$ rpki-client -vvf rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft File: 5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft (raw, json) Hash identifier: DW2aDooxZ2lotIACjn1OhBea//79h2TKrVPysX3F+gk= Subject key identifier: 4E:1E:BD:19:FB:D1:77:55:AF:9F:83:15:1C:20:95:65:47:0A:CC:FE Authority key identifier: 5B:78:39:D3:FA:2F:BC:37:45:20:65:6B:0E:BD:B7:87:43:B9:68:ED Certificate issuer: /CN=5B7839D3FA2FBC374520656B0EBDB78743B968ED Certificate serial: 21BFE056223B56F25A71A1F14FE9ADB66571495C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:37:29 +0000 Manifest this update: Tue 12 May 2026 17:32:29 +0000 Manifest next update: Wed 13 May 2026 20:12:29 +0000 Files and hashes: 1: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: aOlWVzlvXbOa4KHfHqYRVq472gGuD+dyeTRVu2qUTbc=) 2: 5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl (hash: uK4oxHuMewP7vZfdSfKuTaA1SRKkAWtazngGBu9yh2I=) 3: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: 7rg8BQPn02cWQCL5uHjDLR1BDjr+8xgU8r0m19XIL1o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bf:e0:56:22:3b:56:f2:5a:71:a1:f1:4f:e9:ad:b6:65:71:49:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B7839D3FA2FBC374520656B0EBDB78743B968ED Validity Not Before: May 12 17:32:29 2026 GMT Not After : May 13 20:12:29 2026 GMT Subject: CN=4E1EBD19FBD17755AF9F83151C209565470ACCFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:34:96:42:2d:c5:0e:69:7a:3b:2c:b5:cd: 85:11:f3:30:e5:54:71:47:97:3c:67:fe:b0:44:62: b6:f1:7a:33:2e:1f:cb:8b:e0:0a:61:d3:f1:eb:ec: dd:f3:36:56:49:5c:2b:9d:b7:93:8f:32:70:84:f5: 0c:4f:fe:cd:41:77:4b:6a:b5:d5:16:b2:c0:fe:94: 83:69:b8:2e:f4:51:e4:c6:14:e5:8b:81:91:9f:ea: 49:65:1a:cf:5a:ec:c6:d3:de:c8:e2:83:eb:70:5d: 97:96:e4:19:f6:c2:4d:52:1c:47:bd:7c:ca:e8:d7: 95:71:b2:2b:ca:51:71:e4:e4:e9:25:cf:ad:5a:dc: f8:ce:9a:1e:9d:f1:29:0b:d0:7b:4d:e8:67:48:df: 25:51:d7:e7:8b:40:f8:50:61:32:a5:5b:f6:04:cc: 4d:3e:22:78:35:b2:b2:65:b3:4a:c5:a1:cc:c2:42: 0e:59:b2:47:67:c4:2c:58:10:e1:25:4f:e4:ae:a2: 92:8f:88:ea:49:54:fb:0f:18:f8:38:b9:3e:fe:d1: f6:b9:32:51:77:a7:cf:5f:26:ae:17:af:11:16:83: 70:b6:92:b4:09:ee:c9:89:06:f1:38:02:d1:44:b2: 0d:53:63:46:7e:4b:81:4d:94:cc:22:3f:3b:e7:f2: a9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1E:BD:19:FB:D1:77:55:AF:9F:83:15:1C:20:95:65:47:0A:CC:FE X509v3 Authority Key Identifier: keyid:5B:78:39:D3:FA:2F:BC:37:45:20:65:6B:0E:BD:B7:87:43:B9:68:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:16:65:b5:17:fc:f6:05:03:8b:ec:48:22:da:ef:d3:c4:2a: