$ rpki-client -vvf rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft File: 5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft (raw, json) Hash identifier: qpkwJ1k+QsMoVcPaiP/ITir+6KX89DGVUVoRye5Pc88= Subject key identifier: 44:FB:E6:B6:94:46:32:07:6A:B2:9D:FD:75:55:45:84:15:9D:03:00 Authority key identifier: 5E:25:E7:5E:AD:14:FB:9C:87:77:75:CF:A5:C7:68:C9:9B:F8:31:CB Certificate issuer: /CN=5E25E75EAD14FB9C877775CFA5C768C99BF831CB Certificate serial: 71A7A21F4E9FD63502D5BB82E80F38D3E36ACD01 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:03:20 +0000 Manifest this update: Tue 12 May 2026 20:58:20 +0000 Manifest next update: Wed 13 May 2026 22:45:20 +0000 Files and hashes: 1: 5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl (hash: XEy3rcLL8UwvxrsX21LIguWN/09RG64e0vrKpp9Dlaw=) 2: 323030313a6466303a666534303a3a2f34382d3438203d3e20313439393133.roa (hash: Mx1Bs+uk4ORbPOJY3X4OSkdxpVJJ2TqdAiAI7XjMvYw=) 3: 3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (hash: GheubIEbC2RH3FMbulGJZm2AS1TBwHys9ZC8vY6htKI=) 4: 3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa (hash: U6ZrAajnenCJBZYC9uBM6kAorfrc1n55yTDGAGbaXuI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a7:a2:1f:4e:9f:d6:35:02:d5:bb:82:e8:0f:38:d3:e3:6a:cd:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E25E75EAD14FB9C877775CFA5C768C99BF831CB Validity Not Before: May 12 20:58:20 2026 GMT Not After : May 13 22:45:20 2026 GMT Subject: CN=44FBE6B6944632076AB29DFD75554584159D0300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c4:86:36:08:dc:0f:03:88:35:e7:c1:56:f2: 10:84:4c:b4:9e:eb:f1:c2:7a:86:28:46:e7:ba:f9: 7c:37:d8:85:66:bc:ad:a8:5b:cf:3b:0f:1c:38:d1: 2d:03:cf:78:da:1c:14:c2:42:bb:dd:a9:d6:fa:e0: 41:c3:36:c6:1b:48:b4:54:05:e2:05:67:9b:db:36: 7c:4e:67:02:c9:ec:99:ce:24:a0:b4:e1:1c:31:33: 53:6c:d2:f3:87:b0:c7:81:08:00:a8:ae:00:cd:bd: 3e:87:88:70:9d:5a:b8:83:c7:d4:c4:69:29:22:4e: 3b:2d:8f:3e:33:3a:88:89:6a:1b:72:6e:d9:d7:79: 08:13:12:7b:cc:70:ee:52:1e:65:de:31:13:51:8a: 99:8a:c2:c1:72:bc:75:52:57:89:b0:0e:99:9b:f8: e8:f1:bf:b9:c0:b0:20:4b:bf:7f:53:c5:6d:67:92: 19:7a:69:ca:0c:21:f0:6e:77:06:79:ab:85:bc:d1: 69:ac:d0:ff:16:12:fa:dc:e7:4c:ce:4a:a3:8f:9f: b9:dd:1f:33:47:51:af:79:f0:c5:8d:b4:32:cd:9c: 00:f4:4e:2d:2c:e9:cd:4c:a9:6b:35:e4:1d:db:5a: f4:10:e9:5f:6e:ac:61:6a:60:c4:56:79:34:35:3b: 9a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FB:E6:B6:94:46:32:07:6A:B2:9D:FD:75:55:45:84:15:9D:03:00 X509v3 Authority Key Identifier: