$ rpki-client -vvf rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft File: 05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft (raw, json) Hash identifier: Lo/cNgZ1QEfJGqgWu9ENIE9L/gyvpTfwByZZ4fyMbAI= Subject key identifier: 57:FA:67:02:F0:C9:F0:44:26:5F:20:BA:CC:24:DF:75:E7:30:AD:24 Authority key identifier: 05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC Certificate issuer: /CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC Certificate serial: 0A3F600E8268A6438AEC084F691A08DB9EC95C55 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:22:06 +0000 Manifest this update: Tue 12 May 2026 17:17:06 +0000 Manifest next update: Wed 13 May 2026 20:00:06 +0000 Files and hashes: 1: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (hash: 4wSG33FQW497l9wd4KCTscDggwNpLmu4SJOzxz44RVQ=) 2: 34332e3232392e32302e302f32322d3234203d3e203233393439.roa (hash: 5ip0zyOFzxKc/CLTR+cuhj/u/zV2t14XhZlqC+WxFAQ=) 3: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (hash: 7oQYk70vQKgevBK4UvvhjpK8SNhKYOZ4R1FXSVnjFQo=) 4: 323430313a653438303a3a2f33322d3438203d3e203233393439.roa (hash: Tj1GCuxVuIwoJv3jzrY6G2gcMOfZzcLibiYAvCSsF9Y=) 5: 05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl (hash: 4qiJaReGzkZjsXblC9WOkwXW1ETW7AMgish4Ea4vQuI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3f:60:0e:82:68:a6:43:8a:ec:08:4f:69:1a:08:db:9e:c9:5c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC Validity Not Before: May 12 17:17:06 2026 GMT Not After : May 13 20:00:06 2026 GMT Subject: CN=57FA6702F0C9F044265F20BACC24DF75E730AD24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2b:b8:bc:b8:ae:cf:52:02:dc:e6:64:be:72: c5:31:fa:a4:5f:a7:b5:8e:6e:a3:11:45:d4:6b:e2: 32:31:8c:3c:8e:2d:ab:60:35:04:d4:27:20:67:2d: 18:c1:24:1a:f5:10:07:e0:2d:df:5b:29:df:31:09: 25:e6:0d:79:c0:09:3b:56:23:04:90:e5:f8:a9:fe: 4d:ba:24:47:e1:5b:60:39:10:69:ca:54:71:4f:d9: c7:55:84:ea:91:9b:22:a4:db:33:9c:c3:2d:2c:0c: 19:2c:86:7e:46:ca:d1:80:8c:ed:34:2e:e2:40:08: 5d:3f:5a:61:6c:82:06:cf:4d:48:a4:b2:35:3c:e0: 6e:6b:59:0c:2f:72:04:78:a9:80:00:14:61:77:c9: 48:4d:5b:5a:7f:c2:8c:92:9a:f1:a9:59:75:23:27: 8e:3b:2c:17:c5:52:bc:6f:88:17:46:96:70:97:07: 6d:4a:e3:9f:c9:8e:fe:7c:16:24:c2:f7:52:f1:65: d1:62:da:a2:d8:ee:69:a4:94:32:6c:b4:24:1f:e2: 7e:17:21:04:a4:d9:b3:76:5c:6d:a4:d6:22:bf:07: 39:18:b5:75:7d:59:f0:cb:c4:4e:fb:a5:e1:6c:65: e5:6a:79:60:11:19:db:c0:11:67:7f:97:73:3f:89: bf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FA:67:02:F0:C9:F0:44:26:5F:20:BA:CC:24:DF:75:E7:30:AD:24 X509v3 Authority Key Identifier: