRUFBQjkwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81QTFDMUFDRUMwQjY3NDAxN0ZGQjg5RjIxODY1QkE2M0ZFQUFC OTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJB NjNGRUFBQjkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIcRAgZsMN8aB7M9vjRjZ+PAjVCiypaVgFZ 3Kq8aFDG4L97uyHLjiuaN/CCSPHQzH1c4pOEAghYv7m6hUvYimuyVUMjsQ3deH5N vaZG1j/ox7Pp7Dg1e3j4HkddNUFERRx9K2mmu49ROHE5FKB3hm0vbY5xI6u6Ion4 wdVxNq56mP4WVdI1qtSD7QkM6uQx3AsXqYoNmrj+D0QHKPC+NHR7nwJaI3rDZ2Cd Ut+WzzLy4sOYuel9+BnypqC/Hd4ph6wIJ0dpFVPwCV32rPRgQeec06j8rhSvHujO rK2znFdRg7smcrh/V2O1NRDWwl26zHUAgGWW/wm/l0CqSOoNw/w= -----END CERTIFICATE-----Generated at Wed May 13 03:55:43 2026 by rpki-client