$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft File: 5A5DD73D891416196AA5239D921D189D149B622B.mft (raw, json) Hash identifier: diTSaIKE0IUwLxKr8XiZXbJtFIJeYhlWJ98wORD+ak8= Subject key identifier: 02:1F:D5:B7:DC:A7:80:E5:84:C5:20:A3:DC:2B:D4:1E:8C:9A:F6:9F Authority key identifier: 5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B Certificate issuer: /CN=5A5DD73D891416196AA5239D921D189D149B622B Certificate serial: 0F41B6321D62E3495331D9272F6F1E38228F0768 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:30:52 +0000 Manifest this update: Tue 12 May 2026 22:25:52 +0000 Manifest next update: Wed 13 May 2026 22:54:52 +0000 Files and hashes: 1: 5A5DD73D891416196AA5239D921D189D149B622B.crl (hash: On0a8A3uQhooTlkK+18EZKfutxnqKdR7E1rP6Xq34sg=) 2: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: LUrz0HzKQn3BDSTwVj0zPYkXFEJEXJ4mzlthepJ39U0=) 3: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: qFviTkAJdjhBsY+4vQ6F1D24Kw3W6hG5KcLt5OTgeis=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:41:b6:32:1d:62:e3:49:53:31:d9:27:2f:6f:1e:38:22:8f:07:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A5DD73D891416196AA5239D921D189D149B622B Validity Not Before: May 12 22:25:52 2026 GMT Not After : May 13 22:54:52 2026 GMT Subject: CN=021FD5B7DCA780E584C520A3DC2BD41E8C9AF69F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:12:3b:59:06:10:e4:87:04:b9:a7:ab:d6:ba: 97:07:71:69:70:c4:bd:fe:7e:60:fb:ab:e9:03:17: 6d:20:82:7b:b3:b4:87:97:1c:eb:b2:19:64:7c:e4: ea:3b:26:7c:e4:1b:8f:80:8a:f1:84:3d:f6:43:3e: 67:0e:5f:c8:cf:a2:11:b3:cf:9b:14:4e:99:ba:18: 76:4d:d3:2c:78:a3:b6:fb:31:30:38:da:8e:da:a3: 7d:99:47:47:47:28:40:f4:00:e2:a5:10:66:1c:da: d6:7d:31:4c:50:a1:ef:52:d0:cd:dc:cd:2b:44:7b: d8:16:33:eb:16:85:2c:16:5e:1c:94:57:3d:a7:e4: 54:9e:04:93:e5:36:eb:0a:65:82:68:c8:b9:d2:8c: 01:7c:98:3c:b8:eb:7e:ba:6e:8d:ed:95:df:af:c4: 88:ec:60:43:57:8c:94:0f:ab:e5:9f:11:b0:8a:74: ac:11:6f:08:1e:61:55:e1:79:93:72:81:4e:0e:e9: 5b:e8:c5:14:15:06:68:57:5e:d1:4d:06:79:53:a1: b9:a0:f4:f5:8f:71:27:a0:ea:b1:d7:b1:d9:25:3d: 5f:df:d5:95:d0:5f:a6:e5:b6:d3:af:65:4f:3b:41: e7:de:55:d2:d5:36:d4:11:8e:83:fc:13:07:5c:2b: 12:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1F:D5:B7:DC:A7:80:E5:84:C5:20:A3:DC:2B:D4:1E:8C:9A:F6:9F X509v3 Authority Key Identifier: keyid:5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ce:2c:f4:62:81:e7:9b:e1:36:c7:13:30:4e:52:de:dc:4c: 