$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft File: 5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft (raw, json) Hash identifier: LWMEweC5J3Ca0cPXo0m+TPZC5Oaz5Y39vDGm6po14zQ= Subject key identifier: F4:91:EC:16:39:5A:21:5E:E2:01:73:2D:2A:50:31:80:8E:84:53:09 Authority key identifier: 5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5 Certificate issuer: /CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5 Certificate serial: 437394DDD29E9B094EA924F84F9D4CB4A86676CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft Manifest number: 0F Signing time: Tue 12 May 2026 11:22:04 +0000 Manifest this update: Tue 12 May 2026 11:17:04 +0000 Manifest next update: Wed 13 May 2026 15:19:04 +0000 Files and hashes: 1: 323430363a353463303a3a2f33332d3333203d3e20313430343739.roa (hash: 2cV6nPzmY4kD2CJExVdWuMSGfjJCPD1xihnYeBD8ieA=) 2: 3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa (hash: hB2D7K4UTkw5fpBq+t9X3VNB/1j6WvNNmkdz6+J5cvo=) 3: 3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa (hash: /1UO8tVQ+wLCWDJC+/9ddMEbFB3CgcFjCBFNxuu9120=) 4: 323430363a353463303a383030303a3a2f33332d3333203d3e20313430343739.roa (hash: bIsAPyP9rDpPX3/Ob3Qv6l0T0cqP2nXkNSsYJzMdy0g=) 5: 5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl (hash: qLkdqVnC2usuOl1xrLeFZrHnGAZDyMlRR8RAJORjHrU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:73:94:dd:d2:9e:9b:09:4e:a9:24:f8:4f:9d:4c:b4:a8:66:76:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5 Validity Not Before: May 12 11:17:04 2026 GMT Not After : May 13 15:19:04 2026 GMT Subject: CN=F491EC16395A215EE201732D2A5031808E845309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:79:44:6c:6f:74:49:a6:b5:44:f7:de:dd:2f: 75:7b:c2:fe:a3:6f:c8:68:d0:a7:d0:81:a9:da:35: 31:d7:9b:79:14:2c:67:7c:39:25:26:ac:64:8d:08: 23:91:be:93:3d:d9:b4:29:ff:7b:e5:e7:e6:a3:7f: ee:36:38:50:03:43:18:52:86:87:f2:e5:aa:3a:21: ae:df:05:cd:a7:ec:ed:2c:cf:29:97:bf:71:cd:77: 42:55:27:aa:a3:7e:1f:24:c3:18:05:2a:4e:17:54: 60:de:9e:26:6b:7b:84:6d:f2:89:bb:f4:89:e2:69: da:6d:9e:2d:78:8d:9f:e9:4d:75:bd:93:45:af:22: 59:d0:f9:66:fc:ed:49:f1:61:13:13:4f:d2:e0:d5: 64:d8:0b:b4:c4:f0:c2:50:7e:df:59:65:c5:2d:b2: a6:6c:7d:a8:39:dc:c3:87:63:ab:d6:e6:87:f5:ae: 03:c3:c7:69:7c:b8:8b:51:9c:17:dd:df:e3:dd:a9: eb:0f:51:80:4e:b1:29:6c:ec:48:81:3e:8e:73:c0: 3a:50:55:25:8d:13:97:62:9b:d0:16:2e:74:ef:bf: 68:63:19:e8:ae:7a:f9:93:09:0f:ef:ac:ee:53:fa: c0:57:6a:84:dd:15:43:5e:3a:e0:15:54:76:b8:ce: 0a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:91:EC:16:39:5A:21:5E:E2:01:73:2D:2A:50:31:80:8E:84:53:09 X509v3 Authority Key Identifier: