$ rpki-client -vvf rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft File: 5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft (raw, json) Hash identifier: LqS1vRRIjKF1VKESYaXQR98rn0G4d17RcQKSSxbTwYw= Subject key identifier: D8:7A:5E:C0:6F:DF:64:D3:84:F0:E1:C8:72:FE:6B:F4:78:00:85:82 Authority key identifier: 5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1 Certificate issuer: /CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1 Certificate serial: 427F5DED585E861A6A133C3D9A39C6CC781BB71B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:01:43 +0000 Manifest this update: Tue 12 May 2026 22:56:43 +0000 Manifest next update: Thu 14 May 2026 01:49:43 +0000 Files and hashes: 1: 3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa (hash: ht3wys3Y4NKbvssKz7Sxlx9g755vgJKTzTjwYqhy56E=) 2: 5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl (hash: KyM3rSoaiARsDv1/dG/mQOrSjGKxAUd4MihtM2tYPkQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7f:5d:ed:58:5e:86:1a:6a:13:3c:3d:9a:39:c6:cc:78:1b:b7:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1 Validity Not Before: May 12 22:56:43 2026 GMT Not After : May 14 01:49:43 2026 GMT Subject: CN=D87A5EC06FDF64D384F0E1C872FE6BF478008582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:78:44:5d:d6:6c:e8:02:47:f7:b5:40:c6:23: 20:11:cb:74:93:ee:24:0d:9a:55:36:95:ad:4c:97: 56:77:59:66:66:b3:dd:6d:d8:b5:40:34:8d:b3:82: b5:79:48:c9:9c:7c:59:05:d1:b7:95:ba:53:8c:1a: 85:c8:97:27:eb:da:de:ae:f3:47:45:26:d8:fc:dd: 01:f3:df:b1:71:89:58:70:26:44:e2:b4:df:34:46: cb:82:60:49:1a:34:59:57:d0:e8:9b:16:30:ed:1e: 1e:f3:96:9d:a3:32:91:8b:61:37:f7:c1:cb:33:1a: b0:82:d5:e4:f5:68:64:c0:ec:d5:03:e5:1d:06:41: ab:c0:37:93:e6:2a:33:a7:6c:3e:75:14:b2:8b:6d: 01:85:cf:c8:92:a5:dc:c4:6e:88:83:56:22:fd:df: 8f:e1:c5:47:ee:c0:40:be:dc:9d:08:10:9b:0d:9e: 0f:84:12:cc:77:ed:18:52:3b:4d:24:d4:12:e4:ff: 7e:02:41:20:25:b1:86:b6:92:f4:c4:ee:6d:2c:88: f8:8a:87:6a:6b:d5:b6:18:ab:4c:53:cd:e4:aa:04: ce:b6:88:b6:ca:d0:62:72:54:9d:58:35:e9:d4:14: fa:f0:be:6d:2b:2f:1f:16:f2:78:d2:9f:27:9c:08: 9a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7A:5E:C0:6F:DF:64:D3:84:F0:E1:C8:72:FE:6B:F4:78:00:85:82 X509v3 Authority Key Identifier: keyid:5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:cc:77:ac:b5:fa:a8:d5:c9:f3:32:36:d3:08:27:2e:ec:5e: 8c:fe:34:50:85:7e:c2:28:51:14:b0:44:20:90:51:25:a4:78: 