$ rpki-client -vvf rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft File: 5FF85953C6850E359467A581C3FE1AC78E529F2F.mft (raw, json) Hash identifier: fwrk9UHfqIVtMAcdg2rRwPuGs8jPGz9MO4bnM3RqYVc= Subject key identifier: 88:D2:EB:89:49:34:84:D5:C6:85:E9:EF:1A:B9:64:8B:55:B4:FE:60 Authority key identifier: 5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F Certificate issuer: /CN=5FF85953C6850E359467A581C3FE1AC78E529F2F Certificate serial: 5A5F1B0302DAFCD78A1AD0AB98A0A1B1EDF95D7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:28:46 +0000 Manifest this update: Tue 12 May 2026 07:23:46 +0000 Manifest next update: Wed 13 May 2026 10:57:46 +0000 Files and hashes: 1: 3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (hash: uTaNGo7IDdsOGs73zESne28tA+ZzMyK0wMRINMuXTcQ=) 2: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: AwkHb7HGSUt+TaaLZZEdADtv/v78j6fMphbiNKpRchs=) 3: 3131352e3136362e3131312e302f32342d3234203d3e203134363138.roa (hash: kPUK2GFDFYlKn9GXNmNAqFN8ChpgIluMw/CP+FmKw0o=) 4: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: MmVOOc/LuqFNSXqQ5IddobFw0Ch137C+avOoyFd6ZzY=) 5: 5FF85953C6850E359467A581C3FE1AC78E529F2F.crl (hash: yBaaCg1FOjIbKFD7u/3KHTlGySYUy8cu54mLemEiYas=) 6: 3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (hash: t97u2GqJ2jtckgSGR6Sjz6Jn9nKSQHkBxpLPsPLvaYM=) 7: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: +qKLLz9ehRuOchJ8m6wI99oYtklf5Gx9ixqGHWMAzMw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:5f:1b:03:02:da:fc:d7:8a:1a:d0:ab:98:a0:a1:b1:ed:f9:5d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF85953C6850E359467A581C3FE1AC78E529F2F Validity Not Before: May 12 07:23:46 2026 GMT Not After : May 13 10:57:46 2026 GMT Subject: CN=88D2EB89493484D5C685E9EF1AB9648B55B4FE60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:14:76:31:c6:c2:7f:f5:77:58:94:8f:56:72: 73:bd:8a:41:53:44:d3:2c:79:ac:1d:96:41:dd:d5: c4:57:ca:5d:0f:58:10:65:7a:f3:96:60:b7:9a:f2: 6c:5f:f1:cb:ea:76:57:d6:ca:79:8a:d5:02:ad:47: b9:18:50:f7:97:60:82:70:52:d3:7a:ae:62:76:3c: fc:46:a1:97:43:4d:96:5e:73:3c:9f:47:25:e7:08: 26:b7:23:1e:90:3d:69:c6:aa:c4:f1:a5:47:14:99: 3f:9a:d9:b7:f3:61:9d:e5:49:16:b9:de:72:02:91: dd:e8:ad:3a:db:8d:49:fe:fb:8a:05:73:23:5a:e5: e2:82:9a:21:a3:4c:7c:99:7d:f9:30:a7:1b:01:2f: 65:62:c5:1b:ff:9e:80:ea:41:77:3c:01:19:c6:ee: c7:bd:57:82:31:25:da:16:27:0d:f0:15:01:41:f3: 1b:d6:b6:47:29:8f:cf:bc:14:c5:45:79:84:c5:b2: 94:2c:6d:70:45:38:cb:57:3b:29:5f:12:3d:91:52: a3:26:e7:15:65:ec:b5:59:2c:71:98:36:3d:37:46: 3e:06:fa:a4:41:8e:d3:bf:45:37:a5:93:f1:a0:47: 1a:49:6a:b0:99:dd:05:2c:e8:bd:97:32:dd:3e:b7: a0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D2:EB:89:49:34:84:D5:C6:85:E9:EF:1A:B9:64:8B:55:B4:FE:60 X509v3 Authority Key Identifier: keyid:5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:50:30:71:b7:1c:b5:cc:61:e0:b8:99:45:fb:d9:ce:4b:c6: 17:f7:01:f1:12:47:cf:e8:39:05:fe:9a:47:7d:da:97:43:7f: f6:27:ff:f4:40:45:f6:18:2e:77:08:99:c7:39:a3:cc:1e:6f: c9:78:ca:8a:7b:60:08:68:ee:75:c4:c3:7d:ee:1c:9c:ae:99: 4b:3a:42:bc:da:4c:c3:ca:ea:4f:52:bd:c3:b4:e6:94:9b:1d: 83:79:76:fd:03:c9:28:8c:04:73:01:6a:57:05:a4:2e:d6:20: a9:85:65:d3:5d:c7:77:33:df:29:27:9e:80:ec:c0:dc:98:57: 4f:ed:7c:eb:1b:1f:15:2a:b7:cc:46:bd:c4:4f:a0:3e:02:c4: 4f:f9:af:02:76:5f:18:af:ff:b3:56:40:07:c6:9e:aa:72:0c: 76:41:5a:99:38:3e:0d:31:9c:0c:cf:ef:48:e2:a6:24:66:c6: c2:fc:28:54:f7:03:79:e7:2b:1d:62:60:8d:75:8c:b6:86:8f: cd:30:5a:ca:68:05:e3:e7:bc:3c:1c:5c:8c:19:d8:14:48:7c: 43:0e:10:9a:13:33:bb:cb:f5:5c:ff:aa:2f:2f:2b:20:08:bb: 6a:ed:0b:a9:d9:4d:1b:a6:bb:67:a1:3f:eb:ad:6a:0b:a0:e9: 05:d6:82:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWl8bAwLa/NeKGtCrmKChse35XX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4 RTUyOUYyRjAeFw0yNjA1MTIwNzIzNDZaFw0yNjA1MTMxMDU3NDZaMDMxMTAvBgNV BAMTKDg4RDJFQjg5NDkzNDg0RDVDNjg1RTlFRjFBQjk2NDhCNTVCNEZFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVFHYxxsJ/9XdYlI9WcnO9ikFT RNMseawdlkHd1cRXyl0PWBBlevOWYLea8mxf8cvqdlfWynmK1QKtR7kYUPeXYIJw UtN6rmJ2PPxGoZdDTZZeczyfRyXnCCa3Ix6QPWnGqsTxpUcUmT+a2bfzYZ3lSRa5 3nICkd3orTrbjUn++4oFcyNa5eKCmiGjTHyZffkwpxsBL2VixRv/noDqQXc8ARnG 7se9V4IxJdoWJw3wFQFB8xvWtkcpj8+8FMVFeYTFspQsbXBFOMtXOylfEj2RUqMm 5xVl7LVZLHGYNj03Rj4G+qRBjtO/RTelk/GgRxpJarCZ3QUs6L2XMt0+t6AVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiNLriUk0hNXGhenvGrlki1W0/mAwHwYDVR0j BBgwFoAUX/hZU8aFDjWUZ6WBw/4ax45Sny8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmRkNDdmNTYtZWM1My00MmViLTliOGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTND Njg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4RTUyOUYyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkY4NTk1M0M2ODUwRTM1OTQ2N0E1ODFDM0ZFMUFDNzhFNTI5 RjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFB Qzc4RTUyOUYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtQMHG3HLXMYeC4mUX72c5Lxhf3AfESR8/o OQX+mkd92pdDf/Yn//RARfYYLncImcc5o8web8l4yop7YAho7nXEw33uHJyumUs6 QrzaTMPK6k9SvcO05pSbHYN5dv0DySiMBHMBalcFpC7WIKmFZdNdx3cz3yknnoDs wNyYV0/tfOsbHxUqt8xGvcRPoD4CxE/5rwJ2Xxiv/7NWQAfGnqpyDHZBWpk4Pg0x nAzP70jipiRmxsL8KFT3A3nnKx1iYI11jLaGj80wWspoBePnvDwcXIwZ2BRIfEMO EJoTM7vL9Vz/qi8vKyAIu2rtC6nZTRumu2ehP+utagug6QXWgkY= -----END CERTIFICATE-----Generated at Wed May 13 02:13:27 2026 by rpki-client