keyid:5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:73:b1:cd:81:8a:35:a6:24:fd:36:a2:ef:e3:79:75:9a:ed: a4:f3:44:9a:75:fa:e3:2a:34:70:94:03:d0:cf:1d:e4:78:67: ed:ad:b0:6e:66:ac:74:c4:e8:0a:6e:a1:00:4c:c6:be:be:f1: e0:78:74:22:b1:83:3c:30:ba:66:9c:08:30:bb:39:c6:c3:f9: 4b:b2:c7:b4:72:c4:af:09:2c:4d:84:d7:f3:17:26:44:c4:b3: 7a:65:df:fb:35:b3:6b:31:98:34:10:58:ce:ca:be:be:40:00: bc:71:b7:fe:99:c7:7a:c7:5b:c3:60:42:4e:f0:dc:0a:91:2f: ec:47:0b:26:7b:fd:39:57:04:f7:b0:3b:0c:74:ac:51:c7:b8: 7d:80:59:6a:60:e1:2f:71:e6:fb:e0:5c:83:d0:20:c0:e7:f7: 7e:a8:42:1f:f4:b4:96:59:89:31:c2:71:ac:db:57:05:e8:89: 07:08:cd:a4:20:0b:f8:83:ae:4f:78:1a:08:cb:7a:9d:0a:d6: e4:a2:3e:6c:f1:00:3b:8a:fc:ed:a0:ff:46:4b:7a:21:32:e3: 69:6d:4e:23:31:1a:b5:c1:33:b4:37:db:9d:a1:19:d3:d3:dd: f6:b6:8a:41:f0:f0:bd:cc:88:e3:bf:45:3c:3c:3c:03:e4:e7: 7d:54:aa:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ3OU3dKemwlOqST4T51MtKhmdsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCRURFOTgzQTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2QTdD NjA2M0ZCNTAeFw0yNjA1MTIxMTE3MDRaFw0yNjA1MTMxNTE5MDRaMDMxMTAvBgNV BAMTKEY0OTFFQzE2Mzk1QTIxNUVFMjAxNzMyRDJBNTAzMTgwOEU4NDUzMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOeURsb3RJprVE997dL3V7wv6j b8ho0KfQganaNTHXm3kULGd8OSUmrGSNCCORvpM92bQp/3vl5+ajf+42OFADQxhS hofy5ao6Ia7fBc2n7O0szymXv3HNd0JVJ6qjfh8kwxgFKk4XVGDeniZre4Rt8om7 9Iniadptni14jZ/pTXW9k0WvIlnQ+Wb87UnxYRMTT9Lg1WTYC7TE8MJQft9ZZcUt sqZsfag53MOHY6vW5of1rgPDx2l8uItRnBfd3+PdqesPUYBOsSls7EiBPo5zwDpQ VSWNE5dim9AWLnTvv2hjGeiuevmTCQ/vrO5T+sBXaoTdFUNeOuAVVHa4zgq9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9JHsFjlaIV7iAXMtKlAxgI6EUwkwHwYDVR0j BBgwFoAUX77emDpjIrmZpGq2qsz2p8YGP7UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGM3NjVkNTEtYjBiMS00MzVkLWE2NmItNjA0YzZlNWQyOWVmLzAvNUZCRURFOTgz QTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2QTdDNjA2M0ZCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkJFREU5ODNBNjMyMkI5OTlBNDZBQjZBQUNDRjZBN0M2MDYz RkI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGM3NjVkNTEtYjBiMS00MzVkLWE2 NmItNjA0YzZlNWQyOWVmLzAvNUZCRURFOTgzQTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2 QTdDNjA2M0ZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhzsc2BijWmJP02ou/jeXWa7aTzRJp1+uMq NHCUA9DPHeR4Z+2tsG5mrHTE6ApuoQBMxr6+8eB4dCKxgzwwumacCDC7OcbD+Uuy x7RyxK8JLE2E1/MXJkTEs3pl3/s1s2sxmDQQWM7Kvr5AALxxt/6Zx3rHW8NgQk7w 3AqRL+xHCyZ7/TlXBPewOwx0rFHHuH2AWWpg4S9x5vvgXIPQIMDn936oQh/0tJZZ iTHCcazbVwXoiQcIzaQgC/iDrk94GgjLep0K1uSiPmzxADuK/O2g/0ZLeiEy42lt TiMxGrXBM7Q3252hGdPT3fa2ikHw8L3MiOO/RTw8PAPk531UqsU= -----END CERTIFICATE-----Generated at Wed May 13 03:51:25 2026 by rpki-client