11:46:24:cd:5c:31:b7:d9:33:66:3d:7c:37:63:20:fc:04:35: fd:e4:04:72:51:60:16:dc:c6:13:84:e5:62:77:ef:54:2b:92: 4f:4f:e4:bb:3a:db:18:94:38:77:27:ef:b7:3d:33:a4:9c:c2: af:46:9e:a4:68:7b:d1:79:38:ab:f6:89:5a:7f:3c:12:92:b2: d3:00:13:8b:b7:79:ec:7e:1f:b4:91:50:cf:4c:7c:15:a3:d8: a5:6c:03:33:14:52:f5:16:aa:16:33:d5:fd:a9:59:e0:3f:40: fa:ef:15:fd:98:d0:01:a5:77:45:9e:ce:fb:ec:64:a7:d0:1f: e8:d5:47:ad:91:1f:d5:d5:05:9b:73:f7:b3:24:14:b5:59:5e: 45:96:6f:e8:62:41:f9:06:84:fe:26:fb:cf:50:24:c8:2d:01: 9c:90:be:ed:ee:b1:fa:7d:08:be:db:a9:cd:09:f8:b0:31:70: d7:f3:9e:57:5f:90:67:d6:ea:03:07:e8:ec:c6:33:57:17:25: 74:50:f3:0d:7f:76:0a:72:28:48:51:52:fd:17:dd:cb:ff:eb: 82:8e:7d:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQn9d7VhehhpqEzw9mjnGzHgbtxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJCMTJDMzFEMzZFNTVDRkQ2QUY5NDRDQTRFNzY3RTBC OURCOUJGMTAeFw0yNjA1MTIyMjU2NDNaFw0yNjA1MTQwMTQ5NDNaMDMxMTAvBgNV BAMTKEQ4N0E1RUMwNkZERjY0RDM4NEYwRTFDODcyRkU2QkY0NzgwMDg1ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCseERd1mzoAkf3tUDGIyARy3ST 7iQNmlU2la1Ml1Z3WWZms91t2LVANI2zgrV5SMmcfFkF0beVulOMGoXIlyfr2t6u 80dFJtj83QHz37FxiVhwJkTitN80RsuCYEkaNFlX0OibFjDtHh7zlp2jMpGLYTf3 wcszGrCC1eT1aGTA7NUD5R0GQavAN5PmKjOnbD51FLKLbQGFz8iSpdzEboiDViL9 34/hxUfuwEC+3J0IEJsNng+EEsx37RhSO00k1BLk/34CQSAlsYa2kvTE7m0siPiK h2pr1bYYq0xTzeSqBM62iLbK0GJyVJ1YNenUFPrwvm0rLx8W8njSnyecCJpnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2HpewG/fZNOE8OHIcv5r9HgAhYIwHwYDVR0j BBgwFoAUW7EsMdNuVc/Wr5RMpOdn4Lnbm/EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTliOTNlMWMtNWYyYS00M2E5LTk5ZjEtZmRkMDQwMmY5NDZlLzAvNUJCMTJDMzFE MzZFNTVDRkQ2QUY5NDRDQTRFNzY3RTBCOURCOUJGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkIxMkMzMUQzNkU1NUNGRDZBRjk0NENBNEU3NjdFMEI5REI5 QkYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTliOTNlMWMtNWYyYS00M2E5LTk5 ZjEtZmRkMDQwMmY5NDZlLzAvNUJCMTJDMzFEMzZFNTVDRkQ2QUY5NDRDQTRFNzY3 RTBCOURCOUJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALMd6y1+qjVyfMyNtMIJy7sXoz+NFCFfsIo URSwRCCQUSWkeBFGJM1cMbfZM2Y9fDdjIPwENf3kBHJRYBbcxhOE5WJ371Qrkk9P 5Ls62xiUOHcn77c9M6Scwq9GnqRoe9F5OKv2iVp/PBKSstMAE4u3eex+H7SRUM9M fBWj2KVsAzMUUvUWqhYz1f2pWeA/QPrvFf2Y0AGld0WezvvsZKfQH+jVR62RH9XV BZtz97MkFLVZXkWWb+hiQfkGhP4m+89QJMgtAZyQvu3usfp9CL7bqc0J+LAxcNfz nldfkGfW6gMH6OzGM1cXJXRQ8w1/dgpyKEhRUv0X3cv/64KOfQ0= -----END CERTIFICATE-----Generated at Wed May 13 13:02:22 2026 by rpki-client