keyid:05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:69:4d:c4:2a:23:1d:df:06:f7:4c:d7:d7:5c:0d:92:d8:86: 13:82:56:12:c4:78:c5:07:ec:7d:d5:eb:ac:80:93:5b:0d:70: 78:14:7f:9f:2b:f0:02:94:f0:65:b8:c3:03:8f:4e:1e:56:28: 6d:83:67:91:07:59:94:bc:7b:2a:ff:ff:a6:ac:e9:36:89:c6: 2f:ec:8c:3c:89:45:ee:27:a6:17:8d:ab:ff:bc:08:7b:46:fb: cc:e8:c7:b3:8d:65:5a:5a:da:7f:6c:7a:3b:01:b8:65:72:0e: 6b:dc:38:58:77:5f:06:3c:58:ef:81:45:e9:3c:6f:85:f1:b7: e9:b3:30:22:a1:52:4c:b5:56:1c:54:d8:30:38:2d:20:f0:2c: 68:72:32:79:6b:c9:99:17:6e:2a:76:36:f7:62:5b:9f:c6:9d: 92:2a:22:46:b0:11:26:69:01:da:0b:14:56:05:5b:02:82:1e: 15:1c:96:73:70:65:60:47:6d:d3:85:c3:82:e6:db:c6:92:dd: 60:a4:9f:89:9e:48:52:76:04:2a:08:5e:5f:02:ca:93:3c:11: a4:69:69:b2:17:e8:29:6c:13:2b:4a:18:80:08:ba:1e:56:d4: 1c:d7:55:10:9c:27:22:21:0e:96:c0:00:ff:1b:ac:65:7e:a6: a0:ea:72:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCj9gDoJopkOK7AhPaRoI257JXFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUzNzlGMEQwOEQwNURGOERFNDFEMkFDMTlBRDBCRUY4 NzNDQjFEQzAeFw0yNjA1MTIxNzE3MDZaFw0yNjA1MTMyMDAwMDZaMDMxMTAvBgNV BAMTKDU3RkE2NzAyRjBDOUYwNDQyNjVGMjBCQUNDMjRERjc1RTczMEFEMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAK7i8uK7PUgLc5mS+csUx+qRf p7WObqMRRdRr4jIxjDyOLatgNQTUJyBnLRjBJBr1EAfgLd9bKd8xCSXmDXnACTtW IwSQ5fip/k26JEfhW2A5EGnKVHFP2cdVhOqRmyKk2zOcwy0sDBkshn5GytGAjO00 LuJACF0/WmFsggbPTUiksjU84G5rWQwvcgR4qYAAFGF3yUhNW1p/woySmvGpWXUj J447LBfFUrxviBdGlnCXB21K45/Jjv58FiTC91LxZdFi2qLY7mmklDJstCQf4n4X IQSk2bN2XG2k1iK/BzkYtXV9WfDLxE77peFsZeVqeWARGdvAEWd/l3M/ib9/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV/pnAvDJ8EQmXyC6zCTfdecwrSQwHwYDVR0j BBgwFoAUBTefDQjQXfjeQdKsGa0L74c8sdwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmI2OTgyMmMtMmUyMi00OGJlLThiYTItNjM0ZjU4MmMyZWNiLzAvMDUzNzlGMEQw OEQwNURGOERFNDFEMkFDMTlBRDBCRUY4NzNDQjFEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNTM3OUYwRDA4RDA1REY4REU0MUQyQUMxOUFEMEJFRjg3M0NC MURDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmI2OTgyMmMtMmUyMi00OGJlLThi YTItNjM0ZjU4MmMyZWNiLzAvMDUzNzlGMEQwOEQwNURGOERFNDFEMkFDMTlBRDBC RUY4NzNDQjFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFpTcQqIx3fBvdM19dcDZLYhhOCVhLEeMUH 7H3V66yAk1sNcHgUf58r8AKU8GW4wwOPTh5WKG2DZ5EHWZS8eyr//6as6TaJxi/s jDyJRe4npheNq/+8CHtG+8zox7ONZVpa2n9sejsBuGVyDmvcOFh3XwY8WO+BRek8 b4Xxt+mzMCKhUky1VhxU2DA4LSDwLGhyMnlryZkXbip2NvdiW5/GnZIqIkawESZp AdoLFFYFWwKCHhUclnNwZWBHbdOFw4Lm28aS3WCkn4meSFJ2BCoIXl8CypM8EaRp abIX6ClsEytKGIAIuh5W1BzXVRCcJyIhDpbAAP8brGV+pqDqcuU= -----END CERTIFICATE-----Generated at Tue May 12 22:46:56 2026 by rpki-client