keyid:5E:25:E7:5E:AD:14:FB:9C:87:77:75:CF:A5:C7:68:C9:9B:F8:31:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:9a:21:65:a3:bc:6d:11:e0:ca:88:f6:c4:45:cd:b7:1e:cb: 38:aa:3e:69:07:94:1c:2c:ef:c5:a6:b6:58:b7:d9:33:7d:c1: cb:2e:d1:d5:34:91:ac:0f:56:33:03:e8:e1:b9:4c:f4:2f:26: 7f:55:7e:91:29:1f:11:db:59:f2:94:0d:aa:78:dc:44:59:3f: 4c:3f:fd:99:d6:89:61:a7:94:1a:e2:f8:2f:4d:2e:12:fb:fe: 16:d9:0f:9e:09:a9:94:6a:36:67:d5:f1:fc:32:84:a6:70:f7: c1:e8:73:80:ee:82:27:46:23:63:41:1c:1e:b6:e3:3f:cc:6a: b9:14:8b:f9:d9:3b:13:fe:92:82:74:49:e6:97:0e:b1:d2:4f: 04:97:17:22:05:2b:ad:03:2f:85:17:0c:8f:4d:6f:b3:05:c3: 33:ed:0f:39:23:a4:65:47:35:26:0b:74:a0:ff:b7:30:38:87: be:64:93:9d:d4:fd:37:92:fa:8c:1e:15:aa:82:7d:9b:df:c8: ec:b8:75:89:1e:5e:45:6b:7f:e6:bd:e3:c7:2c:f8:33:46:88: ca:0d:44:23:19:3b:67:00:4b:08:44:52:ec:25:b0:6a:a9:93: d4:3c:e2:16:38:fb:34:49:ad:73:43:d6:4c:28:39:6d:ef:21: 78:2e:98:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcaeiH06f1jUC1buC6A840+NqzQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUyNUU3NUVBRDE0RkI5Qzg3Nzc3NUNGQTVDNzY4Qzk5 QkY4MzFDQjAeFw0yNjA1MTIyMDU4MjBaFw0yNjA1MTMyMjQ1MjBaMDMxMTAvBgNV BAMTKDQ0RkJFNkI2OTQ0NjMyMDc2QUIyOURGRDc1NTU0NTg0MTU5RDAzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUxIY2CNwPA4g158FW8hCETLSe 6/HCeoYoRue6+Xw32IVmvK2oW887Dxw40S0Dz3jaHBTCQrvdqdb64EHDNsYbSLRU BeIFZ5vbNnxOZwLJ7JnOJKC04RwxM1Ns0vOHsMeBCACorgDNvT6HiHCdWriDx9TE aSkiTjstjz4zOoiJahtybtnXeQgTEnvMcO5SHmXeMRNRipmKwsFyvHVSV4mwDpmb +Ojxv7nAsCBLv39TxW1nkhl6acoMIfBudwZ5q4W80Wms0P8WEvrc50zOSqOPn7nd HzNHUa958MWNtDLNnAD0Ti0s6c1MqWs15B3bWvQQ6V9urGFqYMRWeTQ1O5pBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURPvmtpRGMgdqsp39dVVFhBWdAwAwHwYDVR0j BBgwFoAUXiXnXq0U+5yHd3XPpcdoyZv4McswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg2ZDZiYTEtMWY3My00Nzc2LThhNmEtNGY0NTEyMDc5MmIxLzAvNUUyNUU3NUVB RDE0RkI5Qzg3Nzc3NUNGQTVDNzY4Qzk5QkY4MzFDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RTI1RTc1RUFEMTRGQjlDODc3Nzc1Q0ZBNUM3NjhDOTlCRjgz MUNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg2ZDZiYTEtMWY3My00Nzc2LThh NmEtNGY0NTEyMDc5MmIxLzAvNUUyNUU3NUVBRDE0RkI5Qzg3Nzc3NUNGQTVDNzY4 Qzk5QkY4MzFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2aIWWjvG0R4MqI9sRFzbceyziqPmkHlBws 78Wmtli32TN9wcsu0dU0kawPVjMD6OG5TPQvJn9VfpEpHxHbWfKUDap43ERZP0w/ /ZnWiWGnlBri+C9NLhL7/hbZD54JqZRqNmfV8fwyhKZw98Hoc4DugidGI2NBHB62 4z/MarkUi/nZOxP+koJ0SeaXDrHSTwSXFyIFK60DL4UXDI9Nb7MFwzPtDzkjpGVH NSYLdKD/tzA4h75kk53U/TeS+oweFaqCfZvfyOy4dYkeXkVrf+a948cs+DNGiMoN RCMZO2cASwhEUuwlsGqpk9Q84hY4+zRJrXND1kwoOW3vIXgumCM= -----END CERTIFICATE-----Generated at Wed May 13 07:38:48 2026 by rpki-client