$ rpki-client -vvf rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft File: 5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft (raw, json) Hash identifier: nRxwofsMHNt/ZOjMLRXWq/gCUUQHVu73lIxlEH+9O/A= Subject key identifier: FC:73:A3:53:D5:65:F3:97:78:D4:0E:AC:45:E6:B1:F2:DF:68:4E:BD Authority key identifier: 5D:59:59:C0:4A:DE:DB:A5:EB:17:E7:1F:95:F6:C4:02:5E:DE:CB:DB Certificate issuer: /CN=5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB Certificate serial: 7D709723C8FDCA03FCF040EEA3204BB224BEFD93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:48:13 +0000 Manifest this update: Tue 12 May 2026 03:43:13 +0000 Manifest next update: Wed 13 May 2026 06:07:13 +0000 Files and hashes: 1: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: HU+tP0ePX+yD7/CYpvvWhY8DWw0D5TG8DRzaRiSU/0w=) 2: 5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl (hash: b229rWcq8tguK9ZuXYUkXqlTZNHkOY1JuhlufOxt4e8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:70:97:23:c8:fd:ca:03:fc:f0:40:ee:a3:20:4b:b2:24:be:fd:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB Validity Not Before: May 12 03:43:13 2026 GMT Not After : May 13 06:07:13 2026 GMT Subject: CN=FC73A353D565F39778D40EAC45E6B1F2DF684EBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:12:25:c8:85:6b:d0:f8:b3:23:80:32:80:f3: cb:a1:90:3e:35:e2:83:70:5a:ed:b4:f9:62:2c:59: 36:7b:0e:d3:7f:63:09:59:c6:73:af:90:51:33:c9: e4:d5:45:b7:f8:7f:46:97:d4:16:2f:f5:fc:0f:ef: df:d7:f9:6a:29:63:1f:72:9b:fa:52:5e:04:23:ad: c1:76:63:c9:6e:c7:2a:ea:97:56:3b:37:20:57:e9: c6:f5:55:dc:fb:53:8b:5d:fa:30:1f:f9:75:d0:74: d4:15:bb:b5:5a:6a:2b:d3:50:c2:ba:3d:eb:c4:f6: 53:a4:5f:a6:66:d4:21:29:54:a0:d6:9e:cd:8f:59: f4:52:73:28:03:59:ce:77:89:9a:5a:82:43:f6:04: 32:dd:2d:7f:93:d5:d0:b6:89:ea:ae:b5:d7:6f:82: 70:64:61:db:01:a5:31:8b:5d:8c:85:d0:23:24:bc: 7f:cd:66:9b:34:9d:e6:09:d9:37:0c:63:3f:4f:3c: 92:89:a4:dc:2d:0a:6b:ce:f3:0a:7b:20:35:a0:06: a7:2b:83:46:f4:6d:79:8a:31:8f:b6:58:b8:da:de: 5c:79:3e:5c:17:39:e7:65:00:3f:66:5a:e4:7c:cf: 0a:dc:f1:7b:02:c7:d5:17:91:71:74:15:1b:c1:a7: 2c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:73:A3:53:D5:65:F3:97:78:D4:0E:AC:45:E6:B1:F2:DF:68:4E:BD X509v3 Authority Key Identifier: keyid:5D:59:59:C0:4A:DE:DB:A5:EB:17:E7:1F:95:F6:C4:02:5E:DE:CB:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d2:50:e1:a2:9f:60:69:8d:fc:a3:b6:ff:d3:c1:ce:ef:75: 0e:c9:a0:6a:d8:e6:35:ef:ed:9c:de:a9:4d:9a:14:4a:ea:be: d6:bd:fd:ef:e9:f2:e5:b5:5c:38:d2:e9:b2:3a:54:40:19:43: fd:53:ca:9e:7c:3f:a1:59:f2:ff:ea:60:7d:9d:b9:6c:aa:22: 7c:a9:f3:ec:e3:26:82:48:4b:b1:39:3d:07:7c:ff:3c:bb:fd: dc:0e:37:c8:d8:cf:d8:ac:7d:3f:e0:c5:a6:3f:98:76:db:ce: 27:98:ba:85:2f:41:8c:66:65:6d:d3:c7:2a:91:0d:4c:05:dd: 55:4e:e4:d8:b3:57:49:f1:6f:a1:a3:36:63:69:1a:af:28:7e: 50:b8:25:3c:c2:0b:84:f8:df:09:94:94:76:9e:90:f8:76:a7: 04:26:6a:fe:57:bd:b2:3d:61:f6:65:75:f8:c2:d7:aa:00:75: ba:34:6a:2a:af:88:82:83:78:14:fe:13:08:f9:03:0d:50:44: 74:0f:76:f7:c3:cf:41:dc:16:e0:9a:64:d5:f2:9a:dc:cd:4e: 25:93:ec:03:5d:49:1a:bd:ad:47:be:2b:88:b1:34:b9:14:53: 23:29:23:36:c3:1d:1c:2e:39:f9:aa:7b:87:fb:8f:f8:8a:b9: 77:fc:68:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXCXI8j9ygP88EDuoyBLsiS+/ZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ1OTU5QzA0QURFREJBNUVCMTdFNzFGOTVGNkM0MDI1 RURFQ0JEQjAeFw0yNjA1MTIwMzQzMTNaFw0yNjA1MTMwNjA3MTNaMDMxMTAvBgNV BAMTKEZDNzNBMzUzRDU2NUYzOTc3OEQ0MEVBQzQ1RTZCMUYyREY2ODRFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNEiXIhWvQ+LMjgDKA88uhkD41 4oNwWu20+WIsWTZ7DtN/YwlZxnOvkFEzyeTVRbf4f0aX1BYv9fwP79/X+WopYx9y m/pSXgQjrcF2Y8luxyrql1Y7NyBX6cb1Vdz7U4td+jAf+XXQdNQVu7VaaivTUMK6 PevE9lOkX6Zm1CEpVKDWns2PWfRScygDWc53iZpagkP2BDLdLX+T1dC2iequtddv gnBkYdsBpTGLXYyF0CMkvH/NZps0neYJ2TcMYz9PPJKJpNwtCmvO8wp7IDWgBqcr g0b0bXmKMY+2WLja3lx5PlwXOedlAD9mWuR8zwrc8XsCx9UXkXF0FRvBpyxrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/HOjU9Vl85d41A6sReax8t9oTr0wHwYDVR0j BBgwFoAUXVlZwEre26XrF+cflfbEAl7ey9swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVlYWI0NDItNzQ4MC00NTgxLTgxZGQtMjNhMjAwNjE0MzgyLzAvNUQ1OTU5QzA0 QURFREJBNUVCMTdFNzFGOTVGNkM0MDI1RURFQ0JEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDU5NTlDMDRBREVEQkE1RUIxN0U3MUY5NUY2QzQwMjVFREVD QkRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVlYWI0NDItNzQ4MC00NTgxLTgx ZGQtMjNhMjAwNjE0MzgyLzAvNUQ1OTU5QzA0QURFREJBNUVCMTdFNzFGOTVGNkM0 MDI1RURFQ0JEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADSUOGin2Bpjfyjtv/Twc7vdQ7JoGrY5jXv 7ZzeqU2aFErqvta9/e/p8uW1XDjS6bI6VEAZQ/1Typ58P6FZ8v/qYH2duWyqInyp 8+zjJoJIS7E5PQd8/zy7/dwON8jYz9isfT/gxaY/mHbbzieYuoUvQYxmZW3TxyqR DUwF3VVO5NizV0nxb6GjNmNpGq8oflC4JTzCC4T43wmUlHaekPh2pwQmav5XvbI9 YfZldfjC16oAdbo0aiqviIKDeBT+Ewj5Aw1QRHQPdvfDz0HcFuCaZNXymtzNTiWT 7ANdSRq9rUe+K4ixNLkUUyMpIzbDHRwuOfmqe4f7j/iKuXf8aDE= -----END CERTIFICATE-----Generated at Tue May 12 22:19:58 2026 by rpki-client