e3:4f:57:6b:8a:c4:75:72:5f:7b:e6:10:c0:e2:98:76:ba:1c: 1e:27:40:f8:cc:90:18:2a:08:7d:aa:cc:6a:87:31:c1:a2:7b: 94:32:7b:6c:d5:52:86:a1:46:bf:cd:6f:f2:26:d4:8d:52:7a: 8e:71:8b:9d:c8:15:9a:ec:95:b5:36:8e:81:4e:b9:5c:04:be: 3c:ee:a6:df:00:82:77:d0:9d:5f:d2:61:76:c3:f1:a2:8c:52: 9c:ae:07:a5:6e:4e:08:15:f4:ff:71:fd:24:cb:87:58:f7:29: 32:9e:7d:a8:1b:cf:8f:cb:4c:59:da:d6:d0:06:2c:3a:b7:a9: 69:b9:a5:2b:9f:eb:63:c6:6f:de:3b:b6:bb:67:37:91:b0:df: 64:98:d9:a9:c9:51:91:89:6a:dc:7b:c3:37:2a:0b:dc:0f:45: ec:c0:0d:94:ca:49:09:e8:ce:41:e8:fe:5b:16:ce:ae:49:3c: bb:56:62:56:0b:1a:fb:9b:f5:d6:42:2f:9c:24:ca:e2:f5:35: 7c:70:21:58:11:a7:a1:34:a9:83:47:42:4e:e5:fb:46:c7:f6: 24:f1:3e:c8:8d:d2:b7:39:9b:56:22:b4:2b:79:68:82:f0:ab: 97:31:a2:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIb/gViI7VvJacaHxT+mttmVxSVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI3ODM5RDNGQTJGQkMzNzQ1MjA2NTZCMEVCREI3ODc0 M0I5NjhFRDAeFw0yNjA1MTIxNzMyMjlaFw0yNjA1MTMyMDEyMjlaMDMxMTAvBgNV BAMTKDRFMUVCRDE5RkJEMTc3NTVBRjlGODMxNTFDMjA5NTY1NDcwQUNDRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw8zSWQi3FDml6Oyy1zYUR8zDl VHFHlzxn/rBEYrbxejMuH8uL4Aph0/Hr7N3zNlZJXCudt5OPMnCE9QxP/s1Bd0tq tdUWssD+lINpuC70UeTGFOWLgZGf6kllGs9a7MbT3sjig+twXZeW5Bn2wk1SHEe9 fMro15VxsivKUXHk5Oklz61a3PjOmh6d8SkL0HtN6GdI3yVR1+eLQPhQYTKlW/YE zE0+Ing1srJls0rFoczCQg5ZskdnxCxYEOElT+SuopKPiOpJVPsPGPg4uT7+0fa5 MlF3p89fJq4XrxEWg3C2krQJ7smJBvE4AtFEsg1TY0Z+S4FNlMwiPzvn8qkxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTh69GfvRd1Wvn4MVHCCVZUcKzP4wHwYDVR0j BBgwFoAUW3g50/ovvDdFIGVrDr23h0O5aO0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjljNTMyN2YtMTBmZC00Y2YwLTg1MWMtMGNmY2QzYzNjNjk3LzAvNUI3ODM5RDNG QTJGQkMzNzQ1MjA2NTZCMEVCREI3ODc0M0I5NjhFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Qjc4MzlEM0ZBMkZCQzM3NDUyMDY1NkIwRUJEQjc4NzQzQjk2 OEVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNUI3ODM5RDNGQTJGQkMzNzQ1MjA2NTZCMEVCREI3 ODc0M0I5NjhFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0WZbUX/PYFA4vsSCLa79PEKuNPV2uKxHVy X3vmEMDimHa6HB4nQPjMkBgqCH2qzGqHMcGie5Qye2zVUoahRr/Nb/Im1I1Seo5x i53IFZrslbU2joFOuVwEvjzupt8AgnfQnV/SYXbD8aKMUpyuB6VuTggV9P9x/STL h1j3KTKefagbz4/LTFna1tAGLDq3qWm5pSuf62PGb947trtnN5Gw32SY2anJUZGJ atx7wzcqC9wPRezADZTKSQnozkHo/lsWzq5JPLtWYlYLGvub9dZCL5wkyuL1NXxw IVgRp6E0qYNHQk7l+0bH9iTxPsiN0rc5m1YitCt5aILwq5cxogE= -----END CERTIFICATE-----Generated at Tue May 12 22:47:34 2026 by rpki-client