$ rpki-client -vvf rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft File: 5B4C702133C87BA4BC2E55E712270969ABE45A51.mft (raw, json) Hash identifier: 2GHOObuKnIOLU2q3Xt9LJmvOnhjimewUsHC2iPw82cE= Subject key identifier: C0:4A:B1:F5:90:75:1A:6E:4E:AD:43:58:C9:EA:71:07:5A:31:9E:4F Authority key identifier: 5B:4C:70:21:33:C8:7B:A4:BC:2E:55:E7:12:27:09:69:AB:E4:5A:51 Certificate issuer: /CN=5B4C702133C87BA4BC2E55E712270969ABE45A51 Certificate serial: 31CF5F95B34E8F8D000DA3CFAAF1F09C714ACB95 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:24:55 +0000 Manifest this update: Tue 12 May 2026 08:19:55 +0000 Manifest next update: Wed 13 May 2026 12:23:55 +0000 Files and hashes: 1: 3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa (hash: Vkq3URZ932rcZk4u78E4tOq6/4bheSUZYPRHTmwP30Y=) 2: 3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa (hash: sLHnpPIHUxO29WSb75hs0N2E96R8Wj78zUMN4pLDvZ4=) 3: 5B4C702133C87BA4BC2E55E712270969ABE45A51.crl (hash: YBjv3XoYJjIVpGQU97OT66lRY2U316qYzl6jyL/s4UA=) 4: 3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa (hash: BHukqw3OCwpT8gyX9jofbrVK6NJ8azV8C28UZNn4k40=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.crl rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:cf:5f:95:b3:4e:8f:8d:00:0d:a3:cf:aa:f1:f0:9c:71:4a:cb:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B4C702133C87BA4BC2E55E712270969ABE45A51 Validity Not Before: May 12 08:19:55 2026 GMT Not After : May 13 12:23:55 2026 GMT Subject: CN=C04AB1F590751A6E4EAD4358C9EA71075A319E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:70:2d:56:a4:49:ac:0e:f4:d1:a8:c0:75:14: 80:33:97:8c:83:a0:17:af:02:72:cf:c3:61:37:81: cc:69:7f:00:24:bd:6b:f9:bb:ae:a0:f2:1e:92:59: 38:9d:da:d8:bb:10:3c:c4:42:9a:f5:b6:6c:c4:31: b4:10:42:28:e9:77:93:58:f6:ed:e3:3e:36:b9:a8: 32:ec:76:d2:8f:a0:4c:1a:f2:dc:c1:6b:ad:3d:4d: 11:9c:e5:9a:15:2a:6a:17:cc:60:03:78:74:70:25: 3c:16:c9:43:c6:7a:92:2a:52:6f:54:26:e8:49:b3: d8:55:e7:cd:39:92:85:52:69:42:ad:49:23:97:78: c7:40:28:d7:9e:84:48:5f:84:40:2b:92:90:34:68: f3:c0:40:b9:d6:81:97:4c:2b:ee:3f:b5:e6:fc:23: b6:14:82:a3:22:42:a7:57:9b:6b:f3:d2:db:08:46: 16:f4:38:eb:9a:f1:78:d9:05:94:d5:ec:0e:51:df: 1c:92:7b:eb:2a:a1:31:45:64:0a:2e:6c:ef:93:ef: 72:4f:e7:4b:1d:79:d1:09:c0:ca:52:e3:6a:52:c3: 94:12:d1:a6:42:b0:1c:24:36:b9:cc:cf:74:9b:78: eb:f9:76:7d:a2:3f:50:06:ee:a0:65:23:a3:69:67: b3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4A:B1:F5:90:75:1A:6E:4E:AD:43:58:C9:EA:71:07:5A:31:9E:4F X509v3 Authority Key Identifier: keyid:5B:4C:70:21:33:C8:7B:A4:BC:2E:55:E7:12:27:09:69:AB:E4:5A:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:2a:fc:5e:19:14:c3:0d:34:16:3d:a8:b9:67:fd:a9:54:86: 96:58:05:de:0f:2c:70:32:42:51:7c:6b:48:9f:17:f3:9d:84: e9:43:ae:55:8c:35:77:b2:ae:18:ec:9a:9d:b1:26:4e:a5:7b: 05:82:35:61:d4:23:77:50:ab:b4:b3:f6:96:5f:22:22:6e:ea: 01:e3:f4:16:f3:86:0b:2a:aa:78:16:06:b7:13:71:64:54:cc: 2f:66:47:96:cc:0c:5a:5a:55:70:70:64:f3:a4:9d:71:4f:15: cf:dc:80:b7:9f:9f:15:31:bb:ab:64:a5:5b:f2:1e:92:cc:5a: af:e2:a8:c3:d0:ae:b7:b6:d6:8c:10:02:36:80:ad:c2:4d:f3: ba:21:8e:7e:dc:82:fb:e2:8c:9e:23:c6:42:9b:87:07:64:de: 04:58:8d:4c:83:20:18:ef:b7:db:cd:e5:ea:3b:0a:01:84:47: 4d:6d:f6:e9:3b:dc:a7:d5:38:f2:55:9e:5f:73:a6:7d:a3:d7: f9:f5:da:8e:12:8d:c8:04:78:96:b4:a6:aa:85:a5:55:9c:cf: f8:d6:7b:f7:eb:4a:ac:56:df:dc:bf:b8:5a:fa:a8:66:50:3f: 4e:fa:cc:50:a4:94:64:41:ad:96:28:d8:fa:35:d0:8e:32:c8: 19:43:18:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMc9flbNOj40ADaPPqvHwnHFKy5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI0QzcwMjEzM0M4N0JBNEJDMkU1NUU3MTIyNzA5NjlB QkU0NUE1MTAeFw0yNjA1MTIwODE5NTVaFw0yNjA1MTMxMjIzNTVaMDMxMTAvBgNV BAMTKEMwNEFCMUY1OTA3NTFBNkU0RUFENDM1OEM5RUE3MTA3NUEzMTlFNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYcC1WpEmsDvTRqMB1FIAzl4yD oBevAnLPw2E3gcxpfwAkvWv5u66g8h6SWTid2ti7EDzEQpr1tmzEMbQQQijpd5NY 9u3jPja5qDLsdtKPoEwa8tzBa609TRGc5ZoVKmoXzGADeHRwJTwWyUPGepIqUm9U JuhJs9hV5805koVSaUKtSSOXeMdAKNeehEhfhEArkpA0aPPAQLnWgZdMK+4/teb8 I7YUgqMiQqdXm2vz0tsIRhb0OOua8XjZBZTV7A5R3xySe+sqoTFFZAoubO+T73JP 50sdedEJwMpS42pSw5QS0aZCsBwkNrnMz3SbeOv5dn2iP1AG7qBlI6NpZ7MtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwEqx9ZB1Gm5OrUNYyepxB1oxnk8wHwYDVR0j BBgwFoAUW0xwITPIe6S8LlXnEicJaavkWlEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDE0ZTA0ZmEtNzE4OC00ZjRmLTgxYmItMzMwMzg5Zjg3MDE1LzAvNUI0QzcwMjEz M0M4N0JBNEJDMkU1NUU3MTIyNzA5NjlBQkU0NUE1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QjRDNzAyMTMzQzg3QkE0QkMyRTU1RTcxMjI3MDk2OUFCRTQ1 QTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDE0ZTA0ZmEtNzE4OC00ZjRmLTgx YmItMzMwMzg5Zjg3MDE1LzAvNUI0QzcwMjEzM0M4N0JBNEJDMkU1NUU3MTIyNzA5 NjlBQkU0NUE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAq/F4ZFMMNNBY9qLln/alUhpZYBd4PLHAy QlF8a0ifF/OdhOlDrlWMNXeyrhjsmp2xJk6lewWCNWHUI3dQq7Sz9pZfIiJu6gHj 9BbzhgsqqngWBrcTcWRUzC9mR5bMDFpaVXBwZPOknXFPFc/cgLefnxUxu6tkpVvy HpLMWq/iqMPQrre21owQAjaArcJN87ohjn7cgvvijJ4jxkKbhwdk3gRYjUyDIBjv t9vN5eo7CgGER01t9uk73KfVOPJVnl9zpn2j1/n12o4SjcgEeJa0pqqFpVWcz/jW e/frSqxW39y/uFr6qGZQP076zFCklGRBrZYo2Po10I4yyBlDGM4= -----END CERTIFICATE-----Generated at Wed May 13 05:44:20 2026 by rpki-client