79:87:6d:ca:0c:ae:8c:e3:ec:ba:fd:5d:03:fb:bf:5a:d0:36: 16:5b:70:5f:d4:0a:07:60:c0:26:ad:8e:b0:34:8d:2c:39:35: 80:ea:64:ea:75:40:0c:da:31:34:2c:d3:56:0e:e6:25:b2:ab: 85:55:86:38:96:55:84:83:d9:db:57:82:97:3d:2b:29:84:41: bd:15:53:1d:96:a7:eb:98:7b:76:c9:90:d8:55:2d:61:06:2a: 3f:8b:99:25:1e:f9:ba:ef:7b:87:d5:2b:04:a3:60:94:b6:bf: 60:15:35:18:dd:14:57:af:19:5c:e2:0c:5e:27:20:d4:f5:61: 72:a0:60:26:02:66:0d:e0:d8:90:56:96:14:a2:07:4c:3b:0a: 68:05:80:a4:03:2e:14:48:37:76:96:51:3f:d3:2a:2d:af:9e: 13:5a:40:54:9b:b4:d0:06:fe:b5:10:51:2e:b8:80:21:8a:ca: 1f:ff:b1:68:c8:a8:cd:b4:c8:d7:72:c1:05:01:dd:11:db:78: b5:96:40:29:da:e0:17:d6:73:0f:e6:d7:7f:fc:7f:a9:7d:13: 4c:35:8d:a2:ac:13:aa:b7:17:9b:87:10:bb:d1:bf:dc:09:c1: dd:4f:69:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD0G2Mh1i40lTMdknL28eOCKPB2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE1REQ3M0Q4OTE0MTYxOTZBQTUyMzlEOTIxRDE4OUQx NDlCNjIyQjAeFw0yNjA1MTIyMjI1NTJaFw0yNjA1MTMyMjU0NTJaMDMxMTAvBgNV BAMTKDAyMUZENUI3RENBNzgwRTU4NEM1MjBBM0RDMkJENDFFOEM5QUY2OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqEjtZBhDkhwS5p6vWupcHcWlw xL3+fmD7q+kDF20ggnuztIeXHOuyGWR85Oo7JnzkG4+AivGEPfZDPmcOX8jPohGz z5sUTpm6GHZN0yx4o7b7MTA42o7ao32ZR0dHKED0AOKlEGYc2tZ9MUxQoe9S0M3c zStEe9gWM+sWhSwWXhyUVz2n5FSeBJPlNusKZYJoyLnSjAF8mDy46366bo3tld+v xIjsYENXjJQPq+WfEbCKdKwRbwgeYVXheZNygU4O6VvoxRQVBmhXXtFNBnlTobmg 9PWPcSeg6rHXsdklPV/f1ZXQX6blttOvZU87QefeVdLVNtQRjoP8EwdcKxL9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAh/Vt9yngOWExSCj3CvUHoya9p8wHwYDVR0j BBgwFoAUWl3XPYkUFhlqpSOdkh0YnRSbYiswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE2M2I3ZDctZWE4My00YmU5LWIyZmMtYjMwZWIwYjQ0ZDBhLzAvNUE1REQ3M0Q4 OTE0MTYxOTZBQTUyMzlEOTIxRDE4OUQxNDlCNjIyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTVERDczRDg5MTQxNjE5NkFBNTIzOUQ5MjFEMTg5RDE0OUI2 MjJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvNUE1REQ3M0Q4OTE0MTYxOTZBQTUyMzlEOTIxRDE4 OUQxNDlCNjIyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvOLPRigeeb4TbHEzBOUt7cTHmHbcoMrozj 7Lr9XQP7v1rQNhZbcF/UCgdgwCatjrA0jSw5NYDqZOp1QAzaMTQs01YO5iWyq4VV hjiWVYSD2dtXgpc9KymEQb0VUx2Wp+uYe3bJkNhVLWEGKj+LmSUe+brve4fVKwSj YJS2v2AVNRjdFFevGVziDF4nINT1YXKgYCYCZg3g2JBWlhSiB0w7CmgFgKQDLhRI N3aWUT/TKi2vnhNaQFSbtNAG/rUQUS64gCGKyh//sWjIqM20yNdywQUB3RHbeLWW QCna4BfWcw/m13/8f6l9E0w1jaKsE6q3F5uHELvRv9wJwd1Pac4= -----END CERTIFICATE-----Generated at Wed May 13 01:41:11 2026 by rpki-client